Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/_1oAM2PivCcx9un-FAT4y5LXOWQ.roa
File: _1oAM2PivCcx9un-FAT4y5LXOWQ.roa (raw, json)
Hash identifier: pqTSjdLxLZJQdi47gDD952rdSJvN++s9p5XqgIoOP8c=
Subject key identifier: FF:5A:00:33:63:E2:BC:27:31:F6:E9:FE:14:04:F8:CB:92:D7:39:64
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0186C50262C353F14F55BD6F86EAF7CAE5FA
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/_1oAM2PivCcx9un-FAT4y5LXOWQ.roa
Signing time: Thu 09 Mar 2023 06:15:13 +0000
ROA not before: Thu 09 Mar 2023 06:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41176
IP address blocks: 188.117.64.0/18 maxlen: 18
188.117.76.0/24 maxlen: 24
188.117.76.0/22 maxlen: 22
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.72.0/22 maxlen: 22
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.80.0/23 maxlen: 23
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.104.0/24 maxlen: 24
188.117.100.0/23 maxlen: 23
188.117.107.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.70.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
89.108.0.0/18 maxlen: 18
89.108.29.0/24 maxlen: 24
89.108.28.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.26.0/24 maxlen: 24
89.108.26.0/23 maxlen: 23
89.108.27.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
185.20.152.0/24 maxlen: 24
185.20.152.0/22 maxlen: 22
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.56.0/22 maxlen: 22
213.236.56.0/21 maxlen: 21
213.236.53.0/24 maxlen: 24
213.236.59.0/24 maxlen: 24
213.236.60.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
2a02:d70::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:02:62:c3:53:f1:4f:55:bd:6f:86:ea:f7:ca:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Mar 9 06:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff5a003363e2bc2731f6e9fe1404f8cb92d73964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:b9:1b:d1:1b:d1:64:27:23:dc:3e:a2:7b:
4c:70:50:1b:61:e7:e8:6c:eb:16:ed:72:5c:77:f4:
7a:85:62:17:72:94:74:e0:d2:8c:40:b4:cf:15:ee:
85:53:68:c9:3e:bb:80:3e:c4:a5:4f:22:3d:13:b0:
62:7a:5d:4d:0f:d5:47:c8:fe:7c:84:56:33:98:9e:
e0:90:4b:37:b5:f5:db:25:4e:b4:88:c5:88:f8:20:
17:cb:83:09:58:e7:23:e0:c9:b1:9e:31:f9:2d:eb:
8c:66:4c:ef:78:cc:3d:c3:f1:f7:d2:b8:9a:e3:11:
3c:66:5d:d4:86:bb:51:a1:8d:16:9c:bf:55:aa:b4:
c5:3a:cf:ac:27:13:14:a3:bc:a9:b0:78:39:cb:c8:
e7:b9:e3:bd:f5:15:ff:3f:28:46:6f:84:03:ec:f2:
87:04:0c:3e:b7:51:90:63:a1:88:9d:d8:b8:01:8d:
53:4c:72:87:e2:13:97:cb:c7:b8:6d:90:89:62:25:
4f:14:d9:1e:16:98:16:e8:e7:f4:66:09:8b:4f:d1:
72:84:51:e8:1a:f4:6d:b3:a6:ca:ad:af:d2:07:72:
4d:09:bd:0f:a4:3d:e1:e4:53:c0:f4:8d:f2:e1:7d:
86:4b:43:a2:a0:06:fd:14:33:9f:90:de:6b:e5:f1:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:00:33:63:E2:BC:27:31:F6:E9:FE:14:04:F8:CB:92:D7:39:64
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/_1oAM2PivCcx9un-FAT4y5LXOWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
2d:98:a2:36:e3:f1:64:ef:5b:10:93:9b:8b:85:3a:bd:b7:b4:
85:43:dc:c4:c4:2e:c1:c1:f7:0b:2a:07:cb:27:7d:7b:b0:d8:
c2:82:af:c1:91:a2:2e:fb:1d:c1:4f:e1:5e:53:4e:60:9e:21:
e0:36:bc:32:74:18:aa:bf:db:7d:d1:60:ca:a0:80:e2:9e:d6:
2b:78:71:fd:39:8d:2e:1e:6f:97:60:ab:15:83:7d:3c:6d:f8:
3e:04:8d:46:35:f2:7d:30:80:00:0d:95:d9:08:c8:e0:fc:3f:
59:8d:e0:59:76:f5:9e:66:49:bc:95:05:79:08:ee:0f:77:1c:
90:04:96:95:c2:8b:77:64:9b:39:20:53:ad:ad:85:23:ba:97:
c0:be:6f:a3:d5:ce:93:bf:5d:f0:fa:f4:6d:6a:a6:31:18:a6:
5f:f0:91:6a:7d:df:fd:ee:0b:34:01:62:e7:00:09:67:e6:56:
54:c3:7a:1f:e8:2c:e9:f8:08:95:59:e5:33:43:d2:b9:3f:52:
78:59:36:f8:9a:de:e1:82:e6:05:98:33:87:9c:ce:a7:e3:a7:
aa:c0:e2:d6:4a:9b:ec:a8:a4:1a:c2:56:70:7b:fe:85:ce:5d:
f7:11:12:4d:46:68:af:85:13:0e:8b:7a:af:2c:7c:b7:ea:a7:
38:db:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org