Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/B7PeHLHDBL72eC3d9JoBTDKnaQA.roa
File: B7PeHLHDBL72eC3d9JoBTDKnaQA.roa (raw, json)
Hash identifier: Sf8ieV0vsODqqdOQaYbusX3xEbSJCtlVhMgHNOVBt2c=
Subject key identifier: 07:B3:DE:1C:B1:C3:04:BE:F6:78:2D:DD:F4:9A:01:4C:32:A7:69:00
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018CC6B7BAD5F749D43A927BB9B77993C0A8
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/B7PeHLHDBL72eC3d9JoBTDKnaQA.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25233
IP address blocks: 213.184.160.0/19 maxlen: 19
84.22.241.0/24 maxlen: 24
84.22.254.0/24 maxlen: 24
212.93.192.0/19 maxlen: 19
212.93.196.0/24 maxlen: 24
78.93.144.0/24 maxlen: 24
78.93.145.0/24 maxlen: 24
78.93.150.0/24 maxlen: 24
78.93.151.0/24 maxlen: 24
78.93.152.0/24 maxlen: 24
78.93.146.0/24 maxlen: 24
78.93.147.0/24 maxlen: 24
78.93.148.0/24 maxlen: 24
78.93.149.0/24 maxlen: 24
84.22.224.0/19 maxlen: 19
78.93.157.0/24 maxlen: 24
78.93.158.0/24 maxlen: 24
78.93.159.0/24 maxlen: 24
78.93.153.0/24 maxlen: 24
78.93.154.0/24 maxlen: 24
78.93.155.0/24 maxlen: 24
78.93.156.0/24 maxlen: 24
84.22.231.0/24 maxlen: 24
78.93.160.0/24 maxlen: 24
78.93.161.0/24 maxlen: 24
84.22.234.0/24 maxlen: 24
84.22.238.0/24 maxlen: 24
86.60.107.0/24 maxlen: 24
86.60.109.0/24 maxlen: 24
212.100.218.0/24 maxlen: 24
86.60.112.0/21 maxlen: 21
86.60.126.0/24 maxlen: 24
86.60.64.0/18 maxlen: 18
212.100.192.0/19 maxlen: 19
212.100.210.0/24 maxlen: 24
78.93.0.0/16 maxlen: 16
77.64.0.0/17 maxlen: 17
77.64.40.0/24 maxlen: 24
78.93.92.0/22 maxlen: 22
78.93.96.0/22 maxlen: 22
78.93.108.0/24 maxlen: 24
78.93.109.0/24 maxlen: 24
78.93.107.0/24 maxlen: 24
78.93.28.0/24 maxlen: 24
212.116.192.0/19 maxlen: 19
78.93.50.0/24 maxlen: 24
2a02:df0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 28 Jan 2024 11:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ba:d5:f7:49:d4:3a:92:7b:b9:b7:79:93:c0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07b3de1cb1c304bef6782dddf49a014c32a76900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:d1:4b:dd:70:9a:bb:83:25:10:f9:ec:b3:
ed:65:13:1b:c7:dd:ef:2e:6d:a4:ee:28:3d:30:85:
e6:f6:2e:8c:6c:ab:55:07:e3:d1:84:da:e5:15:f2:
85:d6:fa:b1:1f:1c:f5:8a:6b:e0:4f:19:f6:32:b2:
88:ef:39:bb:e7:78:7a:cd:1e:e9:7b:ae:30:30:34:
bf:cf:81:90:87:b9:45:8b:fc:42:10:4f:32:96:e5:
05:71:c3:b8:a9:c7:58:07:63:90:2f:3a:af:86:ab:
32:34:f1:fc:d4:05:d7:3b:34:30:b1:df:0b:0b:16:
6b:08:0d:23:6e:d5:9d:f3:54:48:24:63:d6:b4:73:
c3:0e:d0:3e:c3:bb:21:fe:13:d9:ce:51:86:04:1d:
32:89:84:54:5a:69:12:d8:10:55:7b:d3:4e:c3:75:
97:97:f4:c6:d7:6f:48:ff:f1:a0:6b:f3:32:1a:96:
28:d9:57:f9:b4:6e:be:62:7e:a3:b9:a0:ff:3d:3a:
a0:1a:d2:eb:2c:cd:91:94:3e:ef:c1:23:85:d1:7c:
91:de:89:c1:34:3c:1c:08:28:5a:c7:08:ab:80:ed:
d1:56:6a:6e:7b:d3:8b:b5:36:7e:61:16:da:91:13:
07:40:6b:83:9f:6f:89:93:de:89:5e:9c:d1:13:23:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:DE:1C:B1:C3:04:BE:F6:78:2D:DD:F4:9A:01:4C:32:A7:69:00
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/B7PeHLHDBL72eC3d9JoBTDKnaQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.0.0/17
78.93.0.0/16
84.22.224.0/19
86.60.64.0/18
212.93.192.0/19
212.100.192.0/19
212.116.192.0/19
213.184.160.0/19
IPv6:
2a02:df0::/32
Signature Algorithm: sha256WithRSAEncryption
02:00:5c:cc:96:d5:51:80:1c:4d:77:9a:b2:4e:9f:64:8d:ae:
ba:77:7a:fd:94:7b:39:94:67:ac:dd:f9:e9:11:b8:75:ee:3c:
68:29:0f:62:91:95:45:a6:70:20:c9:4e:de:41:fc:d9:33:9f:
82:bd:7d:14:73:89:02:aa:da:15:22:1e:63:97:c2:d4:fa:81:
06:5a:80:00:2e:6f:19:7a:45:14:0e:ee:38:7a:04:41:5e:b0:
77:6f:9d:1e:bc:89:f2:a8:fc:f8:3e:ed:03:09:52:fa:f7:45:
b1:17:fc:91:2d:96:ff:4d:7b:7c:5c:9d:c3:93:ea:f7:30:3a:
94:0b:71:eb:06:c3:09:6b:50:dd:a4:17:bb:8b:d1:12:95:77:
78:af:ea:83:3b:41:5c:42:d5:b3:04:44:9d:66:1d:1f:65:90:
8f:f9:b3:97:8b:e2:1b:87:4a:76:d8:87:b3:d2:3d:5c:8c:20:
1b:dd:6a:b7:73:9f:d4:ec:22:76:e7:57:a3:97:33:e9:06:ce:
b5:e6:f0:6b:96:93:24:f5:44:06:eb:da:83:c3:f7:a0:3b:4a:
67:fd:1a:f4:42:ca:82:84:82:00:31:ff:79:81:45:4b:03:6c:
52:8c:ef:7d:46:a9:29:aa:6c:f1:4f:71:19:18:d4:db:9f:69:
4c:c9:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org