Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/LDqKyqkKAoRE4EtCq6tJTkV9jC0.roa
File: LDqKyqkKAoRE4EtCq6tJTkV9jC0.roa (raw, json)
Hash identifier: cUM4OlAdde07CLECW0r4OC/bUfTqGYcHT7cRGddsaPo=
Subject key identifier: 2C:3A:8A:CA:A9:0A:02:84:44:E0:4B:42:AB:AB:49:4E:45:7D:8C:2D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D5956882B11499387181010520352C075
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/LDqKyqkKAoRE4EtCq6tJTkV9jC0.roa
Signing time: Tue 30 Jan 2024 07:47:39 +0000
ROA not before: Tue 30 Jan 2024 07:47:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.124.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:56:88:2b:11:49:93:87:18:10:10:52:03:52:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 30 07:47:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3a8acaa90a028444e04b42abab494e457d8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:2a:5c:da:ed:42:18:06:59:d6:6f:1e:85:
63:b1:fd:67:0a:a6:07:96:84:84:36:22:68:4c:0d:
67:56:85:19:ac:d4:9b:5b:7d:58:07:af:5d:2a:8a:
51:63:ba:0b:96:f0:c6:63:17:a0:9a:21:34:a0:93:
fd:d3:2a:c8:9b:fa:5c:81:6e:4a:69:d2:1d:69:d0:
4b:38:a6:4d:7f:bc:15:b3:67:38:24:1d:c0:4d:68:
ef:70:f6:1d:92:42:85:96:77:42:cb:60:65:98:75:
2a:da:a7:4b:58:bd:7e:86:6b:b9:12:ca:b1:97:77:
4b:cd:a8:fe:41:d3:b4:cd:2a:d7:a8:8d:98:92:ed:
14:46:a0:d6:da:7a:8a:f7:a6:88:74:53:b9:ac:4e:
c7:0a:98:c1:97:47:24:24:cd:b8:0a:2d:77:44:ad:
e9:44:20:f9:7f:1e:f5:49:a5:59:95:e8:2d:55:39:
3d:e2:f1:4c:cf:30:dd:20:99:6e:c3:41:62:3f:24:
76:d4:11:2f:60:20:78:28:7a:7b:09:d0:37:23:e4:
a1:20:b4:94:fd:81:72:5d:52:7c:6e:c2:f7:49:3d:
d4:2e:ff:63:6f:e5:41:d3:c5:b5:1f:ea:1b:2b:5e:
ba:1c:a7:21:8f:ed:e7:e8:49:13:aa:83:c1:6f:ec:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:8A:CA:A9:0A:02:84:44:E0:4B:42:AB:AB:49:4E:45:7D:8C:2D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/LDqKyqkKAoRE4EtCq6tJTkV9jC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0-2.138.255.255
79.144.0.0/14
80.24.0.0/15
80.30.0.0-80.37.255.255
81.32.0.0/16
81.34.0.0-81.43.255.255
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
88.30.0.0/16
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.141.0/24
195.76.164.0/24
195.77.57.0/24
195.235.95.0/24
195.235.188.0/24
195.235.225.0/24
212.170.156.0/24
212.170.159.0/24
213.99.44.0/24
213.99.59.0/24
217.124.182.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8c:50:fe:cc:6b:1c:bb:46:53:ce:3c:0e:82:19:f3:07:a2:
73:e9:cd:9a:fe:72:22:b1:1e:2a:af:11:7e:8b:87:a8:26:b1:
0f:27:42:f0:bd:8b:fa:a4:c0:73:96:30:d1:59:45:61:e0:48:
cd:36:e0:95:cb:ce:bb:4d:09:14:b4:05:f7:d6:b4:7f:2e:6a:
c6:0b:93:8e:1d:bd:9d:d4:0b:97:86:3c:f2:fe:8d:c0:6f:47:
96:97:95:79:92:30:0c:23:7b:5b:96:6a:e8:32:46:25:01:f7:
65:6f:c4:50:21:d1:ff:d3:3f:bf:43:c7:3b:44:b7:db:74:6e:
ef:8f:af:62:24:31:8a:ef:87:6d:ea:b3:9a:78:4c:03:d0:3d:
b7:99:62:eb:13:c9:ed:d8:ca:9c:a8:8d:5c:ea:f6:8e:59:bb:
ed:4c:16:80:0b:7f:06:28:8c:aa:c5:69:79:66:6f:03:3e:99:
16:5e:23:c4:c8:46:f1:6a:00:be:77:68:4c:a0:77:e3:11:49:
63:51:91:f2:08:92:ee:3e:45:8a:95:6c:c4:f8:c9:5a:03:b3:
4f:e8:0b:f1:1f:1f:0a:c4:17:c4:6f:1f:87:95:82:5a:3b:9e:
f9:fe:58:20:84:35:69:56:8b:94:e6:6b:69:4a:2d:be:67:08:
96:65:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:45 2024 by rpki-client on console-fra.rpki-client.org