Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/gug1rzBremC372IBl6DVLlk_Iqg.roa
File: gug1rzBremC372IBl6DVLlk_Iqg.roa (raw, json)
Hash identifier: amJEI+esAiE64YgK4eBPfMC/Bq20ovqDGZLiFxzBSFw=
Subject key identifier: 82:E8:35:AF:30:6B:7A:60:B7:EF:62:01:97:A0:D5:2E:59:3F:22:A8
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 018BD328056024A24258ED06DBEA4A85809D
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/gug1rzBremC372IBl6DVLlk_Iqg.roa
Signing time: Wed 15 Nov 2023 13:24:57 +0000
ROA not before: Wed 15 Nov 2023 13:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20676
IP address blocks: 194.9.127.0/24 maxlen: 24
92.201.128.0/17 maxlen: 17
92.201.64.0/18 maxlen: 18
212.202.0.0/19 maxlen: 19
195.80.192.0/19 maxlen: 19
185.144.188.0/22 maxlen: 22
212.202.0.0/16 maxlen: 16
212.110.192.0/19 maxlen: 19
84.245.128.0/18 maxlen: 18
92.195.0.0/17 maxlen: 17
62.8.168.0/21 maxlen: 21
62.8.176.0/20 maxlen: 20
92.194.0.0/17 maxlen: 17
213.160.0.0/19 maxlen: 19
213.217.64.0/18 maxlen: 18
212.5.16.0/20 maxlen: 20
92.200.128.0/17 maxlen: 17
62.8.128.0/17 maxlen: 17
85.8.132.0/22 maxlen: 22
195.90.0.0/19 maxlen: 19
195.90.8.0/21 maxlen: 21
92.194.128.0/17 maxlen: 17
212.63.32.0/19 maxlen: 19
92.197.130.0/24 maxlen: 24
195.32.128.0/17 maxlen: 17
194.140.96.0/20 maxlen: 20
92.201.0.0/18 maxlen: 18
92.201.0.0/17 maxlen: 17
92.201.0.0/16 maxlen: 16
92.196.128.0/17 maxlen: 17
62.206.164.0/24 maxlen: 24
62.206.165.0/24 maxlen: 24
62.206.166.0/24 maxlen: 24
92.193.0.0/17 maxlen: 17
87.193.0.0/16 maxlen: 16
92.193.128.0/17 maxlen: 17
87.234.0.0/16 maxlen: 16
212.5.0.0/19 maxlen: 19
217.146.128.0/19 maxlen: 19
212.5.8.0/21 maxlen: 21
212.4.160.0/19 maxlen: 19
92.200.0.0/17 maxlen: 17
92.200.0.0/16 maxlen: 16
212.4.176.0/20 maxlen: 20
92.200.0.0/15 maxlen: 15
212.105.192.0/19 maxlen: 19
92.192.0.0/13 maxlen: 13
83.236.0.0/20 maxlen: 20
83.236.0.0/16 maxlen: 16
83.236.16.0/20 maxlen: 20
213.148.129.0/24 maxlen: 24
213.148.130.0/24 maxlen: 24
213.148.128.0/24 maxlen: 24
213.148.128.0/19 maxlen: 19
195.158.160.0/19 maxlen: 19
213.148.133.0/24 maxlen: 24
83.236.32.0/21 maxlen: 21
92.192.0.0/17 maxlen: 17
92.198.192.0/18 maxlen: 18
212.202.40.0/21 maxlen: 21
212.202.48.0/20 maxlen: 20
212.60.192.0/18 maxlen: 18
92.195.128.0/17 maxlen: 17
62.145.0.0/19 maxlen: 19
92.196.0.0/17 maxlen: 17
212.84.224.0/19 maxlen: 19
92.192.128.0/17 maxlen: 17
62.206.0.0/16 maxlen: 16
212.202.168.0/21 maxlen: 21
212.202.176.0/20 maxlen: 20
212.84.208.0/20 maxlen: 20
2001:1a80:800::/48 maxlen: 48
2001:658::/29 maxlen: 29
2001:1a80:801::/48 maxlen: 48
2001:1a81:2000::/36 maxlen: 40
2001:1a81:4000::/36 maxlen: 40
2001:1a81:3000::/36 maxlen: 40
2001:1a81:6000::/40 maxlen: 48
2001:1a81:1000::/40 maxlen: 48
2001:1a81:1000::/36 maxlen: 40
2001:1a81:6000::/36 maxlen: 40
2001:1a81:4000::/40 maxlen: 48
2001:1a81:7000::/40 maxlen: 48
2001:1a81:5000::/36 maxlen: 40
