Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/PPfl0dIaP1Nl8D7EZepoUedQGYY.roa
File: PPfl0dIaP1Nl8D7EZepoUedQGYY.roa (raw, json)
Hash identifier: lyWHf+GG3yQs9A6ux2uiuDwU9WWbIrmmzzpxEmGRrfw=
Subject key identifier: 3C:F7:E5:D1:D2:1A:3F:53:65:F0:3E:C4:65:EA:68:51:E7:50:19:86
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018CE9CC2A2B77D3EF0BD966E19DD1B42813
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/PPfl0dIaP1Nl8D7EZepoUedQGYY.roa
Signing time: Mon 08 Jan 2024 15:58:40 +0000
ROA not before: Mon 08 Jan 2024 15:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 185.147.93.0/24 maxlen: 24
188.208.0.0/22 maxlen: 22
188.208.0.0/20 maxlen: 20
188.208.4.0/22 maxlen: 22
188.208.9.0/24 maxlen: 24
188.208.8.0/24 maxlen: 24
188.208.8.0/22 maxlen: 22
188.208.13.0/24 maxlen: 24
188.208.12.0/22 maxlen: 22
188.208.12.0/24 maxlen: 24
188.208.14.0/24 maxlen: 24
188.208.40.0/21 maxlen: 21
149.74.2.0/23 maxlen: 23
149.74.1.0/24 maxlen: 24
149.74.0.0/24 maxlen: 24
149.74.0.0/22 maxlen: 22
149.74.4.0/23 maxlen: 23
149.74.4.0/22 maxlen: 22
149.74.0.0/16 maxlen: 16
149.74.8.0/22 maxlen: 22
149.74.6.0/23 maxlen: 23
149.74.16.0/22 maxlen: 22
149.74.20.0/22 maxlen: 22
149.74.24.0/22 maxlen: 22
188.126.136.0/22 maxlen: 22
188.126.140.0/22 maxlen: 22
188.126.144.0/22 maxlen: 22
188.126.148.0/22 maxlen: 22
188.126.152.0/22 maxlen: 22
188.126.156.0/23 maxlen: 23
188.126.158.0/23 maxlen: 23
188.126.158.0/24 maxlen: 24
188.126.128.0/19 maxlen: 19
188.126.128.0/22 maxlen: 22
188.126.132.0/22 maxlen: 22
90.160.0.0/12 maxlen: 24
188.93.32.0/22 maxlen: 22
161.199.192.0/22 maxlen: 22
188.240.128.0/20 maxlen: 20
188.240.128.0/21 maxlen: 21
185.132.192.0/22 maxlen: 22
188.240.136.0/22 maxlen: 22
188.240.140.0/22 maxlen: 22
188.239.128.0/19 maxlen: 19
1.178.224.0/21 maxlen: 21
188.239.128.0/21 maxlen: 21
1.178.224.0/19 maxlen: 19
1.178.232.0/21 maxlen: 21
188.239.144.0/22 maxlen: 22
109.205.130.0/23 maxlen: 23
109.205.128.0/21 maxlen: 21
109.205.128.0/23 maxlen: 23
109.205.128.0/22 maxlen: 22
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
1.178.240.0/21 maxlen: 21
188.239.148.0/22 maxlen: 22
188.239.152.0/23 maxlen: 23
188.239.154.0/23 maxlen: 23
1.178.248.0/21 maxlen: 21
188.239.158.0/23 maxlen: 23
188.239.156.0/23 maxlen: 23
192.157.192.0/22 maxlen: 22
151.252.16.0/21 maxlen: 21
192.157.192.0/18 maxlen: 24
93.117.88.0/21 maxlen: 21
93.117.88.0/22 maxlen: 22
192.157.196.0/22 maxlen: 22
93.117.92.0/22 maxlen: 22
192.157.200.0/21 maxlen: 21
192.157.208.0/21 maxlen: 21
185.124.36.0/22 maxlen: 22
192.157.216.0/21 maxlen: 21
176.104.64.0/19 maxlen: 19
176.10.16.0/21 maxlen: 21
176.10.24.0/21 maxlen: 21
145.1.232.0/21 maxlen: 21
145.1.228.0/22 maxlen: 22
145.1.240.0/20 maxlen: 20
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
62.36.0.0/16 maxlen: 24
62.36.21.0/24 maxlen: 24
149.74.244.0/22 maxlen: 22
149.74.248.0/22 maxlen: 22
149.74.252.0/22 maxlen: 22
149.74.252.0/23 maxlen: 23
149.74.251.0/24 maxlen: 24
145.1.128.0/19 maxlen: 19
145.1.128.0/17 maxlen: 17
85.48.188.0/24 maxlen: 24
107.183.128.0/17 maxlen: 17
145.1.160.0/19 maxlen: 19
85.48.0.0/12 maxlen: 24
113.203.128.0/18 maxlen: 18
149.74.80.0/22 maxlen: 22
149.74.84.0/22 maxlen: 22
149.74.88.0/22 maxlen: 22
149.74.92.0/22 maxlen: 22
149.74.98.0/23 maxlen: 23
149.74.96.0/20 maxlen: 20
149.74.96.0/23 maxlen: 23
149.74.102.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
149.74.120.0/21 maxlen: 21
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
149.74.28.0/22 maxlen: 22
149.74.30.0/24 maxlen: 24
149.74.32.0/20 maxlen: 20
149.74.48.0/21 maxlen: 21
