Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/A4O7yEyNWlM7DcMrW2O6EAfTfSY.roa
File: A4O7yEyNWlM7DcMrW2O6EAfTfSY.roa (raw, json)
Hash identifier: AZZNx/YQmCPR2ztWBmKgAYChWu465FnE/JPU9dem4GA=
Subject key identifier: 03:83:BB:C8:4C:8D:5A:53:3B:0D:C3:2B:5B:63:BA:10:07:D3:7D:26
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 018CC2DAD265353C8636CE857675D7733EB7
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/A4O7yEyNWlM7DcMrW2O6EAfTfSY.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16202
IP address blocks: 83.221.72.0/21 maxlen: 21
83.221.80.0/20 maxlen: 20
83.221.80.0/21 maxlen: 21
83.221.88.0/21 maxlen: 21
83.221.64.0/19 maxlen: 19
83.221.64.0/21 maxlen: 21
83.221.64.0/20 maxlen: 20
92.206.160.0/19 maxlen: 19
89.186.128.0/19 maxlen: 19
89.186.128.0/21 maxlen: 21
89.186.128.0/20 maxlen: 20
77.64.224.0/20 maxlen: 20
77.64.240.0/20 maxlen: 20
77.64.252.0/23 maxlen: 23
77.64.254.0/23 maxlen: 23
92.206.128.0/18 maxlen: 18
92.206.190.0/23 maxlen: 23
89.186.136.0/21 maxlen: 21
217.68.160.0/19 maxlen: 19
217.68.160.0/20 maxlen: 20
89.186.144.0/20 maxlen: 20
89.186.144.0/21 maxlen: 21
92.206.192.0/18 maxlen: 18
217.68.176.0/20 maxlen: 20
89.186.152.0/21 maxlen: 21
92.206.224.0/19 maxlen: 19
95.168.128.0/20 maxlen: 20
95.168.128.0/19 maxlen: 19
95.168.144.0/20 maxlen: 20
77.64.160.0/19 maxlen: 19
77.64.192.0/19 maxlen: 19
77.64.192.0/20 maxlen: 20
92.206.64.0/18 maxlen: 18
185.44.148.0/22 maxlen: 22
185.44.150.0/23 maxlen: 23
77.64.208.0/20 maxlen: 20
77.64.128.0/17 maxlen: 17
77.64.128.0/19 maxlen: 19
77.64.128.0/18 maxlen: 18
92.206.0.0/17 maxlen: 17
92.206.0.0/18 maxlen: 18
92.206.0.0/16 maxlen: 16
77.64.146.0/23 maxlen: 23
2a02:2454:8000::/33 maxlen: 33
2a02:2457:100::/40 maxlen: 40
2a00:c1a0::/32 maxlen: 32
2a00:c1a0:c000::/34 maxlen: 34
2a00:c1a0:4000::/34 maxlen: 34
2a00:c1a0:8000::/34 maxlen: 34
2a00:c1a0::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 17 Apr 2024 07:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d2:65:35:3c:86:36:ce:85:76:75:d7:73:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0383bbc84c8d5a533b0dc32b5b63ba1007d37d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:e0:72:b8:b6:50:2c:58:a4:d4:f3:27:32:
4f:26:8e:85:bd:2d:d1:ea:57:74:5c:9f:e0:cc:d2:
2a:80:4f:16:be:5e:83:ce:c0:61:d3:96:cb:df:36:
6b:cf:d9:9a:74:15:d9:f9:ad:6f:55:c6:cb:ef:df:
b1:08:97:cb:96:64:dd:7a:90:d4:00:4c:aa:6a:29:
04:c5:e8:54:cf:ed:ab:79:a3:2d:99:c2:30:a2:07:
02:aa:fd:2e:90:b0:9e:51:26:18:1a:5a:90:6d:70:
e1:34:6a:42:d1:93:1c:de:28:01:b6:44:f0:d1:5a:
d4:2d:3d:ae:88:46:16:99:f0:ba:fb:85:61:b9:de:
b5:b6:6a:35:cc:f0:83:44:77:6f:4e:50:69:a3:16:
ac:91:47:97:6e:84:13:11:e9:02:92:9d:28:01:22:
c6:04:c1:13:bd:d3:4b:2f:00:9f:bc:92:a9:19:c3:
b7:1c:13:db:b2:fe:b6:c7:98:58:ee:b3:c0:33:b4:
84:13:e2:1a:50:8a:7e:7a:3a:ce:e1:7a:3c:3b:16:
dd:ba:a8:64:8d:24:aa:5e:0b:2c:14:fe:f7:05:20:
5f:da:ab:0e:a2:f1:b7:90:63:28:60:c9:c2:b8:46:
7e:52:f7:93:ff:27:57:d6:f5:6b:11:2d:73:c9:07:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:BB:C8:4C:8D:5A:53:3B:0D:C3:2B:5B:63:BA:10:07:D3:7D:26
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/A4O7yEyNWlM7DcMrW2O6EAfTfSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.128.0/17
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
95.168.128.0/19
185.44.148.0/22
217.68.160.0/19
IPv6:
2a00:c1a0::/32
2a02:2454:8000::/33
2a02:2457:100::/40
Signature Algorithm: sha256WithRSAEncryption
9a:a4:33:24:53:bf:51:04:f8:f5:ed:fb:0d:d7:15:67:5f:e6:
92:38:97:b3:61:9f:2f:20:68:96:6e:c0:16:98:2f:8f:97:17:
d6:36:42:44:8c:14:95:3c:05:a0:e4:9a:ad:92:ed:07:36:b8:
6b:b0:b6:ac:8f:81:cd:61:ff:26:61:9e:ba:34:48:08:4a:18:
7d:a4:cb:b3:cc:c0:0f:00:46:a5:f0:4a:cd:54:3a:d5:b6:1d:
ec:c4:e9:54:52:32:f2:39:c1:66:d1:f4:6c:58:4e:ca:2d:7f:
28:77:62:9e:4b:81:b0:ab:7d:5e:19:e3:ca:b1:5c:45:3a:4b:
ae:bb:f3:17:4a:4d:38:de:88:3a:32:5d:72:85:60:db:53:27:
2f:3e:2a:0c:2e:f3:a9:1a:a3:79:12:9e:c0:3b:3b:06:10:2b:
be:3b:30:e9:78:d0:8e:1d:01:1a:f6:82:8f:a3:c7:1e:8c:0c:
64:4e:c8:da:f0:fc:44:7f:0d:e5:08:8d:0b:98:74:d2:d5:4c:
dc:85:31:45:5c:9b:73:55:2e:13:e1:62:c6:26:5c:07:f4:cd:
c1:09:6a:8e:5f:cf:5a:ee:3a:ab:04:63:79:88:9d:b5:2a:97:
f3:25:e1:29:40:b0:00:57:36:f0:6a:5d:73:06:74:ba:e4:20:
44:79:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 10:56:28 2024 by rpki-client on console-fra.rpki-client.org