Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/c2V6hT8n3d9eYoIaG1Y4N7-iLAQ.roa
File: c2V6hT8n3d9eYoIaG1Y4N7-iLAQ.roa (raw, json)
Hash identifier: 0kTFq/FYPMN1FMpaNNGKFyToMxBD/Z2S/YbYl6QAeyI=
Subject key identifier: 73:65:7A:85:3F:27:DD:DF:5E:62:82:1A:1B:56:38:37:BF:A2:2C:04
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01896545F915A46461B8382817ACA6B40A6D
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/c2V6hT8n3d9eYoIaG1Y4N7-iLAQ.roa
Signing time: Mon 17 Jul 2023 19:13:51 +0000
ROA not before: Mon 17 Jul 2023 19:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39010
IP address blocks: 85.112.64.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.3.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
2a00:1580::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580::/29 maxlen: 29
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:45:f9:15:a4:64:61:b8:38:28:17:ac:a6:b4:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jul 17 19:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73657a853f27dddf5e62821a1b563837bfa22c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:f6:78:fd:b9:5a:92:88:98:12:cd:92:f1:
14:89:70:b6:01:a8:1a:fc:1e:83:4f:f2:72:49:33:
a2:3d:6b:59:77:83:8f:0c:2f:1d:01:ed:8d:6f:00:
e2:ef:8d:62:d7:ad:37:ce:8f:f5:c8:f3:fb:0b:b3:
2c:c2:81:ae:70:90:d6:d0:54:3c:17:55:24:df:37:
b8:89:8c:53:31:33:4d:a8:9e:5d:e3:9f:b0:da:fb:
63:98:66:4e:0a:b7:04:c1:b4:a7:70:76:4e:67:66:
d3:0d:11:7c:fc:40:4e:1f:4c:ae:2c:d8:a8:a0:69:
25:8b:10:0d:56:4f:df:56:42:84:b3:86:26:74:bc:
da:17:32:9c:2a:ee:82:b2:98:85:f9:f2:44:ed:dd:
e4:9e:17:9b:d0:18:4c:7b:c0:59:f9:43:b3:34:0f:
ec:33:31:91:a5:64:2b:a2:8e:50:ec:14:03:79:88:
63:54:49:7d:82:db:6b:8d:43:bd:6c:cb:9b:6c:bc:
3c:ef:94:68:ff:b7:eb:ca:35:8f:97:7d:c7:b1:71:
9e:a5:9e:95:a4:bc:92:f0:2f:1b:36:c0:8f:3c:96:
39:4e:67:ae:0f:47:fd:44:41:d2:16:34:3e:bb:67:
88:0c:fa:8a:63:03:73:d3:28:16:02:a9:c8:6b:5a:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:7A:85:3F:27:DD:DF:5E:62:82:1A:1B:56:38:37:BF:A2:2C:04
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/c2V6hT8n3d9eYoIaG1Y4N7-iLAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
3f:c9:6a:9f:7d:ef:51:8c:35:5c:b2:6a:6a:40:21:7e:5a:2a:
b6:08:16:7d:d2:87:b4:38:5a:77:d5:71:a4:0b:98:ba:3e:b3:
59:91:8d:b8:88:6f:89:23:fb:cc:1e:57:8a:d0:39:dc:f1:23:
1b:a2:1a:2d:33:99:af:be:0c:ea:2b:75:59:38:23:f5:41:6e:
9f:5d:cd:03:08:34:59:7c:8b:8d:e4:43:8c:6a:88:44:67:dd:
02:72:e2:0f:73:98:4b:b5:e3:09:a7:ca:49:08:2b:58:99:8d:
f8:63:cd:03:d6:a6:1a:d1:f5:69:c0:95:00:35:0e:7e:58:b0:
ca:58:56:4f:cc:a3:63:77:60:cd:14:d9:ac:e8:93:d5:4b:1d:
62:6c:eb:37:1b:73:7b:e7:1d:d7:5f:b7:41:a9:03:7e:0a:9a:
b4:a5:0c:1e:3d:16:1f:2d:fd:58:d4:7f:51:d0:e3:74:96:0f:
6a:32:fb:87:1a:a5:a5:9e:32:b2:63:f3:77:7c:97:7f:b4:66:
ab:05:7b:b1:5f:d0:25:23:32:5c:c2:58:9f:16:43:46:1f:02:
e8:13:22:89:91:a2:ac:ea:87:81:61:a9:35:60:8b:b1:25:68:
10:c8:e0:8c:3f:3b:16:67:5e:44:dd:16:24:2c:38:61:e5:51:
bb:51:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:01 2024 by rpki-client on console-fra.rpki-client.org