Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/szbGV50wQxnhmZgrz4Y-1QchHSU.roa
File: szbGV50wQxnhmZgrz4Y-1QchHSU.roa (raw, json)
Hash identifier: 0VBiKxSnOGMeTv0FNCCbOj72g14Oyvel+3XAd4S6LFE=
Subject key identifier: B3:36:C6:57:9D:30:43:19:E1:99:98:2B:CF:86:3E:D5:07:21:1D:25
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 018AAD150458D110610F6325D7FD9862D298
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/szbGV50wQxnhmZgrz4Y-1QchHSU.roa
Signing time: Tue 19 Sep 2023 10:55:50 +0000
ROA not before: Tue 19 Sep 2023 10:55:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42695
IP address blocks: 86.107.49.0/24 maxlen: 24
86.107.48.0/23 maxlen: 24
185.16.84.0/22 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
185.2.152.0/22 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
89.36.90.0/23 maxlen: 23
45.114.121.0/24 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.123.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
141.255.184.0/21 maxlen: 24
37.153.138.0/23 maxlen: 24
185.52.156.0/22 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
37.153.172.0/23 maxlen: 24
188.240.222.0/23 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
89.45.227.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
185.103.50.0/24 maxlen: 24
89.42.140.0/23 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
31.12.84.0/22 maxlen: 24
116.206.168.0/22 maxlen: 24
188.240.92.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
77.81.188.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.95.224.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.8.0/21 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
188.212.108.0/23 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
77.81.6.0/23 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.142.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
89.40.216.0/23 maxlen: 23
2a03:d7c0::/29 maxlen: 48
2a03:b000:400::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:b000:200::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
2a00:16d8::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:15:04:58:d1:10:61:0f:63:25:d7:fd:98:62:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Sep 19 10:55:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b336c6579d304319e199982bcf863ed507211d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:bb:80:e1:f3:d7:c5:c3:71:31:a3:9a:c0:
c6:1a:d9:f8:3c:9b:e0:51:08:09:6a:14:69:58:35:
56:06:76:01:7c:30:5f:d2:89:2c:99:94:d1:29:93:
46:68:f9:73:be:e6:10:f1:77:ed:9c:60:83:0b:fd:
3d:5f:8b:13:8d:a9:11:d5:04:d2:7c:ac:0a:9d:32:
f8:ff:3b:92:2b:3e:ba:c4:89:07:69:f2:35:c6:25:
0a:f1:e5:b6:e1:97:0b:8f:fd:fe:3e:f5:10:0c:68:
25:3f:26:f3:50:54:5b:75:43:90:50:c6:72:6b:c8:
13:e7:d8:ed:c3:e3:b4:22:d9:51:16:1a:a4:ee:a9:
e1:d1:b1:38:48:a8:db:10:1f:75:47:51:76:52:bb:
85:24:09:e7:98:be:c8:67:8d:c1:d8:8e:7f:a9:73:
3e:f4:25:3c:89:7f:c2:fc:58:fd:8f:34:14:59:b6:
c4:21:88:af:bd:82:8b:58:dd:6e:4c:f3:8e:4b:29:
33:38:35:6f:bd:4b:66:43:8e:d9:b2:34:0f:cd:8d:
23:7e:df:ec:b3:8a:1e:80:47:b6:4a:95:52:73:58:
1b:04:29:e9:8d:42:80:e1:ec:39:44:fc:41:4a:27:
e6:ba:fc:db:a7:bc:6f:85:36:97:86:a1:4e:eb:9a:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:C6:57:9D:30:43:19:E1:99:98:2B:CF:86:3E:D5:07:21:1D:25
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/szbGV50wQxnhmZgrz4Y-1QchHSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0/24
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::/40
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
79:d6:9a:89:4a:ba:75:95:0d:db:97:5e:0f:0e:80:db:05:71:
0b:9d:78:e9:40:0d:99:44:11:74:58:7e:4a:46:c7:af:4c:55:
dd:2a:0e:88:c6:c2:a0:6b:d3:f8:10:56:fb:5f:b9:76:0e:6b:
15:69:c7:d0:47:92:5b:f5:b5:5e:85:11:65:47:63:8f:f9:92:
37:7f:07:29:3a:ad:23:e0:8c:fa:d3:78:c7:c2:03:fe:3a:ef:
a0:72:1d:23:f9:d6:52:f9:9f:93:5b:06:60:d1:5c:8f:02:eb:
e3:aa:bb:80:9f:47:72:18:72:c8:46:77:af:5f:ed:3e:0d:3e:
b2:87:53:d3:2c:eb:16:0d:37:ec:9b:a9:5b:67:2c:9d:98:e7:
09:95:79:90:e9:9c:7d:8f:1c:9e:87:70:bc:07:ae:34:03:81:
b0:80:44:7f:17:02:89:43:aa:95:20:68:9a:c0:e7:de:49:1c:
7e:2a:7c:ef:c1:56:24:e0:6a:17:b2:6a:aa:fe:86:e0:a9:91:
5b:37:e6:40:4f:9b:db:99:29:15:a3:25:ac:83:39:f8:1b:81:
4d:76:ca:31:bb:ff:86:99:c2:04:65:d6:ee:ba:7a:21:5b:85:
2f:9f:ab:5c:79:ee:4e:ae:7c:06:96:97:ab:51:d9:69:31:33:
52:e5:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:14 2024 by rpki-client on console-ams.rpki-client.org