Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/_DUvaRcc3RJqHoITVQqoSrnw6C4.roa
File: _DUvaRcc3RJqHoITVQqoSrnw6C4.roa (raw, json)
Hash identifier: 8bpoM6qMfzb7E2VKRDjINM5YFQxw2tSRpi8szBByhpg=
Subject key identifier: FC:35:2F:69:17:1C:DD:12:6A:1E:82:13:55:0A:A8:4A:B9:F0:E8:2E
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 018AB6C6D01516531CE8F8D59A776BD51FF5
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/_DUvaRcc3RJqHoITVQqoSrnw6C4.roa
Signing time: Thu 21 Sep 2023 08:06:37 +0000
ROA not before: Thu 21 Sep 2023 08:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15695
IP address blocks: 195.238.244.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.88.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:971::/48 maxlen: 48
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:c6:d0:15:16:53:1c:e8:f8:d5:9a:77:6b:d5:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Sep 21 08:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc352f69171cdd126a1e8213550aa84ab9f0e82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:bc:a6:b7:c8:22:cb:56:46:af:32:ce:a1:
14:66:92:68:8e:a7:2f:74:c4:e1:64:ad:7b:30:e8:
e6:05:17:ac:0d:16:90:97:aa:5b:2f:bf:61:0d:67:
31:0b:02:74:b1:39:3b:1d:b5:b0:bc:b0:f9:e2:55:
ac:62:c6:93:1f:8a:05:b6:0c:c3:66:6b:04:66:5d:
5a:3a:42:dc:cc:ea:2c:74:c0:05:63:0a:10:b4:50:
1e:d6:78:1f:02:df:93:dd:fc:2d:4f:30:11:a7:68:
06:3e:1c:a4:17:62:cc:e4:f0:6f:84:c8:98:b8:fd:
fe:2a:b3:3e:15:b1:5d:d2:4d:19:14:e6:0a:05:b0:
db:5d:1e:20:19:16:e9:d1:5f:48:fd:40:f1:7b:c0:
24:4d:c8:07:aa:0b:d8:fe:48:79:af:25:54:cc:1f:
fc:4b:82:94:b1:96:d5:7d:07:ba:75:a1:40:9d:85:
17:d4:50:33:f0:b2:bb:74:01:2d:3a:78:6d:28:7f:
78:25:00:ce:dd:d2:2b:1c:4e:86:94:9e:d7:91:f6:
1d:18:15:dc:c9:64:ad:90:78:49:e0:02:bf:e0:1d:
2e:e6:f6:d0:c7:1b:97:c7:d1:b4:ac:85:27:68:b1:
84:69:a4:56:23:ef:70:7c:72:d3:12:25:1a:84:c9:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:2F:69:17:1C:DD:12:6A:1E:82:13:55:0A:A8:4A:B9:F0:E8:2E
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/_DUvaRcc3RJqHoITVQqoSrnw6C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.216.0/24
86.48.220.0/22
86.48.240.0/24
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
Signature Algorithm: sha256WithRSAEncryption
04:89:a6:b9:99:69:d5:ac:36:6a:4f:35:75:47:88:ca:40:6e:
b9:74:d2:47:82:56:f8:1a:82:42:2a:4a:70:ef:d3:e8:44:02:
c9:14:55:de:90:6d:e0:c3:1f:13:d5:56:a4:c1:96:ac:c2:51:
3e:70:17:ea:b4:09:44:4c:06:d4:b0:d3:43:b8:ab:0e:6d:82:
ca:b8:1e:32:0b:a3:49:6e:92:bd:62:ad:85:60:4a:55:3e:85:
d5:d5:e6:4c:e9:cc:d9:80:f1:bd:c9:10:b5:f1:9c:88:b1:91:
62:c6:7a:de:9d:84:b6:ae:62:d6:d7:c4:0a:75:42:a5:ec:70:
e0:64:e6:04:33:42:de:25:f7:13:4c:c1:20:01:c9:a9:1b:f9:
db:1f:1c:04:32:ee:f9:24:80:06:e4:1c:f1:20:59:8a:44:56:
3d:d5:e3:9b:a7:2a:1d:1f:3c:a6:b4:7a:89:fa:d2:62:57:33:
b1:ca:cb:09:89:ee:a6:32:7c:83:9c:b1:1a:f2:cc:48:16:0d:
3e:cd:b0:8c:a3:7d:74:3f:e4:90:3e:3a:9d:91:46:8a:79:f3:
fa:5a:ea:65:f2:0e:d7:bd:d0:54:74:b7:1c:76:dd:d8:89:fd:
93:6c:bb:a1:00:5e:72:1a:7e:e9:19:b2:04:7b:c8:8c:25:31:
30:69:c4:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 3 11:04:57 2023 by rpki-client on console-ams.rpki-client.org