Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/xapuwwtaImSMKuzSr6Dgp3ytHn8.roa
File: xapuwwtaImSMKuzSr6Dgp3ytHn8.roa (raw, json)
Hash identifier: PAe74JKFWjJnZuRa29lZeLSKmaLzUQ7adrCuDt+b/DE=
Subject key identifier: C5:AA:6E:C3:0B:5A:22:64:8C:2A:EC:D2:AF:A0:E0:A7:7C:AD:1E:7F
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 0186730512228038F4B61F59E56D1B9C93D0
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/xapuwwtaImSMKuzSr6Dgp3ytHn8.roa
Signing time: Tue 21 Feb 2023 08:09:17 +0000
ROA not before: Tue 21 Feb 2023 08:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42695
IP address blocks: 86.107.49.0/24 maxlen: 24
86.107.48.0/23 maxlen: 24
185.16.84.0/22 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
185.2.152.0/22 maxlen: 24
188.241.198.0/24 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.199.0/24 maxlen: 24
89.36.90.0/23 maxlen: 23
45.114.121.0/24 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.123.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
141.255.184.0/21 maxlen: 24
37.153.138.0/23 maxlen: 24
185.52.156.0/22 maxlen: 24
37.153.172.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.226.0/23 maxlen: 24
188.240.222.0/23 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
89.45.227.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
185.103.50.0/24 maxlen: 24
89.42.140.0/23 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
31.12.84.0/22 maxlen: 24
116.206.168.0/22 maxlen: 24
188.240.92.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
77.81.188.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.95.224.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.8.0/21 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
188.212.108.0/23 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
77.81.6.0/23 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.142.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
89.40.216.0/23 maxlen: 23
2a03:d7c0::/29 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
2a00:16d8::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:05:12:22:80:38:f4:b6:1f:59:e5:6d:1b:9c:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Feb 21 08:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5aa6ec30b5a22648c2aecd2afa0e0a77cad1e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:bb:cf:8d:ad:0c:c4:82:34:a7:5f:e5:59:
aa:a0:20:77:22:32:13:ff:16:26:df:d1:3b:6d:bb:
ad:17:2e:18:1a:2a:b5:d6:ff:04:5e:5e:6f:3a:69:
63:ac:4e:5a:5f:f4:5b:25:b8:a1:c9:dc:2d:b2:61:
03:3d:c4:01:ff:8a:cc:c1:29:1f:9b:b7:01:d6:4a:
db:ca:3d:18:4f:9b:c0:b1:5a:8e:f6:74:58:a7:63:
49:ba:ce:d6:eb:82:89:3f:65:71:df:fb:d6:30:a9:
35:2e:69:22:07:98:fa:72:9c:b6:ac:83:5e:9c:63:
86:58:d8:7b:ab:b2:6f:10:4b:b1:34:8e:86:37:31:
88:d8:44:45:c4:b7:ea:af:1c:df:2f:ef:97:09:6e:
76:f0:bb:41:47:b2:8b:ba:a5:65:05:84:83:3e:fb:
cf:ba:f7:1c:4d:19:33:00:ce:0e:ad:1b:e0:d5:8f:
7f:9b:76:6a:b5:86:09:50:a3:fe:7a:6f:2e:d1:08:
91:3f:62:27:d8:02:ed:03:18:9f:fb:31:ea:81:9c:
fe:f2:0b:63:cf:0e:4f:32:77:7b:fe:cc:7b:95:dd:
24:03:75:4a:a2:78:1a:f0:5d:e7:f5:ef:2f:ef:51:
72:bd:8e:10:a6:a0:b7:3f:16:d6:d1:85:a0:f4:94:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:6E:C3:0B:5A:22:64:8C:2A:EC:D2:AF:A0:E0:A7:7C:AD:1E:7F
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/xapuwwtaImSMKuzSr6Dgp3ytHn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0-31.132.58.255
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::/40
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
06:cb:cb:0b:e7:bc:d7:cf:ed:90:56:60:f2:e9:fa:17:c1:58:
f1:bb:6e:7d:88:b3:a8:fa:cd:b1:e9:41:4a:c7:8c:f8:64:de:
57:35:21:43:71:e7:c6:1e:a1:da:fe:d8:0b:91:5c:ce:28:ee:
22:4e:1c:07:26:59:87:c3:c3:f3:77:a3:49:83:1a:61:fb:d1:
a8:42:71:13:f8:d7:b4:a9:eb:44:57:cd:ad:48:4c:2a:48:b1:
7f:33:61:51:46:06:ab:06:f9:41:81:2f:9c:4a:4a:01:33:f1:
79:0f:c3:90:b9:16:87:bb:6b:f9:95:cd:71:f2:f1:9b:0d:5e:
53:f7:6b:8f:d4:a0:55:9f:57:77:87:ff:27:cf:e6:1b:83:5d:
2a:1f:14:81:98:f1:b8:77:3f:d3:12:f6:f8:28:00:92:c3:11:
35:3c:cb:25:b0:80:c6:a6:6c:19:bb:57:29:17:b0:ee:89:f7:
89:26:3b:cf:ba:18:6a:bb:5a:a4:c5:21:d4:7e:3d:7c:13:4a:
bf:20:ef:86:6b:71:33:91:f5:18:c7:65:42:88:00:ca:25:44:
6d:29:ad:80:98:98:20:5c:22:65:4e:53:31:e1:cd:53:f9:4c:
d5:ed:c2:e0:8d:ab:fd:a5:38:2b:96:ab:5d:46:00:2e:a3:53:
60:b3:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 13:23:24 2023 by rpki-client on console-ams.rpki-client.org