Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/09jofE-0gWhovKeGC4JTsBGCKNk.roa
File: 09jofE-0gWhovKeGC4JTsBGCKNk.roa (raw, json)
Hash identifier: CD+9V++8g61bk9cQAU2GiKr5ql8swumkumr5JBsD5M8=
Subject key identifier: D3:D8:E8:7C:4F:B4:81:68:68:BC:A7:86:0B:82:53:B0:11:82:28:D9
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018CE985ABA96AFC0154360420B459B07B7A
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/09jofE-0gWhovKeGC4JTsBGCKNk.roa
Signing time: Mon 08 Jan 2024 14:41:40 +0000
ROA not before: Mon 08 Jan 2024 14:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 185.147.93.0/24 maxlen: 24
188.208.0.0/20 maxlen: 20
188.208.0.0/22 maxlen: 22
188.208.4.0/22 maxlen: 22
188.208.9.0/24 maxlen: 24
188.208.8.0/24 maxlen: 24
188.208.8.0/22 maxlen: 22
188.208.13.0/24 maxlen: 24
188.208.12.0/22 maxlen: 22
188.208.12.0/24 maxlen: 24
188.208.14.0/24 maxlen: 24
188.208.40.0/21 maxlen: 21
149.74.2.0/23 maxlen: 23
149.74.1.0/24 maxlen: 24
149.74.0.0/24 maxlen: 24
149.74.0.0/22 maxlen: 22
149.74.4.0/23 maxlen: 23
149.74.4.0/22 maxlen: 22
149.74.0.0/16 maxlen: 16
149.74.8.0/22 maxlen: 22
149.74.6.0/23 maxlen: 23
149.74.16.0/22 maxlen: 22
149.74.20.0/22 maxlen: 22
149.74.24.0/22 maxlen: 22
188.126.136.0/22 maxlen: 22
188.126.140.0/22 maxlen: 22
188.126.144.0/22 maxlen: 22
188.126.148.0/22 maxlen: 22
188.126.152.0/22 maxlen: 22
188.126.156.0/23 maxlen: 23
188.126.158.0/23 maxlen: 23
188.126.158.0/24 maxlen: 24
188.126.128.0/19 maxlen: 19
188.126.128.0/22 maxlen: 22
188.126.132.0/22 maxlen: 22
90.160.0.0/12 maxlen: 12
188.93.32.0/22 maxlen: 22
161.199.192.0/22 maxlen: 22
188.240.128.0/21 maxlen: 21
188.240.128.0/20 maxlen: 20
185.132.192.0/22 maxlen: 22
188.240.136.0/22 maxlen: 22
188.240.140.0/22 maxlen: 22
188.239.128.0/19 maxlen: 19
1.178.224.0/21 maxlen: 21
188.239.128.0/21 maxlen: 21
1.178.224.0/19 maxlen: 19
1.178.232.0/21 maxlen: 21
188.239.144.0/22 maxlen: 22
109.205.130.0/23 maxlen: 23
109.205.128.0/21 maxlen: 21
109.205.128.0/23 maxlen: 23
109.205.128.0/22 maxlen: 22
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
1.178.240.0/21 maxlen: 21
188.239.148.0/22 maxlen: 22
188.239.152.0/23 maxlen: 23
188.239.154.0/23 maxlen: 23
1.178.248.0/21 maxlen: 21
188.239.158.0/23 maxlen: 23
188.239.156.0/23 maxlen: 23
192.157.192.0/22 maxlen: 22
151.252.16.0/21 maxlen: 21
192.157.192.0/18 maxlen: 24
93.117.88.0/21 maxlen: 21
93.117.88.0/22 maxlen: 22
192.157.196.0/22 maxlen: 22
93.117.92.0/22 maxlen: 22
192.157.200.0/21 maxlen: 21
192.157.208.0/21 maxlen: 21
185.124.36.0/22 maxlen: 22
192.157.216.0/21 maxlen: 21
176.104.64.0/19 maxlen: 19
176.10.16.0/21 maxlen: 21
176.10.24.0/21 maxlen: 21
145.1.232.0/21 maxlen: 21
145.1.228.0/22 maxlen: 22
145.1.240.0/20 maxlen: 20
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
62.36.0.0/16 maxlen: 24
62.36.21.0/24 maxlen: 24
149.74.244.0/22 maxlen: 22
149.74.248.0/22 maxlen: 22
149.74.252.0/22 maxlen: 22
149.74.252.0/23 maxlen: 23
149.74.251.0/24 maxlen: 24
145.1.128.0/19 maxlen: 19
145.1.128.0/17 maxlen: 17
85.48.188.0/24 maxlen: 24
107.183.128.0/17 maxlen: 17
145.1.160.0/19 maxlen: 19
85.48.0.0/12 maxlen: 12
113.203.128.0/18 maxlen: 18
149.74.80.0/22 maxlen: 22
149.74.84.0/22 maxlen: 22
149.74.88.0/22 maxlen: 22
149.74.92.0/22 maxlen: 22
149.74.98.0/23 maxlen: 23
149.74.96.0/20 maxlen: 20
149.74.96.0/23 maxlen: 23
149.74.102.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
149.74.120.0/21 maxlen: 21
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
149.74.28.0/22 maxlen: 22
149.74.30.0/24 maxlen: 24
149.74.32.0/20 maxlen: 20
149.74.48.0/21 maxlen: 21
149.74.56.0/22 maxlen: 22
149.74.60.0/22 maxlen: 22
