Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/XPe2GPGo1YIX3nhrpCqyYmQX2T0.roa
File: XPe2GPGo1YIX3nhrpCqyYmQX2T0.roa (raw, json)
Hash identifier: 6y8KBTzGY2/l4XM7IsrF4rCp31+uNXTysPzSf3Ist7A=
Subject key identifier: 5C:F7:B6:18:F1:A8:D5:82:17:DE:78:6B:A4:2A:B2:62:64:17:D9:3D
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 018737A293E8865F1BD3138DD4623133DF2B
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/XPe2GPGo1YIX3nhrpCqyYmQX2T0.roa
Signing time: Fri 31 Mar 2023 12:26:54 +0000
ROA not before: Fri 31 Mar 2023 12:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61098
IP address blocks: 159.100.240.0/22 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.248.0/21 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
185.150.8.0/22 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
185.19.28.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
138.124.208.0/22 maxlen: 22
194.182.164.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
194.182.176.0/22 maxlen: 24
89.145.160.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
89.145.166.0/23 maxlen: 24
194.182.180.0/22 maxlen: 24
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a04:c42::/32 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c41::/32 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c45::/32 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a04:c43::/32 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Apr 2023 14:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:a2:93:e8:86:5f:1b:d3:13:8d:d4:62:31:33:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Mar 31 12:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cf7b618f1a8d58217de786ba42ab2626417d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:42:ef:91:b7:70:5a:6d:d1:0e:5f:a6:94:
c2:91:7e:a6:da:ed:79:fe:6a:32:ee:07:e2:67:99:
d1:65:b2:56:2f:2c:98:d8:b6:16:10:99:3d:5a:a1:
66:96:9c:ed:cd:af:78:e9:34:a0:a9:67:70:f1:fb:
4f:1e:ff:f1:6b:ef:e8:a9:6f:74:f0:e4:f8:cc:b0:
f1:c0:ce:58:f1:c6:d2:39:85:bd:a4:e5:47:4b:dc:
92:75:8b:30:f1:af:fb:aa:fa:3a:e7:e9:c0:77:43:
5f:a7:2d:65:a1:2b:17:3e:29:0d:c6:38:ac:33:b4:
65:44:7e:d4:de:4d:7b:f1:c9:8d:d2:67:c1:0c:48:
f5:20:81:ec:7e:4a:89:4a:0f:f0:5f:81:c4:e3:92:
08:58:b7:2d:e2:29:4f:a0:e9:8d:f3:f9:57:e8:44:
b6:53:92:98:6d:f7:31:6e:d7:0e:70:3a:46:89:2e:
7b:0b:7f:63:eb:27:f9:d4:52:39:4c:2c:98:f4:5d:
04:67:42:ba:74:9c:d1:2e:25:e2:d8:aa:f4:9a:4f:
24:84:5d:5e:08:db:8c:c6:fa:c3:f8:fd:26:dc:fc:
73:af:63:a8:25:a2:b6:a0:69:79:26:34:5f:12:7e:
f2:09:c4:41:7a:28:0e:f2:6b:cc:09:ec:44:04:42:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F7:B6:18:F1:A8:D5:82:17:DE:78:6B:A4:2A:B2:62:64:17:D9:3D
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/XPe2GPGo1YIX3nhrpCqyYmQX2T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
138.124.208.0/22
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc0:70::/47
2a07:6cc1::-2a07:6cc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:16:bc:63:a4:ac:11:3f:8b:c6:b5:19:27:3c:5c:58:f2:04:
f7:b8:4f:26:4d:b7:98:34:95:48:98:4c:1e:6d:fc:2d:a7:20:
d8:75:dd:df:83:e1:61:c1:e1:e9:d9:45:6a:94:94:9f:b1:0b:
ae:51:c1:38:44:23:e7:3e:8e:0a:b2:2f:ea:24:d9:54:b8:8b:
20:9f:a1:9d:4f:02:c5:5c:f7:bd:64:41:f9:36:e8:02:43:b9:
a4:d4:ca:0d:9b:33:0e:5a:63:a9:3e:34:86:8c:85:5e:47:87:
3a:f5:c8:55:bc:7c:e9:8a:6b:51:a4:92:52:7d:31:74:03:f6:
f5:3c:cc:3a:98:94:d1:50:3f:ec:9f:b5:8b:0f:1a:26:9d:bf:
da:16:53:83:95:be:b0:43:b8:a1:82:17:f7:ae:1c:50:e0:b5:
0c:3a:5e:b9:98:0c:a2:6e:12:97:8f:3e:db:46:2d:84:d1:7b:
1d:e4:fa:19:b4:af:f9:a7:a3:00:e6:b2:e7:2c:c1:d8:df:6a:
50:5d:54:80:20:7a:df:ab:c3:d1:4b:67:c6:2a:88:4c:82:ec:
7f:a3:71:82:90:dd:ce:10:7e:72:11:f3:c9:74:96:d8:ec:75:
ff:66:6c:04:45:22:5d:55:07:b1:a7:44:6f:c0:6d:3d:09:d8:
f6:d8:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org