Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/KF7zPMV4wDkicUaG6pQrnHD_B14.roa
File: KF7zPMV4wDkicUaG6pQrnHD_B14.roa (raw, json)
Hash identifier: AuAkPsU8O7DZngjTjPnhfdB4vzS4pQbwTe1cbmKR/vk=
Subject key identifier: 28:5E:F3:3C:C5:78:C0:39:22:71:46:86:EA:94:2B:9C:70:FF:07:5E
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018A512E03142305219926DFCE06ADC85986
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/KF7zPMV4wDkicUaG6pQrnHD_B14.roa
Signing time: Fri 01 Sep 2023 14:38:04 +0000
ROA not before: Fri 01 Sep 2023 14:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25255
IP address blocks: 91.141.0.0/20 maxlen: 20
91.141.0.0/17 maxlen: 17
94.245.192.0/24 maxlen: 24
94.245.192.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.64.0/18 maxlen: 18
213.94.78.0/24 maxlen: 24
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
178.114.128.0/21 maxlen: 21
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
77.119.224.0/19 maxlen: 19
77.116.128.0/17 maxlen: 17
77.119.160.0/20 maxlen: 20
178.113.0.0/17 maxlen: 17
77.119.192.0/19 maxlen: 19
77.117.0.0/17 maxlen: 17
77.118.240.0/20 maxlen: 20
46.220.0.0/16 maxlen: 16
178.112.0.0/17 maxlen: 17
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
178.112.0.0/14 maxlen: 14
178.115.128.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.116.0.0/17 maxlen: 17
77.116.0.0/14 maxlen: 14
77.119.128.0/20 maxlen: 20
109.126.64.0/18 maxlen: 18
178.112.128.0/17 maxlen: 17
178.115.224.0/19 maxlen: 19
77.119.80.0/21 maxlen: 21
46.57.124.0/22 maxlen: 22
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
81.3.192.0/24 maxlen: 24
81.3.192.0/18 maxlen: 18
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
178.114.144.0/21 maxlen: 21
46.57.80.0/21 maxlen: 21
213.94.96.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
213.94.95.0/24 maxlen: 24
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
77.118.14.0/24 maxlen: 24
46.57.112.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
178.165.192.0/20 maxlen: 20
178.115.64.0/20 maxlen: 20
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.201.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
81.3.210.0/24 maxlen: 24
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
77.118.108.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.115.32.0/19 maxlen: 19
77.118.128.0/21 maxlen: 21
2a02:2861:d::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
2a02:2861::/32 maxlen: 32
2a02:2861:e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:2e:03:14:23:05:21:99:26:df:ce:06:ad:c8:59:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Sep 1 14:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=285ef33cc578c03922714686ea942b9c70ff075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:6e:0c:66:98:54:19:c0:18:54:72:15:6c:
5c:93:9a:2e:f5:24:98:64:07:3c:26:b5:e9:46:d2:
20:8f:09:6c:1e:b3:4e:a7:0d:99:c2:67:a3:ad:c8:
e7:78:28:b5:67:d7:e4:c8:ef:86:79:8c:7d:86:68:
c4:d3:85:ca:ab:a6:e1:0c:68:30:4c:e9:d5:0e:42:
9d:f5:1a:8d:fb:a9:9a:a5:46:56:58:dd:df:97:03:
29:74:ec:0e:d1:ec:34:30:60:cd:ae:96:c3:a0:88:
1a:8e:65:e0:66:c5:8f:95:05:95:9a:1f:d3:07:ff:
35:8d:b3:7d:bb:8e:bf:88:74:d7:ed:60:69:7e:22:
ad:b1:60:a6:c4:23:8e:75:62:97:88:cf:69:bc:10:
f1:cd:de:16:b5:fa:5f:6b:d7:1d:5c:13:c8:bd:c0:
5c:fa:b1:3e:04:02:1e:52:42:57:25:af:5a:e7:de:
14:36:b7:a4:16:73:eb:e6:fb:32:42:93:b7:ad:89:
4c:95:74:46:d0:a9:b8:e0:71:cb:87:3e:da:0a:7c:
57:89:fd:78:7c:ce:6b:9e:37:45:b6:aa:57:f1:ae:
cc:3c:c2:9d:93:e3:f6:81:83:76:d5:96:e0:90:e8:
20:46:44:b7:17:aa:b1:10:48:dc:07:61:f9:ac:a8:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:F3:3C:C5:78:C0:39:22:71:46:86:EA:94:2B:9C:70:FF:07:5E
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/KF7zPMV4wDkicUaG6pQrnHD_B14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.80.0-46.57.103.255
46.57.112.0/21
46.57.124.0/22
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
ab:db:c3:02:6f:1d:5b:6b:8f:be:b1:0b:1e:1a:cd:9c:f8:21:
c6:1f:ca:e6:fd:80:74:df:ac:37:69:61:54:61:23:41:44:9a:
4f:f6:7e:71:4b:f1:34:71:0f:3e:9e:bb:a2:18:2e:9d:37:cf:
24:17:10:55:e8:f0:46:fd:31:95:48:d0:3b:f3:c7:41:bc:26:
72:e9:e7:c6:89:a1:61:63:3f:75:44:54:8c:61:58:0d:22:9d:
dc:4a:d4:ea:ec:5c:29:eb:ed:c4:ad:10:6a:2a:62:88:62:d4:
f4:55:26:3e:bf:e2:07:60:5c:2c:67:45:cf:9e:46:39:4e:cd:
3b:8c:6c:f9:2b:76:d1:0b:fb:72:86:26:37:ec:7c:fe:96:20:
33:96:6c:59:13:89:b2:61:8d:ee:c0:4a:ac:d7:a3:0f:05:e1:
fd:fa:c4:81:51:cc:77:93:b5:8a:e9:3a:ff:2d:39:e4:d2:8e:
ff:fe:b1:93:38:ef:80:52:ff:ed:0c:1c:e8:4e:75:a8:d2:47:
f4:12:81:e6:99:ad:d9:94:d4:af:83:ca:69:4c:2b:98:3b:d9:
01:6d:e7:07:cd:4f:43:de:07:a3:a4:89:d4:a3:7d:37:d8:22:
d8:c0:c4:be:f4:d6:18:0c:2f:16:d1:6e:a1:7d:e1:db:a1:9b:
e4:84:eb:1d
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 1 15:23:32 2023 by rpki-client on console-fra.rpki-client.org