Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2Wj4EpeyJ35u0vSvHKLB0q7hwD0.roa
File: 2Wj4EpeyJ35u0vSvHKLB0q7hwD0.roa (raw, json)
Hash identifier: o0fdRdJCqXAVAJfoCSrLn+0zOIjlrtOFg3vLIJMcdmk=
Subject key identifier: D9:68:F8:12:97:B2:27:7E:6E:D2:F4:AF:1C:A2:C1:D2:AE:E1:C0:3D
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018ACB9CACA0164C84F8E97541EC448B4A80
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2Wj4EpeyJ35u0vSvHKLB0q7hwD0.roa
Signing time: Mon 25 Sep 2023 09:12:37 +0000
ROA not before: Mon 25 Sep 2023 09:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 78.110.120.0/22 maxlen: 24
185.36.228.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.104.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
185.233.131.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
185.213.195.0/24 maxlen: 24
152.89.44.0/24 maxlen: 24
152.89.44.0/22 maxlen: 22
152.89.47.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.112.150.0/23 maxlen: 23
185.206.231.0/24 maxlen: 24
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.112.149.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
88.135.36.0/22 maxlen: 22
88.135.38.0/24 maxlen: 24
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
188.209.152.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.153.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
185.128.136.0/22 maxlen: 22
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
2a0a:5e80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:9c:ac:a0:16:4c:84:f8:e9:75:41:ec:44:8b:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Sep 25 09:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d968f81297b2277e6ed2f4af1ca2c1d2aee1c03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:73:aa:9d:d5:71:76:fb:29:81:ec:d8:8a:
c9:40:5e:a5:55:f9:48:8c:11:e2:de:d3:f8:f7:e8:
e6:81:cb:c1:18:8f:49:7f:ba:03:83:15:8a:b1:37:
13:a0:b2:22:52:cc:d2:46:fb:9c:c6:f2:9d:0c:b8:
1f:8a:39:b0:a4:c3:e3:55:a5:0a:9d:f8:cc:b7:41:
f8:54:21:7a:25:b0:7e:db:bf:63:8c:16:10:f2:85:
4f:83:be:2c:35:9d:ec:50:39:d8:1b:79:6d:9f:e3:
98:4d:42:32:ed:c0:4e:78:1d:5b:2c:0f:48:d1:a9:
5c:f3:e8:08:20:82:c3:d7:31:73:3f:de:2b:6a:e4:
02:4b:3a:25:b4:b6:cf:80:b4:60:ad:af:e0:2d:2f:
14:db:4f:aa:55:6a:59:98:4e:ae:92:47:0c:ae:5c:
d2:27:38:f6:47:39:92:87:3d:31:9c:32:95:14:38:
37:fc:1c:05:68:9c:70:93:f5:40:40:9e:d6:fb:4e:
61:e0:7e:77:db:89:13:9e:7d:5d:3f:80:3b:4b:90:
4d:48:00:7a:65:71:f0:23:3d:ae:77:cb:31:4a:1c:
31:e7:94:20:4e:ec:f2:14:be:e5:37:af:f2:2d:f5:
b2:78:ca:f7:4c:d9:9f:e6:15:84:49:ea:c3:8a:5d:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:F8:12:97:B2:27:7E:6E:D2:F4:AF:1C:A2:C1:D2:AE:E1:C0:3D
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2Wj4EpeyJ35u0vSvHKLB0q7hwD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
88.135.36.0/22
91.236.168.0/23
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.206.231.0/24
185.213.195.0/24
185.233.131.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:4d:af:38:bf:e1:bc:ee:f3:3f:ac:c2:7d:49:15:89:73:2c:
7c:8e:04:20:0f:e6:ed:64:7d:f9:61:0e:e7:13:68:f2:c0:87:
27:77:dc:69:16:62:80:63:aa:a2:ab:d2:e0:d4:b3:ed:7e:65:
2a:6e:37:c4:de:f1:e6:92:d5:61:bb:7a:11:0b:9f:1d:13:e2:
d0:6c:5e:83:55:93:ec:77:91:4c:b9:9e:39:75:e4:44:c3:fd:
65:45:a3:57:27:a0:f8:88:ee:65:9e:6b:63:86:d1:e1:5e:ea:
50:44:9d:b8:66:41:22:79:81:12:dd:04:b5:20:5c:bc:1c:4b:
f7:a5:9d:24:77:11:06:0e:ab:ec:a9:ee:a7:6e:a4:d8:ed:b2:
1d:c5:6b:33:7b:20:e6:ed:5d:03:71:22:e2:f8:ff:13:6e:66:
99:44:c9:55:c2:3f:71:cb:5e:3f:13:f3:eb:e9:f6:3d:c9:91:
2d:a4:cb:a5:13:ff:c7:83:b5:c2:5a:e0:17:21:b8:92:4c:74:
27:6a:38:9c:1c:f7:c7:7f:9b:fd:19:6a:28:7e:b5:ea:52:6f:
c2:f8:05:93:8e:4a:0c:60:8a:c9:a3:ec:3d:77:26:a0:79:55:
f3:df:c4:45:ad:c1:02:2a:8d:a3:be:88:41:09:8e:1d:f2:92:
e4:24:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 08:38:15 2023 by rpki-client on console-ams.rpki-client.org