Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fEE6X80-0xq-R5h8CPcsAM295LM.roa
File: fEE6X80-0xq-R5h8CPcsAM295LM.roa (raw, json)
Hash identifier: b652hBVdvKw/MEWB9jrMK3vaKEV/YxWU4VYK6jmDQYM=
Subject key identifier: 7C:41:3A:5F:CD:3E:D3:1A:BE:47:98:7C:08:F7:2C:00:CD:BD:E4:B3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AFFB2849E3BA184569E6B3CE577614D0A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fEE6X80-0xq-R5h8CPcsAM295LM.roa
Signing time: Thu 05 Oct 2023 11:56:43 +0000
ROA not before: Thu 05 Oct 2023 11:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:b2:84:9e:3b:a1:84:56:9e:6b:3c:e5:77:61:4d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 5 11:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c413a5fcd3ed31abe47987c08f72c00cdbde4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:25:8b:e7:8b:69:8a:f8:44:c0:d0:73:fa:
53:08:61:9a:7d:8f:92:40:4d:fa:b2:33:4b:82:c4:
09:e6:8f:da:9c:e6:92:b9:4c:f8:ce:42:bb:13:3e:
02:5d:eb:29:0c:6d:fc:01:ab:91:a7:59:d0:a2:eb:
3f:0d:ec:f2:a4:ef:07:f9:b4:54:40:53:d4:3c:6f:
f9:45:b8:e4:44:4e:11:ed:ca:f0:df:fd:90:26:27:
70:92:5c:01:7f:e3:d7:3a:b2:c2:2f:a3:be:02:c4:
b8:93:c5:a4:c8:40:72:43:86:c9:e5:5c:54:cb:66:
bc:c9:26:a5:89:8b:29:c4:00:38:87:51:ad:e0:39:
8b:e8:85:b6:93:27:5f:ba:8d:76:45:ab:81:18:54:
12:1d:2f:f4:f4:f8:f3:9b:00:5c:8f:85:92:d0:1d:
d6:89:08:b9:cb:ff:62:a8:a0:91:52:aa:21:22:8e:
10:45:bc:95:41:27:43:40:2b:53:2a:51:0f:3e:48:
1f:31:5c:f0:1f:38:ea:c3:46:0e:99:3f:d1:f2:9c:
b5:b5:3b:d5:ca:1f:43:36:f1:36:20:c8:23:58:13:
b0:4b:72:96:da:c7:eb:9b:c4:23:f1:85:09:0a:e9:
f7:1f:f5:0e:be:d0:94:d6:23:ee:5c:d3:78:48:91:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:3A:5F:CD:3E:D3:1A:BE:47:98:7C:08:F7:2C:00:CD:BD:E4:B3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fEE6X80-0xq-R5h8CPcsAM295LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
62:80:40:d8:b3:65:48:cd:e3:50:92:0e:b3:fe:41:53:d2:f3:
e4:6d:72:2c:a2:f6:c4:33:78:e1:c4:94:61:9a:c4:93:92:3a:
fb:e7:0c:e1:4a:0c:14:dd:2b:48:16:41:28:1f:43:83:4b:df:
25:6a:b9:d6:0c:6b:b4:68:5b:86:33:b3:2b:a8:17:03:51:37:
d7:6b:d4:f0:f8:4a:d5:54:db:a0:b0:be:28:17:19:d8:f4:e5:
5c:fd:33:5b:e6:1f:8a:aa:45:7c:f2:68:8b:a4:c2:5d:96:c6:
82:4f:62:00:c6:28:d0:1d:c4:02:d0:ce:a8:33:f5:d0:8b:b4:
5d:e0:db:55:0d:12:a4:8a:2e:af:bf:de:96:1d:fe:85:b3:25:
06:d4:23:3a:98:30:10:7a:81:45:8b:92:67:30:5c:a2:51:01:
bd:05:b5:79:e9:3a:42:b2:61:b7:2a:ae:01:48:9d:39:74:53:
df:16:ed:8c:56:1e:71:8a:47:16:67:83:6e:44:b3:34:95:ab:
df:51:41:90:c4:53:47:a5:44:4e:72:dd:d8:96:42:41:e5:7f:
af:73:60:eb:e6:35:46:59:73:d2:b5:6f:42:25:8b:01:71:4f:
a0:fe:1a:8a:57:d3:d1:fd:4f:4b:bc:dd:9e:b2:e8:b2:19:a1:
84:ee:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 08:39:39 2023 by rpki-client on console-ams.rpki-client.org