Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/84BnEGlpwXvrB3zd3gX9Fq3nAZo.roa
File: 84BnEGlpwXvrB3zd3gX9Fq3nAZo.roa (raw, json)
Hash identifier: HfLinWS4PoxXny4JD2q5jNfPbfL3RgtVwCDP+TRixtY=
Subject key identifier: F3:80:67:10:69:69:C1:7B:EB:07:7C:DD:DE:05:FD:16:AD:E7:01:9A
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 01856D01B5100D9D92A2A4390F9E68BF0D3A
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/84BnEGlpwXvrB3zd3gX9Fq3nAZo.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5385
IP address blocks: 194.208.56.0/24 maxlen: 24
194.208.52.0/24 maxlen: 24
194.208.63.0/24 maxlen: 24
194.208.61.0/24 maxlen: 24
194.208.62.0/24 maxlen: 24
194.208.60.0/24 maxlen: 24
194.208.68.0/24 maxlen: 24
194.208.76.0/24 maxlen: 24
194.208.77.0/24 maxlen: 24
194.208.74.0/24 maxlen: 24
194.208.72.0/24 maxlen: 24
194.208.78.0/24 maxlen: 24
194.208.83.0/24 maxlen: 24
194.208.82.0/24 maxlen: 24
194.208.80.0/24 maxlen: 24
194.208.81.0/24 maxlen: 24
194.208.79.0/24 maxlen: 24
194.208.89.0/24 maxlen: 24
194.208.96.0/23 maxlen: 23
194.208.94.0/24 maxlen: 24
194.208.92.0/24 maxlen: 24
194.208.93.0/24 maxlen: 24
194.208.104.0/24 maxlen: 24
194.208.105.0/24 maxlen: 24
194.208.102.0/24 maxlen: 24
194.208.1.0/24 maxlen: 24
194.208.0.0/17 maxlen: 17
194.208.7.0/24 maxlen: 24
194.208.10.0/24 maxlen: 24
194.208.11.0/24 maxlen: 24
194.208.17.0/24 maxlen: 24
194.208.15.0/24 maxlen: 24
194.208.12.0/24 maxlen: 24
194.208.13.0/24 maxlen: 24
194.208.18.0/24 maxlen: 24
194.208.23.0/24 maxlen: 24
194.208.25.0/24 maxlen: 24
194.208.43.0/24 maxlen: 24
194.208.42.0/24 maxlen: 24
194.208.40.0/24 maxlen: 24
194.208.41.0/24 maxlen: 24
194.208.49.0/24 maxlen: 24
194.208.45.0/24 maxlen: 24
194.208.46.0/24 maxlen: 24
194.208.51.0/24 maxlen: 24
194.208.160.0/20 maxlen: 20
194.208.186.0/24 maxlen: 24
194.208.184.0/21 maxlen: 21
194.208.187.0/24 maxlen: 24
194.208.192.0/18 maxlen: 18
194.208.207.0/24 maxlen: 24
194.208.108.0/24 maxlen: 24
194.208.107.0/24 maxlen: 24
194.208.116.0/24 maxlen: 24
194.208.117.0/24 maxlen: 24
194.208.120.0/24 maxlen: 24
194.208.121.0/24 maxlen: 24
194.208.127.0/24 maxlen: 24
194.183.148.0/24 maxlen: 24
194.183.146.0/24 maxlen: 24
194.183.147.0/24 maxlen: 24
194.183.152.0/24 maxlen: 24
194.183.151.0/24 maxlen: 24
194.183.153.0/24 maxlen: 24
80.75.224.0/20 maxlen: 20
194.183.128.0/19 maxlen: 19
194.183.131.0/24 maxlen: 24
194.183.132.0/24 maxlen: 24
194.183.129.0/24 maxlen: 24
194.183.130.0/24 maxlen: 24
194.183.128.0/24 maxlen: 24
