Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3Ki3RKEKdQXEClTkiHRB-SVS4Zk.roa
File: 3Ki3RKEKdQXEClTkiHRB-SVS4Zk.roa (raw, json)
Hash identifier: uzH9JxXeZIYaWcNG396hL+4OpVpX8IxP1w51WesBhF0=
Subject key identifier: DC:A8:B7:44:A1:0A:75:05:C4:0A:54:E4:88:74:41:F9:25:52:E1:99
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0185AC853B18EF9275C2326A3E086945BD8F
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3Ki3RKEKdQXEClTkiHRB-SVS4Zk.roa
Signing time: Fri 13 Jan 2023 19:04:50 +0000
ROA not before: Fri 13 Jan 2023 19:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.87.0/24 maxlen: 24
141.101.90.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 09:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:85:3b:18:ef:92:75:c2:32:6a:3e:08:69:45:bd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 13 19:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dca8b744a10a7505c40a54e4887441f92552e199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:3e:a5:94:55:dc:6c:29:26:0d:dc:e6:46:
56:3b:df:47:ae:fc:82:6d:78:30:9a:88:b8:fc:d4:
80:08:22:b4:63:9f:53:bd:18:01:32:69:39:17:c0:
d5:2d:eb:d9:da:c7:97:d3:15:53:8b:65:24:38:eb:
f2:d8:42:e1:5f:74:85:9f:a0:6b:9d:1f:07:89:17:
fe:e0:1b:4e:75:20:1a:97:4c:ae:ea:0b:ac:e0:b7:
ff:23:74:ae:3d:bc:8e:c9:98:f1:cf:57:29:37:40:
9d:d8:58:7b:54:80:16:d3:df:6c:f0:f4:48:21:dc:
78:a0:d2:bc:06:aa:94:04:11:4a:20:15:1f:f2:31:
d7:0f:bd:60:46:93:9b:cb:04:7a:cf:77:56:b2:ab:
76:97:53:9f:a0:c4:65:ca:3a:10:98:de:4e:a1:55:
63:5c:ce:37:2b:f2:29:42:c4:81:e2:0b:95:22:25:
86:a6:e1:42:36:e8:b9:0e:d0:01:d1:c5:ed:9f:98:
50:6a:9d:c6:de:9f:98:51:7b:fa:5d:fd:ab:46:1f:
09:63:61:87:23:dd:4c:16:05:3d:d7:4c:56:fa:65:
2b:48:ae:0a:2a:a4:bc:6f:be:ac:ad:66:04:bb:5b:
b2:32:32:00:78:47:fb:67:2b:98:93:32:f9:a6:82:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:B7:44:A1:0A:75:05:C4:0A:54:E4:88:74:41:F9:25:52:E1:99
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3Ki3RKEKdQXEClTkiHRB-SVS4Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::/46
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
5e:59:ff:91:58:38:16:42:44:f0:73:80:7b:7b:65:ce:43:d7:
af:85:db:df:b1:2b:a2:a7:ef:e6:73:43:de:0d:a5:0a:c0:33:
9c:a7:c5:d1:2b:5f:b5:7e:5e:65:cb:07:e6:7b:af:7a:55:c4:
f5:76:c0:27:30:6a:d6:93:26:ce:d1:ce:c7:0c:c7:07:1b:6a:
dd:53:35:0f:e7:12:8e:b7:24:36:90:02:09:7d:37:cc:39:67:
11:b4:9c:3e:8f:49:08:f1:b5:7c:bf:24:70:ec:f5:04:0f:34:
2f:e2:62:19:88:18:c2:bd:e0:37:25:70:3f:22:85:97:53:0f:
81:9d:7b:df:8c:bf:f8:66:6d:7b:e4:c1:a1:6c:c0:8b:09:09:
0e:44:03:74:cb:ad:8f:5a:6b:a9:fe:1d:55:23:8f:80:f5:9e:
87:9a:00:e0:08:0e:1e:b2:33:c4:a1:6e:e4:2e:c7:c8:0e:f8:
39:0e:ef:15:be:68:58:d3:b2:d5:a0:68:84:30:68:8e:3d:70:
de:da:47:36:ab:5c:a1:d1:2a:06:ae:ed:eb:f6:bd:c2:3b:39:
45:96:1b:c9:55:86:80:27:6c:f1:13:49:16:8e:0b:38:e1:7e:
86:bb:da:b4:48:73:97:69:46:dc:72:b3:24:16:7e:5f:85:84:
61:1d:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:48 2024 by rpki-client on console-ams.rpki-client.org