Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/eQ7xhPOfD1jecUkdAJtqqJqkMxY.roa
File: eQ7xhPOfD1jecUkdAJtqqJqkMxY.roa (raw, json)
Hash identifier: 1zQYpsNmDnAICgx7gXn2Yfh2rwsiHC7kLepsO80GRF8=
Subject key identifier: 79:0E:F1:84:F3:9F:0F:58:DE:71:49:1D:00:9B:6A:A8:9A:A4:33:16
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 018CC348B97E5325AA1065827525DCA9C71E
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/eQ7xhPOfD1jecUkdAJtqqJqkMxY.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6805
IP address blocks: 89.13.0.0/17 maxlen: 17
89.13.0.0/16 maxlen: 16
92.228.72.0/23 maxlen: 23
92.228.74.0/23 maxlen: 23
92.228.76.0/23 maxlen: 23
92.228.78.0/23 maxlen: 23
92.228.80.0/23 maxlen: 23
92.228.82.0/23 maxlen: 23
92.228.84.0/23 maxlen: 23
92.228.86.0/23 maxlen: 23
89.12.192.0/18 maxlen: 18
92.229.0.0/16 maxlen: 16
185.93.236.0/22 maxlen: 22
89.12.0.0/18 maxlen: 18
89.12.0.0/14 maxlen: 14
92.227.194.0/23 maxlen: 23
89.12.128.0/18 maxlen: 18
213.39.128.0/17 maxlen: 17
89.12.64.0/18 maxlen: 18
78.51.96.0/19 maxlen: 19
78.51.64.0/19 maxlen: 19
78.51.0.0/19 maxlen: 19
78.51.32.0/19 maxlen: 19
78.50.0.0/17 maxlen: 17
78.50.0.0/16 maxlen: 16
213.191.64.0/19 maxlen: 19
80.171.0.0/16 maxlen: 16
78.49.192.0/18 maxlen: 18
92.225.0.0/16 maxlen: 16
78.50.128.0/17 maxlen: 17
92.224.0.0/13 maxlen: 13
92.224.0.0/16 maxlen: 16
78.49.0.0/18 maxlen: 18
78.55.192.0/18 maxlen: 18
78.49.128.0/18 maxlen: 18
89.15.232.0/21 maxlen: 21
78.49.64.0/18 maxlen: 18
78.48.0.0/13 maxlen: 13
85.176.0.0/13 maxlen: 13
78.55.0.0/18 maxlen: 18
78.48.64.0/18 maxlen: 18
85.183.16.0/23 maxlen: 23
85.183.18.0/23 maxlen: 23
78.48.0.0/18 maxlen: 18
78.54.192.0/18 maxlen: 18
92.230.20.0/23 maxlen: 23
92.230.22.0/23 maxlen: 23
89.14.128.0/18 maxlen: 18
62.109.64.0/18 maxlen: 18
78.55.128.0/18 maxlen: 18
78.48.192.0/18 maxlen: 18
89.14.192.0/18 maxlen: 18
78.48.128.0/18 maxlen: 18
78.55.64.0/18 maxlen: 18
78.54.64.0/18 maxlen: 18
89.13.128.0/17 maxlen: 17
78.54.0.0/18 maxlen: 18
89.14.64.0/18 maxlen: 18
89.14.0.0/18 maxlen: 18
78.54.128.0/18 maxlen: 18
2a01:c20:7200::/47 maxlen: 47
2a01:c22:8a00::/47 maxlen: 47
2a01:c22:ce00::/47 maxlen: 47
2a01:c22:d200::/47 maxlen: 47
2a01:c22:1c00::/47 maxlen: 47
2a01:c22:7800::/47 maxlen: 47
2a01:c22:6c00::/47 maxlen: 47
2a01:c22:8e00::/47 maxlen: 47
2a01:c22:b600::/47 maxlen: 47
2a01:c22:ca00::/47 maxlen: 47
2a01:c22:ae00::/47 maxlen: 47
2a01:c22:8600::/47 maxlen: 47
2a01:c22:3600::/47 maxlen: 47
2a01:c22:b200::/47 maxlen: 47
2a01:c22:aa00::/47 maxlen: 47
2a01:c22:7400::/47 maxlen: 47
2a01:c22:be00::/47 maxlen: 47
2a01:c22:a600::/47 maxlen: 47
2a01:c22:c200::/47 maxlen: 47
2a01:c22:d600::/47 maxlen: 47
2a01:c22:7000::/47 maxlen: 47
2a01:c22:ba00::/47 maxlen: 47
2a01:c08::/47 maxlen: 47
2a01:c20:7000::/39 maxlen: 39
2a01:c22:7200::/39 maxlen: 39
2a01:c22:8c00::/39 maxlen: 39
2a01:c22:7a00::/39 maxlen: 39
2a01:c22:3400::/39 maxlen: 39
2a01:c22:1e00::/39 maxlen: 39
2a01:c22:8400::/39 maxlen: 39
