Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Ge1MEWlZxhEPGgX78XC4vTXDi10.roa
File: Ge1MEWlZxhEPGgX78XC4vTXDi10.roa (raw, json)
Hash identifier: JNoI1tdCr1u1OgaFQFoaDLQGACGEZUxKWOBHT+LwwKk=
Subject key identifier: 19:ED:4C:11:69:59:C6:11:0F:1A:05:FB:F1:70:B8:BD:35:C3:8B:5D
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0185DE0C298CFB0A786B396F8D6D8E77D851
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Ge1MEWlZxhEPGgX78XC4vTXDi10.roa
Signing time: Mon 23 Jan 2023 09:53:37 +0000
ROA not before: Mon 23 Jan 2023 09:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.87.0/24 maxlen: 24
141.101.90.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Feb 2023 16:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:0c:29:8c:fb:0a:78:6b:39:6f:8d:6d:8e:77:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 23 09:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ed4c116959c6110f1a05fbf170b8bd35c38b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:c3:ec:4d:f6:85:9a:16:b1:af:91:99:30:
df:e1:83:4e:36:d5:cf:0b:85:83:f7:56:4e:6a:6a:
12:d4:f0:55:81:c5:8c:04:a1:00:df:ad:fd:1a:85:
80:3a:57:16:bd:a3:b3:85:53:22:d5:a9:b5:66:83:
8d:fc:e3:19:3b:db:9b:f6:6c:18:43:66:38:4d:6e:
30:5a:48:f2:b9:f6:5f:d3:49:43:a2:b4:15:aa:47:
86:a2:ee:44:01:53:23:4a:bd:ec:2e:96:34:3e:ae:
3c:56:f9:cf:3e:dc:91:cd:96:5d:aa:12:7b:db:13:
f4:50:7a:35:a3:de:8f:7f:64:89:4e:c1:34:d2:85:
7d:7f:f4:6f:34:3e:19:9b:6e:b5:cb:e2:42:c5:0c:
0c:ef:30:f4:0c:93:78:d2:ee:a2:fb:30:f1:5f:3c:
c7:59:bd:33:60:c9:13:a7:ee:8c:ed:3a:7c:21:c6:
cc:b1:77:fd:30:cb:e8:8d:c3:f1:ca:40:cc:c3:21:
51:23:b9:00:fb:f8:d4:8a:dd:0e:b5:a3:66:0d:ae:
d8:9c:27:4a:47:f5:bc:81:b0:74:77:2b:e2:2c:7d:
6d:2d:f0:6e:3d:d7:ae:a9:cc:a4:b0:a2:3d:5e:56:
ef:ae:39:31:43:27:b3:73:4f:55:be:39:1b:57:0f:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:4C:11:69:59:C6:11:0F:1A:05:FB:F1:70:B8:BD:35:C3:8B:5D
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Ge1MEWlZxhEPGgX78XC4vTXDi10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::/46
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
17:83:2f:76:17:47:19:45:96:65:a0:6a:49:7c:c1:45:b7:f0:
91:cd:b5:55:ae:62:66:a2:16:37:d5:20:f2:02:cc:2a:cd:86:
5e:e6:3a:b7:77:10:1e:83:ed:4e:a2:1b:5a:aa:10:7c:92:87:
4e:d9:39:da:5d:1c:20:52:91:c3:f4:4b:72:77:94:32:19:20:
cd:2e:09:69:b6:ae:c5:08:c6:3a:ef:9d:79:f4:5c:4a:cf:08:
70:3e:7d:29:43:49:8a:c0:a3:66:67:50:6c:df:5e:eb:8d:6c:
83:21:bf:cf:ec:1d:dd:ee:8e:8a:3f:2e:35:ce:f1:04:0b:dd:
24:31:c3:6a:90:56:83:13:08:c8:6a:28:f5:e7:be:7d:94:7d:
3d:4b:6e:ea:e4:f0:79:76:64:aa:28:8c:2b:8b:e4:b8:9d:d3:
21:be:b4:99:b6:77:ad:32:96:7a:37:2c:c8:4a:50:50:34:cc:
77:8e:cc:96:1c:32:e1:e1:5d:95:64:32:8d:15:57:bb:0f:0e:
a6:7f:eb:b4:0b:0b:b3:a2:80:8f:fd:9c:18:c3:47:ac:1e:71:
93:a7:db:14:bc:43:27:cf:4f:d2:77:df:3c:65:17:e0:6c:3c:
23:79:5a:9f:53:43:5c:2b:70:37:32:f4:41:70:81:1f:ba:a9:
12:fa:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org