Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/bFOJrct-ggKsewQCsQVDwxkK-48.roa
File: bFOJrct-ggKsewQCsQVDwxkK-48.roa (raw, json)
Hash identifier: LQr9mBXk0h01OgA6Z55p1Xl9PhNKniLPXco7285bLcU=
Subject key identifier: 6C:53:89:AD:CB:7E:82:02:AC:7B:04:02:B1:05:43:C3:19:0A:FB:8F
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 018CC5003364104FFF7144C2FB3151E255F5
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/bFOJrct-ggKsewQCsQVDwxkK-48.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13156
IP address blocks: 213.228.132.0/24 maxlen: 24
213.228.128.0/18 maxlen: 18
213.228.128.0/22 maxlen: 22
213.228.139.0/24 maxlen: 24
213.228.136.0/24 maxlen: 24
213.228.137.0/24 maxlen: 24
213.228.142.0/24 maxlen: 24
213.228.141.0/24 maxlen: 24
213.228.149.0/24 maxlen: 24
213.228.150.0/24 maxlen: 24
213.228.151.0/24 maxlen: 24
213.228.156.0/24 maxlen: 24
213.228.157.0/24 maxlen: 24
213.228.153.0/24 maxlen: 24
213.228.154.0/24 maxlen: 24
213.228.155.0/24 maxlen: 24
91.194.170.0/23 maxlen: 23
91.194.182.0/23 maxlen: 23
213.228.166.0/24 maxlen: 24
213.228.163.0/24 maxlen: 24
213.228.164.0/24 maxlen: 24
213.228.167.0/24 maxlen: 24
213.228.168.0/24 maxlen: 24
213.228.169.0/24 maxlen: 24
213.228.170.0/24 maxlen: 24
213.228.171.0/24 maxlen: 24
213.228.178.0/24 maxlen: 24
213.228.184.0/24 maxlen: 24
213.228.185.0/24 maxlen: 24
213.228.180.0/24 maxlen: 24
213.228.181.0/24 maxlen: 24
213.228.187.0/24 maxlen: 24
84.91.210.0/24 maxlen: 24
84.91.211.0/24 maxlen: 24
84.91.212.0/22 maxlen: 22
84.91.208.0/23 maxlen: 23
84.91.216.0/22 maxlen: 22
84.91.224.0/23 maxlen: 23
84.91.226.0/24 maxlen: 24
84.91.220.0/22 maxlen: 22
84.91.232.0/22 maxlen: 22
84.91.228.0/22 maxlen: 22
84.91.227.0/24 maxlen: 24
84.91.236.0/22 maxlen: 22
84.91.252.0/22 maxlen: 22
84.91.248.0/22 maxlen: 22
84.91.40.0/22 maxlen: 22
84.91.48.0/22 maxlen: 22
84.91.56.0/21 maxlen: 21
84.91.52.0/22 maxlen: 22
84.91.64.0/21 maxlen: 21
84.91.76.0/22 maxlen: 22
84.91.72.0/22 maxlen: 22
84.91.80.0/22 maxlen: 22
84.91.84.0/22 maxlen: 22
84.90.244.0/22 maxlen: 22
84.90.248.0/22 maxlen: 22
84.91.4.0/22 maxlen: 22
84.91.8.0/22 maxlen: 22
84.91.16.0/22 maxlen: 22
84.91.12.0/23 maxlen: 23
84.91.14.0/23 maxlen: 23
84.91.24.0/22 maxlen: 22
84.91.20.0/22 maxlen: 22
84.91.28.0/22 maxlen: 22
84.91.36.0/22 maxlen: 22
84.91.32.0/22 maxlen: 22
84.91.152.0/24 maxlen: 24
84.91.148.0/22 maxlen: 22
84.91.155.0/24 maxlen: 24
84.91.153.0/24 maxlen: 24
84.91.162.0/23 maxlen: 23
84.91.164.0/23 maxlen: 23