149.74.56.0/22 maxlen: 22
149.74.60.0/22 maxlen: 22
149.74.64.0/21 maxlen: 21
149.74.72.0/21 maxlen: 21
149.74.188.0/22 maxlen: 22
149.74.187.0/24 maxlen: 24
149.74.192.0/22 maxlen: 22
149.74.196.0/22 maxlen: 22
149.74.199.0/24 maxlen: 24
149.74.197.0/24 maxlen: 24
149.74.200.0/22 maxlen: 22
149.74.204.0/22 maxlen: 22
149.74.210.0/23 maxlen: 23
149.74.208.0/22 maxlen: 22
149.74.208.0/23 maxlen: 23
149.74.212.0/22 maxlen: 22
149.74.216.0/22 maxlen: 22
149.74.220.0/22 maxlen: 22
149.74.224.0/22 maxlen: 22
149.74.232.0/22 maxlen: 22
149.74.236.0/22 maxlen: 22
149.74.240.0/22 maxlen: 22
149.74.134.0/24 maxlen: 24
149.74.136.0/22 maxlen: 22
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.148.0/22 maxlen: 22
149.74.152.0/21 maxlen: 21
149.74.160.0/22 maxlen: 22
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.172.0/22 maxlen: 22
149.74.170.0/24 maxlen: 24
149.74.178.0/24 maxlen: 24
149.74.176.0/22 maxlen: 22
152.41.0.0/17 maxlen: 17
149.74.180.0/22 maxlen: 22
149.74.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:cc:2a:2b:77:d3:ef:0b:d9:66:e1:9d:d1:b4:28:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 8 15:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf7e5d1d21a3f5365f03ec465ea6851e7501986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:68:83:f6:ef:6c:c0:60:f1:39:0c:04:d7:
4c:8b:5a:b8:d1:40:0f:aa:3c:8d:9a:c8:df:97:05:
d9:7d:ec:1d:1f:b7:a3:5a:0e:75:15:87:f8:8a:25:
de:4f:d3:7f:ec:3e:49:87:09:42:d3:b8:e6:26:18:
fa:f1:55:03:99:3e:fa:b9:c5:3c:59:f1:12:9e:88:
91:fb:ee:d1:bb:3f:43:bb:70:cf:ee:b3:a5:5f:13:
42:ea:b9:ce:31:30:42:25:5d:4f:e5:d8:ee:6a:15:
c8:ef:dc:7c:66:67:00:8f:f8:f2:4d:95:16:51:b5:
71:db:13:59:c7:36:7f:c3:8d:e3:38:fa:6f:3d:d6:
bb:3f:d9:12:09:86:6d:3c:76:5c:f5:75:58:3c:f5:
7c:e6:16:23:ae:3d:84:6c:97:d1:cd:62:d8:0a:6c:
ca:46:b6:7a:73:7c:6b:a5:3d:6d:19:45:12:28:cb:
85:0e:3f:7b:2b:76:d1:6d:11:23:0f:c6:a3:56:b3:
50:38:63:c8:58:cc:a0:96:d2:27:72:97:ac:fd:6f:
e1:28:29:bd:c3:fb:24:61:42:02:df:bb:53:67:40:
08:41:e3:a9:83:4b:73:e6:81:03:51:cd:f8:af:b8:
e0:e5:e5:f9:c4:45:30:51:0f:93:98:d6:93:69:28:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:E5:D1:D2:1A:3F:53:65:F0:3E:C4:65:EA:68:51:E7:50:19:86
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/PPfl0dIaP1Nl8D7EZepoUedQGYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
62.36.0.0/16
85.48.0.0/12
90.160.0.0/12
93.117.88.0/21
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
151.252.16.0/21
152.41.0.0/17
161.199.192.0/22
176.10.16.0/20
176.104.64.0/19
185.124.36.0/22
185.132.192.0/22
185.147.93.0/24
188.93.32.0/22
188.126.128.0/19
188.208.0.0/20
188.208.40.0/21
188.239.128.0/19
188.240.128.0/20
192.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
78:77:34:c8:f1:56:8d:99:5e:89:07:8c:ee:fb:c6:ca:54:78:
11:6b:9d:a8:0f:6d:6d:94:e8:00:a2:51:60:bf:a0:77:5a:cf:
e5:10:ed:f2:d0:b0:a6:d2:43:9e:91:44:2b:95:a4:3f:0e:a6:
4a:6a:4a:eb:70:74:43:a5:09:51:42:fb:eb:fd:73:ba:71:ad:
0b:e4:f3:2c:81:57:c3:61:ef:ab:9a:c3:8d:06:90:d1:ab:cd:
cf:fa:92:a7:5c:13:d7:5a:cf:c6:b8:df:fc:30:1a:ae:db:8b:
bd:30:6f:25:f7:32:6e:75:72:b6:ad:a5:dd:e6:b4:45:71:08:
ee:a2:29:99:09:14:97:f6:70:7a:57:c4:2a:f6:13:b7:25:be:
88:0b:4e:47:b8:3f:81:3e:84:fa:80:c3:58:99:dc:6d:e3:ec:
c1:19:e5:15:e6:70:11:94:35:15:84:fc:6e:bd:a2:47:4a:46:
fb:3a:9c:43:45:e4:a4:ae:8b:11:90:95:12:0f:3a:f2:27:f7:
28:6b:be:ed:6a:b9:5c:fb:72:ae:f0:a9:a2:5a:c8:bc:7d:fb:
c5:bf:7c:e8:af:6d:4f:b9:84:93:35:bd:8b:bd:d7:c5:d5:eb:
8f:59:70:6d:cd:47:1d:2a:61:4b:02:a0:51:01:a4:e3:3f:d0:
16:50:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 17:21:00 2024 by rpki-client on console-fra.rpki-client.org