Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/weERORPKl-22OawKEzzV9XGGVeE.roa
File: weERORPKl-22OawKEzzV9XGGVeE.roa (raw, json)
Hash identifier: LFpFU+fg/HYFA6K3RIGxl99mM5qBSgXH3AERyBYy81U=
Subject key identifier: C1:E1:11:39:13:CA:97:ED:B6:39:AC:0A:13:3C:D5:F5:71:86:55:E1
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D9D033823C72434F94EC3B81F2A8C9
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/weERORPKl-22OawKEzzV9XGGVeE.roa
Signing time: Thu 28 Dec 2023 14:35:13 +0000
ROA not before: Thu 28 Dec 2023 14:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 24
80.233.136.0/24 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/21 maxlen: 24
62.63.136.0/22 maxlen: 24
80.233.168.0/24 maxlen: 24
62.63.144.0/20 maxlen: 24
78.154.128.0/19 maxlen: 24
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 24
194.19.224.0/19 maxlen: 24
194.19.224.0/24 maxlen: 24
80.233.200.0/21 maxlen: 24
62.63.191.0/24 maxlen: 24
62.63.190.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
185.87.204.0/24 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 24
213.175.75.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d9:d0:33:82:3c:72:43:4f:94:ec:3b:81:f2:a8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e1113913ca97edb639ac0a133cd5f5718655e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:c2:90:e4:3e:2f:2f:a8:57:bb:10:4d:bb:
47:5b:34:88:52:c3:9d:40:51:8d:39:66:b1:d7:ef:
af:50:58:c9:ce:1a:69:c5:a7:3b:ea:b4:91:e0:22:
59:c4:36:0c:ac:dc:bf:23:f8:3e:54:c9:52:48:a1:
1c:ee:6c:f7:ea:d9:59:b0:7c:77:9a:82:d0:ca:7e:
95:53:b6:35:76:e1:f4:a0:02:1f:6f:92:d7:c5:cf:
99:91:ad:b2:c1:9b:d0:d5:37:d7:29:e7:8e:94:84:
01:3f:80:0f:e5:30:5d:c1:b7:54:8a:25:38:7b:a1:
08:b8:98:2e:be:f8:68:71:97:1d:15:09:46:03:ff:
e6:04:bf:04:94:cf:bf:17:57:e5:41:8c:92:f6:dd:
17:1f:df:ef:fe:eb:7e:71:ea:1b:30:a7:b2:be:97:
52:0e:ef:7a:9d:b5:c4:26:1e:97:8e:a4:13:c0:ca:
15:12:e5:7d:2d:ab:fc:44:06:3f:b2:9b:5c:7f:0f:
e7:10:d2:13:72:ac:9a:0e:0c:de:ba:f2:44:d8:42:
f1:76:2b:1e:d2:03:7f:e4:34:60:13:87:07:39:3c:
41:36:84:d5:1b:20:32:61:5a:e8:1e:6b:a7:ea:41:
3c:f4:a5:68:ac:e1:5a:f7:88:5b:77:88:b2:83:35:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:11:39:13:CA:97:ED:B6:39:AC:0A:13:3C:D5:F5:71:86:55:E1
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/weERORPKl-22OawKEzzV9XGGVeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
35:a7:1f:96:cb:bf:65:e8:86:83:fd:b5:33:66:14:eb:aa:d0:
cc:bf:7e:7b:ed:83:0f:a9:27:61:6a:56:08:5e:ab:f0:c5:3a:
89:e3:1e:ac:14:57:c9:38:f2:f8:05:a9:e0:6d:4a:3d:6c:3c:
16:c7:c6:c4:b3:47:ce:cb:db:d0:08:64:c8:a7:7c:13:bf:85:
29:1e:eb:0a:2d:5f:c0:5e:28:4a:66:5e:ab:f3:c7:5f:5f:1d:
ad:a8:33:cf:ff:94:25:e5:4d:94:b4:90:99:c9:d4:db:bf:2c:
0f:64:76:46:90:7c:21:ae:ce:e4:50:1c:9c:4d:52:f8:6b:24:
19:80:50:f8:36:b8:45:60:c9:7a:20:18:66:49:7b:1c:0d:74:
54:61:bc:d6:53:47:92:db:73:95:4f:56:c5:3c:8b:f6:d1:8a:
f1:bc:a6:46:54:f7:56:43:d7:e6:94:64:e1:c6:fd:56:9b:20:
ad:c8:c2:56:63:89:e4:cc:e8:14:6b:23:74:03:17:3a:44:4b:
bd:73:36:e8:ad:ba:7d:28:a5:ad:13:3a:19:64:80:53:a5:82:
bf:65:d6:fd:38:b0:de:bf:dd:f3:e8:da:08:12:b1:89:52:28:
5d:bf:e5:96:b0:31:4c:5c:a0:e4:be:06:75:ff:5e:4b:ba:71:
75:1a:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:12 2024 by rpki-client on console-ams.rpki-client.org