Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/x5FHgz_81DXEP9eNUqmMXBRy7a8.roa
File: x5FHgz_81DXEP9eNUqmMXBRy7a8.roa (raw, json)
Hash identifier: DHbhNAXekb51FQmpOVCi33uI6spDjKDyPnTZ9K6+lQQ=
Subject key identifier: C7:91:47:83:3F:FC:D4:35:C4:3F:D7:8D:52:A9:8C:5C:14:72:ED:AF
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018B13828A355BBE259BCA696495200D593C
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/x5FHgz_81DXEP9eNUqmMXBRy7a8.roa
Signing time: Mon 09 Oct 2023 08:16:43 +0000
ROA not before: Mon 09 Oct 2023 08:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
217.168.32.0/19 maxlen: 19
217.168.32.0/20 maxlen: 20
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
213.193.96.0/19 maxlen: 19
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
212.47.176.0/20 maxlen: 20
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a00:e2c0::/32 maxlen: 32
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate revoked on Thu 19 Oct 2023 08:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:82:8a:35:5b:be:25:9b:ca:69:64:95:20:0d:59:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 9 08:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c79147833ffcd435c43fd78d52a98c5c1472edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:cb:6b:c8:7a:d7:8c:c7:da:d5:3c:f4:4a:
1c:94:9e:d9:74:80:28:8f:8e:9d:4c:6b:13:78:41:
1c:e7:2c:92:3e:c6:9e:d2:12:18:2d:72:f1:12:ae:
9c:bd:df:18:c4:a4:03:42:4d:3d:62:60:64:a3:06:
0a:f6:16:2e:0d:18:f6:5f:bd:8e:7c:1d:b6:95:b7:
49:ae:39:7c:75:51:26:db:78:88:c4:f7:c9:19:8d:
c9:e9:e6:5c:4c:a3:1e:b3:2d:3a:16:55:87:c8:74:
7d:53:84:26:5a:f7:25:9b:85:20:db:01:e5:43:99:
c2:f5:66:9f:dc:92:c3:eb:7c:14:02:cf:33:1a:83:
e3:f8:b8:e5:b9:97:18:41:68:94:9d:06:a2:6a:9a:
09:60:c0:67:4e:7d:5c:bc:d2:6b:1b:c9:aa:05:e7:
60:78:1b:1f:9a:c1:f8:22:5d:0e:0e:2c:f4:5c:7d:
c1:1c:17:40:c1:3c:ff:1c:1c:b1:9d:34:81:3b:20:
ed:f9:ce:3a:09:d1:d5:1a:4d:aa:45:35:b6:2a:f9:
6e:06:3b:e4:48:7b:32:7b:92:e7:48:e5:82:63:11:
05:54:4a:0c:5d:37:c4:e8:97:5a:f3:5b:9d:13:e5:
fb:32:a5:87:50:ec:97:11:92:69:f2:eb:2b:ef:7d:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:47:83:3F:FC:D4:35:C4:3F:D7:8D:52:A9:8C:5C:14:72:ED:AF
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/x5FHgz_81DXEP9eNUqmMXBRy7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
2f:ce:e3:6e:fe:9d:42:01:86:ae:16:22:da:96:bb:df:82:fe:
9a:98:2a:16:6f:57:12:31:79:ac:99:31:73:90:03:ac:52:39:
3a:34:71:05:79:2a:4f:32:92:bf:aa:bb:51:23:31:77:86:49:
37:06:31:c9:2f:10:cc:1f:85:dd:0c:56:47:62:6c:d2:3e:ce:
a7:f4:d5:5e:93:46:11:2c:ac:03:d6:ca:f2:f4:a9:1d:f6:db:
19:d1:34:29:72:fc:97:b9:f4:cf:94:4e:f8:08:5a:ad:a4:65:
a9:77:72:95:c6:77:c4:79:15:d9:3c:42:a2:54:68:7c:e8:87:
e6:3e:2d:bb:89:76:ff:0d:ea:f0:b3:24:f4:cc:75:d3:6e:e2:
54:4d:96:fc:de:c3:ce:84:fa:a6:04:7a:11:d4:8a:c8:c6:01:
3b:f4:d2:9e:34:00:92:fb:c2:12:89:29:52:a9:aa:1f:df:32:
1f:3e:7b:0e:d1:bc:ab:39:36:11:07:f4:40:cb:10:a2:1b:32:
af:7b:df:86:5f:89:f7:97:4d:8f:e2:c9:c9:b3:cb:6f:2f:2d:
27:82:f7:87:67:5b:cc:8a:a3:97:6a:3b:be:0a:26:a9:6a:ca:
d6:4d:50:eb:e6:e9:7e:ee:4e:a8:cf:a9:b4:ed:9a:91:e3:cc:
74:ab:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org