Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/WCuZlQ5O9UC1Hd-eOou0K0QWKes.roa
File: WCuZlQ5O9UC1Hd-eOou0K0QWKes.roa (raw, json)
Hash identifier: CYNOK69hOLPCSPQjc+oiPgDA9p5D+Dz33rjE48wGIXo=
Subject key identifier: 58:2B:99:95:0E:4E:F5:40:B5:1D:DF:9E:3A:8B:B4:2B:44:16:29:EB
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 018708832E2389D9E990022A087F738B9F85
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/WCuZlQ5O9UC1Hd-eOou0K0QWKes.roa
Signing time: Wed 22 Mar 2023 08:50:27 +0000
ROA not before: Wed 22 Mar 2023 08:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 80.240.98.0/23 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.139.0/24 maxlen: 32
217.194.144.0/24 maxlen: 32
193.31.56.0/22 maxlen: 32
212.107.0.0/22 maxlen: 32
217.194.152.0/24 maxlen: 32
217.194.151.0/24 maxlen: 32
213.255.204.0/24 maxlen: 32
213.255.207.0/24 maxlen: 32
185.4.226.0/24 maxlen: 32
78.138.8.0/24 maxlen: 32
83.229.0.0/23 maxlen: 32
83.229.7.0/24 maxlen: 32
91.196.180.0/22 maxlen: 32
194.31.176.0/22 maxlen: 32
213.255.194.0/24 maxlen: 32
213.255.193.0/24 maxlen: 32
213.255.199.0/24 maxlen: 32
213.255.196.0/24 maxlen: 32
83.229.66.0/24 maxlen: 32
83.229.92.0/24 maxlen: 32
83.229.110.0/24 maxlen: 32
83.229.116.0/22 maxlen: 32
83.229.114.0/24 maxlen: 32
83.229.12.0/23 maxlen: 32
78.138.41.0/24 maxlen: 32
83.229.27.0/24 maxlen: 32
83.229.30.0/24 maxlen: 32
83.229.36.0/23 maxlen: 32
78.138.53.0/24 maxlen: 32
78.138.54.0/23 maxlen: 32
78.138.63.0/24 maxlen: 32
195.3.136.0/22 maxlen: 32
83.229.58.0/23 maxlen: 32
194.187.36.0/22 maxlen: 32
83.229.60.0/24 maxlen: 32
217.194.130.0/23 maxlen: 32
31.40.228.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Mar 2023 10:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:83:2e:23:89:d9:e9:90:02:2a:08:7f:73:8b:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Mar 22 08:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582b99950e4ef540b51ddf9e3a8bb42b441629eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:05:fc:e3:30:7a:22:ef:f9:67:e5:4a:d9:
65:62:12:e2:8a:e8:6b:bd:30:06:e0:f6:0b:cd:c2:
a8:77:f2:1a:31:e6:4e:29:de:ec:9e:44:94:d7:f6:
08:3d:ed:0e:86:73:d2:3a:fd:b3:83:e6:a4:6d:8f:
6d:fd:4a:f7:da:01:8c:bc:b7:43:66:17:e6:33:2a:
47:d0:b5:86:b1:b8:c1:67:43:fc:48:8c:78:7c:c5:
c5:14:a6:f5:2a:e4:68:f7:5f:00:d8:0f:34:80:3d:
60:c8:da:52:c2:1f:d2:b9:6f:61:63:a6:f2:8b:4b:
25:9d:4e:ea:6f:fe:0f:08:a0:26:42:ca:d6:87:32:
68:47:ff:ef:28:26:6e:0b:fd:f4:c2:e4:bb:77:db:
87:25:fa:df:fe:81:4f:4f:95:a7:2b:65:95:2c:5c:
9f:e3:e2:32:70:db:9f:50:2e:bb:81:52:65:e8:b1:
ab:2f:7c:00:3c:cd:02:eb:be:4b:43:fd:e7:41:31:
1b:da:be:14:0d:99:9d:e5:73:38:4b:a4:e8:67:c0:
1b:d0:fd:e1:34:1a:9b:36:d4:e4:ef:a2:48:86:34:
80:a2:20:b4:0c:52:7d:25:3a:02:ab:30:66:53:01:
4d:ae:3f:ec:50:6e:12:c5:d2:24:7a:88:db:4a:48:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:99:95:0E:4E:F5:40:B5:1D:DF:9E:3A:8B:B4:2B:44:16:29:EB
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/WCuZlQ5O9UC1Hd-eOou0K0QWKes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.228.0/22
78.138.8.0/24
78.138.41.0/24
78.138.53.0-78.138.55.255
78.138.63.0/24
80.240.98.0/23
83.229.0.0/23
83.229.7.0/24
83.229.12.0/23
83.229.27.0/24
83.229.30.0/24
83.229.36.0/23
83.229.58.0-83.229.60.255
83.229.66.0/24
83.229.92.0/24
83.229.110.0/24
83.229.114.0/24
83.229.116.0/22
91.196.180.0/22
185.4.226.0/24
193.31.56.0/22
194.31.176.0/22
194.187.36.0/22
195.3.136.0/22
212.107.0.0/22
213.255.193.0-213.255.194.255
213.255.196.0/24
213.255.199.0/24
213.255.204.0/24
213.255.207.0/24
217.194.130.0/23
217.194.136.0/23
217.194.139.0/24
217.194.144.0/24
217.194.151.0-217.194.152.255
Signature Algorithm: sha256WithRSAEncryption
18:fb:d9:ad:e8:2e:b3:43:77:b2:ac:cc:3c:87:4d:66:5d:5b:
99:6d:09:63:4b:fd:d9:56:13:7a:25:ed:4b:f2:51:a2:7e:c1:
41:72:64:8f:34:29:f6:d5:48:bd:aa:40:56:76:c7:14:56:d7:
69:ea:22:c1:29:44:13:99:25:f4:7d:09:16:01:a5:a4:12:3c:
72:fb:4a:87:05:aa:3e:70:15:0b:73:fe:41:ae:37:56:e0:a1:
fd:ee:ac:c6:84:19:67:94:3c:5f:5c:28:d1:eb:65:f0:16:f3:
76:48:6f:9e:85:2f:50:cb:95:93:fb:1d:a6:2e:25:97:22:0e:
b5:9a:cc:07:c6:b2:b2:e5:08:b2:4c:52:cf:85:cc:09:69:b2:
a7:b4:be:85:18:9d:f3:de:b5:92:45:c9:e8:0a:4c:38:b1:a8:
93:0e:09:3d:1f:e9:21:bf:8d:bf:e7:d6:07:d0:6e:99:87:41:
67:bf:2b:8d:04:e7:9f:e4:31:ad:93:bc:9d:28:65:4e:a9:c1:
1c:58:b3:ee:50:05:95:83:d3:35:3c:4b:23:b5:83:be:1f:5f:
20:33:cb:f9:0f:5c:75:f3:0e:46:e9:ea:7d:4b:c6:21:b1:5c:
c6:3b:43:b1:da:53:47:43:d6:5d:8d:0f:a6:33:36:08:8f:76:
07:27:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org