84.91.166.0/23 maxlen: 23
84.91.168.0/23 maxlen: 23
84.91.176.0/22 maxlen: 22
84.91.184.0/22 maxlen: 22
84.91.180.0/22 maxlen: 22
84.91.192.0/22 maxlen: 22
84.91.188.0/23 maxlen: 23
84.91.104.0/22 maxlen: 22
84.91.100.0/22 maxlen: 22
84.91.112.0/22 maxlen: 22
84.91.108.0/22 maxlen: 22
84.91.116.0/22 maxlen: 22
84.91.124.0/22 maxlen: 22
84.91.120.0/22 maxlen: 22
84.91.132.0/22 maxlen: 22
84.91.128.0/22 maxlen: 22
84.91.136.0/22 maxlen: 22
84.91.144.0/22 maxlen: 22
84.91.140.0/22 maxlen: 22
84.90.80.0/21 maxlen: 21
84.90.88.0/21 maxlen: 21
84.90.96.0/21 maxlen: 21
84.90.104.0/21 maxlen: 21
84.90.112.0/21 maxlen: 21
84.90.124.0/22 maxlen: 22
84.90.120.0/22 maxlen: 22
84.90.128.0/21 maxlen: 21
84.90.36.0/22 maxlen: 22
84.90.32.0/22 maxlen: 22
84.90.40.0/21 maxlen: 21
84.90.48.0/21 maxlen: 21
84.90.56.0/22 maxlen: 22
84.90.64.0/24 maxlen: 24
84.90.60.0/22 maxlen: 22
84.90.68.0/22 maxlen: 22
84.90.72.0/21 maxlen: 21
84.90.188.0/23 maxlen: 23
84.90.190.0/23 maxlen: 23
84.90.200.0/21 maxlen: 21
84.90.208.0/21 maxlen: 21
84.90.216.0/22 maxlen: 22
84.90.224.0/22 maxlen: 22
84.90.220.0/22 maxlen: 22
84.90.230.0/23 maxlen: 23
84.90.232.0/22 maxlen: 22
84.90.228.0/23 maxlen: 23
84.90.240.0/22 maxlen: 22
84.90.236.0/22 maxlen: 22
84.90.136.0/21 maxlen: 21
84.90.144.0/22 maxlen: 22
84.90.152.0/22 maxlen: 22
84.90.148.0/22 maxlen: 22
84.90.156.0/22 maxlen: 22
84.90.160.0/21 maxlen: 21
84.90.168.0/22 maxlen: 22
84.90.176.0/22 maxlen: 22
84.90.184.0/22 maxlen: 22
84.90.180.0/22 maxlen: 22
217.129.232.0/22 maxlen: 22
217.129.236.0/22 maxlen: 22
217.129.240.0/21 maxlen: 21
217.129.252.0/22 maxlen: 22
217.129.248.0/22 maxlen: 22
217.129.176.0/21 maxlen: 21
217.129.184.0/21 maxlen: 21
217.129.192.0/21 maxlen: 21
217.129.200.0/21 maxlen: 21
217.129.208.0/21 maxlen: 21
217.129.216.0/21 maxlen: 21
217.129.224.0/21 maxlen: 21
84.90.0.0/21 maxlen: 21
84.90.8.0/22 maxlen: 22
84.90.0.0/15 maxlen: 15
84.90.16.0/22 maxlen: 22
84.90.12.0/22 maxlen: 22
84.90.21.0/24 maxlen: 24
84.90.24.0/21 maxlen: 21
84.90.20.0/24 maxlen: 24
217.129.16.0/21 maxlen: 21
217.129.24.0/21 maxlen: 21
217.129.32.0/21 maxlen: 21
217.129.40.0/21 maxlen: 21
217.129.48.0/20 maxlen: 20
217.129.64.0/21 maxlen: 21
217.129.0.0/21 maxlen: 21
217.129.0.0/16 maxlen: 16
217.129.8.0/21 maxlen: 21
217.129.128.0/20 maxlen: 20
217.129.144.0/22 maxlen: 22
217.129.152.0/22 maxlen: 22
217.129.148.0/22 maxlen: 22
217.129.156.0/22 maxlen: 22
217.129.160.0/21 maxlen: 21
217.129.168.0/21 maxlen: 21
217.129.72.0/21 maxlen: 21
