Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j6r_O338R6wgfz43SLfijIIyLd8.roa
File: j6r_O338R6wgfz43SLfijIIyLd8.roa (raw, json)
Hash identifier: xp5GbW+HQ5Q7BGg83CYb4YL3765LL2J397RbVEQ+dsQ=
Subject key identifier: 8F:AA:FF:3B:7D:FC:47:AC:20:7F:3E:37:48:B7:E2:8C:82:32:2D:DF
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9329DE5D2EA0625532CDF7D908885
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j6r_O338R6wgfz43SLfijIIyLd8.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31287
IP address blocks: 77.78.152.0/21 maxlen: 21
77.78.154.0/24 maxlen: 24
77.78.153.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
185.46.163.0/24 maxlen: 24
185.46.160.0/22 maxlen: 22
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.204.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
195.85.215.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
185.200.40.0/22 maxlen: 22
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
46.55.254.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:9d:e5:d2:ea:06:25:53:2c:df:7d:90:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8faaff3b7dfc47ac207f3e3748b7e28c82322ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:54:f0:d2:67:f2:d2:5c:b6:d3:4c:a9:43:
fb:7d:cf:36:65:11:74:bc:96:22:4f:8a:5c:00:8c:
b3:3b:00:54:82:10:45:1c:23:04:5d:20:aa:ce:d5:
cb:4a:5d:7c:77:1f:95:32:7d:dc:70:b7:cd:81:ba:
da:50:9a:0d:6f:d5:ef:70:bb:85:d2:1f:ec:14:06:
bb:96:2a:71:e8:88:49:db:ee:b6:a8:99:47:2f:75:
1f:e2:c0:80:6c:a8:e9:46:8c:36:43:a4:95:39:66:
49:ea:a6:e6:cd:bf:4e:92:f5:d6:b5:61:8a:88:ad:
1b:d6:75:27:50:3d:6d:ba:25:a4:9d:12:6d:4a:ce:
58:3e:46:04:b9:b3:7c:bb:89:46:a5:d4:d3:72:4a:
c8:c3:83:17:ac:a1:18:9d:8f:af:d9:b7:36:46:f3:
eb:db:c4:98:c7:53:f8:fe:62:5b:59:7b:bc:52:b9:
88:8e:15:40:45:29:73:16:3d:2f:40:8d:5b:f4:18:
79:4b:75:db:d4:17:ef:83:63:5b:b7:26:3b:52:5e:
2e:84:24:9a:3c:79:52:29:6a:7d:97:7d:c0:d8:66:
c3:bc:59:70:1b:52:93:c6:59:fc:48:89:66:7c:23:
34:87:9d:ea:d3:04:9f:1f:29:e2:1c:a2:1c:9a:07:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:FF:3B:7D:FC:47:AC:20:7F:3E:37:48:B7:E2:8C:82:32:2D:DF
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j6r_O338R6wgfz43SLfijIIyLd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.10.0/23
85.187.15.0/24
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.204.0/22
85.187.222.0/24
85.187.232.0/24
85.187.248.0/24
151.237.29.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
185.200.40.0/22
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
34:70:6d:dd:ce:8e:00:9b:e9:61:eb:75:01:fe:e7:74:45:0f:
27:2a:f7:84:64:1c:31:03:33:95:2b:92:a0:8d:09:e4:dc:db:
83:50:6d:98:3d:da:d2:08:30:a0:91:c3:88:35:1c:ad:0f:8e:
93:2b:c8:24:d6:e8:2f:85:be:86:c7:f4:8a:09:8b:c6:a6:26:
87:b4:4c:16:81:31:eb:fc:f3:74:2a:1d:90:ba:14:fc:c8:0a:
69:f1:2e:6d:4d:b6:bb:2d:25:4a:12:2f:38:fc:85:8a:1b:3a:
a1:a3:ec:bf:6e:72:01:5f:23:70:68:ab:c3:51:b1:a2:e4:fd:
d2:d8:f2:02:f8:d5:48:dd:48:50:2b:54:77:99:7e:af:42:01:
d1:23:4c:6d:9e:33:e3:ba:8e:ce:56:19:fe:be:6f:5b:29:c5:
59:40:c8:06:c5:bd:4b:fc:44:a7:49:28:45:cb:eb:95:77:9a:
b7:0e:aa:5a:b5:25:c0:d5:a3:11:35:46:dd:18:22:e1:96:b5:
50:f4:51:6d:6e:e1:3c:7e:a6:0b:29:67:70:ec:cd:2e:11:c1:
21:5f:b7:d1:30:6d:2a:d2:b7:fb:b9:de:57:24:ae:d5:8d:ab:
00:d8:ab:3f:62:b7:18:16:f0:1a:e3:10:c0:67:2e:83:41:ce:
23:d5:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:32 2024 by rpki-client on console-ams.rpki-client.org