Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ePaOaBvBRo-6dbCQv03JgvHn-30.roa
File: ePaOaBvBRo-6dbCQv03JgvHn-30.roa (raw, json)
Hash identifier: +zvw7U5lze3GcefGrCHHg7NByONojsERH69SfJJLYz8=
Subject key identifier: 78:F6:8E:68:1B:C1:46:8F:BA:75:B0:90:BF:4D:C9:82:F1:E7:FB:7D
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D2419AEE36BFE9445A8F65C984B434
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ePaOaBvBRo-6dbCQv03JgvHn-30.roa
Signing time: Thu 28 Dec 2023 14:26:58 +0000
ROA not before: Thu 28 Dec 2023 14:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 24
80.233.136.0/24 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/21 maxlen: 21
62.63.136.0/22 maxlen: 22
80.233.168.0/24 maxlen: 24
62.63.144.0/20 maxlen: 20
78.154.128.0/19 maxlen: 24
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 19
194.19.224.0/19 maxlen: 24
194.19.224.0/24 maxlen: 24
80.233.200.0/21 maxlen: 24
62.63.191.0/24 maxlen: 24
62.63.190.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
185.87.204.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 18
213.175.75.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:41:9a:ee:36:bf:e9:44:5a:8f:65:c9:84:b4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f68e681bc1468fba75b090bf4dc982f1e7fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:32:a0:17:7d:2c:5e:74:c9:ce:9d:88:3d:
0f:95:0e:ed:36:97:33:59:7d:1c:a0:ad:9c:43:3d:
a8:2b:c6:5e:56:5b:45:00:ae:b8:97:56:11:72:ba:
cd:77:0b:cf:2b:33:17:a4:f4:10:3f:d7:e7:74:f8:
6c:6f:23:ea:d2:9c:5d:14:25:ab:02:9a:ef:80:cb:
c8:5b:39:96:68:ec:6d:e9:0b:86:1c:a5:79:24:ac:
be:72:4f:d8:4a:ce:92:85:1f:4d:a0:3e:db:73:46:
ca:a5:ff:61:62:58:08:fc:30:6e:be:ca:e2:9b:01:
d0:3b:a0:62:55:b9:50:ee:9a:aa:45:b5:f9:33:00:
ba:41:4e:9f:f2:8e:8b:b8:37:49:ee:fa:4e:a5:19:
99:2a:e5:68:2c:ff:37:18:62:92:77:ae:27:3e:17:
cf:bb:a7:59:eb:e1:35:85:d6:f6:fc:23:72:9e:90:
be:a1:7d:16:6f:fc:9d:83:fa:cd:2e:ed:1c:70:d6:
1f:4f:0d:f4:6f:0b:05:eb:73:7c:ae:c4:2c:50:20:
f9:a5:c2:72:91:40:47:fc:9d:60:e3:b6:9d:1d:94:
4f:c2:49:c4:76:23:10:4a:66:30:1f:74:aa:e2:18:
c5:b8:f1:ca:79:a4:08:d5:21:15:ca:4f:16:6d:1c:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:8E:68:1B:C1:46:8F:BA:75:B0:90:BF:4D:C9:82:F1:E7:FB:7D
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ePaOaBvBRo-6dbCQv03JgvHn-30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
79:25:a1:ed:6a:f8:e5:43:2b:50:80:63:c5:3b:cb:d4:bd:11:
a7:0e:d6:ac:71:7d:c2:e1:77:d1:e4:2e:0c:94:4e:09:5c:b4:
d7:76:29:cc:74:3e:6c:5e:b3:85:3d:04:6e:de:de:f4:cc:e5:
76:01:0e:29:0d:87:2f:3a:25:f7:a2:b3:8d:00:e5:75:ab:c9:
cb:21:07:82:6d:97:14:95:60:00:90:7c:6d:f2:f7:bb:90:db:
86:59:8f:39:69:aa:38:d2:c2:fa:60:be:32:1a:fe:14:61:67:
6f:e9:7e:28:07:0c:57:f8:81:80:b8:eb:74:25:0d:80:b4:18:
d7:04:a1:e0:e5:f2:92:ae:9d:5d:4a:9a:d4:be:c6:ea:4c:d7:
a5:89:31:83:88:e4:a2:3f:7a:a3:7c:f7:f8:81:5a:6e:2e:d4:
be:62:a3:db:8c:29:51:d1:fb:a6:4c:53:e7:cd:07:7b:2f:7c:
31:a2:8f:97:3d:ad:c0:ec:a3:c8:82:c8:52:2a:c5:8a:8b:31:
45:19:55:87:0a:5c:95:3f:a5:e3:b2:97:b0:f5:8b:0b:80:56:
2a:43:a2:33:00:02:7b:ef:46:af:f8:74:ff:9c:2f:53:4b:ff:
9b:fd:e2:b8:29:47:9d:43:84:9f:72:9f:c7:a5:46:13:b3:49:
eb:5b:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:38:30 2023 by rpki-client on console-fra.rpki-client.org