Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/bwvaniji4eP9uViDcxPoHekD9s4.roa
File: bwvaniji4eP9uViDcxPoHekD9s4.roa (raw, json)
Hash identifier: kNcoar1R3uS6WEfWUf+BmIrL/Vw/0Pr87qDOEOtkCus=
Subject key identifier: 6F:0B:DA:9E:28:E2:E1:E3:FD:B9:58:83:73:13:E8:1D:E9:03:F6:CE
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018CCF9F88D6B95D010F0D8B936EEFDF6FD5
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/bwvaniji4eP9uViDcxPoHekD9s4.roa
Signing time: Wed 03 Jan 2024 13:59:48 +0000
ROA not before: Wed 03 Jan 2024 13:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 185.147.93.0/24 maxlen: 24
188.208.0.0/22 maxlen: 22
188.208.0.0/20 maxlen: 20
188.208.4.0/22 maxlen: 22
188.208.9.0/24 maxlen: 24
188.208.8.0/24 maxlen: 24
188.208.8.0/22 maxlen: 22
188.208.13.0/24 maxlen: 24
188.208.12.0/22 maxlen: 22
188.208.12.0/24 maxlen: 24
188.208.14.0/24 maxlen: 24
188.208.40.0/21 maxlen: 21
149.74.2.0/23 maxlen: 23
149.74.1.0/24 maxlen: 24
149.74.0.0/24 maxlen: 24
149.74.0.0/22 maxlen: 22
149.74.4.0/23 maxlen: 23
149.74.4.0/22 maxlen: 22
149.74.0.0/16 maxlen: 16
149.74.8.0/22 maxlen: 22
149.74.6.0/23 maxlen: 23
149.74.16.0/22 maxlen: 22
149.74.20.0/22 maxlen: 22
149.74.24.0/22 maxlen: 22
188.126.136.0/22 maxlen: 22
188.126.140.0/22 maxlen: 22
188.126.144.0/22 maxlen: 22
188.126.148.0/22 maxlen: 22
188.126.152.0/22 maxlen: 22
188.126.156.0/23 maxlen: 23
188.126.158.0/23 maxlen: 23
188.126.158.0/24 maxlen: 24
188.126.128.0/19 maxlen: 19
188.126.128.0/22 maxlen: 22
188.126.132.0/22 maxlen: 22
188.93.32.0/22 maxlen: 22
161.199.192.0/22 maxlen: 22
188.240.128.0/20 maxlen: 20
188.240.128.0/21 maxlen: 21
185.132.192.0/22 maxlen: 22
188.240.136.0/22 maxlen: 22
188.240.140.0/22 maxlen: 22
188.239.128.0/19 maxlen: 19
1.178.224.0/21 maxlen: 21
188.239.128.0/21 maxlen: 21
1.178.224.0/19 maxlen: 19
1.178.232.0/21 maxlen: 21
188.239.144.0/22 maxlen: 22
109.205.130.0/23 maxlen: 23
109.205.128.0/21 maxlen: 21
109.205.128.0/23 maxlen: 23
109.205.128.0/22 maxlen: 22
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
1.178.240.0/21 maxlen: 21
188.239.148.0/22 maxlen: 22
188.239.152.0/23 maxlen: 23
188.239.154.0/23 maxlen: 23
1.178.248.0/21 maxlen: 21
188.239.158.0/23 maxlen: 23
188.239.156.0/23 maxlen: 23
192.157.192.0/22 maxlen: 22
151.252.16.0/21 maxlen: 21
192.157.192.0/18 maxlen: 18
93.117.88.0/22 maxlen: 22
192.157.196.0/22 maxlen: 22
192.157.200.0/21 maxlen: 21
192.157.208.0/21 maxlen: 21
185.124.36.0/22 maxlen: 22
192.157.216.0/21 maxlen: 21
176.104.64.0/19 maxlen: 19
176.10.16.0/21 maxlen: 21
176.10.24.0/21 maxlen: 21
145.1.228.0/22 maxlen: 22
145.1.240.0/20 maxlen: 20
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
149.74.244.0/22 maxlen: 22
149.74.248.0/22 maxlen: 22
149.74.252.0/22 maxlen: 22
149.74.252.0/23 maxlen: 23
149.74.251.0/24 maxlen: 24
145.1.128.0/19 maxlen: 19
145.1.128.0/17 maxlen: 17
107.183.128.0/17 maxlen: 17
145.1.160.0/19 maxlen: 19
113.203.128.0/18 maxlen: 18
149.74.80.0/22 maxlen: 22
149.74.84.0/22 maxlen: 22
149.74.88.0/22 maxlen: 22
149.74.92.0/22 maxlen: 22
149.74.98.0/23 maxlen: 23
149.74.96.0/20 maxlen: 20
149.74.96.0/23 maxlen: 23
149.74.102.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
149.74.120.0/21 maxlen: 21
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
149.74.28.0/22 maxlen: 22
149.74.30.0/24 maxlen: 24
149.74.32.0/20 maxlen: 20
149.74.48.0/21 maxlen: 21
149.74.56.0/22 maxlen: 22
149.74.60.0/22 maxlen: 22
149.74.64.0/21 maxlen: 21
