Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/h8nZ_w1vsCBZB-e6RyEMF3xjDC0.roa
File: h8nZ_w1vsCBZB-e6RyEMF3xjDC0.roa (raw, json)
Hash identifier: ri3XtrsILj5o7ANLr2JZHc8lPC/rW6eLb/D6Nt1/Ugg=
Subject key identifier: 87:C9:D9:FF:0D:6F:B0:20:59:07:E7:BA:47:21:0C:17:7C:63:0C:2D
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0187102F4870DE4607ED77F111E1B54E12A8
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/h8nZ_w1vsCBZB-e6RyEMF3xjDC0.roa
Signing time: Thu 23 Mar 2023 20:35:46 +0000
ROA not before: Thu 23 Mar 2023 20:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.87.0/24 maxlen: 24
141.101.90.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:2f:48:70:de:46:07:ed:77:f1:11:e1:b5:4e:12:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Mar 23 20:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c9d9ff0d6fb0205907e7ba47210c177c630c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:9d:63:1d:80:94:58:fa:1b:e7:c5:a6:1e:
5e:af:30:c1:38:f3:00:72:98:f5:26:55:00:a8:cf:
01:64:ab:88:cf:d9:7e:9b:44:6f:3c:d2:bf:e1:23:
dd:5d:92:c9:cf:21:f4:9b:92:ab:a4:e1:bf:66:4b:
93:2f:1e:56:4a:dc:33:5e:85:6d:0e:db:ea:87:14:
e9:83:97:c9:01:d0:a7:57:8d:e5:ba:76:c3:eb:d8:
7a:76:02:d9:23:51:98:1c:3f:f3:99:09:82:fc:e2:
0f:7b:72:94:99:c8:69:12:d7:ef:d7:29:e1:e1:82:
e0:b5:41:2e:50:b0:f4:02:f3:0f:54:47:22:f1:df:
b8:0e:f8:64:64:0f:5c:bf:c3:c4:bf:d8:ef:3a:a3:
c6:41:26:6a:bb:ea:c3:2b:07:eb:8b:f7:7b:ea:c5:
da:3b:03:b9:9c:db:52:04:c0:f8:98:2e:41:b3:52:
40:cf:7c:b2:84:bd:c1:32:a1:62:04:49:5d:7c:b8:
8a:20:d5:50:cd:ef:a4:91:88:08:92:3c:29:28:bd:
0a:af:e9:16:86:b3:fe:6e:ea:2a:e0:7d:9c:e3:c9:
2a:c0:d6:bb:21:e0:4c:09:f5:98:96:81:c1:a5:c5:
ae:66:8b:d1:d3:e3:cd:e8:f0:05:e3:67:62:a6:88:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:D9:FF:0D:6F:B0:20:59:07:E7:BA:47:21:0C:17:7C:63:0C:2D
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/h8nZ_w1vsCBZB-e6RyEMF3xjDC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c25:ffff:ffff:ffff:ffff:ffff
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
06:a3:d8:bc:26:45:26:00:cc:dc:5f:91:0a:43:8c:aa:64:49:
86:d9:42:79:d7:21:e5:71:cb:5b:2e:35:c5:ad:fc:d6:8b:c1:
9f:05:15:f5:f2:51:f6:86:83:05:75:4d:27:bd:af:ba:7e:44:
71:2a:bc:e1:be:89:49:a6:c2:fc:30:91:81:65:8c:46:14:6c:
17:ee:1c:12:00:6b:dc:50:e5:2d:ce:4e:dd:be:6d:99:a1:15:
20:42:68:fb:62:d4:c6:57:6b:be:47:09:a4:e0:c8:4e:1a:d6:
7a:65:3d:18:92:37:61:17:c7:4a:21:aa:56:34:91:f8:55:f7:
36:e0:72:48:e9:73:c5:e8:c0:50:54:f7:10:6a:15:3e:ff:b2:
60:fd:e6:4b:01:ee:11:9c:64:b7:56:c3:da:67:c5:ca:2b:5e:
ab:19:ef:64:fc:51:96:8f:17:4b:25:94:3f:be:2a:41:d3:64:
64:d4:fb:c1:2d:a1:1f:21:5c:09:c4:27:7a:ae:0a:27:52:3b:
f7:2f:c9:44:d5:1f:36:7c:52:ba:e0:56:c9:39:93:56:53:95:
15:f8:18:b1:83:2c:dd:b6:7d:5a:6c:b8:0b:d1:41:58:ae:97:
02:6e:1c:54:40:ff:86:41:3d:44:3e:65:f2:b0:77:a4:b9:57:
de:bd:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:48 2024 by rpki-client on console-ams.rpki-client.org