Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Puj8RmHIRTVO7oskIenWCa3L5Fs.roa
File: Puj8RmHIRTVO7oskIenWCa3L5Fs.roa (raw, json)
Hash identifier: aOtkuVPjq7Q0e/+6wcpzBx0c4YxrkpGo2Io64hy49Zg=
Subject key identifier: 3E:E8:FC:46:61:C8:45:35:4E:EE:8B:24:21:E9:D6:09:AD:CB:E4:5B
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01856F9DDBDB8060E80A878EA638687F5C88
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Puj8RmHIRTVO7oskIenWCa3L5Fs.roa
Signing time: Sun 01 Jan 2023 23:14:54 +0000
ROA not before: Sun 01 Jan 2023 23:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43937
IP address blocks: 213.187.255.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.252.0/23 maxlen: 23
213.187.250.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.48.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
2a02:7980:105::/48 maxlen: 48
2a02:7980::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:db:db:80:60:e8:0a:87:8e:a6:38:68:7f:5c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 1 23:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee8fc4661c845354eee8b2421e9d609adcbe45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:5b:8e:e8:7c:d7:96:1c:7b:39:b1:66:91:
1e:91:2f:e4:e8:01:f0:96:0d:3a:2b:47:eb:46:d1:
50:27:83:35:ca:59:a4:0a:4b:85:3a:57:e1:5e:65:
80:23:06:79:26:fd:63:7b:a4:29:fb:d1:27:eb:7b:
9b:34:8d:bb:fd:7a:1e:8b:d7:83:5b:ca:78:6f:2c:
45:22:a1:8e:a6:c2:cb:e8:5c:b2:09:36:18:18:e0:
73:0d:02:78:84:77:6a:f3:a0:5e:52:7e:02:ca:68:
87:d4:00:44:2c:34:bb:9d:13:35:5a:39:fe:52:90:
c1:1c:20:7d:35:46:cf:86:c2:03:9e:fe:5e:52:5d:
7b:bd:a7:18:9b:9f:2d:e1:b8:a8:fb:ac:a8:39:59:
39:bc:76:b3:b3:7b:c9:da:63:84:ca:f2:59:63:0a:
05:52:56:9a:41:6a:a4:95:ce:26:cc:6a:cf:1c:80:
ad:73:0a:15:e2:58:ca:24:c4:f5:16:28:73:f8:34:
7b:c0:07:40:3d:5c:19:3c:2a:f8:e0:3f:0b:08:9b:
f1:cd:91:de:5a:d8:da:fc:a3:c5:ca:92:bb:c2:25:
f7:25:2f:14:45:05:3f:9a:95:ab:4b:e0:4b:f0:1f:
ff:a3:95:24:0e:f6:54:d5:99:19:fb:07:5f:9c:5b:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:FC:46:61:C8:45:35:4E:EE:8B:24:21:E9:D6:09:AD:CB:E4:5B
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Puj8RmHIRTVO7oskIenWCa3L5Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
13:14:06:48:48:1c:2f:a8:85:c2:2b:c8:a8:79:71:5b:2a:95:
2a:29:9c:27:b3:28:9a:93:c7:47:60:2c:37:77:a0:09:c7:9f:
67:93:82:66:7c:c2:4e:99:9a:a8:ec:28:01:02:ff:6e:62:23:
9b:7f:31:fb:f5:49:28:ec:52:e9:1e:f5:1b:00:14:32:f8:d4:
d1:55:8c:35:9e:13:52:70:48:7e:80:ad:d2:b3:fe:98:76:22:
0c:87:7c:52:53:2a:99:70:4c:4a:fb:ed:96:fe:bd:18:c4:e8:
9c:d0:4c:d6:76:78:bc:18:2b:48:51:61:35:18:9f:d9:65:9c:
9c:ef:8f:b5:02:57:35:92:0f:b0:07:49:5a:35:64:6c:87:25:
78:d8:2d:b4:84:8f:a1:ac:45:c7:1a:3a:e5:a5:7e:c9:fe:84:
9a:c0:5d:9e:7f:a7:16:39:82:b0:35:85:0c:0b:c3:c8:25:d9:
d9:95:29:a4:0f:13:4c:ec:4d:53:ec:33:3d:3c:fb:d9:83:ec:
76:f2:13:0b:b0:31:85:eb:0f:5e:2a:97:7d:14:79:f9:ee:bd:
9a:68:d8:fa:94:58:98:53:91:17:66:7f:41:13:19:17:8e:b1:
fc:85:5a:fc:19:e8:f6:82:44:bf:b1:60:ff:85:10:99:00:8f:
1c:e4:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net