Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa
File: JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa (raw, json)
Hash identifier: LcHYaIBRzbN6aROsVWbMqmcJ0IcIwBkEzewl64oCohQ=
Subject key identifier: 24:E8:F3:E6:50:A4:D0:D2:81:C7:C3:04:D4:3B:29:EA:7B:C1:74:1E
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0185C411813B49842DE3A9E36B43ABFD5DBC
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa
Signing time: Wed 18 Jan 2023 08:49:19 +0000
ROA not before: Wed 18 Jan 2023 08:49:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 83.60.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 19 Jan 2023 08:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:11:81:3b:49:84:2d:e3:a9:e3:6b:43:ab:fd:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 18 08:49:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24e8f3e650a4d0d281c7c304d43b29ea7bc1741e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:3b:29:62:d6:9a:be:a9:ff:b2:e2:c1:cf:
2b:c8:58:69:3b:2b:7f:22:a9:9b:14:6c:c6:aa:87:
0a:8d:27:7b:e3:7d:27:95:6d:c1:44:e0:f3:c2:07:
a6:7d:3c:b2:d6:74:2d:c0:c6:26:ee:c0:12:e1:72:
66:ea:c7:d0:fd:d6:b1:1c:e0:7d:e9:b2:15:80:08:
25:5c:a4:db:92:bb:06:af:f9:23:45:96:fc:32:f9:
20:84:84:11:83:c0:6d:81:59:c5:fb:9d:87:58:97:
db:8d:13:e0:32:8b:4b:3c:a9:41:3a:da:61:13:fe:
a6:47:bf:cc:99:10:79:4d:23:c0:29:2a:f0:bb:92:
c9:76:73:2d:46:d9:6a:f9:8f:38:68:46:c3:5d:e0:
0d:7b:aa:a1:10:22:71:7c:0f:29:62:97:82:92:a7:
19:14:b2:be:c5:08:a6:8e:a7:94:d4:7f:c5:c5:2d:
8b:ee:d9:97:ff:1a:74:a2:9f:a8:ee:28:18:87:60:
ff:b9:2e:c9:fe:fe:01:f5:8e:0e:e3:5c:1c:e6:00:
19:c8:c3:ac:e0:5a:aa:73:e6:67:f3:c8:1b:f4:ef:
40:a2:4f:57:19:e8:bb:a4:15:fa:af:13:02:c6:8e:
37:48:48:5d:63:c4:ec:59:bd:fb:0f:6a:0f:59:fb:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E8:F3:E6:50:A4:D0:D2:81:C7:C3:04:D4:3B:29:EA:7B:C1:74:1E
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0/16
79.144.0.0/15
79.147.0.0/16
80.30.0.0/15
81.32.0.0/16
81.36.0.0-81.40.255.255
83.34.0.0/15
83.37.0.0/16
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
db:f1:4d:f7:a9:6b:5f:cd:92:2a:db:9c:23:d1:ab:df:1e:20:
9a:63:05:41:f6:8a:62:2b:7f:0a:2b:cd:0e:4a:71:10:0f:05:
0a:56:71:01:b0:f6:f5:74:ca:93:d2:dd:2a:e1:ec:f2:b3:de:
28:7f:0c:6b:e3:29:ca:25:d0:ab:31:73:40:eb:23:f8:04:c3:
a7:31:79:1c:6f:e3:c2:57:48:47:dc:3d:64:85:1a:43:71:db:
b3:86:ac:e0:59:41:0a:0b:f2:ea:f4:64:5d:23:c8:ed:a2:20:
f7:15:7a:ba:11:25:a7:e8:6a:f2:0f:9a:6c:9d:63:21:a1:7f:
5c:a3:97:95:2b:41:cd:c8:84:e0:3c:be:d0:56:f5:6d:07:dd:
65:ca:94:2e:bb:f3:cc:74:34:64:0d:d7:cb:ca:e1:ff:89:94:
9c:53:9a:6c:0f:9e:26:56:41:65:4b:55:89:e5:77:91:c5:60:
2e:b8:86:46:96:e7:d3:76:48:15:8e:50:52:2f:8f:da:2f:89:
6e:51:4a:2f:ee:d1:80:ef:08:50:2c:88:dc:47:4c:c0:01:ac:
51:8a:82:10:ef:25:04:65:b5:72:cc:28:1a:8f:dc:07:d1:71:
8b:0f:f3:32:f5:97:e0:08:e1:67:91:27:fe:f8:d6:24:f1:71:
b7:e1:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:05 2024 by rpki-client on console-fra.rpki-client.org