Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2yI10r6ta3zMMgO1aaDvD5mY2LY.roa
File: 2yI10r6ta3zMMgO1aaDvD5mY2LY.roa (raw, json)
Hash identifier: aahmRH1cqqHpfOG1ysJMkQS+eHWRaA16klH78B5BD0c=
Subject key identifier: DB:22:35:D2:BE:AD:6B:7C:CC:32:03:B5:69:A0:EF:0F:99:98:D8:B6
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CAB8F833BD08AB6E911C16103DE24EC1B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2yI10r6ta3zMMgO1aaDvD5mY2LY.roa
Signing time: Wed 27 Dec 2023 13:55:58 +0000
ROA not before: Wed 27 Dec 2023 13:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 17
80.233.136.0/24 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/21 maxlen: 21
62.63.136.0/22 maxlen: 22
80.233.168.0/24 maxlen: 24
62.63.144.0/20 maxlen: 20
78.154.128.0/19 maxlen: 19
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 19
194.19.224.0/24 maxlen: 24
194.19.224.0/19 maxlen: 19
80.233.200.0/21 maxlen: 21
62.63.191.0/24 maxlen: 24
62.63.190.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
185.87.204.0/24 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
213.175.64.0/18 maxlen: 18
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 18
213.175.75.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:8f:83:3b:d0:8a:b6:e9:11:c1:61:03:de:24:ec:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 27 13:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db2235d2bead6b7ccc3203b569a0ef0f9998d8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:ae:b0:fb:be:5f:b4:95:a0:38:45:90:79:
36:5a:ea:92:65:ce:34:67:74:26:31:b1:3b:4b:f5:
cd:ef:0b:f4:8e:39:47:8b:87:e4:54:57:59:0b:c5:
9b:0b:16:e8:d2:81:d5:82:5a:70:24:3d:a0:00:8f:
6a:02:1f:90:a2:48:1a:0a:85:61:c5:68:5c:ef:2b:
0f:1b:37:f4:0c:cc:06:36:94:0f:2a:0b:03:07:cf:
a2:eb:b5:ca:ee:c2:d4:1e:8c:e4:0a:85:70:a1:5f:
c7:2f:02:5b:12:cf:f5:81:6e:3d:b2:80:88:21:a0:
96:99:36:3b:7c:49:d3:50:21:ef:23:d6:9d:89:33:
92:28:d3:be:87:0c:f6:0a:dc:5c:bb:52:08:84:d5:
a4:91:05:f7:49:5a:b1:f3:db:89:14:55:f9:d6:9c:
69:20:80:e7:df:12:fb:69:f2:8a:49:a0:05:68:d4:
b1:5a:16:42:f4:19:59:82:ef:3a:0f:db:6c:6b:16:
d1:1e:47:3a:15:77:2f:63:c4:2d:0e:d5:53:44:cf:
07:c5:c3:a1:dc:77:ad:8e:5a:e3:1c:54:2f:ba:f9:
62:f8:c8:50:6d:74:43:e5:af:fc:18:66:5a:6b:43:
6a:cf:fc:03:ef:d3:b2:f9:b9:b7:e0:a6:99:f6:90:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:35:D2:BE:AD:6B:7C:CC:32:03:B5:69:A0:EF:0F:99:98:D8:B6
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2yI10r6ta3zMMgO1aaDvD5mY2LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
a5:b7:c5:fe:13:4f:22:91:46:df:64:1b:d9:21:fd:17:f4:3a:
28:71:aa:75:9a:fa:23:f3:09:f1:0b:69:e7:5d:e0:70:a6:e2:
54:0d:43:32:3d:11:39:c5:e4:f7:1d:68:1b:3a:e9:25:85:f7:
37:43:45:61:16:72:cd:13:90:11:7f:53:70:f8:6d:fa:35:a6:
d0:e4:50:ae:2c:24:3b:71:d0:40:e8:e0:40:98:13:02:da:40:
b8:8d:7b:c5:b7:47:41:63:12:7e:9e:99:d1:c4:71:60:64:09:
db:26:ea:f4:d1:91:48:b8:df:1a:e6:43:81:61:50:ab:b1:cb:
87:2c:04:24:74:ef:0c:64:a3:0e:86:a4:bb:66:6f:85:5c:8a:
d1:c3:29:52:33:9f:e1:ad:d2:e6:a7:05:2a:91:e4:76:f4:5e:
5a:3b:49:78:53:ff:5d:db:55:3a:69:19:48:51:b5:79:ec:1e:
94:34:2a:2a:e1:67:d0:21:c9:61:ee:8f:a6:a5:bc:7f:16:46:
ee:db:cd:77:cb:6a:da:6c:55:94:72:d6:63:a0:30:7a:59:96:
37:da:86:0c:ff:82:f2:8e:39:61:13:14:59:e9:23:18:f0:bc:
a6:5e:db:69:a6:9c:00:13:2d:5d:e1:41:cd:69:a3:b5:8a:fe:
a3:9a:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 16:03:52 2023 by rpki-client on console-fra.rpki-client.org