Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/aboFj1cTt488_1xKE5gFS5L9NWo.roa
File: aboFj1cTt488_1xKE5gFS5L9NWo.roa (raw, json)
Hash identifier: NifMs60PyD7tDRX8hcvy0VGC3LInzWFybJWGk6RAYw0=
Subject key identifier: 69:BA:05:8F:57:13:B7:8F:3C:FF:5C:4A:13:98:05:4B:92:FD:35:6A
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 018572C398C6146888EFFCB17F61AF5D3EDE
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/aboFj1cTt488_1xKE5gFS5L9NWo.roa
Signing time: Mon 02 Jan 2023 13:54:59 +0000
ROA not before: Mon 02 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 213.127.128.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.160.252.0/22 maxlen: 22
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.46.128.0/17 maxlen: 17
62.195.0.0/16 maxlen: 16
212.187.64.0/18 maxlen: 18
62.194.0.0/16 maxlen: 16
62.194.0.0/15 maxlen: 15
213.93.0.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
212.187.0.0/18 maxlen: 18
212.187.0.0/17 maxlen: 17
80.113.0.0/17 maxlen: 17
80.113.0.0/16 maxlen: 16
213.126.128.0/18 maxlen: 18
213.126.128.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
213.127.0.0/17 maxlen: 17
213.127.0.0/16 maxlen: 16
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.126.192.0/18 maxlen: 18
77.248.0.0/15 maxlen: 15
77.248.0.0/14 maxlen: 14
213.46.0.0/17 maxlen: 17
213.46.0.0/16 maxlen: 16
24.132.128.0/17 maxlen: 17
217.105.240.0/20 maxlen: 20
89.99.0.0/16 maxlen: 16
217.105.224.0/20 maxlen: 20
217.105.224.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
217.104.192.0/18 maxlen: 18
89.98.0.0/16 maxlen: 16
89.98.0.0/15 maxlen: 15
213.124.160.0/20 maxlen: 20
213.124.160.0/19 maxlen: 19
213.124.176.0/20 maxlen: 20
217.104.128.0/18 maxlen: 18
217.104.128.0/17 maxlen: 17
213.124.192.0/19 maxlen: 19
213.124.192.0/18 maxlen: 18
24.132.0.0/17 maxlen: 17
24.132.0.0/16 maxlen: 16
217.105.32.0/19 maxlen: 19
178.85.0.0/16 maxlen: 16
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
31.151.0.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
95.97.0.0/16 maxlen: 16
178.84.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
31.151.128.0/17 maxlen: 17
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
217.63.160.0/19 maxlen: 19
212.178.48.0/20 maxlen: 20
185.137.202.0/23 maxlen: 23
185.137.200.0/23 maxlen: 23
185.137.200.0/22 maxlen: 22
80.57.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.0.0/16 maxlen: 16
95.96.0.0/16 maxlen: 16
95.96.0.0/15 maxlen: 15
62.163.128.0/17 maxlen: 17
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
217.103.128.0/17 maxlen: 17
212.83.80.0/20 maxlen: 20
80.56.0.0/16 maxlen: 16
80.56.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
217.102.64.0/18 maxlen: 18
217.102.0.0/18 maxlen: 18
217.102.0.0/17 maxlen: 17
46.129.0.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.128.0/17 maxlen: 17
62.163.0.0/17 maxlen: 17