2001:1a81:7000::/36 maxlen: 40
2001:1a81:5000::/40 maxlen: 48
2001:1a81:2000::/40 maxlen: 48
2001:1a81:3000::/40 maxlen: 48
2001:1a80:802::/48 maxlen: 48
2001:1a80::/29 maxlen: 29
2a09:7100::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:28:05:60:24:a2:42:58:ed:06:db:ea:4a:85:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Nov 15 13:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e835af306b7a60b7ef620197a0d52e593f22a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:27:11:0f:8e:39:e9:27:6c:ef:03:94:d0:
2c:c7:93:56:a9:e5:ea:71:06:b7:80:65:e0:37:a0:
3b:f2:9a:00:71:a9:29:f8:10:a0:9e:31:22:36:40:
f1:22:7e:fc:52:e9:b0:b4:71:a9:db:6b:12:66:35:
8d:d2:b1:23:82:d7:0d:43:99:a4:03:d4:03:84:2c:
19:6c:e1:6f:a5:1c:e7:92:a4:88:e5:4d:a2:4c:9b:
ad:0e:01:02:c3:66:33:26:37:46:a5:94:3a:10:9e:
60:1b:1d:d2:ab:5c:a8:0a:39:3b:a6:dd:c9:48:0f:
6d:8e:77:e2:dd:77:a4:3d:56:90:36:e1:90:98:93:
7a:4b:da:e4:9c:08:64:b7:90:11:5f:11:38:90:7f:
0f:12:80:0f:a1:b8:54:a9:27:d6:e9:a5:74:81:7c:
3a:80:d6:2e:1e:dc:6f:42:e0:df:eb:72:70:7b:6e:
73:19:ae:75:ea:9b:1e:94:24:c2:c0:07:74:b2:aa:
e4:5c:b1:92:ac:cd:ce:91:77:e6:0f:45:0b:94:7c:
2c:9b:3d:92:95:01:3b:11:2a:e8:2d:8e:77:97:d1:
0e:85:86:40:62:1f:eb:92:ca:dd:dc:7b:c9:e8:8e:
1b:d1:06:e7:00:c5:c3:23:43:3c:ca:77:29:28:d3:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:35:AF:30:6B:7A:60:B7:EF:62:01:97:A0:D5:2E:59:3F:22:A8
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/gug1rzBremC372IBl6DVLlk_Iqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.8.128.0/17
62.145.0.0/19
62.206.0.0/16
83.236.0.0/16
84.245.128.0/18
85.8.132.0/22
87.193.0.0/16
87.234.0.0/16
92.192.0.0-92.201.255.255
185.144.188.0/22
194.9.127.0/24
194.140.96.0/20
195.32.128.0/17
195.80.192.0/19
195.90.0.0/19
195.158.160.0/19
212.4.160.0/19
212.5.0.0/19
212.60.192.0/18
212.63.32.0/19
212.84.208.0-212.84.255.255
212.105.192.0/19
212.110.192.0/19
212.202.0.0/16
213.148.128.0/19
213.160.0.0/19
213.217.64.0/18
217.146.128.0/19
IPv6:
2001:658::/29
2001:1a80::/29
2a09:7100::/29
Signature Algorithm: sha256WithRSAEncryption
4c:db:c4:cd:67:f6:20:96:66:79:92:57:fb:f3:df:67:b5:e7:
ba:0c:b7:cf:9b:c2:bd:b5:5a:9c:0f:e3:a1:9e:4a:cd:db:2a:
36:ef:ab:4b:78:bb:8c:1a:7d:cf:b4:42:90:1c:11:80:55:fe:
c1:d5:c7:0e:1e:8a:1a:50:40:63:b2:72:c1:b5:d3:89:c3:27:
65:e2:40:8f:00:37:a1:79:0c:69:a4:90:89:e7:9c:78:e9:ba:
17:fe:67:ae:4a:0c:4a:e7:20:3d:c5:f0:58:15:56:c9:44:a0:
a0:5d:5d:72:79:13:d8:05:ec:db:8d:0e:a8:37:e7:33:f0:19:
35:c9:22:53:f9:f2:41:57:73:2a:1b:4a:fb:e4:da:72:c5:c7:
70:e1:15:b6:25:29:6e:80:7a:12:87:80:52:80:be:33:86:de:
65:95:95:a6:13:28:f8:c7:0c:4d:28:4d:c8:58:71:6e:aa:f8:
a1:ad:6f:01:9e:6b:3d:54:5b:6e:ab:0c:de:79:be:e7:b2:55:
67:72:c2:64:8f:df:f3:65:c9:28:6d:59:e1:78:b8:26:d2:b5:
8e:ab:fc:62:4d:b5:79:7a:ea:81:de:38:d2:40:2e:aa:13:0e:
fd:eb:4f:34:94:bf:38:16:b0:39:f9:57:ab:fc:9a:bd:91:ca:
f1:92:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net