Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yHrqV25PlE8Y11qIp1PhEp0i5HQ.roa
File: yHrqV25PlE8Y11qIp1PhEp0i5HQ.roa (raw, json)
Hash identifier: xHelaex2UI8WN5WIrX2BXOm1XbaETAzAj5YLv3gAjUI=
Subject key identifier: C8:7A:EA:57:6E:4F:94:4F:18:D7:5A:88:A7:53:E1:12:9D:22:E4:74
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01856D81A12D11578DBD827C1D6248DC8EE4
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yHrqV25PlE8Y11qIp1PhEp0i5HQ.roa
Signing time: Sun 01 Jan 2023 13:24:49 +0000
ROA not before: Sun 01 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35104
IP address blocks: 46.235.84.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
37.228.64.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.72.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.79.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.100.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.104.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.111.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.108.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
185.20.126.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
80.242.218.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.135.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.136.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.26.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
195.189.31.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
2a03:a300:5000::/44 maxlen: 44
2a03:a300:4000::/44 maxlen: 44
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:4100::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:1000::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:800::/37 maxlen: 37
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:a1:2d:11:57:8d:bd:82:7c:1d:62:48:dc:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87aea576e4f944f18d75a88a753e1129d22e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:46:f5:5b:63:72:cf:d6:40:ff:5b:44:63:
60:50:76:fa:df:85:8f:7e:2f:94:93:48:f5:c2:3f:
2c:24:33:81:53:06:b6:5d:5d:77:2c:a3:6c:89:e3:
12:e7:f9:1a:69:de:44:98:08:61:84:80:19:ef:4d:
ec:9d:29:70:e6:a9:72:2a:e6:2a:03:e1:d0:0f:c6:
f0:29:b2:0a:4e:a3:a8:13:2b:fa:bf:f6:e8:fd:b4:
b3:44:18:b6:7f:47:16:f1:87:28:c0:e1:18:00:c2:
6b:99:a3:26:4f:50:f9:5e:72:f2:28:83:8a:56:36:
c4:e8:ad:f6:90:39:06:98:43:7b:6b:3c:51:aa:1b:
97:84:3c:cd:e1:d4:c4:9f:44:43:a0:39:5e:ac:23:
0e:36:32:8f:4e:46:33:2b:3f:47:2b:e5:d5:00:fb:
b9:c0:51:65:78:75:4b:4d:6a:a0:cf:53:e2:71:30:
82:c3:ef:73:9e:9d:83:a0:84:f9:7c:c8:51:10:ac:
6c:54:ce:2f:47:49:de:6d:ec:a0:2f:f9:0e:ed:36:
42:b1:cc:d0:a9:32:d4:27:d5:6a:4c:50:ff:60:78:
2c:c9:5a:e0:1f:58:2c:2c:90:96:ca:3e:b8:fe:9d:
51:3e:b0:d5:00:68:fe:68:21:85:fe:64:10:3e:87:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:EA:57:6E:4F:94:4F:18:D7:5A:88:A7:53:E1:12:9D:22:E4:74
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yHrqV25PlE8Y11qIp1PhEp0i5HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
2a03:a300:1140::/48
2a03:a300:2000::/48
2a03:a300:2020::/48
2a03:a300:3000::/48
2a03:a300:4000::/44
2a03:a300:4100::/48
2a03:a300:5000::/44
Signature Algorithm: sha256WithRSAEncryption
4f:eb:5d:3d:c2:b3:11:21:ba:6a:9e:f9:ae:3e:d5:c0:ae:cc:
37:19:d3:04:d3:d7:fb:72:fc:b3:35:2b:ca:e2:fb:fe:ae:ae:
41:4b:27:00:82:74:6c:e9:b2:df:1e:10:d4:48:e4:32:b2:ca:
68:e8:24:02:3f:89:3b:c2:89:5b:97:05:b3:e8:f5:1f:18:f8:
08:33:40:a9:b4:a4:4e:3c:f2:fd:2e:1c:5f:39:e8:65:e8:4c:
32:ff:8a:af:49:2c:b4:de:1e:e8:8d:e3:9b:47:d8:0a:6b:e7:
fd:77:1f:70:07:8e:8d:29:f2:aa:6e:7d:92:f0:d3:87:00:73:
2d:b1:5a:ac:b0:d5:c9:ce:d2:10:c6:09:bc:e5:9e:ed:cc:e4:
fa:0e:c0:a4:8d:a4:8b:5c:98:0c:9e:43:7f:c0:5f:d4:cc:35:
4c:f7:51:ff:28:1f:dc:e2:7c:1c:1c:67:90:6a:fd:67:c3:02:
57:df:a7:22:66:8c:bd:8d:32:b5:40:c8:ca:b0:81:df:aa:70:
67:98:22:79:6e:fe:7f:92:9f:f1:8a:3a:c1:8c:0f:b0:12:20:
d0:01:b6:eb:8f:c9:88:17:8f:b3:2a:33:f9:85:d8:41:12:69:
20:aa:92:64:ae:c6:67:85:4e:3c:c8:77:e9:f1:58:c7:0e:c3:
6b:70:dc:19
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 13 04:30:09 2023 by rpki-client on console-ams.rpki-client.org