217.129.84.0/22 maxlen: 22
217.129.80.0/22 maxlen: 22
217.129.88.0/22 maxlen: 22
217.129.96.0/21 maxlen: 21
217.129.92.0/22 maxlen: 22
217.129.104.0/21 maxlen: 21
217.129.112.0/20 maxlen: 20
2a02:26c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:33:64:10:4f:ff:71:44:c2:fb:31:51:e2:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c5389adcb7e8202ac7b0402b10543c3190afb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:f6:11:46:5e:30:25:25:01:40:97:ef:0c:
91:82:c1:ea:16:cd:db:11:76:26:32:84:52:7c:ea:
14:6d:94:06:db:78:08:df:e0:72:a0:79:56:74:cf:
3b:43:42:1d:a7:2f:11:58:4c:df:08:a4:45:7f:ba:
5f:ac:0e:7b:49:f2:45:18:3b:e3:ed:f4:c4:07:9d:
76:0b:2c:fd:7a:ff:22:ca:0d:55:a0:29:eb:8b:72:
43:02:be:07:8f:9e:32:ef:4a:6a:4e:c2:aa:24:2a:
64:37:6d:17:6e:17:f3:1d:00:8c:10:b5:e2:24:da:
f2:95:c4:1f:b6:2b:d7:9e:ce:fc:1f:c9:fc:a8:47:
64:77:1c:ba:be:dc:3b:51:d0:c5:59:89:27:90:25:
8a:ff:c8:62:f9:c0:7d:52:e4:b6:8a:18:47:47:20:
09:45:e9:7c:07:78:6a:e3:40:32:8e:60:49:35:1a:
c8:77:b1:5d:60:40:f8:20:29:39:55:97:14:e5:48:
dc:4c:ee:c4:6a:e6:b0:55:be:99:dd:7d:43:30:33:
2d:65:00:85:0a:59:8c:13:9d:54:0f:eb:5f:04:a9:
6d:84:bb:bd:0f:38:e7:55:5b:8a:6a:e6:9e:14:ba:
15:c0:0e:48:55:75:b2:7e:c6:80:8d:ce:18:cc:57:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:89:AD:CB:7E:82:02:AC:7B:04:02:B1:05:43:C3:19:0A:FB:8F
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/bFOJrct-ggKsewQCsQVDwxkK-48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.90.0.0/15
91.194.170.0/23
91.194.182.0/23
213.228.128.0/18
217.129.0.0/16
IPv6:
2a02:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b0:2c:86:da:91:77:9b:7a:8b:9e:62:d5:1b:79:d1:7d:37:
ae:0c:91:98:e4:2e:53:e5:3c:ac:b2:52:24:b5:f4:a6:f8:61:
91:6b:55:01:09:c8:64:e2:cf:d2:2c:03:17:75:8c:d7:ca:de:
94:0f:6a:31:c8:da:fd:ae:8d:d9:1b:6a:2c:24:9a:34:ac:f7:
2f:65:7c:b9:84:19:15:4a:7d:02:9c:f0:f0:61:46:a5:79:6b:
62:33:87:d8:20:f5:0c:ff:03:a3:1e:ba:ac:e9:a1:9e:b9:23:
3f:c2:61:ed:0e:9b:e0:90:b6:9f:43:d1:41:f3:a5:3e:6b:70:
18:26:d3:f9:5c:0a:54:d2:be:6c:54:60:b8:2d:32:7e:0d:da:
0c:3c:9a:99:a9:27:8d:77:41:24:fc:ed:06:67:13:01:0d:20:
98:69:f6:75:40:af:8e:a4:7c:28:b1:fe:32:e7:10:17:76:e8:
64:7c:ba:5c:2e:f8:53:6f:4a:05:3e:d7:c2:ac:cc:17:2c:c7:
d4:6a:4e:cc:b7:1d:b1:50:ff:e7:00:30:fa:0d:fb:79:ad:2f:
8c:74:13:a6:dd:0f:ce:ab:63:d1:42:27:19:9e:7d:c2:26:46:
6e:81:15:85:bc:be:0d:0d:21:2d:c5:f6:8d:37:d7:8e:d7:c7:
1f:62:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:02 2024 by rpki-client on console-fra.rpki-client.org