Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/En-PL1i4tYmMusReggdQxcLakCg.roa
File: En-PL1i4tYmMusReggdQxcLakCg.roa (raw, json)
Hash identifier: iK1FJSMif6r9JZhkY0XqVejyuKFBukYAqsWCvFrCzgc=
Subject key identifier: 12:7F:8F:2F:58:B8:B5:89:8C:BA:C4:5E:82:07:50:C5:C2:DA:90:28
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018A6510175815A1DEADE78D81DC188B0A18
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/En-PL1i4tYmMusReggdQxcLakCg.roa
Signing time: Tue 05 Sep 2023 11:17:47 +0000
ROA not before: Tue 05 Sep 2023 11:17:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8447
IP address blocks: 213.147.160.0/19 maxlen: 19
192.164.128.0/19 maxlen: 19
178.188.0.0/14 maxlen: 14
85.90.128.0/19 maxlen: 19
213.33.63.0/24 maxlen: 24
193.187.212.0/22 maxlen: 22
213.157.128.0/19 maxlen: 19
192.164.64.0/21 maxlen: 21
193.80.0.0/15 maxlen: 15
193.187.216.0/21 maxlen: 21
193.187.224.0/20 maxlen: 20
192.164.80.0/20 maxlen: 20
212.16.32.0/19 maxlen: 19
193.187.240.0/22 maxlen: 22
213.225.0.0/18 maxlen: 18
192.164.96.0/19 maxlen: 19
213.33.0.0/17 maxlen: 17
192.164.224.0/19 maxlen: 19
93.111.0.0/16 maxlen: 16
212.124.128.0/19 maxlen: 19
195.3.64.0/18 maxlen: 18
188.20.0.0/14 maxlen: 14
89.144.192.0/18 maxlen: 18
46.74.0.0/15 maxlen: 15
192.164.208.0/20 maxlen: 20
176.66.0.0/18 maxlen: 18
80.240.224.0/20 maxlen: 20
194.96.0.0/16 maxlen: 16
80.89.96.0/20 maxlen: 20
195.170.64.0/19 maxlen: 19
192.164.0.0/19 maxlen: 19
88.116.217.0/24 maxlen: 24
81.5.192.0/18 maxlen: 18
192.164.32.0/22 maxlen: 22
193.154.0.0/16 maxlen: 16
192.164.40.0/21 maxlen: 21
192.164.39.0/24 maxlen: 24
176.66.128.0/17 maxlen: 17
192.164.48.0/20 maxlen: 20
92.248.0.0/17 maxlen: 17
212.197.128.0/18 maxlen: 18
193.83.0.0/16 maxlen: 16
80.120.0.0/14 maxlen: 14
62.46.0.0/15 maxlen: 15
194.152.160.0/19 maxlen: 19
212.88.160.0/19 maxlen: 19
195.230.32.0/19 maxlen: 19
212.183.0.0/17 maxlen: 17
80.75.56.0/21 maxlen: 21
213.240.64.0/18 maxlen: 18
93.82.0.0/15 maxlen: 15
188.45.0.0/16 maxlen: 16
91.112.0.0/14 maxlen: 14
194.166.0.0/16 maxlen: 16
80.75.34.0/24 maxlen: 24
80.75.32.0/19 maxlen: 19
88.116.0.0/15 maxlen: 15
62.116.32.0/19 maxlen: 19
194.48.124.0/22 maxlen: 22
194.48.128.0/21 maxlen: 21
194.48.136.0/22 maxlen: 22
194.48.136.0/24 maxlen: 24
217.149.160.0/20 maxlen: 20
212.60.160.0/19 maxlen: 19
195.64.0.0/19 maxlen: 19
194.118.0.0/16 maxlen: 16
194.152.96.0/19 maxlen: 19
212.88.0.0/19 maxlen: 19
84.20.160.0/19 maxlen: 19
46.206.0.0/15 maxlen: 15
2001:4bb8::/29 maxlen: 29
2001:890::/29 maxlen: 29
2001:870::/29 maxlen: 29
2001:850::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:10:17:58:15:a1:de:ad:e7:8d:81:dc:18:8b:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Sep 5 11:17:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127f8f2f58b8b5898cbac45e820750c5c2da9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:28:7d:90:7a:1d:6e:63:a6:40:a4:94:7e:
