Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9ipi6XtNggbMFr7WUB4cCvVevXM.roa
File: 9ipi6XtNggbMFr7WUB4cCvVevXM.roa (raw, json)
Hash identifier: /7BrzcbYo226Y3YXyB68tpOyNRYOUcIPnyWflgcJlr0=
Subject key identifier: F6:2A:62:E9:7B:4D:82:06:CC:16:BE:D6:50:1E:1C:0A:F5:5E:BD:73
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018900CB645AABAB8209EA8EE94DD2570EA9
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9ipi6XtNggbMFr7WUB4cCvVevXM.roa
Signing time: Wed 28 Jun 2023 06:57:56 +0000
ROA not before: Wed 28 Jun 2023 06:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 37.235.50.0/23 maxlen: 23
37.235.48.0/20 maxlen: 20
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.30.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
2a03:f80:56::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f87:ffff::/48 maxlen: 48
2a03:f80::/29 maxlen: 29
2a03:f80:57::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:cb:64:5a:ab:ab:82:09:ea:8e:e9:4d:d2:57:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 28 06:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f62a62e97b4d8206cc16bed6501e1c0af55ebd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:18:d8:38:e5:bb:57:6d:e9:af:65:52:c3:
6a:59:20:8e:57:6a:32:d7:25:dd:db:5e:1c:c1:46:
f2:41:df:41:10:b9:7f:fe:05:07:3c:99:87:56:16:
82:6d:f4:1b:1f:7f:28:18:4b:75:2f:de:a2:fd:c5:
09:d4:a7:a1:1c:6f:50:3a:9e:f7:73:43:7c:fc:f6:
47:7d:ad:2a:55:bf:fd:4a:7e:41:99:d7:00:07:ab:
e9:2d:0c:7a:4c:59:40:a1:a0:85:b0:73:74:f1:9a:
13:a8:26:eb:9c:25:f5:0f:60:b3:ca:73:f4:7f:70:
23:92:63:ac:23:0b:3d:ac:6e:67:cc:e4:ba:e4:1b:
3c:a1:2e:d0:d1:05:70:5a:30:3e:57:30:53:68:d0:
3f:8f:f0:29:a0:f7:58:88:4d:9f:48:16:6b:4e:ea:
3a:cb:48:ce:ee:34:77:d1:b3:c8:a4:f1:34:16:ae:
42:5a:96:a1:97:57:0e:b1:be:2b:ce:18:ee:12:1a:
5d:10:bc:18:f5:e5:44:bb:83:52:f5:8e:2c:9b:b5:
5c:d1:b2:71:c5:a0:c2:b0:5f:98:46:bb:c1:07:cf:
14:f6:1c:1e:b0:fa:3f:db:c3:ef:b2:35:3e:0b:cd:
11:5e:cd:38:00:5b:d9:f5:52:bd:8a:2c:e6:c4:4b:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:62:E9:7B:4D:82:06:CC:16:BE:D6:50:1E:1C:0A:F5:5E:BD:73
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9ipi6XtNggbMFr7WUB4cCvVevXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/20
83.243.120.0/24
89.31.123.0/24
91.132.94.0/24
91.227.204.0/23
103.57.250.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0/23
IPv6:
2a03:f80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:85:ca:ec:e7:27:57:f0:79:03:1c:46:76:33:ea:54:94:01:
4b:dd:ed:70:57:ab:28:4e:29:f0:5d:f1:26:f2:3d:ac:86:ec:
75:43:07:79:76:e6:a4:36:d7:5d:ed:5a:5c:95:a2:d3:b0:a9:
ac:13:f8:34:f8:06:e3:5b:30:9a:82:71:9b:18:58:cb:12:f7:
6a:c5:b4:2a:75:85:ae:16:fe:36:0d:9e:55:c7:08:bc:93:51:
53:db:60:30:ff:a8:5d:92:c5:64:92:6c:d5:32:fd:62:af:f6:
ac:8a:44:b0:43:56:5c:ce:56:0d:2c:ed:cb:1c:7d:5e:9c:ef:
bb:d5:73:ad:42:5b:2e:ed:75:4d:59:8d:77:40:29:08:a6:30:
56:97:f4:3d:79:36:74:75:2d:70:3c:2b:64:65:ed:59:52:15:
1e:bc:b1:28:63:ef:af:3f:5f:52:f4:73:6e:13:ec:19:e4:37:
65:c2:10:f9:7f:ed:76:fd:47:58:d2:f4:24:6e:30:95:59:65:
fb:6e:88:f6:5a:d5:88:5c:2e:6b:48:69:e5:98:4b:6c:3a:63:
f8:ef:de:cf:ab:dd:e7:66:54:ce:22:20:4d:56:30:bc:31:57:
4e:61:bb:98:8e:79:b4:87:a0:cd:a5:31:bb:e6:eb:46:6b:18:
e8:46:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org