194.183.138.0/24 maxlen: 24
194.183.136.0/24 maxlen: 24
194.183.137.0/24 maxlen: 24
194.183.140.0/24 maxlen: 24
194.183.143.0/24 maxlen: 24
194.208.243.0/24 maxlen: 24
194.208.245.0/24 maxlen: 24
2001:af8:6106::/48 maxlen: 48
2001:af8::/32 maxlen: 32
2001:af8:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b5:10:0d:9d:92:a2:a4:39:0f:9e:68:bf:0d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38067106969c17beb077cddde05fd16ade7019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:7a:df:81:00:a3:67:55:b0:aa:7f:a2:c8:
f6:89:83:fe:e3:be:62:eb:9b:75:c4:e5:a9:2b:f2:
a1:7f:98:86:9a:7e:cc:8f:ce:17:1a:0e:6c:4e:43:
a4:a6:5d:36:c7:d8:a0:36:90:fc:4f:9b:d0:40:99:
a4:02:dd:31:73:c4:e6:03:da:fc:70:47:8e:12:82:
c6:80:bf:0c:c3:b9:b7:56:84:9c:b7:8d:b3:aa:83:
ea:56:08:3b:9a:bb:95:f5:14:8c:61:31:99:98:02:
8a:b2:26:c8:3f:09:5b:1b:c6:3c:d4:72:e7:97:fe:
33:5f:8c:96:69:ee:9d:3b:2b:f5:b7:43:db:0f:28:
85:60:d9:3b:ee:2d:5f:48:b6:8d:bb:da:73:20:03:
f5:a7:ca:3c:fc:37:dc:47:5e:a1:35:34:4f:d7:a2:
1b:d0:db:eb:75:9b:3c:8f:44:10:5e:e8:4f:9b:07:
97:3f:9a:31:15:ee:c4:37:b8:ca:ab:eb:fd:7d:5d:
85:0a:ca:38:06:8c:de:c9:18:99:d6:e8:72:db:6c:
d6:fd:06:85:f2:73:0f:59:96:80:b4:73:c9:4d:1e:
81:f6:02:25:a6:6c:50:53:51:8a:f5:6e:19:19:7c:
e3:4b:59:41:66:2d:e0:3c:5f:33:4e:58:03:32:c5:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:67:10:69:69:C1:7B:EB:07:7C:DD:DE:05:FD:16:AD:E7:01:9A
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/84BnEGlpwXvrB3zd3gX9Fq3nAZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
194.183.128.0/19
194.208.0.0/17
194.208.160.0/20
194.208.184.0-194.208.255.255
IPv6:
2001:af8::/32
Signature Algorithm: sha256WithRSAEncryption
7c:e0:cc:f5:4f:3a:f8:46:47:94:4c:54:27:43:46:4e:71:4f:
2d:b5:fe:8e:eb:b2:56:9b:b4:92:b1:9d:9d:a0:95:b9:f3:1b:
ba:84:d8:77:66:58:65:73:dd:bd:8a:0c:71:5b:5b:00:a3:98:
6b:ce:fe:ee:11:89:22:74:22:6f:e4:81:1c:90:b7:06:d9:4c:
31:1f:ef:f0:ce:b4:04:b1:b2:4e:cb:67:96:6a:d0:e6:4a:3b:
a5:dc:e9:98:40:58:50:a8:bc:d3:0e:ee:cb:d8:e4:60:38:5e:
4f:09:3e:59:cb:6e:87:55:9b:f7:25:84:7e:b3:db:3f:52:c4:
e4:72:c6:15:6e:7b:ac:c3:2f:cc:f1:8a:1f:4d:0e:a0:e3:7f:
06:e5:78:2b:d0:0a:43:1c:fa:c0:48:6c:1b:1b:e6:a2:db:95:
e1:3b:6e:e9:ec:d4:89:f0:c6:20:d9:e1:cd:16:b6:ee:e3:01:
97:25:ef:40:f1:6d:94:c8:fe:02:14:3d:fd:8a:ce:c0:82:c9:
16:07:04:4e:81:5e:b3:9c:00:3c:33:a2:ba:8f:0a:e3:2d:ba:
61:40:b4:9c:a2:24:35:36:a8:4b:f2:9b:7f:3f:93:6f:8f:ad:
33:8f:01:46:59:fb:ed:fb:c6:c2:03:f5:e2:99:1b:96:a2:52:
55:f5:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net