Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KLCrByaybaDHxQtij9RRD8z7n_8.roa
File: KLCrByaybaDHxQtij9RRD8z7n_8.roa (raw, json)
Hash identifier: nTcYgvzm4pvTZLoKW8NIleDbECA85tbijUAgydBv0RU=
Subject key identifier: 28:B0:AB:07:26:B2:6D:A0:C7:C5:0B:62:8F:D4:51:0F:CC:FB:9F:FF
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01864C3F20A8669DEBA6A0B0D988DEC53049
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KLCrByaybaDHxQtij9RRD8z7n_8.roa
Signing time: Mon 13 Feb 2023 19:27:30 +0000
ROA not before: Mon 13 Feb 2023 19:27:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31287
IP address blocks: 77.78.152.0/21 maxlen: 21
77.78.154.0/24 maxlen: 24
77.78.153.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
185.46.163.0/24 maxlen: 24
185.46.160.0/22 maxlen: 22
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.204.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
195.85.215.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
185.200.40.0/22 maxlen: 22
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.8.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
46.55.254.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:3f:20:a8:66:9d:eb:a6:a0:b0:d9:88:de:c5:30:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 13 19:27:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b0ab0726b26da0c7c50b628fd4510fccfb9fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:0c:25:ff:56:64:9c:0f:f2:04:52:b3:b8:
1e:c2:ff:81:e5:ef:9e:f4:fb:e4:64:e7:70:db:b4:
05:1b:46:89:62:be:eb:d8:47:48:67:0d:5c:07:2b:
4b:df:6e:19:83:ea:df:ef:48:3b:af:51:5b:d0:a4:
72:c6:3b:e9:e6:39:d3:e8:7e:1a:93:a2:17:f5:b2:
74:ec:19:75:31:34:f4:1e:5a:ed:7d:3e:94:27:93:
80:1d:2d:58:36:7b:d2:fc:4d:0f:ca:bb:cc:b2:53:
4d:ba:46:4f:3b:ee:c7:b5:14:de:63:fb:6f:8b:6d:
b5:d1:f5:e0:05:54:38:a4:33:0c:9b:0d:20:5b:6d:
80:a3:04:e0:73:50:5c:2c:36:33:4f:2c:d1:b5:fb:
d9:62:6f:6a:fb:57:43:1a:04:58:e4:58:5b:98:92:
71:11:85:5c:ca:21:63:0c:ad:4c:4b:85:5e:ff:bf:
db:22:9e:bf:29:1d:9d:03:b3:91:a0:b6:1e:0f:91:
b2:54:03:2f:78:79:eb:04:db:14:eb:8a:c9:d1:70:
64:1b:00:da:6d:10:3d:c9:ca:33:cc:78:0a:f0:6e:
91:3f:93:c2:9d:cd:0c:84:7c:6b:7e:a8:d5:47:87:
46:d9:7e:05:21:76:d6:20:5a:1f:b8:28:c8:aa:54:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:AB:07:26:B2:6D:A0:C7:C5:0B:62:8F:D4:51:0F:CC:FB:9F:FF
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KLCrByaybaDHxQtij9RRD8z7n_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.8.0/24
85.187.10.0/23
85.187.15.0/24
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.204.0/22
85.187.222.0/24
85.187.232.0/24
85.187.248.0/24
85.187.250.0/24
151.237.29.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
185.200.40.0/22
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
5a:ca:41:e4:1c:50:8d:12:db:ba:2f:8f:9a:bc:5d:28:22:ff:
11:ee:8a:eb:cc:a5:65:d0:a8:17:46:5f:c2:61:a4:62:0b:02:
29:67:20:0d:92:25:61:13:76:b9:1b:e1:98:c6:ff:e2:4d:ff:
98:f4:f1:8f:59:40:cc:28:fa:24:fe:4f:dd:9b:a4:21:4a:7f:
5d:7c:e4:cd:16:52:d5:e8:3e:82:b0:5f:54:c1:ab:c2:01:91:
a6:04:3b:43:9c:a3:95:00:7d:a6:76:be:0e:65:48:46:5e:b4:
47:25:22:18:49:f9:3c:99:5c:aa:7c:a1:03:41:c8:8a:ee:7f:
08:5b:62:51:0a:2c:ef:14:f9:57:c6:f8:08:c8:b7:d1:51:87:
3f:87:07:55:5f:35:fa:5a:60:b7:c0:40:00:a5:79:7d:0f:9a:
9a:b1:34:5e:e9:e4:d2:af:ae:77:b3:96:a0:c3:81:77:9c:9e:
93:8d:5f:98:28:76:62:6b:24:0e:38:0e:4f:4f:93:88:53:c0:
dc:f5:e7:f6:7d:d7:be:33:6a:d2:fc:9f:13:a5:c0:04:3a:0e:
a7:2b:a1:b4:94:17:36:a7:c2:29:ce:25:09:3d:7f:92:8c:be:
1c:c0:e1:d5:88:ff:30:57:92:00:0b:e9:ed:d7:dd:07:02:4e:
61:ed:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org