78:eb:05:88:ef:c5:3c:e4:99:a2:9c:3d:17:c3:1e:
46:a0:de:00:cb:6e:31:95:08:bb:19:ad:ee:06:e5:
aa:eb:94:15:76:75:7c:a9:c8:5c:d1:ab:70:52:72:
5e:52:d7:c8:e4:c7:48:50:05:fe:64:7f:d3:18:b3:
08:af:b4:33:8c:46:d7:13:7f:6f:44:da:f5:56:11:
6e:d7:65:22:ce:20:aa:c1:89:f8:0c:ac:10:92:6d:
87:ba:6e:fe:22:b8:46:a4:d9:e6:d1:8c:7d:33:cf:
3e:27:d4:b3:4e:dd:ca:9c:8d:33:56:f8:8c:a5:f6:
07:f5:17:f0:2e:fc:5e:f2:24:a9:52:26:8b:06:35:
02:1d:83:5d:a9:15:30:d2:50:69:eb:4d:75:cd:9c:
05:67:c7:ea:f2:43:d2:28:98:0b:ae:b1:e8:16:27:
61:3c:43:47:3b:e9:75:45:9f:df:a7:c5:b5:fe:80:
3f:57:10:2b:34:88:e7:e9:be:7d:84:75:da:57:3e:
3d:97:93:ea:09:23:32:84:d0:3b:c5:d7:b9:85:55:
b6:df:af:c3:45:de:a9:ad:89:b9:a9:cf:55:53:13:
81:25:45:38:10:65:4c:99:7d:a8:6e:25:e8:7d:87:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:8F:2F:58:B8:B5:89:8C:BA:C4:5E:82:07:50:C5:C2:DA:90:28
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/En-PL1i4tYmMusReggdQxcLakCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.74.0.0/15
46.206.0.0/15
62.46.0.0/15
62.116.32.0/19
80.75.32.0/19
80.89.96.0/20
80.120.0.0/14
80.240.224.0/20
81.5.192.0/18
84.20.160.0/19
85.90.128.0/19
88.116.0.0/15
89.144.192.0/18
91.112.0.0/14
92.248.0.0/17
93.82.0.0/15
93.111.0.0/16
176.66.0.0/18
176.66.128.0/17
178.188.0.0/14
188.20.0.0/14
188.45.0.0/16
192.164.0.0-192.164.35.255
192.164.39.0-192.164.71.255
192.164.80.0-192.164.159.255
192.164.208.0-192.164.255.255
193.80.0.0/15
193.83.0.0/16
193.154.0.0/16
193.187.212.0-193.187.243.255
194.48.124.0-194.48.139.255
194.96.0.0/16
194.118.0.0/16
194.152.96.0/19
194.152.160.0/19
194.166.0.0/16
195.3.64.0/18
195.64.0.0/19
195.170.64.0/19
195.230.32.0/19
212.16.32.0/19
212.60.160.0/19
212.88.0.0/19
212.88.160.0/19
212.124.128.0/19
212.183.0.0/17
212.197.128.0/18
213.33.0.0/17
213.147.160.0/19
213.157.128.0/19
213.225.0.0/18
213.240.64.0/18
217.149.160.0/20
IPv6:
2001:850::/29
2001:870::/29
2001:890::/29
2001:4bb8::/29
Signature Algorithm: sha256WithRSAEncryption
c3:f1:8e:07:3a:e7:39:49:29:1c:dd:cb:fb:49:43:0c:08:38:
b9:a6:4f:6c:b9:ba:43:0a:48:03:68:e7:70:48:9c:2e:15:14:
b7:67:c5:95:34:60:d0:d1:8b:e4:cf:84:73:82:85:60:b1:8b:
cd:b6:e1:3f:dd:25:0d:37:74:d4:3b:1f:a2:8e:43:8c:23:61:
75:c4:48:c6:9d:e9:57:1b:a9:45:bd:81:56:14:4f:f3:d5:62:
ff:57:bc:d2:fe:1f:5c:6f:13:24:19:25:75:a8:29:b3:33:c8:
d6:90:ff:6a:e3:1f:57:a9:b8:6f:03:bc:0d:65:ac:60:cd:31:
2d:63:2d:d7:dc:dd:df:e6:3b:1f:f7:f8:72:ff:1a:f9:e7:83:
b2:91:f9:e5:fd:90:d6:73:dd:68:e9:22:fe:f5:eb:f9:c1:cf:
97:0e:c4:40:52:a7:f1:e9:be:d1:6f:2f:6a:68:93:fa:25:72:
60:0f:40:cc:bf:6c:06:dd:0e:fd:74:a5:3f:e2:ac:dc:56:2d:
cd:fd:4f:cd:39:ea:42:f9:ae:6f:69:02:98:f2:ed:a8:c9:29:
b7:ab:8f:31:3c:42:fb:c9:9d:63:d4:9d:3a:8f:67:de:5c:b3:
b8:7b:a5:49:7e:92:2b:82:c9:ef:62:e3:50:af:36:01:fe:fe:
7f:f9:08:4f
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 4 17:20:23 2023 by rpki-client on console-fra.rpki-client.org