Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/j0ukMZWRFJRMBwTH4vB6mRMnGfc.roa
File: j0ukMZWRFJRMBwTH4vB6mRMnGfc.roa (raw, json)
Hash identifier: UFwzM4tA4nPzR3bgxLpd2vopzJpkYEIxPN8ZPOJoplQ=
Subject key identifier: 8F:4B:A4:31:95:91:14:94:4C:07:04:C7:E2:F0:7A:99:13:27:19:F7
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 018D3B85FD1492ABC12FB67132E22CEC4491
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/j0ukMZWRFJRMBwTH4vB6mRMnGfc.roa
Signing time: Wed 24 Jan 2024 12:50:53 +0000
ROA not before: Wed 24 Jan 2024 12:50:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 Jan 2024 17:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:85:fd:14:92:ab:c1:2f:b6:71:32:e2:2c:ec:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 24 12:50:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4ba431959114944c0704c7e2f07a99132719f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ce:fa:c0:1b:4d:38:67:05:ff:f9:a0:5e:2e:
45:0c:61:a3:e8:6f:be:8f:48:c3:d9:da:c0:cb:ad:
5d:65:39:c6:e8:c5:dc:82:a2:88:22:6f:cd:fb:85:
12:82:34:1e:ee:79:4c:e2:ce:09:fb:19:27:3b:5d:
c3:ad:51:1c:13:48:59:f1:67:b4:5d:1b:8c:8c:8b:
fc:bc:e3:e0:90:43:ab:8d:a6:a9:61:74:93:e0:ee:
06:d5:0e:db:2e:4d:df:dc:35:9c:b8:03:92:7e:7c:
1e:f1:b6:f0:e5:d7:08:50:21:53:d4:6f:bf:74:d1:
ba:52:ee:fe:80:7e:41:c9:54:69:e3:ab:4c:82:02:
34:e0:b5:c5:c5:47:f5:e4:fb:6c:72:3f:95:65:02:
12:6d:80:d4:29:1a:ac:16:01:b7:90:84:3e:39:04:
94:af:7f:c4:19:52:61:55:47:24:31:e3:1e:2a:12:
7a:10:07:9c:32:61:58:9c:0e:8a:25:0e:e1:77:70:
31:9c:5e:c3:6c:4b:ea:2a:7b:b0:9d:21:2f:38:38:
b2:94:b0:71:85:ba:ec:8c:94:fd:f6:ec:d7:bf:a1:
fa:63:ab:1c:fa:bc:ed:f5:6c:ad:9e:e6:c9:01:64:
8f:97:ec:70:95:b9:79:d2:2a:b7:1c:37:67:48:18:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:A4:31:95:91:14:94:4C:07:04:C7:E2:F0:7A:99:13:27:19:F7
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/j0ukMZWRFJRMBwTH4vB6mRMnGfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c2a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4a:7f:bf:27:d7:fb:94:ec:a0:44:01:32:a0:d2:c7:06:bc:
cb:84:53:d7:35:c7:8b:9c:f4:a8:15:85:6f:f8:6b:48:a6:a8:
c7:37:4c:2d:29:c6:41:59:45:f0:da:74:d1:40:19:7b:dc:a7:
87:a4:f6:32:3c:f8:80:73:b4:fc:95:d3:28:ad:9e:ce:11:7b:
6d:ce:b8:75:fd:c3:e7:23:02:98:95:48:d9:93:c9:1e:02:07:
4b:50:94:59:52:0f:c3:c1:11:ca:d5:e1:55:40:c7:fe:60:32:
08:57:b5:b7:d4:66:25:c4:7d:49:7a:f8:e1:36:36:73:5f:9b:
4d:75:fd:92:44:e6:c5:39:d9:3e:ed:ca:94:04:32:b6:f1:a9:
41:b1:67:65:e9:77:0b:d6:3f:dd:98:a3:3d:f4:ae:a1:89:26:
1e:67:af:f7:59:66:e6:da:58:60:c4:9f:1e:92:92:ea:60:2a:
21:55:a4:9d:33:38:c3:95:6d:f6:48:80:80:5d:96:5a:67:47:
2a:1c:ba:dd:db:6c:c8:8c:92:93:2b:c5:0f:7a:27:d9:82:68:
e2:63:00:52:e4:4f:fe:e9:ab:ee:15:9f:05:2d:2a:41:33:42:
e7:8e:52:a8:96:f3:94:8e:19:ca:1e:52:4e:c5:83:31:b2:23:
4e:0c:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org