Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/69W6l6WEdxAGrSKwnqj4W0OrxGM.roa
File: 69W6l6WEdxAGrSKwnqj4W0OrxGM.roa (raw, json)
Hash identifier: RwQawpmwBxpeb6gx3vQcO3ue8EvDHvN9iPIyvuIhAvs=
Subject key identifier: EB:D5:BA:97:A5:84:77:10:06:AD:22:B0:9E:A8:F8:5B:43:AB:C4:63
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018BCCAE017B4394FD1C8380ED161A5D3285
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/69W6l6WEdxAGrSKwnqj4W0OrxGM.roa
Signing time: Tue 14 Nov 2023 07:13:57 +0000
ROA not before: Tue 14 Nov 2023 07:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 37.235.50.0/23 maxlen: 23
37.235.48.0/20 maxlen: 20
37.235.50.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
5.180.114.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.30.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
2a03:f80:359::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f87:ffff::/48 maxlen: 48
2a03:f80::/29 maxlen: 29
2a03:f80:57::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:7::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:ae:01:7b:43:94:fd:1c:83:80:ed:16:1a:5d:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Nov 14 07:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebd5ba97a584771006ad22b09ea8f85b43abc463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:35:3a:5b:95:87:d5:76:00:cc:8d:dc:93:
ba:f8:53:e7:01:61:60:56:71:4e:4a:24:55:99:40:
2e:a0:d9:73:ae:89:90:88:9e:f4:99:69:92:8e:b8:
1a:72:ae:a1:27:5f:b9:48:a8:27:8a:1f:2d:a8:b9:
ab:a1:b4:3f:6b:18:3e:33:d7:c9:44:9f:77:14:03:
80:78:8f:f6:06:33:02:a9:6f:71:44:cf:a2:5c:c4:
47:43:31:9a:90:88:30:a7:a3:c6:36:8d:7c:31:a7:
72:d8:d0:0f:1f:f6:34:f6:9e:8d:bd:7a:43:56:ba:
c9:8d:3e:21:87:d6:24:3d:bd:59:6f:bb:37:86:e3:
c3:af:9e:14:22:cd:ad:87:a7:15:75:5b:19:0e:68:
81:e9:16:8c:d3:2e:ff:0c:58:eb:87:70:b0:04:5f:
16:de:54:47:5f:b2:62:38:18:24:37:84:34:9c:e4:
66:df:67:56:65:a2:33:a3:b3:62:28:91:82:93:b4:
b6:40:e0:0c:95:9b:92:13:e4:f2:3c:12:3b:2c:4e:
b7:83:e3:b8:30:8e:21:77:99:bf:ea:21:45:db:b6:
40:66:af:b5:a1:88:b1:da:62:3e:e4:7d:e4:22:f0:
55:00:43:69:5c:5e:b0:27:ea:e3:7f:4a:33:37:98:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:BA:97:A5:84:77:10:06:AD:22:B0:9E:A8:F8:5B:43:AB:C4:63
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/69W6l6WEdxAGrSKwnqj4W0OrxGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
83.243.120.0/24
83.243.122.0/23
89.31.123.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
103.57.250.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80::/29
Signature Algorithm: sha256WithRSAEncryption
92:76:d6:50:c6:31:7e:d2:d6:38:65:43:2a:9f:57:ef:c3:e2:
0a:30:1c:a9:d9:11:80:c7:c2:4d:93:49:cf:3d:50:76:a7:41:
65:c1:9c:56:46:60:8d:83:44:a5:69:5e:cc:fd:1c:fb:88:fb:
cf:96:40:dc:3c:83:68:e7:66:36:17:ea:3e:e8:6e:79:93:0d:
25:6c:ff:1e:64:b2:2f:15:b5:5d:d2:b9:20:d3:48:d4:7a:a4:
51:f6:11:ca:95:c5:a9:41:b0:0e:2b:61:e8:39:6f:8e:2e:3b:
f4:ad:0c:a8:66:1c:ba:8d:6b:8f:47:7c:6a:a2:dc:c3:a4:eb:
c4:fb:87:4d:3f:fa:9b:4a:2c:70:9b:c7:a7:5b:2d:7c:99:4e:
98:bb:8c:6e:05:5b:67:dd:e8:6e:b4:0c:c2:65:e9:39:ac:2b:
3b:68:04:b8:42:e2:45:7e:18:40:d6:01:c3:15:6f:0c:90:15:
f6:9c:5a:de:8e:f8:3d:fc:57:88:db:3e:9e:9a:3c:eb:b7:a4:
9a:17:d1:5f:8d:be:72:a8:c1:c4:a0:cb:e9:e2:05:17:6a:65:
bf:6a:c7:ea:95:d0:14:68:a8:60:74:fb:b2:5d:8c:de:38:ba:
cf:cc:f7:8c:5a:f0:92:5f:ad:7c:ec:5e:59:18:df:52:e1:bd:
a6:fb:74:52
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAYvMrgF7Q5T9HIOA7RYaXTKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjMxMTE0MDcxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmQ1YmE5N2E1ODQ3NzEwMDZhZDIyYjA5ZWE4Zjg1YjQzYWJjNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmA1OluVh9V2AMyN3JO6+FPnAWFg
VnFOSiRVmUAuoNlzromQiJ70mWmSjrgacq6hJ1+5SKgnih8tqLmrobQ/axg+M9fJ
RJ93FAOAeI/2BjMCqW9xRM+iXMRHQzGakIgwp6PGNo18Mady2NAPH/Y09p6NvXpD
VrrJjT4hh9YkPb1Zb7s3huPDr54UIs2th6cVdVsZDmiB6RaM0y7/DFjrh3CwBF8W
3lRHX7JiOBgkN4Q0nORm32dWZaIzo7NiKJGCk7S2QOAMlZuSE+TyPBI7LE63g+O4
MI4hd5m/6iFF27ZAZq+1oYix2mI+5H3kIvBVAENpXF6wJ+rjf0ozN5iGxQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFOvVupelhHcQBq0isJ6o+FtDq8RjMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvNjlXNmw2V0VkeEFHclNLd25xajRXME9yeEdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQABbRy
AwQEJeswAwQAU/N4AwQBU/N6AwQAWR97AwQAW4ReAwQBW+PMAwQAXPNCAwQAZzn6
MAwDBAOVmpgDBACVmpwDBAWX7AAwDAMEAJ7/0QMEAJ7/1AMEAbka7DAMAwQB1bc2
AwQB1bc4MA0EAgACMAcDBQMqAw+AMA0GCSqGSIb3DQEBCwUAA4IBAQCSdtZQxjF+
0tY4ZUMqn1fvw+IKMByp2RGAx8JNk0nPPVB2p0FlwZxWRmCNg0SlaV7M/Rz7iPvP
lkDcPINo52Y2F+o+6G55kw0lbP8eZLIvFbVd0rkg00jUeqRR9hHKlcWpQbAOK2Ho
OW+OLjv0rQyoZhy6jWuPR3xqotzDpOvE+4dNP/qbSixwm8enWy18mU6Yu4xuBVtn
3ehutAzCZek5rCs7aAS4QuJFfhhA1gHDFW8MkBX2nFrejvg9/FeI2z6emjzrt6Sa
F9Ffjb5yqMHEoMvp4gUXamW/asfqldAUaKhgdPuyXYzeOLrPzPeMWvCSX6187F5Z
GN9S4b2m+3RS
-----END CERTIFICATE-----
Generated at Tue Nov 14 09:04:50 2023 by rpki-client on console-fra.rpki-client.org