Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Zlc6V4c9O27cVInCMCnu9huobuI.roa
File: Zlc6V4c9O27cVInCMCnu9huobuI.roa (raw, json)
Hash identifier: oKnINofCp1xbrdZWtiR9tWw1GZ2sm0S2Q7Ou2KdrgSQ=
Subject key identifier: 66:57:3A:57:87:3D:3B:6E:DC:54:89:C2:30:29:EE:F6:1B:A8:6E:E2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01882EF20A5FA7D0F35A962E2387F1517459
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Zlc6V4c9O27cVInCMCnu9huobuI.roa
Signing time: Thu 18 May 2023 12:59:54 +0000
ROA not before: Thu 18 May 2023 12:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8717
IP address blocks: 89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
95.140.208.0/20 maxlen: 20
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
84.242.128.0/18 maxlen: 18
89.215.40.0/22 maxlen: 22
5.53.128.0/17 maxlen: 17
89.215.48.0/22 maxlen: 22
176.12.0.0/18 maxlen: 18
92.247.168.0/24 maxlen: 24
87.227.128.0/17 maxlen: 17
217.18.240.0/20 maxlen: 20
92.247.0.0/16 maxlen: 16
92.247.29.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
89.253.128.0/18 maxlen: 18
89.186.200.0/21 maxlen: 21
213.240.192.0/18 maxlen: 18
217.79.32.0/20 maxlen: 20
92.247.67.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.9.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.5.0/24 maxlen: 24
85.118.64.0/19 maxlen: 19
212.91.160.0/19 maxlen: 19
212.91.172.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.181.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
195.24.32.0/19 maxlen: 19
85.91.128.0/19 maxlen: 19
78.83.146.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
84.252.0.0/18 maxlen: 18
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
83.97.24.0/21 maxlen: 21
78.83.160.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
151.251.237.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
87.97.128.0/17 maxlen: 17
95.111.0.0/17 maxlen: 17
212.104.96.0/19 maxlen: 19
87.97.160.0/22 maxlen: 22
78.83.210.0/24 maxlen: 24
213.191.160.0/19 maxlen: 19
78.83.226.0/23 maxlen: 23
78.83.225.0/24 maxlen: 24
217.9.224.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
85.130.0.0/17 maxlen: 17
88.203.204.0/24 maxlen: 24
151.251.0.0/16 maxlen: 16
195.149.248.0/21 maxlen: 21
88.203.237.0/24 maxlen: 24
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
85.130.95.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
37.63.0.0/17 maxlen: 17
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
82.103.120.0/24 maxlen: 24
78.90.0.0/16 maxlen: 16
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
85.130.120.0/23 maxlen: 23
89.190.192.0/19 maxlen: 19
78.83.0.0/16 maxlen: 16
82.103.64.0/18 maxlen: 18
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
82.103.91.0/24 maxlen: 24
85.196.128.0/18 maxlen: 18
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
212.95.161.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
88.203.128.0/17 maxlen: 17
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.128.0/23 maxlen: 23
195.34.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
2a01:288::/32 maxlen: 32
2a00:4800::/29 maxlen: 29
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:f2:0a:5f:a7:d0:f3:5a:96:2e:23:87:f1:51:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 18 12:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66573a57873d3b6edc5489c23029eef61ba86ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:8f:c9:f2:09:19:21:74:8d:56:5c:cc:b6:
6e:76:f5:a6:35:d3:e1:4d:23:ff:e2:2a:3b:20:ab:
ad:bb:b0:31:ee:19:b4:56:43:62:de:f5:2f:00:7c:
7b:a1:f3:0f:7d:81:ad:07:3b:24:73:5c:03:5b:0f:
10:00:03:9d:ed:02:0f:60:28:fc:bd:ea:0f:bb:03:
21:a0:ec:2d:1e:71:84:0a:a9:ba:92:72:d2:68:5b:
e9:01:f4:7c:e6:e1:2d:47:9d:a7:97:48:6c:95:b2:
d7:49:5b:41:31:e6:a5:bf:45:db:07:36:5e:40:20:
d2:f5:91:42:86:3a:6d:ef:94:b7:8b:32:3d:27:3b:
11:be:df:67:21:b6:d9:99:27:34:1d:5f:37:c2:99:
c7:ae:7d:12:ad:64:8c:77:d3:20:2a:e5:66:72:34:
1f:c0:49:04:d3:f3:14:62:83:00:62:c0:a0:59:12:
6f:b5:03:41:d4:f1:cd:3a:73:f0:7f:d7:d1:60:05:
45:d1:92:7a:8e:4b:ab:23:b7:4d:d1:5c:0a:ea:42:
72:a4:28:a6:ee:53:b0:b0:5f:fb:88:e3:3b:63:53:
5d:4a:2d:62:71:eb:01:41:6c:14:80:bb:ab:a4:44:
80:ff:bb:2b:d8:25:cf:7b:07:ff:67:69:02:b1:a2:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:3A:57:87:3D:3B:6E:DC:54:89:C2:30:29:EE:F6:1B:A8:6E:E2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Zlc6V4c9O27cVInCMCnu9huobuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
45:50:3d:1d:97:a2:0c:61:f9:53:27:c7:b1:00:e4:05:bf:b1:
58:9c:6e:38:fb:66:99:96:82:9c:9b:e9:df:4a:4e:57:cc:d4:
f3:3a:d4:45:30:2c:59:d5:b8:bc:f0:d1:db:a0:e0:96:53:94:
7c:0c:b3:c3:4f:eb:36:de:74:e7:56:ba:d6:7e:bb:38:d1:a1:
0c:f6:56:13:b4:56:db:31:1c:e6:50:04:7b:c9:23:6d:23:95:
d3:6d:13:e9:a5:84:e3:34:59:ba:28:b3:0a:ec:3b:03:5e:02:
5b:98:fa:c6:0c:5b:d2:f8:05:75:f2:13:8c:a1:c0:46:96:c1:
77:3b:81:84:b1:0d:67:d1:97:12:3d:e8:45:56:b2:86:35:c6:
83:97:de:ad:ef:28:f2:76:cb:a5:a3:40:68:ad:44:65:be:96:
aa:e0:45:8b:c4:ba:48:91:18:e1:30:7a:4a:92:c2:fe:2c:20:
47:02:86:98:3a:09:ad:56:22:81:c2:c5:31:b5:f5:84:f2:f2:
66:b9:6e:21:a4:f9:0f:80:01:44:c1:62:c1:0a:5d:2e:ae:f9:
4d:70:7e:b8:a4:c8:a2:cc:e3:44:c1:29:5e:e3:25:ea:d5:5a:
16:9c:6e:ea:80:9b:06:d8:88:8a:88:d4:a4:72:4d:56:72:7a:
a2:1d:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 06:33:17 2023 by rpki-client on console-fra.rpki-client.org