149.74.72.0/21 maxlen: 21
149.74.188.0/22 maxlen: 22
149.74.187.0/24 maxlen: 24
149.74.192.0/22 maxlen: 22
149.74.196.0/22 maxlen: 22
149.74.199.0/24 maxlen: 24
149.74.197.0/24 maxlen: 24
149.74.200.0/22 maxlen: 22
149.74.204.0/22 maxlen: 22
149.74.210.0/23 maxlen: 23
149.74.208.0/22 maxlen: 22
149.74.208.0/23 maxlen: 23
149.74.212.0/22 maxlen: 22
149.74.216.0/22 maxlen: 22
149.74.220.0/22 maxlen: 22
149.74.224.0/22 maxlen: 22
149.74.232.0/22 maxlen: 22
149.74.236.0/22 maxlen: 22
149.74.240.0/22 maxlen: 22
149.74.134.0/24 maxlen: 24
149.74.136.0/22 maxlen: 22
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.148.0/22 maxlen: 22
149.74.152.0/21 maxlen: 21
149.74.160.0/22 maxlen: 22
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.172.0/22 maxlen: 22
149.74.170.0/24 maxlen: 24
149.74.178.0/24 maxlen: 24
149.74.176.0/22 maxlen: 22
152.41.0.0/17 maxlen: 17
149.74.180.0/22 maxlen: 22
149.74.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:9f:88:d6:b9:5d:01:0f:0d:8b:93:6e:ef:df:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 3 13:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0bda9e28e2e1e3fdb958837313e81de903f6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:dc:2b:e2:e6:95:6f:89:64:c0:cd:dd:15:
68:70:b7:d2:00:8e:0b:43:31:69:33:5b:14:5e:c7:
91:e8:d8:f6:aa:4b:b4:b9:7e:5d:57:f7:01:0a:65:
32:96:e8:ad:5e:41:61:bd:62:ca:e0:cb:e0:13:6d:
92:fe:8b:45:a2:3b:5b:41:7e:0e:56:8d:1b:c0:73:
61:7e:07:ef:de:fd:77:dc:d4:f2:77:32:c3:67:ed:
b8:b4:cc:4b:94:f4:3c:e3:7e:5e:be:3e:66:d5:14:
e2:f8:2b:d1:b3:6e:72:5d:7d:05:2d:f1:3e:f2:66:
f8:ba:6b:f9:63:38:84:03:be:26:95:85:59:c8:70:
b9:3b:d2:5e:ac:d0:e7:12:04:ef:1a:b1:25:d8:c8:
82:43:63:c6:4e:b3:4f:58:a7:50:27:89:3d:bd:e7:
73:ef:16:ec:73:43:de:e1:08:d9:9f:0b:4f:9d:97:
29:7e:16:41:89:a4:05:8b:76:13:0e:cc:4d:c1:dc:
ac:49:a8:26:93:2e:bd:96:d8:f6:8d:d4:a5:6e:da:
10:a2:16:6a:a1:9b:e7:1a:2f:b4:4c:54:0a:a2:54:
f0:6c:0c:22:5f:69:29:2b:2e:39:f7:51:b9:15:7f:
41:88:72:49:b6:80:57:9b:16:88:f6:e2:40:0d:0c:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:DA:9E:28:E2:E1:E3:FD:B9:58:83:73:13:E8:1D:E9:03:F6:CE
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/bwvaniji4eP9uViDcxPoHekD9s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
93.117.88.0/22
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
151.252.16.0/21
152.41.0.0/17
161.199.192.0/22
176.10.16.0/20
176.104.64.0/19
185.124.36.0/22
185.132.192.0/22
185.147.93.0/24
188.93.32.0/22
188.126.128.0/19
188.208.0.0/20
188.208.40.0/21
188.239.128.0/19
188.240.128.0/20
192.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
00:6b:4e:a2:b7:c8:ce:88:bf:47:d4:16:50:8b:82:27:cb:f5:
72:0d:20:04:30:a5:cb:d4:07:55:2a:27:52:6d:28:78:da:dd:
b6:bc:d7:81:66:2a:ec:09:ae:c7:29:84:56:31:fc:dc:ae:39:
23:91:23:97:5e:63:0b:d9:87:e0:54:34:67:7f:18:56:38:4c:
70:6c:5c:97:cc:69:3f:ad:16:10:fa:66:17:64:e9:2c:ea:fb:
d1:40:4d:bd:ea:44:4d:81:0a:69:3a:06:a3:81:e3:f5:78:4a:
3a:84:a4:41:d5:8f:c1:b7:fb:09:6b:8c:15:73:53:36:73:79:
27:ea:59:df:d2:bd:61:e6:ba:81:37:01:f6:4c:9b:b4:28:1f:
e8:31:4f:15:85:40:60:e6:50:f1:fa:ed:72:27:06:27:54:24:
b3:9a:21:9d:a1:fd:68:61:0c:79:a0:bd:19:40:4e:81:1b:5f:
c6:92:ac:74:63:55:e2:c0:ca:21:d3:c6:02:34:33:53:3c:4e:
37:ca:01:99:de:59:e9:06:b5:b6:78:6d:63:8a:59:c9:24:6c:
44:e2:a1:fb:19:20:09:e9:a0:bc:00:0b:4b:39:0f:e9:c5:2b:
a3:b2:26:33:c8:27:e0:55:b6:d5:dd:9a:76:29:1f:2b:e2:5a:
88:43:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:17 2024 by rpki-client on console-fra.rpki-client.org