Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P4VteEnolXSl-8t59dRal0bjEms.roa
File: P4VteEnolXSl-8t59dRal0bjEms.roa (raw, json)
Hash identifier: apGKTE1fmEzd1n7mkvr8ruiNgPZNob9Ft8wHF88/Nfc=
Subject key identifier: 3F:85:6D:78:49:E8:95:74:A5:FB:CB:79:F5:D4:5A:97:46:E3:12:6B
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 018571B0EA85CFE588BF8B8E6E35975AA738
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P4VteEnolXSl-8t59dRal0bjEms.roa
Signing time: Mon 02 Jan 2023 08:54:57 +0000
ROA not before: Mon 02 Jan 2023 08:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.87.0/24 maxlen: 24
141.101.90.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Jan 2023 17:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ea:85:cf:e5:88:bf:8b:8e:6e:35:97:5a:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 08:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f856d7849e89574a5fbcb79f5d45a9746e3126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:83:74:ea:3b:35:71:98:19:33:3e:aa:72:
3f:aa:60:c1:fd:5a:45:aa:70:f1:34:4f:20:5f:41:
7f:16:9b:d8:b8:8f:3a:62:31:54:a9:7d:d3:7d:e2:
b2:52:c6:fa:bf:cd:fb:39:c8:c3:b5:04:53:16:d6:
3a:cd:d0:40:cd:78:74:bc:da:07:5c:ac:71:d8:ea:
f7:d5:c9:b9:85:00:61:30:b1:81:60:98:5e:85:d0:
0e:54:49:79:71:37:a9:e8:e2:70:c4:4f:ba:2b:fd:
c2:42:46:f3:36:04:6c:91:e9:5f:bd:c4:87:c2:47:
75:f2:59:96:45:66:e1:35:23:27:31:d2:2e:01:0b:
26:f1:01:3c:71:cf:51:ae:79:7c:60:18:9e:ff:cb:
47:6f:fd:e6:87:9b:ab:7a:c4:ef:7d:90:92:90:7a:
da:92:68:27:54:7f:b6:ae:4c:b7:a1:1d:02:85:fc:
97:91:2e:c5:f5:ad:10:2f:af:1d:1f:f9:a2:a9:e4:
4b:cd:eb:25:3c:ca:3b:7f:19:3e:03:81:14:38:5a:
4f:03:7e:9f:eb:2c:08:35:ac:e5:16:4a:4c:10:ae:
c6:f0:29:33:a3:39:a2:92:a8:55:70:9a:e7:d7:dd:
83:fd:8b:07:64:de:b7:66:00:b3:25:7c:d6:de:3d:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:6D:78:49:E8:95:74:A5:FB:CB:79:F5:D4:5A:97:46:E3:12:6B
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P4VteEnolXSl-8t59dRal0bjEms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::/47
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ef:f7:a9:45:bd:1e:30:79:8c:a0:5d:ea:2a:27:08:e6:02:
5d:89:ae:6e:9d:0a:5c:ed:6a:d3:f1:2f:d1:db:9f:08:46:5d:
e0:cb:73:9e:d1:67:cd:b7:43:7f:18:e8:67:3e:3f:7b:7a:67:
43:51:f6:7d:7c:0f:46:3b:eb:df:18:cb:d5:8d:ab:fc:1c:0c:
98:9e:5e:14:74:70:b7:cf:93:69:4a:96:84:dc:1c:cd:63:37:
e2:a8:9c:d7:2a:84:cc:67:11:6f:d8:33:08:dd:00:0b:7c:6f:
0a:7f:58:d0:91:e6:77:0c:14:77:1c:06:85:27:35:bb:e2:d0:
77:f4:21:7c:90:fd:f8:e0:5b:22:1e:e2:ec:91:6c:3e:d1:48:
c2:db:58:92:ff:33:26:9b:a2:3f:bc:3a:1b:3a:44:3f:16:87:
54:a7:e1:79:33:fc:84:8b:c1:33:00:cd:5c:c3:45:11:e6:4a:
43:9d:5e:90:15:dc:c8:7e:ab:5a:40:e0:05:78:5a:41:18:70:
43:a0:e9:30:f3:f1:fa:ba:a3:d0:8b:4a:77:18:2b:e0:79:49:
5b:41:5f:e8:48:17:b3:3e:b5:03:01:fc:0c:b7:4c:f7:2f:cd:
59:bd:40:1e:63:59:99:ef:9b:94:b8:ec:3d:c1:a6:90:dc:87:
ad:fa:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:48 2024 by rpki-client on console-ams.rpki-client.org