Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/D6mUF7NvfRcKjMfCfW5Ddg1-fQw.roa
File: D6mUF7NvfRcKjMfCfW5Ddg1-fQw.roa (raw, json)
Hash identifier: oSWH0NOn706V71H90+qB5wwmDZ3yxsd1rHBR3EX7KWs=
Subject key identifier: 0F:A9:94:17:B3:6F:7D:17:0A:8C:C7:C2:7D:6E:43:76:0D:7E:7D:0C
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018C351A724D75AD73CD2ED4A5F4C8EE757A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/D6mUF7NvfRcKjMfCfW5Ddg1-fQw.roa
Signing time: Mon 04 Dec 2023 13:52:54 +0000
ROA not before: Mon 04 Dec 2023 13:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49685
IP address blocks: 185.110.172.0/22 maxlen: 24
93.191.128.0/21 maxlen: 24
185.110.173.0/24 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.224.0/19 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
213.187.240.0/21 maxlen: 24
193.93.172.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
171.33.128.0/24 maxlen: 24
193.242.119.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
185.110.200.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
141.255.176.0/22 maxlen: 24
79.170.88.0/21 maxlen: 24
217.21.240.0/20 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
185.15.248.0/22 maxlen: 24
83.96.128.0/17 maxlen: 24
83.96.157.0/24 maxlen: 24
89.31.96.0/21 maxlen: 24
81.4.112.0/22 maxlen: 24
91.216.162.0/24 maxlen: 24
81.4.112.0/21 maxlen: 24
80.246.192.0/20 maxlen: 24
81.4.64.0/19 maxlen: 24
80.246.207.0/24 maxlen: 24
185.95.68.0/22 maxlen: 24
81.4.84.0/22 maxlen: 24
37.17.208.0/20 maxlen: 24
81.4.96.0/22 maxlen: 24
178.18.80.0/20 maxlen: 24
91.142.240.0/20 maxlen: 24
185.21.188.0/22 maxlen: 24
217.149.128.0/20 maxlen: 24
31.223.160.0/20 maxlen: 24
81.21.136.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
31.3.96.0/21 maxlen: 24
194.60.207.0/24 maxlen: 24
141.138.192.0/20 maxlen: 24
80.84.224.0/20 maxlen: 24
80.84.224.0/19 maxlen: 24
85.158.248.0/21 maxlen: 24
193.138.204.0/22 maxlen: 24
78.108.128.0/20 maxlen: 24
80.84.240.0/20 maxlen: 24
176.74.224.0/19 maxlen: 24
185.3.208.0/22 maxlen: 24
37.34.48.0/21 maxlen: 24
85.10.160.0/19 maxlen: 24
85.222.224.0/21 maxlen: 24
85.10.176.0/22 maxlen: 24
2001:4cb8::/29 maxlen: 48
2001:4cb8:40b::/48 maxlen: 48
2001:4cb8:e::/48 maxlen: 48
2a02:348::/32 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2001:828::/32 maxlen: 48
2a02:348:7d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:1a:72:4d:75:ad:73:cd:2e:d4:a5:f4:c8:ee:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Dec 4 13:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa99417b36f7d170a8cc7c27d6e43760d7e7d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:5b:b8:2d:a7:27:32:1b:93:1e:00:67:bb:
80:b0:54:38:21:47:b4:aa:d7:aa:aa:e6:66:f6:b6:
50:78:6f:e1:36:57:57:b8:83:d0:bb:1d:49:b1:9d:
69:f8:7e:a5:db:8d:df:50:e9:55:eb:90:46:b6:fb:
6a:b9:c7:2c:f2:0d:c5:57:a2:0a:75:f4:36:fc:6f:
68:db:7b:bb:68:94:83:98:0a:26:c9:6c:27:dd:a5:
8e:77:35:55:6a:19:7a:07:1e:ce:d5:82:d1:eb:d5:
74:1b:d8:f2:28:f0:2b:f1:49:4d:57:33:0f:c1:d1:
c1:40:67:87:7f:00:2d:fe:51:21:74:6b:ec:b3:1d:
1c:84:99:38:20:bf:80:0e:c4:f3:31:85:70:b9:7a:
62:ea:26:b3:d1:14:69:95:09:c6:fa:df:77:33:3b:
44:f9:a3:60:fd:70:eb:e4:4c:d3:5d:ef:09:28:33:
69:42:0c:5e:e1:71:ff:54:27:91:44:7f:2e:04:94:
1d:86:c5:a0:e4:3a:89:17:d5:90:e1:f9:fa:3b:f2:
08:2e:57:28:84:ca:03:8a:5d:65:47:3f:3d:58:59:
91:86:bb:14:c1:4d:e0:6c:3b:6f:af:f3:f9:86:0e:
fa:94:6c:2b:ff:d3:a0:65:8b:da:6a:47:75:65:e2:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:94:17:B3:6F:7D:17:0A:8C:C7:C2:7D:6E:43:76:0D:7E:7D:0C
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/D6mUF7NvfRcKjMfCfW5Ddg1-fQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
31.223.160.0/20
37.17.208.0/20
37.34.48.0/21
37.230.96.0/21
78.108.128.0/20
79.170.88.0/21
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
85.10.160.0/19
85.158.248.0/21
85.222.224.0/21
89.31.96.0/21
91.142.240.0/20
91.205.32.0/22
91.216.162.0/24
93.191.128.0/21
141.138.192.0/20
141.255.176.0/22
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.15.248.0/22
185.21.188.0/22
185.95.68.0/22
185.110.172.0/22
185.110.200.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
14:23:a2:e9:21:58:69:8f:ba:b4:f0:3f:14:fd:75:6b:31:f0:
7c:14:b5:77:14:71:e6:3e:50:cd:91:0c:a5:15:ef:c2:a8:6c:
22:93:4d:d0:de:e6:a7:c9:6b:0b:34:56:dd:cd:c9:ff:c2:47:
a2:4b:70:fd:34:4e:52:df:f2:3f:74:39:ae:ea:e9:61:cf:0a:
1c:aa:98:ba:e9:e7:66:6f:61:0a:06:74:02:32:94:58:11:27:
a5:97:47:0f:09:ec:85:68:e0:64:7e:9c:49:94:7d:b7:76:8f:
d5:75:c1:49:b7:b2:93:f2:f3:e3:81:f9:1f:3f:c5:5c:e3:3a:
a6:55:c5:d6:a9:ff:a6:47:40:ec:32:e9:03:87:ea:e5:ac:ea:
ea:45:4b:65:2c:fc:2a:cc:a2:b0:47:fe:0a:45:d8:51:04:06:
ea:8b:fe:04:50:84:46:e1:a6:24:34:6a:6d:d6:e3:91:f0:55:
34:5d:8e:7f:ff:90:80:dd:15:5a:8d:1f:c9:f5:1d:6e:d9:29:
50:91:3e:d3:63:6c:d2:01:7c:cf:bb:04:df:18:35:e6:92:94:
b1:db:90:17:ba:86:93:3d:be:e1:12:bc:b0:6e:d7:45:96:a1:
0c:1b:a0:3e:f8:46:f8:80:76:b6:79:03:f7:0c:83:df:93:37:
f7:d1:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org