Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_RrhiYLtuwGp_E9ySFGGnyfDR84.roa
File: _RrhiYLtuwGp_E9ySFGGnyfDR84.roa (raw, json)
Hash identifier: MUW0JAAd1aex8aYwl8hJdDDnSFSAswdDEOB6FfmEw1s=
Subject key identifier: FD:1A:E1:89:82:ED:BB:01:A9:FC:4F:72:48:51:86:9F:27:C3:47:CE
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A64747377BA3C761096D67DA0ADB82ADD
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_RrhiYLtuwGp_E9ySFGGnyfDR84.roa
Signing time: Tue 05 Sep 2023 08:27:47 +0000
ROA not before: Tue 05 Sep 2023 08:27:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
217.168.32.0/19 maxlen: 19
217.168.32.0/20 maxlen: 20
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
213.193.96.0/19 maxlen: 19
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
212.47.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 29 Sep 2023 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:74:73:77:ba:3c:76:10:96:d6:7d:a0:ad:b8:2a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 5 08:27:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1ae18982edbb01a9fc4f724851869f27c347ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:73:ac:b3:41:02:2a:a8:58:99:22:46:52:
4c:09:3b:74:bb:25:eb:5f:cb:a4:d6:5d:77:4d:7e:
e0:43:e1:e0:2f:c6:ed:7e:a0:a3:b9:f8:1d:7b:03:
2b:e5:3e:3a:3d:d2:ee:46:e6:f1:41:8d:59:1e:a4:
5b:d2:83:e5:67:be:b3:d2:77:7f:b8:ac:46:61:9b:
81:1a:c7:0d:d2:d5:3f:fe:5b:16:7e:a3:da:6c:87:
04:7e:bf:2d:63:5c:90:87:b8:5b:78:40:ca:e5:56:
d0:74:d6:9d:6c:ee:d6:00:42:a6:c7:d9:9c:c1:89:
73:05:6b:d5:85:e0:f4:21:89:35:d4:cf:30:c3:53:
a6:c3:f3:0d:9e:a5:4b:af:eb:15:6c:62:06:ef:13:
88:67:41:e9:ed:8e:a8:93:71:e5:5e:56:d6:8b:d7:
31:88:97:7c:bf:8a:19:84:0c:38:e4:e3:f0:05:41:
a7:0a:5d:ff:80:ba:77:0c:19:c6:0b:dc:77:e5:2b:
62:a8:69:85:9e:30:67:c5:d3:22:55:6f:a6:1c:fb:
03:03:f5:1c:1a:e1:50:96:72:71:69:39:22:f5:98:
58:de:7f:6c:c5:6f:64:92:db:76:5b:6c:55:18:5b:
82:22:04:15:f9:ef:7e:c7:96:1e:62:61:1a:1b:3a:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:E1:89:82:ED:BB:01:A9:FC:4F:72:48:51:86:9F:27:C3:47:CE
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_RrhiYLtuwGp_E9ySFGGnyfDR84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
65:44:aa:a9:78:ab:79:f4:00:0f:c2:fb:b4:21:b1:4a:f2:08:
10:65:7c:9f:6a:3b:9d:f4:17:78:f6:10:9a:06:a3:e3:6f:59:
2d:68:08:4e:08:33:b5:01:a7:dd:96:e0:8e:c0:73:0f:d2:de:
86:b5:ba:d1:32:50:72:dc:16:5e:cc:56:85:2c:b3:a9:f3:df:
5d:52:1e:84:11:04:1c:bf:e9:fe:2b:1a:9c:39:f3:2e:1d:c0:
9e:c6:6a:30:93:41:01:84:80:86:cc:f0:48:a6:82:43:52:64:
63:7b:25:18:d6:b6:b6:ff:3c:4e:af:09:26:21:b5:b9:b0:98:
95:60:20:b2:08:76:43:b2:b4:15:27:8e:6f:7a:a5:06:28:e3:
d9:13:ed:73:cf:50:8c:a5:e7:10:dd:55:be:14:87:f7:05:78:
57:e9:41:0d:a8:7d:54:58:80:85:dc:f1:80:cd:14:07:0e:ec:
d9:fe:7b:6a:25:3d:a5:41:19:57:46:f7:a1:63:d5:06:22:b3:
70:8f:12:b4:cb:3e:ef:9b:7b:d0:da:72:ee:0f:5a:6d:06:9c:
10:89:e1:cc:81:2e:79:d9:6c:d1:97:e0:10:9d:5c:88:0d:a6:
d4:08:e3:2f:a5:ca:a6:3d:b4:89:ac:04:f9:44:ff:f0:04:8f:
6f:9d:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org