Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/kMmUoG0hd2aABEP0jmcBb2bqhYQ.roa
File: kMmUoG0hd2aABEP0jmcBb2bqhYQ.roa (raw, json)
Hash identifier: zcl8R/R8T5UEIjoy7OB9wSgNnKXo5JBY8DFP3p0i6JU=
Subject key identifier: 90:C9:94:A0:6D:21:77:66:80:04:43:F4:8E:67:01:6F:66:EA:85:84
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 018570396993E61FBE8AD5FF726A747C0DB7
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/kMmUoG0hd2aABEP0jmcBb2bqhYQ.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 213.124.0.0/18 maxlen: 18
213.124.0.0/17 maxlen: 17
217.100.128.0/17 maxlen: 17
185.130.174.0/23 maxlen: 23
212.178.96.0/19 maxlen: 19
213.124.128.0/19 maxlen: 19
213.124.128.0/20 maxlen: 20
213.124.144.0/20 maxlen: 20
212.178.128.0/20 maxlen: 20
80.114.128.0/18 maxlen: 18
80.114.128.0/19 maxlen: 19
212.178.128.0/19 maxlen: 19
213.124.64.0/18 maxlen: 18
212.178.64.0/19 maxlen: 19
212.178.64.0/18 maxlen: 18
195.35.192.0/18 maxlen: 18
195.35.128.0/18 maxlen: 18
195.35.128.0/17 maxlen: 17
217.102.224.0/21 maxlen: 21
217.100.0.0/17 maxlen: 17
217.100.0.0/16 maxlen: 16
91.221.96.0/23 maxlen: 23
213.125.128.0/17 maxlen: 17
212.203.0.0/20 maxlen: 20
212.203.0.0/19 maxlen: 19
213.34.160.0/19 maxlen: 19
213.34.160.0/20 maxlen: 20
212.203.16.0/20 maxlen: 20
213.34.176.0/20 maxlen: 20
80.112.160.0/19 maxlen: 19
213.126.64.0/18 maxlen: 18
213.132.160.0/20 maxlen: 20
213.132.160.0/19 maxlen: 19
195.85.128.0/19 maxlen: 19
195.85.128.0/18 maxlen: 18
213.132.176.0/20 maxlen: 20
217.105.192.0/20 maxlen: 20
217.105.192.0/19 maxlen: 19
80.112.128.0/19 maxlen: 19
80.115.224.0/19 maxlen: 19
80.112.128.0/18 maxlen: 18
80.115.224.0/20 maxlen: 20
213.126.0.0/18 maxlen: 18
213.126.0.0/17 maxlen: 17
217.105.208.0/20 maxlen: 20
80.115.240.0/20 maxlen: 20
195.85.160.0/19 maxlen: 19
212.178.192.0/20 maxlen: 20
212.178.192.0/19 maxlen: 19
212.178.208.0/20 maxlen: 20
80.242.224.0/19 maxlen: 19
80.242.224.0/20 maxlen: 20
213.125.0.0/17 maxlen: 17
213.125.0.0/16 maxlen: 16
212.178.144.0/20 maxlen: 20
80.114.160.0/19 maxlen: 19
213.34.80.0/20 maxlen: 20
80.242.240.0/20 maxlen: 20
213.34.64.0/19 maxlen: 19
213.34.64.0/20 maxlen: 20
2001:41f0::/32 maxlen: 32
2001:41f0:8000::/33 maxlen: 33
2001:41f0::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:69:93:e6:1f:be:8a:d5:ff:72:6a:74:7c:0d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90c994a06d217766800443f48e67016f66ea8584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:44:04:50:39:e3:a9:91:88:3b:64:c0:1c:
0d:5e:7b:a5:2c:de:b6:07:b9:68:65:20:35:47:49:
d3:b7:d4:6a:92:7b:b3:e8:dd:cb:00:54:a6:c6:69:
bb:c7:e5:ce:f5:50:e2:11:65:ae:d1:02:d3:97:0d:
94:e3:61:7b:db:b3:7c:b9:f3:05:53:12:9e:94:8b:
1d:53:e7:7e:8d:5e:0d:13:59:47:44:c5:77:d5:05:
6f:ce:af:ae:7d:9e:b8:65:70:63:38:70:98:05:c7:
79:b4:01:df:59:94:31:d4:42:80:1a:ae:1a:99:8d:
36:6c:18:91:f3:f8:8a:43:47:06:03:21:93:04:0a:
5f:a8:9c:d9:cb:4d:cf:80:6a:d4:48:3f:19:56:40:
3a:4a:42:60:f3:34:4d:ec:5d:70:6b:de:d3:ce:68:
7d:af:02:c4:95:46:e8:f4:44:28:f8:11:63:2a:d1:
61:1c:d7:65:a3:bd:d1:49:19:04:30:7b:9a:d4:87:
af:68:da:61:97:02:9d:2d:f8:47:6a:33:1e:f4:6c:
1f:2a:7b:b4:06:33:99:ae:ac:e4:75:e6:19:1b:01:
a6:79:21:6c:ec:2a:42:95:e7:e0:f2:87:70:60:70:
7c:a5:2e:62:f2:0f:83:53:5c:fa:56:99:d9:fa:f9:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:94:A0:6D:21:77:66:80:04:43:F4:8E:67:01:6F:66:EA:85:84
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/kMmUoG0hd2aABEP0jmcBb2bqhYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.221.96.0/23
185.130.174.0/23
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/21
217.105.192.0/19
IPv6:
2001:41f0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:76:cf:6e:6d:b2:00:bd:e7:23:96:85:7a:2c:08:32:7a:a8:
ca:8e:60:17:8f:b8:78:c9:d4:75:e3:80:2a:f5:fd:8a:37:bc:
1d:31:45:45:a1:db:45:2e:bd:a2:91:fb:7e:33:97:af:94:0f:
e2:fe:bc:82:77:5f:e6:cf:82:9f:7b:fa:f6:bf:bc:4d:88:1f:
fe:9e:44:df:db:4d:5b:a0:da:9c:55:50:15:db:54:f3:dd:8c:
5e:e5:ae:1b:7a:d7:7f:0b:b2:66:3b:20:40:73:b9:b6:ab:cf:
41:db:36:80:7f:d0:fe:e0:65:c7:71:46:4a:f4:2d:79:80:3c:
8d:30:d2:1c:b1:de:3e:b1:d9:21:8f:47:e6:2a:a9:f1:54:ca:
da:8b:9d:09:f5:e5:4f:f9:9e:f7:cb:9e:e4:b4:59:f6:8b:03:
3e:94:56:c2:c5:84:7e:9f:55:8f:e1:b5:30:ac:f2:d0:e9:17:
9f:cc:ed:d9:11:0d:c3:19:58:75:6e:72:52:38:4d:39:1c:24:
d5:e3:5b:d6:75:13:d0:90:e2:5c:a5:70:71:b0:d9:10:87:59:
8c:bc:32:05:d1:a2:96:15:5d:84:8c:49:f8:3a:d9:8d:e4:ed:
06:c4:e7:51:16:5a:70:48:1c:99:7c:67:53:6f:2a:3f:7f:ed:
c6:96:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:17 2023 by rpki-client on console.sobornost.net