Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/83ekuNejmB5PMNwOd8lSlM7MAsk.roa
File: 83ekuNejmB5PMNwOd8lSlM7MAsk.roa (raw, json)
Hash identifier: 0jVSmYSog+5cbgQJfGSIJDTAN/5tv3CKRr0IVA6H1IA=
Subject key identifier: F3:77:A4:B8:D7:A3:98:1E:4F:30:DC:0E:77:C9:52:94:CE:CC:02:C9
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D547218920C8DFB32348CE0EB89C992D2
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/83ekuNejmB5PMNwOd8lSlM7MAsk.roa
Signing time: Mon 29 Jan 2024 08:59:39 +0000
ROA not before: Mon 29 Jan 2024 08:59:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.124.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 07:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:72:18:92:0c:8d:fb:32:34:8c:e0:eb:89:c9:92:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 29 08:59:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f377a4b8d7a3981e4f30dc0e77c95294cecc02c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:cb:81:ad:c3:05:4b:ed:77:18:7e:6d:ed:
4d:97:2a:49:6c:56:cb:a9:8d:89:0d:33:25:61:db:
f6:b6:1a:79:46:27:e9:37:3b:b7:a9:d1:52:2e:f0:
57:10:64:56:20:6d:5f:28:07:37:13:d9:50:02:80:
f2:39:6e:09:fa:a5:e1:dc:d5:21:d1:96:0b:91:ed:
0f:d6:1e:68:83:c0:c1:d7:e6:bf:b1:d8:52:bb:0d:
42:17:3f:42:d1:30:d7:68:eb:fa:66:c0:c1:50:81:
1d:c2:49:32:c3:12:23:f1:a4:e9:38:5d:00:cd:93:
f2:8c:ea:f9:88:bd:ca:ca:56:9b:4b:3c:df:87:13:
79:72:60:da:8a:2d:a9:01:4b:fc:98:bc:95:67:3d:
c6:13:e0:b5:43:92:49:f5:ab:ce:14:34:b2:30:34:
e9:01:47:7b:bb:69:4f:8b:2f:e8:28:d9:fa:af:b7:
52:a0:c7:92:9e:8e:0a:ef:a2:3b:97:4e:12:47:b2:
32:2b:37:cb:bb:1e:b0:c1:3b:19:1e:24:fb:03:5d:
60:8f:98:26:44:e2:54:39:cc:47:10:a0:90:9e:d4:
a4:13:25:82:c3:52:0b:86:f4:89:5a:95:68:24:b7:
6b:f9:96:4e:c6:35:40:77:a0:20:d8:96:70:a6:9c:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:A4:B8:D7:A3:98:1E:4F:30:DC:0E:77:C9:52:94:CE:CC:02:C9
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/83ekuNejmB5PMNwOd8lSlM7MAsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0-2.138.255.255
79.144.0.0/14
80.24.0.0/15
80.30.0.0-80.33.255.255
81.32.0.0/16
81.34.0.0-81.43.255.255
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
88.30.0.0/16
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.141.0/24
195.76.164.0/24
195.77.57.0/24
195.235.95.0/24
195.235.188.0/24
195.235.225.0/24
212.170.156.0/24
212.170.159.0/24
213.99.44.0/24
213.99.59.0/24
217.124.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:cc:40:fe:6e:d2:f4:26:b7:9e:00:1a:c3:e5:2f:f9:af:82:
23:00:b7:22:f3:23:31:c8:5c:3d:48:90:f9:06:2e:34:62:36:
91:4c:eb:a0:e5:06:c1:80:9d:b8:b1:88:be:2d:03:c5:3d:fc:
d0:6e:20:87:7c:ea:9a:0a:9e:e2:3a:f3:ad:db:76:8b:f6:af:
99:44:fa:ac:b1:8e:33:72:36:56:94:3a:ac:80:31:4e:47:1c:
4e:32:f0:c7:20:d5:ea:0b:60:7d:ac:f9:2f:27:28:00:c2:3f:
07:f1:31:39:06:8a:44:51:24:a6:13:3b:a9:43:b5:b0:15:5e:
98:fe:61:77:9b:76:53:89:2b:9b:42:57:82:5c:d8:19:db:29:
64:b3:18:41:6d:dd:05:1f:ff:7b:e4:39:20:ff:91:a0:b0:37:
71:73:c0:55:cb:e9:01:1e:4b:6d:36:e8:28:64:fb:d7:c1:3b:
9b:34:3d:55:26:35:d3:6f:52:e0:41:92:fa:d8:8d:7f:56:4e:
75:a9:d2:03:44:77:32:54:f8:2c:80:26:94:45:d5:f0:1e:ee:
6a:c8:4e:50:1a:fc:ef:4f:71:88:ab:c8:09:53:66:d0:7d:8f:
b3:02:68:ad:9d:1d:fe:84:b2:5b:bc:b0:17:93:61:bf:07:24:
f2:26:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 11:05:42 2024 by rpki-client on console-fra.rpki-client.org