Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa
File: 5psZOC1j9kl2fpkzS4EAEQbxhCA.roa (raw, json)
Hash identifier: CX2hcyq9JfbWJMsgfOlxoak4wvTXN3/tm6/e1DJmMTw=
Subject key identifier: E6:9B:19:38:2D:63:F6:49:76:7E:99:33:4B:81:00:11:06:F1:84:20
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 018B1E693ED932E06FBD352297C331142CDF
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa
Signing time: Wed 11 Oct 2023 11:04:55 +0000
ROA not before: Wed 11 Oct 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 46.231.216.0/21 maxlen: 24
185.53.80.0/22 maxlen: 24
46.22.192.0/20 maxlen: 24
46.255.200.0/21 maxlen: 24
185.114.100.0/22 maxlen: 24
94.100.160.0/20 maxlen: 24
37.110.192.0/21 maxlen: 24
193.151.84.0/24 maxlen: 24
193.151.84.0/22 maxlen: 24
37.26.184.0/21 maxlen: 24
193.151.87.0/24 maxlen: 24
37.156.226.0/24 maxlen: 24
194.116.142.0/23 maxlen: 24
185.15.140.0/22 maxlen: 24
185.62.184.0/22 maxlen: 24
212.85.229.0/24 maxlen: 24
212.85.230.0/23 maxlen: 24
195.234.35.0/24 maxlen: 24
95.143.64.0/20 maxlen: 24
176.241.120.0/21 maxlen: 24
91.224.162.0/23 maxlen: 24
212.18.240.0/21 maxlen: 24
82.96.128.0/18 maxlen: 24
78.153.224.0/19 maxlen: 24
185.61.184.0/22 maxlen: 24
185.61.184.0/21 maxlen: 24
91.226.193.0/24 maxlen: 24
185.61.188.0/22 maxlen: 24
31.172.232.0/21 maxlen: 24
31.172.238.0/24 maxlen: 24
185.78.156.0/22 maxlen: 24
185.92.36.0/22 maxlen: 24
31.7.248.0/21 maxlen: 24
193.189.124.0/23 maxlen: 24
31.172.160.0/22 maxlen: 24
185.4.60.0/23 maxlen: 24
185.4.62.0/24 maxlen: 24
185.91.224.0/22 maxlen: 24
77.72.88.0/21 maxlen: 24
37.61.240.0/21 maxlen: 24
46.102.116.0/24 maxlen: 24
85.31.192.0/19 maxlen: 24
82.163.36.0/22 maxlen: 24
149.232.160.0/20 maxlen: 24
87.121.136.0/21 maxlen: 24
5.226.0.0/21 maxlen: 24
88.212.144.0/21 maxlen: 24
185.209.52.0/22 maxlen: 24
82.196.24.0/21 maxlen: 24
77.246.80.0/20 maxlen: 24
89.44.77.0/24 maxlen: 24
195.128.147.0/24 maxlen: 24
2a03:bdc0::/32 maxlen: 48
2a02:398::/32 maxlen: 48
2a0b:41c0::/29 maxlen: 48
2a00:68c0::/32 maxlen: 48
2a04:cc00::/29 maxlen: 48
2a01:240::/32 maxlen: 48
2a01:290::/32 maxlen: 48
2a00:78c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:69:3e:d9:32:e0:6f:bd:35:22:97:c3:31:14:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Oct 11 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69b19382d63f649767e99334b81001106f18420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:8e:2b:1f:e2:8d:bd:9f:1d:20:92:6e:4d:
14:fd:d4:a2:1a:93:76:8e:5e:c3:37:ad:c4:e5:a2:
cb:8a:d4:e1:3b:16:31:1f:ab:f2:b6:33:e8:2d:38:
d8:88:9f:ff:3b:c0:f2:80:ca:d6:0b:34:df:eb:e2:
