Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bj2XESVGW3Nwe3ZLeZtxSANn6ew.roa
File: bj2XESVGW3Nwe3ZLeZtxSANn6ew.roa (raw, json)
Hash identifier: JANinj/K7ZYSGJ1HIo18fKal0/guQHJOB4dfNQzNweo=
Subject key identifier: 6E:3D:97:11:25:46:5B:73:70:7B:76:4B:79:9B:71:48:03:67:E9:EC
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01879FC2E05B96268C6CE23F3B483CDC68F7
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bj2XESVGW3Nwe3ZLeZtxSANn6ew.roa
Signing time: Thu 20 Apr 2023 17:42:41 +0000
ROA not before: Thu 20 Apr 2023 17:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
80.70.32.0/20 maxlen: 20
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
93.0.0.0/11 maxlen: 11
109.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 12
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 14
37.64.0.0/13 maxlen: 24
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
195.115.0.0/16 maxlen: 16
78.155.128.0/19 maxlen: 19
88.142.0.0/16 maxlen: 16
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:c2:e0:5b:96:26:8c:6c:e2:3f:3b:48:3c:dc:68:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 20 17:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e3d971125465b73707b764b799b71480367e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:c9:96:e9:82:56:d5:cd:1d:7b:a0:47:51:
cf:63:d2:62:59:46:4e:0e:b3:1a:5f:6b:5b:09:f4:
fd:2e:01:da:cc:ec:03:98:fd:2f:51:be:aa:57:1d:
17:4b:29:be:89:fd:82:39:cf:19:2f:5d:3c:00:51:
c0:f7:3e:38:70:20:ba:a4:48:0e:79:75:78:c2:cd:
0d:14:0e:d5:1d:d7:1a:94:2f:eb:d2:f8:70:9c:dd:
89:7a:88:1a:77:9f:90:59:7e:31:36:26:89:bc:4c:
a9:fb:39:be:34:7f:f8:50:5e:2d:eb:c2:e2:28:c9:
fd:2f:68:f9:9c:5a:ba:3d:d9:75:e8:f0:26:00:1d:
6c:37:e0:19:5e:c0:54:46:f0:5b:c6:94:3f:bb:22:
7a:1c:15:a6:38:d3:e2:5c:c4:1b:06:c8:99:2c:fb:
70:2a:e2:e7:f9:e2:91:3c:f5:95:c7:ae:38:55:d3:
d9:7e:57:ca:2c:ae:f8:7c:d9:78:d7:1d:c5:e1:bf:
53:65:bf:dc:70:e1:0f:39:25:ca:0f:f7:d3:be:35:
e0:e6:b6:b0:bb:01:4d:72:5a:ce:a8:a0:d5:09:26:
99:61:7d:4f:6c:fe:d0:4a:1b:4c:1c:c3:9a:8c:6c:
60:5d:c8:1d:7e:ad:9e:96:96:a4:f8:09:81:59:34:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:97:11:25:46:5B:73:70:7B:76:4B:79:9B:71:48:03:67:E9:EC
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bj2XESVGW3Nwe3ZLeZtxSANn6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
62:fd:88:f3:fc:4d:cd:43:ae:e8:0b:50:5b:d2:ba:af:6f:eb:
3d:f1:67:00:b8:f8:de:5c:26:f4:ea:cd:96:ab:85:44:89:2d:
6e:f0:bb:91:d5:93:54:26:75:94:e0:d3:94:e1:29:b4:2d:13:
df:d1:1d:15:01:45:d9:8d:c8:f4:19:6b:a5:9f:6a:19:b1:77:
06:a8:12:c1:a9:2f:85:7f:ff:55:38:61:ba:46:37:18:38:50:
e0:66:48:25:9e:b4:c1:fa:9c:fa:0d:85:5c:29:24:f0:8e:e4:
85:12:8d:7f:d1:b1:fa:7e:e2:2b:2e:e0:7e:cd:17:de:44:19:
09:04:13:f8:c5:12:35:69:1c:7e:85:9c:76:7d:67:4b:61:78:
3b:39:39:9d:ce:23:c8:2f:5b:bc:b7:b7:28:88:d4:6f:36:f2:
0b:63:e6:ec:f1:91:78:8f:02:99:53:7d:ed:dc:bf:ed:7c:bb:
ac:14:07:bb:ef:ca:ab:01:02:67:f9:ac:27:0f:56:0d:fc:70:
91:a7:01:cc:c2:4f:a4:e1:79:82:20:db:6c:04:07:3c:82:4f:
7f:b8:0b:68:b5:c4:e7:2e:82:69:19:9e:7b:56:39:c7:20:c1:
da:08:0b:25:eb:d6:ad:7a:b6:9a:db:61:53:20:3d:32:c5:55:
81:28:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net