Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0013L9OsIsZLLAmXOEIqhZ0f0oA.roa
File: 0013L9OsIsZLLAmXOEIqhZ0f0oA.roa (raw, json)
Hash identifier: TNH80F/A1OvPiEJIxCIAz6E+Zg4v2KFSbz/F1aqvswI=
Subject key identifier: D3:4D:77:2F:D3:AC:22:C6:4B:2C:09:97:38:42:2A:85:9D:1F:D2:80
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 018570396CEBCB32799E377B5C75D39085D9
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0013L9OsIsZLLAmXOEIqhZ0f0oA.roa
Signing time: Mon 02 Jan 2023 02:04:49 +0000
ROA not before: Mon 02 Jan 2023 02:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200000
IP address blocks: 185.233.120.0/22 maxlen: 22
185.124.8.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
37.139.64.0/21 maxlen: 21
185.39.224.0/22 maxlen: 22
185.233.152.0/22 maxlen: 23
185.149.40.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
185.235.168.0/22 maxlen: 22
109.205.96.0/21 maxlen: 21
45.154.218.0/24 maxlen: 24
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.65.244.0/22 maxlen: 22
185.226.24.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.25.116.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.68.16.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.130.120.0/22 maxlen: 22
185.209.168.0/22 maxlen: 22
185.69.152.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
185.234.176.0/22 maxlen: 22
2a0c:c80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0c:684::/30 maxlen: 30
2a0c:d80::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a04:8000::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a0c:780::/29 maxlen: 29
2a00:7a60::/32 maxlen: 32
2a06:6440::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 16 Jan 2023 16:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:6c:eb:cb:32:79:9e:37:7b:5c:75:d3:90:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jan 2 02:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34d772fd3ac22c64b2c099738422a859d1fd280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:21:ca:1b:2a:6c:10:73:c2:67:fc:0c:70:
3c:b6:b8:33:68:0f:c8:64:04:49:cb:29:1e:bd:96:
c8:fd:f5:dd:13:bb:0d:49:25:43:fe:70:78:95:24:
21:60:18:74:08:c5:86:fd:17:00:cd:2b:18:fd:1a:
f1:b0:63:0b:f2:fa:5e:17:23:1f:b9:42:28:2c:de:
02:0f:e7:4b:4b:74:67:d8:67:ed:91:e7:c9:ac:11:
57:1f:46:a5:a2:62:e4:fb:e4:e4:73:8f:82:df:8c:
63:8f:af:86:bc:12:77:64:8f:fa:48:b5:c3:2a:74:
ce:d9:12:9a:3c:21:75:99:73:72:31:d4:dc:13:78:
dc:f6:33:dd:74:54:87:79:45:67:e2:90:70:88:5c:
99:76:15:03:66:1e:fb:13:4e:3f:c7:56:ff:59:53:
7d:d2:f4:17:cc:58:44:9d:e6:56:21:f1:8b:2d:4e:
16:e5:c5:11:da:54:9c:8a:69:db:eb:72:44:88:10:
7d:92:6f:21:b3:f7:6d:86:27:e2:bd:d0:f6:ec:6e:
53:3a:5e:b2:e3:f6:5a:52:5a:21:17:bf:e8:59:e5:
0d:76:cd:b3:09:f6:4e:d8:80:69:56:43:cb:e5:f5:
4b:f1:5c:6f:3c:53:c3:6f:ad:db:78:d5:8b:e4:d1:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:77:2F:D3:AC:22:C6:4B:2C:09:97:38:42:2A:85:9D:1F:D2:80
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0013L9OsIsZLLAmXOEIqhZ0f0oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.64.0/21
45.154.218.0/24
109.205.96.0/21
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.130.120.0/22
185.149.40.0/22
185.209.168.0/22
185.225.212.0/22
185.226.24.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
02:03:a5:70:95:91:d7:29:c2:8f:d6:94:fb:2f:74:3f:05:10:
98:69:aa:b6:dc:4c:e8:b0:61:49:57:eb:b7:64:25:50:fc:64:
53:4a:35:89:ae:29:b5:07:cd:53:ec:64:4a:a7:63:27:3b:9e:
b7:a8:10:e7:32:3a:3b:4a:86:d7:12:65:78:ea:e3:72:38:68:
92:ef:cc:5d:54:45:d6:50:7a:40:37:bc:8a:28:ce:99:10:2a:
ef:eb:66:8f:0c:28:3f:82:e2:50:e1:3d:4f:9a:da:98:39:d0:
a3:43:1e:71:fb:9e:db:0f:dd:b1:c3:9e:d5:02:64:99:73:08:
52:90:75:2d:74:99:ab:bf:ff:c3:83:58:99:ff:f9:ea:35:86:
2b:14:a4:11:84:96:17:e1:fe:28:1f:fc:2c:91:a2:a3:0f:12:
65:18:b9:62:71:85:df:e9:1d:0e:f6:34:94:f0:7a:3d:34:a5:
99:21:2e:7b:4f:4b:eb:3e:17:aa:53:c9:fb:97:48:e3:70:a1:
fe:29:e6:19:ee:ab:4c:b4:2d:eb:b0:d2:52:af:fe:c3:e5:3c:
5c:83:f8:f5:8e:3c:26:01:a5:92:15:82:0e:46:56:30:f7:99:
5a:7c:16:35:13:65:6d:d2:37:7f:f1:34:35:f3:4b:13:93:0e:
f0:d8:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org