Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/CNddOsKzIV_vFtBfjhvKTxhyYEI.roa
File: CNddOsKzIV_vFtBfjhvKTxhyYEI.roa (raw, json)
Hash identifier: kl38eRWxSVtsYIpgTCcHtBn7yx6JKdxGQO/70I8uL7c=
Subject key identifier: 08:D7:5D:3A:C2:B3:21:5F:EF:16:D0:5F:8E:1B:CA:4F:18:72:60:42
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893A8FD19DF8198716A6A2BF5688AFC0C3
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/CNddOsKzIV_vFtBfjhvKTxhyYEI.roa
Signing time: Sun 09 Jul 2023 12:10:51 +0000
ROA not before: Sun 09 Jul 2023 12:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.138.250.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.128.0/24 maxlen: 24
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.176.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:8f:d1:9d:f8:19:87:16:a6:a2:bf:56:88:af:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d75d3ac2b3215fef16d05f8e1bca4f18726042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:53:8c:03:d7:31:b4:87:18:f9:95:14:7e:
b3:5f:54:3f:57:7b:58:70:72:50:d1:38:7b:b8:32:
48:6a:a6:6b:d9:89:d4:89:71:c0:39:51:9f:3a:98:
7f:b2:97:3e:a3:30:b0:07:2a:c8:c5:8b:4e:57:c9:
da:c1:14:09:8f:90:51:94:64:10:f5:53:62:a7:95:
8f:06:d8:4e:01:5d:6c:d3:1e:61:60:d2:09:d5:01:
bd:6f:b2:5a:c4:f9:17:59:9e:9a:a4:90:6f:e2:86:
e5:58:ca:f3:6c:f1:76:43:80:1c:2d:68:d6:67:f3:
76:ee:e5:3e:eb:a1:b4:02:2b:df:3a:dc:95:9a:de:
ab:36:a3:4b:a8:b4:59:25:36:35:12:91:fa:38:00:
0e:dc:c4:cd:ab:cd:d1:93:99:26:ce:90:02:7b:1b:
e7:41:95:93:e2:3e:ce:70:46:03:8d:64:8a:e4:1d:
9b:4d:c1:6f:82:83:ff:ea:a7:13:2c:68:cc:90:bf:
5d:08:27:56:4c:3b:43:0a:ab:d1:64:72:1b:1c:98:
51:2b:d3:08:ab:66:89:9e:cc:f0:06:55:1d:e3:8a:
b7:a5:3b:15:03:5d:15:ea:3f:3b:46:60:d7:db:34:
5e:87:5a:b3:cb:0e:9f:69:23:f5:db:37:d2:ae:05:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:5D:3A:C2:B3:21:5F:EF:16:D0:5F:8E:1B:CA:4F:18:72:60:42
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/CNddOsKzIV_vFtBfjhvKTxhyYEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.24.0/21
212.138.43.0/24
212.138.52.0-212.138.67.255
212.138.72.0/21
212.138.84.0/23
212.138.104.0/24
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.126.255
212.138.128.0/24
212.138.130.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.153.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.166.0/24
212.138.168.0/24
212.138.172.0/24
212.138.176.0/23
212.138.183.0/24
212.138.185.0/24
212.138.187.0/24
212.138.190.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0/24
212.138.203.0/24
212.138.206.0/24
212.138.250.0/24
