Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E6qwTdbpiM3kNiH5ySHTZ13tTnQ.roa
File: E6qwTdbpiM3kNiH5ySHTZ13tTnQ.roa (raw, json)
Hash identifier: jmw5H5p+2sNcmtTqHuv+f4Ovur7oH+6eLHquqDbQzOY=
Subject key identifier: 13:AA:B0:4D:D6:E9:88:CD:E4:36:21:F9:C9:21:D3:67:5D:ED:4E:74
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0189BA9F211F5FCE3BDF31DEDA20BD74EA4D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E6qwTdbpiM3kNiH5ySHTZ13tTnQ.roa
Signing time: Thu 03 Aug 2023 08:58:58 +0000
ROA not before: Thu 03 Aug 2023 08:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31208
IP address blocks: 178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.176.230.0/23 maxlen: 23
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
128.204.72.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.66.0/23 maxlen: 23
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
2a03:d000:3301::/48 maxlen: 48
2a03:d000:3000::/36 maxlen: 36
2a03:d000:3000::/40 maxlen: 40
2a03:d000:3100::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 28 Sep 2023 12:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:9f:21:1f:5f:ce:3b:df:31:de:da:20:bd:74:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 3 08:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13aab04dd6e988cde43621f9c921d3675ded4e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:79:2f:83:d4:3b:07:9f:54:eb:ec:5b:de:
54:ed:ce:a1:ef:c5:3d:94:ed:46:4d:37:f4:83:69:
91:67:c9:07:c7:4b:15:4f:3a:7f:ac:79:42:0a:d3:
2e:77:3a:77:ba:6d:da:dc:5d:50:f9:24:dc:60:b7:
6b:56:62:b8:37:01:92:26:da:cc:10:10:10:08:5e:
1b:4f:37:a5:72:bf:af:0e:2b:c3:34:a6:70:1e:b0:
44:cd:86:a2:30:9f:c8:c8:57:3f:d1:5a:9a:50:7b:
27:bb:92:e6:8b:cc:4c:7a:03:49:5e:03:3b:cc:6f:
33:31:89:3c:1d:2d:35:46:a8:66:ec:0f:db:32:45:
30:23:d2:3a:5d:2b:e1:9b:07:61:dc:4e:f9:e6:f5:
b1:36:0c:29:83:5c:1b:fe:04:89:4f:73:b8:f7:0f:
b4:c8:ca:0f:62:6d:36:90:b1:39:94:6f:a9:95:e9:
d1:13:ae:c4:2c:c5:7f:5f:e0:38:55:72:c0:17:89:
58:db:da:96:16:ad:87:8b:b6:c1:1f:d0:50:3c:dd:
73:23:84:b7:d7:01:31:b0:44:f3:43:60:7d:1b:e3:
91:43:5a:7d:f3:aa:e4:5a:d7:09:5a:36:7c:a2:32:
1e:c7:88:83:c1:02:73:bf:13:a1:9e:4d:d5:2e:70:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:B0:4D:D6:E9:88:CD:E4:36:21:F9:C9:21:D3:67:5D:ED:4E:74
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E6qwTdbpiM3kNiH5ySHTZ13tTnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.66.0/23
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
IPv6:
2a03:d000:3000::/36
Signature Algorithm: sha256WithRSAEncryption
06:78:99:97:59:2e:b6:af:5b:85:7e:5d:4c:dc:86:28:cc:e9:
5c:f9:43:d2:96:88:14:b2:77:6c:10:1d:87:29:0e:eb:30:69:
f4:22:50:a5:c5:05:c8:a8:63:11:6d:5c:f1:34:d8:88:a0:50:
41:6b:cb:c6:f6:c5:cf:f4:a6:14:54:a7:29:b6:94:ba:58:ac:
23:e6:77:e2:a4:3a:5a:f3:70:2d:64:88:16:1c:3c:91:45:a1:
e7:e7:8e:54:d0:db:5e:0c:83:64:3f:20:f4:4b:c8:70:85:6d:
aa:ae:e7:0d:61:27:ea:30:2f:8c:14:c0:09:d5:31:50:f9:5b:
42:7c:dd:ce:c6:f3:44:62:c2:5a:4a:e1:a8:a1:58:0e:ae:97:
47:7d:bb:d0:d1:ba:1b:9b:76:bb:80:bb:28:62:58:b7:5b:d1:
5b:39:36:15:8a:6e:35:b5:8f:8e:29:57:a8:ea:19:97:d9:e2:
38:1e:30:a1:fd:8c:31:68:50:f2:75:0d:e8:1d:b9:10:ed:86:
f7:3b:a1:25:9c:e0:f0:ed:5f:8f:9f:37:9e:62:68:62:32:39:
2d:84:a8:33:b8:5f:69:82:6f:e2:90:e3:f7:56:15:fb:c8:d4:
ba:fe:6f:8b:d1:17:74:14:68:ad:5f:84:84:d3:97:4c:cb:a9:
67:4d:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org