2a01:c22:7600::/39 maxlen: 39
2a01:c22:8800::/39 maxlen: 39
2a01:c22:6e00::/39 maxlen: 39
2a01:c23:c600::/47 maxlen: 47
2a01:c23:6a00::/47 maxlen: 47
2a01:c23:ba00::/47 maxlen: 47
2a01:c23:6200::/47 maxlen: 47
2a01:c23:7600::/47 maxlen: 47
2a01:c23:8a00::/47 maxlen: 47
2a01:c23:9200::/47 maxlen: 47
2a01:c23:c200::/47 maxlen: 47
2a01:c23:7200::/47 maxlen: 47
2a01:c23:8e00::/47 maxlen: 47
2a01:c23:5e00::/47 maxlen: 47
2a01:c23:6e00::/47 maxlen: 47
2a01:c23:be00::/47 maxlen: 47
2a01:c23:9600::/47 maxlen: 47
2a01:c23:6600::/47 maxlen: 47
2a01:c00::/26 maxlen: 39
Validation: Failed, certificate revoked on Fri 26 Jan 2024 09:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b9:7e:53:25:aa:10:65:82:75:25:dc:a9:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=790ef184f39f0f58de71491d009b6aa89aa43316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:f4:b0:37:f5:86:c8:09:d1:76:47:b1:d6:
c4:04:87:7b:bf:d4:4d:24:38:fa:ef:31:7a:47:0d:
c9:04:22:9c:64:4a:9e:82:38:1c:0c:0a:56:2b:06:
a1:c7:01:94:74:c9:a6:43:02:a7:77:f2:d9:43:06:
eb:70:76:1d:89:3a:ea:51:fd:c8:77:2b:d8:f3:22:
64:6f:ff:28:23:4c:d6:64:46:1d:49:3c:38:2a:1b:
4b:25:5c:91:d0:9f:1c:1d:a1:9b:f3:6c:5a:83:59:
63:83:44:d9:2f:85:7d:74:aa:35:24:3e:95:f6:41:
e6:f6:c2:a7:4a:2a:90:c4:0b:42:aa:55:7e:ef:12:
42:1d:04:57:cc:53:42:3c:64:32:bc:b1:e5:a2:e4:
23:9a:e4:d2:28:88:96:e9:5b:29:23:c2:05:d1:bb:
00:5c:b9:6d:81:87:cb:e6:cd:44:c2:b2:4a:ae:61:
be:a6:b0:ae:d2:f7:21:8d:ff:6e:86:71:6f:c7:39:
16:b7:19:bf:cf:c2:c6:fd:d1:c5:f6:24:f5:ed:54:
46:35:b1:01:4d:ac:dc:e9:23:3e:f6:9a:4b:49:af:
f6:bb:6a:05:e8:7a:f4:8c:41:77:f3:c8:cd:14:9c:
b3:73:86:e1:e3:0c:3b:76:eb:8e:9d:94:d1:8b:4c:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:F1:84:F3:9F:0F:58:DE:71:49:1D:00:9B:6A:A8:9A:A4:33:16
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/eQ7xhPOfD1jecUkdAJtqqJqkMxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.109.64.0/18
78.48.0.0/13
80.171.0.0/16
85.176.0.0/13
89.12.0.0/14
92.224.0.0/13
185.93.236.0/22
213.39.128.0/17
213.191.64.0/19
IPv6:
2a01:c00::/26
Signature Algorithm: sha256WithRSAEncryption
8c:4b:5a:56:73:f9:33:66:2d:ba:74:95:91:ad:90:d2:eb:60:
67:fa:4e:60:44:db:1e:f8:19:39:db:e6:59:2b:88:b3:1a:75:
5d:f2:1a:7d:c2:fd:f2:e4:81:7b:3a:12:b2:36:04:fc:cf:4a:
32:f8:73:1a:a5:7e:3f:0c:cc:c2:99:36:32:e1:84:2d:ce:88:
37:6d:e7:0a:90:12:1b:b5:c4:92:c7:14:d8:00:21:cc:cc:e3:
d3:bf:f7:8a:05:82:b0:c8:2e:fd:b4:39:6b:5c:2a:6d:9f:fb:
f2:4d:e5:8f:99:10:e1:c2:35:75:6d:1e:0a:ca:e3:9a:26:c4:
be:6d:c8:9b:15:1f:bf:67:e5:f3:b3:59:92:ff:54:ab:8c:ae:
d5:a5:e1:25:1d:c7:f6:a1:95:cd:37:4c:00:ba:f3:ff:6b:0a:
49:f7:5f:16:15:60:74:75:d9:fe:21:74:0e:0e:91:fb:1c:d7:
6e:2f:3f:6a:9f:e8:fd:4e:c1:39:6c:dc:3e:9f:0d:41:4b:50:
36:01:b0:10:8c:fc:ed:6a:02:44:e9:ad:39:d6:76:8e:f5:25:
d0:79:53:74:09:df:8c:d6:3d:05:09:ed:fe:22:86:09:e4:d7:
04:95:2a:60:cf:6b:20:54:cf:ca:77:10:72:78:56:67:75:61:
e4:bf:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 13:09:40 2024 by rpki-client on console-ams.rpki-client.org