82:b5:3d:72:d1:fe:90:08:e0:84:9a:a7:db:98:a7:
54:dd:95:f7:1d:97:e5:ab:96:3f:18:89:59:93:ea:
8c:03:8d:b6:5f:8d:b1:0a:3e:74:e6:f6:a5:8b:6b:
88:54:f8:e6:e0:07:ef:65:65:ad:70:c4:54:4e:86:
f0:fa:49:1e:71:65:97:d1:8c:a0:51:ba:55:b9:2e:
f4:dc:7c:fc:9e:ed:f7:6c:6e:1d:e8:34:ff:d3:ba:
9f:23:0e:97:2f:21:85:1c:eb:2b:f4:96:4a:87:50:
e4:3a:35:d3:c9:75:4c:63:9b:5a:4c:97:be:5b:c7:
d6:67:98:78:ff:4b:e3:d2:36:6f:2b:62:65:b3:95:
ec:4d:cb:03:a7:8b:ae:31:fc:3e:0f:70:9a:82:37:
86:64:9e:55:02:76:f4:cf:36:97:f2:b6:b6:6d:d6:
1f:30:21:68:b9:fb:ed:af:1a:a8:39:24:dc:e2:a0:
be:a5:80:8e:23:c7:2b:ae:78:73:d9:21:5c:b0:87:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:19:38:2D:63:F6:49:76:7E:99:33:4B:81:00:11:06:F1:84:20
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.0.0/21
31.7.248.0/21
31.172.160.0/22
31.172.232.0/21
37.26.184.0/21
37.61.240.0/21
37.110.192.0/21
37.156.226.0/24
46.22.192.0/20
46.102.116.0/24
46.231.216.0/21
46.255.200.0/21
77.72.88.0/21
77.246.80.0/20
78.153.224.0/19
82.96.128.0/18
82.163.36.0/22
82.196.24.0/21
85.31.192.0/19
87.121.136.0/21
88.212.144.0/21
89.44.77.0/24
91.224.162.0/23
91.226.193.0/24
94.100.160.0/20
95.143.64.0/20
149.232.160.0/20
176.241.120.0/21
185.4.60.0-185.4.62.255
185.15.140.0/22
185.53.80.0/22
185.61.184.0/21
185.62.184.0/22
185.78.156.0/22
185.91.224.0/22
185.92.36.0/22
185.114.100.0/22
185.209.52.0/22
193.151.84.0/22
193.189.124.0/23
194.116.142.0/23
195.128.147.0/24
195.234.35.0/24
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:68c0::/32
2a00:78c0::/29
2a01:240::/32
2a01:290::/32
2a02:398::/32
2a03:bdc0::/32
2a04:cc00::/29
2a0b:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:50:a3:b9:fe:9d:18:96:37:27:d2:d6:a2:88:5c:90:cd:c7:
23:83:6d:60:76:5e:1d:09:37:06:99:44:a3:3c:08:6e:ec:50:
d0:02:e3:1f:cc:c9:b6:01:93:22:67:4f:e8:20:9b:29:95:bd:
9b:8c:56:74:6a:0d:eb:69:60:e0:40:f1:3a:9c:e5:14:22:ad:
12:7b:4a:dc:5d:da:7c:4f:01:bd:fb:04:fd:a3:ce:64:db:36:
d3:4d:24:99:96:0c:b8:c3:91:1c:04:b6:52:3f:f4:16:66:27:
4e:ae:a4:90:0d:c7:c8:3d:24:b7:24:b3:24:3d:61:b2:4a:37:
ae:57:8a:83:82:78:d0:9a:6e:ae:66:2d:45:8a:f1:94:36:69:
b2:8e:d7:27:42:92:e0:e9:78:23:ec:7b:ea:46:f3:0f:31:4b:
7c:1e:ef:15:31:88:28:2b:c8:e3:3e:f1:a5:e4:35:c6:eb:06:
79:60:9a:f0:a4:90:0c:17:c9:ae:3b:36:62:a9:d0:9f:c4:43:
95:08:17:2d:24:25:72:b4:c3:1c:fc:10:34:b1:e9:cc:b7:b1:
15:0d:53:e4:0a:cb:70:90:05:20:ff:4c:9b:8a:71:59:4d:57:
0c:4a:82:37:85:ec:ed:3d:97:d9:6e:10:b2:14:33:c7:ea:40:
0c:44:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 11:16:33 2023 by rpki-client on console-fra.rpki-client.org