Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/D1Zq45VAVQOKei6TS09gptO-bnw.roa
File: D1Zq45VAVQOKei6TS09gptO-bnw.roa (raw, json)
Hash identifier: TLtnz/MogKOoClKxZ+dL16RjS4WUk5VhP9a2sLgjrmQ=
Subject key identifier: 0F:56:6A:E3:95:40:55:03:8A:7A:2E:93:4B:4F:60:A6:D3:BE:6E:7C
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0189F8198225C0F4A3AE2D7DEA3E8AED403E
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/D1Zq45VAVQOKei6TS09gptO-bnw.roa
Signing time: Tue 15 Aug 2023 07:29:28 +0000
ROA not before: Tue 15 Aug 2023 07:29:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.26.37.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.38.0/24 maxlen: 25
212.26.41.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.39.0/24 maxlen: 25
212.26.44.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.51.0/24 maxlen: 24
212.26.50.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.26.72.0/24 maxlen: 24
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.250.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.82.0/24 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.97.0/24 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.127.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.41.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.177.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
2001:1490:1::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:19:82:25:c0:f4:a3:ae:2d:7d:ea:3e:8a:ed:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 15 07:29:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f566ae3954055038a7a2e934b4f60a6d3be6e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:fa:7c:07:f2:73:41:3e:2e:e4:ff:01:cf:
48:c8:1b:79:fd:c7:58:17:0a:ff:8d:6e:6b:dc:6f:
34:0f:77:4b:e0:b8:d1:ac:0d:1f:1e:f1:46:ea:69:
2c:57:ee:23:f3:d7:3c:1c:95:c7:bb:67:19:5c:0b:
c8:29:22:18:6b:ac:30:37:e0:d6:54:2e:98:68:9f:
25:8a:de:ba:ff:da:9c:c5:b7:ac:a3:d6:98:69:e9:
08:de:bc:6b:fb:f1:53:db:ff:f5:f0:4a:67:05:82:
27:96:eb:66:c7:83:a0:6e:0a:95:7e:61:5d:e3:05:
79:7c:05:da:6b:c0:5e:5b:fb:a1:65:f7:ca:e3:d1:
b4:e6:e8:2b:e5:d5:b2:45:2f:aa:66:fc:e2:f4:62:
89:13:89:4a:42:24:cf:68:ec:d2:94:fb:59:0e:40:
5d:c4:a5:80:ba:a8:19:af:0b:be:fb:43:3b:23:10:
49:d1:b9:e2:bc:88:6f:20:f8:8f:63:f1:b9:ca:c3:
0a:82:37:65:ec:61:91:d2:ad:e7:4f:35:47:9f:5a:
42:ba:c8:84:1e:f9:c9:1d:cc:39:31:b8:2f:0a:13:
8f:3d:67:4d:33:f6:d6:94:2a:b4:2d:ce:7f:8a:c9:
42:0d:d8:b3:9c:58:a8:e4:66:59:3b:03:74:11:6f:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:56:6A:E3:95:40:55:03:8A:7A:2E:93:4B:4F:60:A6:D3:BE:6E:7C
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/D1Zq45VAVQOKei6TS09gptO-bnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.0.0/17
212.138.41.0-212.138.43.255
212.138.52.0-212.138.67.255
212.138.70.0-212.138.86.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0/22
212.138.104.0/24
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.181.0/24
212.138.183.0/24
212.138.185.0/24
212.138.187.0-212.138.188.255
212.138.190.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0/24
212.138.203.0/24
212.138.206.0/24
212.138.250.0/24
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
Signature Algorithm: sha256WithRSAEncryption
1a:3b:6f:e9:4c:56:bc:85:57:a8:04:08:8a:42:aa:08:fe:3d:
d9:24:1b:55:b4:0f:d8:6b:6f:50:db:74:5c:4b:74:ff:c5:2c:
c1:5d:35:ce:61:9b:dd:a8:51:4d:18:7e:6a:ac:e7:df:b3:d5:
51:9b:81:22:11:3b:d9:65:dd:05:7b:01:c7:b8:72:6b:b8:9e:
1c:2c:59:89:bf:e6:07:49:3a:69:97:55:b0:ca:ea:66:e2:b1:
47:51:e3:89:9a:ef:5e:55:08:94:30:f2:ad:d3:12:2b:7a:ad:
a5:42:7e:05:2d:f1:be:f1:55:0b:f2:24:6f:fe:6e:3d:ee:3d:
60:6e:64:c7:9b:a3:23:b1:1b:b1:15:40:46:5a:d9:3f:e0:c4:
02:cc:8c:8f:dc:09:d1:6b:f2:bc:ef:6b:19:bf:2b:c8:7b:e0:
d7:32:0f:d6:49:5f:ba:c2:38:fa:82:87:a7:77:af:7a:3a:9d:
93:c6:79:ea:88:08:09:43:15:8e:94:76:10:b5:d7:f6:53:ea:
af:34:7b:9a:47:3e:a3:f6:e4:cc:a4:bd:24:96:2b:13:5c:bd:
3c:27:52:33:f6:51:4d:50:f7:cf:8c:d1:fd:60:71:8e:2a:06:
1f:44:6b:23:19:f7:4e:38:12:47:76:d5:45:2f:a5:fa:bb:ce:
d4:fa:1e:e8
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 08:27:38 2023 by rpki-client on console-fra.rpki-client.org