IPv6:
2001:1490:103::/48
2001:1490:106::/47
Signature Algorithm: sha256WithRSAEncryption
22:56:29:a0:76:60:8c:9d:65:80:d8:ea:fd:f2:ef:d7:08:c0:
dd:c5:23:7a:c6:3e:d8:73:ee:1f:ba:cc:0b:25:12:d6:09:ae:
09:48:be:92:bf:66:5b:20:22:cf:b5:50:55:cd:34:66:40:69:
68:58:a3:d5:21:a7:de:36:2d:e8:96:33:7b:be:08:54:40:76:
d1:d2:ce:ca:3c:6d:58:c8:3b:10:2b:da:d5:c7:ee:ce:79:c5:
df:a4:40:e8:d8:bf:40:b0:46:73:bb:aa:5f:ca:b0:12:43:6f:
24:be:58:fd:ab:29:96:04:39:e2:fe:ad:35:aa:29:20:5c:94:
02:56:b2:8c:f1:24:7a:1d:df:a9:6c:08:e5:2e:b4:52:18:24:
c9:f1:1f:cd:4e:9b:2f:f8:c3:3e:4b:b7:76:3c:c4:37:45:6d:
28:b8:f4:26:fa:63:0b:6f:e1:63:66:cd:3e:e8:07:11:81:24:
f7:80:29:c1:d4:f7:c3:22:6c:04:86:4b:d5:71:8f:aa:61:54:
56:74:06:74:e2:94:1e:c8:27:16:28:7b:f2:43:4d:0e:b4:ca:
3d:d5:c4:b6:32:07:f8:87:73:3d:60:bd:ad:68:84:04:e2:ac:
aa:5f:ec:96:57:fa:f3:24:c1:aa:aa:f6:01:4d:0e:b2:1b:43:
3f:a8:bb:5f
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAYk6j9Gd+BmHFqaiv1aIr8DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMwNzA5MTIxMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQ3NWQzYWMyYjMyMTVmZWYxNmQwNWY4ZTFiY2E0ZjE4NzI2MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoENTjAPXMbSHGPmVFH6zX1Q/V3tY
cHJQ0Th7uDJIaqZr2YnUiXHAOVGfOph/spc+ozCwByrIxYtOV8nawRQJj5BRlGQQ
9VNip5WPBthOAV1s0x5hYNIJ1QG9b7JaxPkXWZ6apJBv4oblWMrzbPF2Q4AcLWjW
Z/N27uU+66G0AivfOtyVmt6rNqNLqLRZJTY1EpH6OAAO3MTNq83Rk5kmzpACexvn
QZWT4j7OcEYDjWSK5B2bTcFvgoP/6qcTLGjMkL9dCCdWTDtDCqvRZHIbHJhRK9MI
q2aJnszwBlUd44q3pTsVA10V6j87RmDX2zReh1qzyw6faSP12zfSrgXdhQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFAjXXTrCsyFf7xbQX44byk8YcmBCMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvQ05kZE9zS3pJVl92RnRCZmpodktUeGh5WUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIHhBAIAATCB2gME
A9QaGAMEANSKKzAMAwQC1Io0AwQC1IpAAwQD1IpIAwQB1IpUAwQA1IpoAwQA1Ips
MAwDBADUinMDBAHUingwDAMEANSKfQMEANSKfgMEANSKgAMEANSKggMEANSKhjAM
AwQA1IqLAwQA1IqMAwQA1IqZAwQA1IqdAwQA1IqgAwQA1IqiAwQA1IqmAwQA1Iqo
AwQA1IqsAwQB1IqwAwQA1Iq3AwQA1Iq5AwQA1Iq7AwQA1Iq+AwQA1IrCAwQA1IrE
AwQA1IrJAwQA1IrLAwQA1IrOAwQA1Ir6MBgEAgACMBIDBwAgARSQAQMDBwEgARSQ
AQYwDQYJKoZIhvcNAQELBQADggEBACJWKaB2YIydZYDY6v3y79cIwN3FI3rGPthz
7h+6zAslEtYJrglIvpK/ZlsgIs+1UFXNNGZAaWhYo9Uhp942LeiWM3u+CFRAdtHS
zso8bVjIOxAr2tXH7s55xd+kQOjYv0CwRnO7ql/KsBJDbyS+WP2rKZYEOeL+rTWq
KSBclAJWsozxJHod36lsCOUutFIYJMnxH81Omy/4wz5Lt3Y8xDdFbSi49Cb6Ywtv
4WNmzT7oBxGBJPeAKcHU98MibASGS9Vxj6phVFZ0BnTilB7IJxYoe/JDTQ60yj3V
xLYyB/iHcz1gva1ohATirKpf7JZX+vMkwaqq9gFNDrIbQz+ou18=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net