149.74.64.0/21 maxlen: 21
149.74.72.0/21 maxlen: 21
149.74.188.0/22 maxlen: 22
149.74.187.0/24 maxlen: 24
149.74.192.0/22 maxlen: 22
149.74.196.0/22 maxlen: 22
149.74.199.0/24 maxlen: 24
149.74.197.0/24 maxlen: 24
149.74.200.0/22 maxlen: 22
149.74.204.0/22 maxlen: 22
149.74.210.0/23 maxlen: 23
149.74.208.0/22 maxlen: 22
149.74.208.0/23 maxlen: 23
149.74.212.0/22 maxlen: 22
149.74.216.0/22 maxlen: 22
149.74.220.0/22 maxlen: 22
149.74.224.0/22 maxlen: 22
149.74.232.0/22 maxlen: 22
149.74.236.0/22 maxlen: 22
149.74.240.0/22 maxlen: 22
149.74.134.0/24 maxlen: 24
149.74.136.0/22 maxlen: 22
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.148.0/22 maxlen: 22
149.74.152.0/21 maxlen: 21
149.74.160.0/22 maxlen: 22
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.172.0/22 maxlen: 22
149.74.170.0/24 maxlen: 24
149.74.178.0/24 maxlen: 24
152.41.0.0/17 maxlen: 17
149.74.176.0/22 maxlen: 22
149.74.180.0/22 maxlen: 22
149.74.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 08 Jan 2024 15:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:85:ab:a9:6a:fc:01:54:36:04:20:b4:59:b0:7b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 8 14:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3d8e87c4fb4816868bca7860b8253b0118228d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:68:a0:98:f4:60:55:ae:a2:29:fe:f2:7a:
21:6b:bc:80:56:7b:8e:01:89:c1:f2:6f:3b:68:81:
14:bb:f3:e3:9f:ab:f3:24:32:5e:3c:78:2c:05:b2:
66:b1:1d:6b:d5:ca:d3:2c:83:86:6d:0a:46:cd:22:
3c:08:5f:2a:f1:32:54:50:86:37:68:a1:1b:28:b9:
ec:41:7a:a5:fc:2a:4a:2c:ad:9e:50:59:ef:84:9a:
d7:06:05:07:2d:ad:0e:a7:0d:6c:1a:66:26:39:e3:
80:e6:c9:c7:7e:d1:be:45:7b:9a:20:ed:8d:07:0f:
95:8c:8e:26:d6:16:ec:2a:5e:3c:84:16:61:de:d3:
63:ae:a8:dc:06:69:a0:19:db:b7:63:e8:b8:32:98:
13:ca:7e:9b:55:9b:f1:64:5a:3b:e0:a9:2e:53:29:
4d:f7:ff:c1:fc:f4:b8:cf:2d:a7:d9:16:a5:49:d5:
51:15:d3:1f:a7:26:0e:4b:1f:69:88:81:b7:be:89:
4a:b1:f2:a9:9a:00:d1:1b:66:ac:32:38:ae:49:fd:
f2:ae:ad:23:ce:e0:e9:9b:80:68:b7:14:e7:69:fe:
62:00:21:af:08:28:5b:ff:dd:f1:95:de:fe:86:4c:
62:d4:90:77:09:a0:d2:b4:99:1f:2a:31:85:10:24:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D8:E8:7C:4F:B4:81:68:68:BC:A7:86:0B:82:53:B0:11:82:28:D9
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/09jofE-0gWhovKeGC4JTsBGCKNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
62.36.0.0/16
85.48.0.0/12
90.160.0.0/12
93.117.88.0/21
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
151.252.16.0/21
152.41.0.0/17
161.199.192.0/22
176.10.16.0/20
176.104.64.0/19
185.124.36.0/22
185.132.192.0/22
185.147.93.0/24
188.93.32.0/22
188.126.128.0/19
188.208.0.0/20
188.208.40.0/21
188.239.128.0/19
188.240.128.0/20
192.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
90:fe:60:c5:ad:8c:5e:70:9d:f1:9e:0c:6d:c3:d1:61:ba:d0:
40:df:ba:af:dd:9a:c5:6a:9b:1d:61:e9:2a:78:2d:92:68:71:
a2:17:d0:52:75:a8:6e:17:48:40:57:10:3d:56:d7:6b:de:fa:
05:37:52:f2:fb:d4:d1:94:48:39:fc:df:95:c2:9c:a2:12:a1:
31:7c:3f:85:4a:cb:b9:59:12:47:89:42:10:5a:4d:cb:a0:c4:
0b:18:9a:ca:f0:02:77:5c:0e:e1:53:6d:20:3b:9f:ec:8d:fb:
bb:cc:02:9b:3b:ad:12:cb:73:9c:f2:a3:84:30:1a:c2:73:89:
95:cd:8d:ae:40:39:32:6e:23:f8:47:a4:8c:16:1e:53:da:ce:
bf:9b:57:e7:84:97:9c:75:9b:c1:69:dd:1c:ed:83:9c:a8:8b:
96:11:03:e0:d6:f2:14:7b:a6:95:6e:3c:25:0c:7e:f7:2e:53:
5f:60:82:80:46:4f:55:cf:f0:1f:76:c1:34:3d:9c:b0:4f:1e:
c2:0e:73:cb:f6:95:79:10:79:62:e6:9b:10:2c:93:4e:44:06:
72:cc:42:83:df:15:cb:97:d6:07:f8:3e:1a:c3:69:bf:df:e6:
70:fe:25:9d:a2:13:7b:cb:26:83:43:ea:a6:21:b9:75:ae:98:
8a:c6:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 21:17:53 2024 by rpki-client on console-fra.rpki-client.org