Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/oNH26v5dtsgtM5Qg-p6IUUOsteE.roa
File: oNH26v5dtsgtM5Qg-p6IUUOsteE.roa (raw, json)
Hash identifier: v8AIcmHbV4wBzGfy1G0BpLTdUYfUkyeqfYGMwRqpwqk=
Subject key identifier: A0:D1:F6:EA:FE:5D:B6:C8:2D:33:94:20:FA:9E:88:51:43:AC:B5:E1
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018BB2F75BDE67BD068D8EA9D4754701F1F0
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/oNH26v5dtsgtM5Qg-p6IUUOsteE.roa
Signing time: Thu 09 Nov 2023 07:23:57 +0000
ROA not before: Thu 09 Nov 2023 07:23:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8437
IP address blocks: 62.218.100.0/24 maxlen: 24
178.114.0.0/16 maxlen: 16
62.218.52.0/24 maxlen: 24
178.114.92.0/22 maxlen: 22
178.114.128.0/21 maxlen: 21
213.235.196.0/24 maxlen: 24
213.235.192.0/18 maxlen: 18
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
46.57.0.0/17 maxlen: 17
195.96.0.0/19 maxlen: 19
86.59.0.0/17 maxlen: 17
62.116.64.0/18 maxlen: 18
213.129.224.0/19 maxlen: 19
213.90.0.0/17 maxlen: 17
62.218.4.0/24 maxlen: 24
62.218.0.0/16 maxlen: 16
195.248.32.0/19 maxlen: 19
81.189.213.0/24 maxlen: 24
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
91.186.128.0/19 maxlen: 19
77.119.32.0/19 maxlen: 19
178.115.96.0/19 maxlen: 19
77.118.192.0/20 maxlen: 20
188.118.192.0/18 maxlen: 18
77.118.208.0/20 maxlen: 20
212.152.128.0/17 maxlen: 17
77.118.224.0/21 maxlen: 21
78.142.128.0/18 maxlen: 18
62.116.0.0/19 maxlen: 19
77.119.96.0/22 maxlen: 22
77.119.64.0/18 maxlen: 18
77.119.88.0/21 maxlen: 21
46.57.120.0/22 maxlen: 22
178.114.208.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
212.27.64.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
46.57.72.0/22 maxlen: 22
178.114.152.0/21 maxlen: 21
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
213.235.234.0/24 maxlen: 24
195.70.224.0/19 maxlen: 19
77.118.0.0/16 maxlen: 16
46.57.104.0/22 maxlen: 22
77.118.17.0/24 maxlen: 24
77.118.136.0/21 maxlen: 21
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
77.118.128.0/21 maxlen: 21
2001:858:40::/45 maxlen: 45
2001:858::/32 maxlen: 32
2001:938::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:f7:5b:de:67:bd:06:8d:8e:a9:d4:75:47:01:f1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Nov 9 07:23:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0d1f6eafe5db6c82d339420fa9e885143acb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:59:15:71:25:b5:4c:a2:69:bf:97:39:f7:
71:11:d7:3a:8a:9f:8a:d6:97:14:55:f8:c7:2d:da:
91:a2:a5:de:0b:33:09:e6:66:bc:cc:eb:a5:c9:57:
46:59:90:65:13:b3:b4:72:c8:f8:1c:b3:1e:45:27:
a0:8f:4d:31:cd:f9:36:7b:38:06:57:0a:a1:1a:7d:
68:32:0e:8e:a6:2b:dd:b0:3a:a1:8f:f1:94:9f:c4:
5e:83:84:13:9f:cb:71:58:2c:f3:b6:d3:bd:c9:d5:
fb:79:10:b5:b4:86:47:36:5c:87:0f:a1:d0:80:cc:
40:8e:34:20:9f:e9:10:49:2e:9f:e9:3c:86:f6:70:
6d:86:30:c9:96:d0:45:b4:69:fc:0f:1a:fa:51:fc:
e2:80:0b:81:a3:1b:ac:92:eb:4b:cb:77:e3:dd:fc:
86:3f:89:c2:5a:43:b2:82:d6:f0:06:ce:c7:e1:e2:
04:23:f4:83:a1:d9:41:16:53:af:bd:02:0c:bc:35:
93:c9:41:e3:c4:01:c5:bc:ef:82:95:76:95:95:ba:
11:94:20:e6:28:ee:23:f0:2b:7c:45:f4:48:e5:98:
c7:be:ee:f9:c3:4e:8f:1d:47:c3:e2:8b:18:2a:8d:
55:f4:27:d2:8a:a1:a8:87:ba:f8:b7:48:82:a2:f1:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:F6:EA:FE:5D:B6:C8:2D:33:94:20:FA:9E:88:51:43:AC:B5:E1
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/oNH26v5dtsgtM5Qg-p6IUUOsteE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ed:28:3a:3f:55:38:a8:fe:4e:76:be:c1:4c:27:be:68:58:
1d:b1:4e:aa:99:b4:8d:3b:13:ce:d8:d2:b2:d1:ea:11:17:68:
20:4b:1d:35:8a:a3:59:33:a5:2d:0f:05:c8:5a:15:b1:d9:15:
06:ad:b1:28:c2:4d:7b:26:15:1b:99:53:95:e1:ca:4f:d1:fb:
ea:b7:3b:7c:7d:c3:cc:0f:22:2f:53:e5:d1:e1:d6:47:45:1d:
0a:16:82:ae:94:9d:16:2a:62:66:39:53:3f:ac:19:63:11:cf:
08:19:8f:bc:14:91:b9:28:e1:ed:5f:b5:10:5a:5e:13:07:d0:
4d:1d:df:98:74:d2:e6:b6:04:a8:26:bc:65:a8:cf:c0:cf:e7:
62:d6:26:d4:a2:e3:99:d0:f3:59:11:1b:98:2e:76:98:5d:bb:
6d:47:eb:21:0b:e6:10:42:64:90:8d:2a:95:af:dd:a5:f5:d9:
5d:7f:63:3f:21:7e:82:09:88:61:0f:9d:f3:52:1c:61:97:75:
ea:24:8f:fc:f1:d5:a6:8c:7b:5e:ce:bf:92:a2:23:e9:24:f6:
8e:e6:06:9e:de:ee:34:2f:df:dc:7d:a9:b9:25:3c:d1:50:ae:
de:09:20:fd:87:6f:b5:37:60:2c:0c:27:1c:fc:3e:1a:99:cf:
c2:b8:52:ed
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 9 08:14:30 2023 by rpki-client on console-fra.rpki-client.org