62.163.0.0/16 maxlen: 16
81.175.96.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.0.0/19 maxlen: 19
62.108.16.0/20 maxlen: 20
92.108.0.0/15 maxlen: 15
92.108.0.0/14 maxlen: 14
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
81.175.64.0/19 maxlen: 19
81.175.64.0/18 maxlen: 18
77.250.0.0/15 maxlen: 15
2a02:a200::/28 maxlen: 28
2a02:a200::/27 maxlen: 27
2a02:a210::/28 maxlen: 28
Validation: Failed, certificate revoked on Wed 22 Mar 2023 12:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:98:c6:14:68:88:ef:fc:b1:7f:61:af:5d:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jan 2 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ba058f5713b78f3cff5c4a1398054b92fd356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:14:16:fd:a2:91:22:12:74:7f:4a:3e:21:
e5:b9:33:15:85:ca:6e:24:c7:41:4c:46:de:95:a5:
a9:64:c2:1a:0b:67:a7:42:6d:1a:5a:70:dc:3d:24:
36:2a:4e:63:38:7c:b1:3c:93:cb:da:04:25:a7:5a:
8e:9e:d0:6a:60:12:f9:0d:d7:df:0c:9e:2d:c2:10:
1a:8d:98:38:0a:cb:0b:22:17:ae:89:2e:cb:16:34:
4a:0e:3f:74:51:ad:10:9e:5f:ea:94:9a:7f:60:93:
47:bb:89:e9:79:a4:4a:33:cb:82:92:eb:2b:58:41:
16:a2:71:0e:ba:3d:5a:d4:44:18:71:01:af:c4:d0:
4f:c5:a4:0a:7f:e0:44:ac:24:58:81:14:b4:e0:1f:
20:32:74:d1:a3:13:d0:d0:e1:29:46:7c:e9:a8:02:
c8:54:2f:df:21:da:8c:8e:08:32:14:3d:e2:15:63:
36:37:37:51:70:6b:8f:3c:bc:3b:c1:e6:2e:6c:58:
15:29:b3:de:3b:01:43:02:b9:0d:04:4c:bb:6f:6c:
cb:bf:f5:91:98:0d:04:d1:07:9e:ca:e4:ae:e0:8c:
e2:4b:fa:59:26:1f:9e:bd:a1:c6:d2:1c:61:44:b8:
18:ed:91:f7:42:10:39:53:ee:9d:45:d3:2f:17:b4:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:05:8F:57:13:B7:8F:3C:FF:5C:4A:13:98:05:4B:92:FD:35:6A
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/aboFj1cTt488_1xKE5gFS5L9NWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.113.0.0/16
81.175.64.0/18
89.98.0.0/15
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.137.200.0/22
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
IPv6:
2a02:a200::/27
Signature Algorithm: sha256WithRSAEncryption
6f:52:14:bf:db:eb:e3:07:d1:29:26:ac:80:5b:67:05:93:37:
62:a6:68:ba:c8:d8:f5:51:45:ca:0b:e4:8b:37:56:cf:33:f1:
4e:d8:01:ae:7f:a9:65:1a:6b:b9:99:c4:3e:1d:b0:2b:7d:6c:
7a:87:be:ab:80:b3:a3:2f:ff:01:27:90:15:50:41:b2:21:df:
1f:64:a0:33:00:78:8c:d1:cd:56:76:f1:90:09:af:1d:71:6e:
53:b7:9a:1c:2f:ee:d1:ba:87:b4:4d:4c:b0:cf:a0:7e:74:7d:
74:99:de:68:34:93:4e:11:91:8c:1a:c9:31:17:28:d2:48:8d:
60:48:56:7d:0d:8d:d2:b2:2f:9e:8a:6d:81:7d:de:da:8e:fc:
b1:ba:3f:6d:fd:3c:58:b9:ff:ea:b3:56:43:6f:2e:ff:bc:16:
48:70:1f:8e:96:56:d0:20:8d:f3:4f:81:8b:2f:05:b4:58:d0:
c4:e0:ab:4a:fe:6b:0b:95:a4:09:ec:0d:d0:92:d6:22:53:e4:
64:c0:04:4b:65:30:3b:54:bf:df:db:03:6b:df:98:c6:78:aa:
6e:e6:c5:29:74:d8:6a:32:03:89:0d:1d:a1:60:47:bc:50:c6:
d6:50:c7:28:1a:3d:82:96:92:09:ea:20:10:e0:bc:0c:0e:51:
a1:8a:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org