Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/l1YPjT57yM4NvhmalDB3eHMa9tE.roa
File: l1YPjT57yM4NvhmalDB3eHMa9tE.roa (raw, json)
Hash identifier: izdvUeMUV7PPeECu7FjsyE4/Eq052YbAEwX0+VvCeEs=
Subject key identifier: 97:56:0F:8D:3E:7B:C8:CE:0D:BE:19:9A:94:30:77:78:73:1A:F6:D1
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 01889B02CC7266AA106570A45644158A6E6D
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/l1YPjT57yM4NvhmalDB3eHMa9tE.roa
Signing time: Thu 08 Jun 2023 12:37:11 +0000
ROA not before: Thu 08 Jun 2023 12:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 213.124.0.0/18 maxlen: 18
213.124.0.0/17 maxlen: 17
217.100.128.0/17 maxlen: 17
185.130.174.0/23 maxlen: 23
212.178.96.0/19 maxlen: 19
213.124.128.0/19 maxlen: 19
213.124.128.0/20 maxlen: 20
213.124.144.0/20 maxlen: 20
212.178.128.0/20 maxlen: 20
80.114.128.0/18 maxlen: 18
80.114.128.0/19 maxlen: 19
212.178.128.0/19 maxlen: 19
213.124.64.0/18 maxlen: 18
212.178.64.0/19 maxlen: 19
212.178.64.0/18 maxlen: 18
195.35.192.0/18 maxlen: 18
195.35.128.0/18 maxlen: 18
195.35.128.0/17 maxlen: 17
217.102.224.0/21 maxlen: 21
217.102.224.0/22 maxlen: 22
217.102.228.0/22 maxlen: 22
217.100.0.0/17 maxlen: 17
217.100.0.0/16 maxlen: 16
91.221.96.0/23 maxlen: 23
213.125.128.0/17 maxlen: 17
212.203.0.0/20 maxlen: 20
212.203.0.0/19 maxlen: 19
213.34.160.0/19 maxlen: 19
213.34.160.0/20 maxlen: 20
212.203.16.0/20 maxlen: 20
213.34.176.0/20 maxlen: 20
80.112.160.0/19 maxlen: 19
213.126.64.0/18 maxlen: 18
213.132.160.0/20 maxlen: 20
213.132.160.0/19 maxlen: 19
195.85.128.0/19 maxlen: 19
195.85.128.0/18 maxlen: 18
213.132.176.0/20 maxlen: 20
217.105.192.0/20 maxlen: 20
217.105.192.0/19 maxlen: 19
80.112.128.0/19 maxlen: 19
80.115.224.0/19 maxlen: 19
80.112.128.0/18 maxlen: 18
80.115.224.0/20 maxlen: 20
213.126.0.0/18 maxlen: 18
213.126.0.0/17 maxlen: 17
217.105.208.0/20 maxlen: 20
80.115.240.0/20 maxlen: 20
195.85.160.0/19 maxlen: 19
212.178.192.0/20 maxlen: 20
212.178.192.0/19 maxlen: 19
212.178.208.0/20 maxlen: 20
80.242.224.0/19 maxlen: 19
80.242.224.0/20 maxlen: 20
213.125.0.0/17 maxlen: 17
213.125.0.0/16 maxlen: 16
212.178.144.0/20 maxlen: 20
80.114.160.0/19 maxlen: 19
213.34.80.0/20 maxlen: 20
80.242.240.0/20 maxlen: 20
213.34.64.0/19 maxlen: 19
213.34.64.0/20 maxlen: 20
2001:41f0::/32 maxlen: 32
2001:41f0:8000::/33 maxlen: 33
2001:41f0::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:02:cc:72:66:aa:10:65:70:a4:56:44:15:8a:6e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jun 8 12:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97560f8d3e7bc8ce0dbe199a94307778731af6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:d4:38:1b:54:0a:3b:7e:25:09:15:b6:75:
c6:67:4b:ac:3c:60:40:b9:1a:2e:3d:4b:62:b4:33:
5a:43:1b:2a:2f:eb:c1:b6:0a:1b:31:3f:b5:87:06:
32:18:0a:f2:c3:e0:0d:27:df:1d:72:db:41:13:29:
21:72:04:8c:d5:0a:25:e2:9b:c7:59:f9:2d:25:5e:
f4:11:43:6f:e9:ff:33:b4:18:e6:36:94:62:1e:36:
78:b0:ee:9c:a3:99:9a:f9:19:5b:f3:94:68:68:72:
3d:bc:df:5c:ce:87:77:d6:27:ce:c5:18:e4:09:b3:
cc:6a:03:99:88:45:68:de:95:28:b3:25:99:65:de:
40:4b:56:01:cf:36:b7:8f:45:c8:ce:9d:e3:87:dc:
a0:5a:5b:4a:c2:11:37:b8:82:89:c5:00:9d:38:7a:
d9:f6:c5:fe:40:ec:b2:84:6d:1a:65:60:69:6d:3f:
9b:86:22:1c:d2:32:40:e6:19:cf:7e:a4:be:e1:d4:
37:b0:bc:79:a5:23:a1:68:b7:ef:b6:4f:03:f5:42:
cd:60:67:53:64:82:35:a6:23:d7:1e:ae:e8:60:b9:
be:14:68:0a:76:a8:1c:3d:dc:13:58:39:81:c5:f5:
d5:a9:72:75:a3:0a:09:a2:04:86:88:fd:db:cb:f0:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:0F:8D:3E:7B:C8:CE:0D:BE:19:9A:94:30:77:78:73:1A:F6:D1
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/l1YPjT57yM4NvhmalDB3eHMa9tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.221.96.0/23
185.130.174.0/23
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/21
217.105.192.0/19
IPv6:
2001:41f0::/32
Signature Algorithm: sha256WithRSAEncryption
09:33:8f:6b:f1:e6:0d:f0:ab:ad:0a:83:18:7f:3b:e7:9a:0d:
77:56:bb:11:07:70:66:ad:09:29:3a:05:8b:b3:4c:02:45:29:
6f:21:e3:17:a4:01:0a:fa:b2:2a:fb:c6:a0:dd:03:50:a4:0f:
e8:24:f5:9a:bd:8b:0d:25:ae:77:eb:8f:76:ff:05:f5:45:2b:
64:d7:1b:dd:be:4c:63:56:02:c3:40:19:33:16:00:db:48:fc:
7d:11:de:58:2b:c6:fa:a1:06:bf:0e:d8:8f:23:24:2a:27:71:
90:12:0f:b3:c1:08:10:d1:2f:d2:df:76:98:b8:d4:46:79:b9:
cd:76:90:71:ec:94:ab:4c:30:8b:3f:93:69:4d:1f:9e:f1:53:
8b:69:b2:b3:0f:a0:a9:d6:a2:91:0b:8e:92:30:3a:42:bc:5e:
e3:eb:6b:43:f1:18:d7:38:a3:5b:9c:b8:f3:da:92:de:f1:77:
92:9f:46:e5:15:29:a4:ee:54:a5:9e:6d:eb:f1:2e:c2:9c:12:
0c:8d:9d:0e:bd:17:ed:45:4c:a7:55:4b:9f:ba:79:42:66:e2:
58:e4:46:9b:6c:31:73:41:b4:41:64:ae:83:92:68:2c:39:9a:
71:06:bb:1f:25:a4:9e:3a:c0:ef:27:c1:f0:2f:34:0c:39:ee:
36:93:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:31 2024 by rpki-client on console.sobornost.net