Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ucVn2MzzJIKXwhmMtkBwDYrbkN4.roa
File: ucVn2MzzJIKXwhmMtkBwDYrbkN4.roa (raw, json)
Hash identifier: avPjMBBRpsE4B+U9YfZfYyCUpg4+XcYb+KB9l4AhNLo=
Subject key identifier: B9:C5:67:D8:CC:F3:24:82:97:C2:19:8C:B6:40:70:0D:8A:DB:90:DE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018731239A12ADC8C213280237416F61C1D3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ucVn2MzzJIKXwhmMtkBwDYrbkN4.roa
Signing time: Thu 30 Mar 2023 06:10:29 +0000
ROA not before: Thu 30 Mar 2023 06:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31208
IP address blocks: 178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.176.230.0/23 maxlen: 23
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
128.204.72.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
2a03:d000:3301::/48 maxlen: 48
2a03:d000:3000::/36 maxlen: 36
2a03:d000:3000::/40 maxlen: 40
2a03:d000:3100::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 03 Aug 2023 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:23:9a:12:ad:c8:c2:13:28:02:37:41:6f:61:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 30 06:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9c567d8ccf3248297c2198cb640700d8adb90de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:5e:77:8d:28:e8:d1:b9:75:70:99:07:43:
0f:28:a9:74:32:30:a8:e6:d6:14:ab:de:8b:11:b3:
bf:18:e3:5e:c3:db:00:f6:10:ac:57:dd:bc:f9:f9:
4f:5e:99:a5:0d:73:c5:52:57:76:42:82:c1:ed:2c:
bf:db:93:ac:80:7e:7f:a6:7d:f2:be:12:42:bc:1d:
71:8a:d9:7e:46:3b:ca:46:c4:d2:ba:bf:39:d8:6a:
74:24:07:af:23:5d:46:a7:d1:92:f5:14:6e:54:78:
13:7c:bb:c9:9a:40:c4:f5:d1:5d:4a:5e:f1:d8:9d:
52:37:74:df:41:d6:64:d3:cb:3c:d0:c0:c4:67:07:
93:38:ec:06:46:8d:13:e8:ce:68:7a:31:7b:3f:0d:
5a:be:44:f7:6e:81:1d:c3:47:78:f2:1f:d5:21:3a:
94:80:fe:a6:08:f3:9a:ca:c7:01:af:bf:14:4b:06:
02:9b:6d:f1:47:a2:0c:ae:0e:be:bf:ef:c7:8f:4a:
02:60:a6:c4:28:8c:bc:e9:d2:02:51:33:b6:f4:d0:
18:4c:0d:74:61:a9:cc:8c:a8:58:28:62:07:ac:db:
c6:ba:4e:29:dc:bc:93:64:0e:23:df:de:d6:e4:0e:
f1:98:60:84:04:1f:9b:88:16:9f:50:2b:b8:1f:48:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:67:D8:CC:F3:24:82:97:C2:19:8C:B6:40:70:0D:8A:DB:90:DE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ucVn2MzzJIKXwhmMtkBwDYrbkN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
IPv6:
2a03:d000:3000::/36
Signature Algorithm: sha256WithRSAEncryption
95:43:1f:0b:b5:ef:b8:c2:1c:32:0b:c7:e3:0a:92:e1:b3:1f:
18:00:ab:2d:d0:4c:a1:83:10:cd:17:0f:f7:9e:b1:bf:50:cb:
62:4e:b9:01:5d:6b:94:9d:dc:74:65:fe:00:02:e2:b8:2c:60:
06:71:6c:b7:64:a1:0d:e8:3d:33:85:01:7c:52:70:6f:d7:e7:
d6:ef:45:dc:75:50:49:36:3d:a5:5c:60:d5:73:15:6d:a6:79:
59:c9:13:57:e1:38:f1:ae:f3:76:7f:0e:90:37:f8:fd:4a:f5:
5f:85:fa:24:e6:b0:e2:c8:1d:e2:02:57:81:71:2a:a5:02:e6:
2f:33:5c:b9:a0:46:4b:3e:a5:28:a0:fb:2c:38:42:b5:b8:93:
ee:f7:e2:51:cf:19:34:aa:bf:70:b8:ec:0f:41:0d:23:c9:4c:
0a:cc:47:14:67:fc:64:f1:39:d8:96:96:67:31:f1:14:2e:b3:
4b:dd:d9:29:bd:40:7a:0c:a8:c1:d6:1f:92:3c:9f:70:dc:91:
01:88:61:00:4e:30:00:84:fe:e7:d5:4e:a5:8e:3b:58:84:30:
4f:6d:5e:26:07:6a:71:91:ba:d5:d1:1f:ef:3a:e1:34:6e:0e:
33:15:cb:37:26:78:9f:ea:3d:d6:00:02:77:49:0f:1f:a7:94:
16:9b:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org