Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/hePtoWhHZBrvqKEhcA12LDPrwss.roa
File: hePtoWhHZBrvqKEhcA12LDPrwss.roa (raw, json)
Hash identifier: Vl89rhyT3K6dt/wRjFKaQe8/xDBWgLooSZ/qQZ7yDhk=
Subject key identifier: 85:E3:ED:A1:68:47:64:1A:EF:A8:A1:21:70:0D:76:2C:33:EB:C2:CB
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0188324579E2EBD201024CE111C721A3A6E2
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/hePtoWhHZBrvqKEhcA12LDPrwss.roa
Signing time: Fri 19 May 2023 04:29:53 +0000
ROA not before: Fri 19 May 2023 04:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15695
IP address blocks: 195.238.244.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.88.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:45:79:e2:eb:d2:01:02:4c:e1:11:c7:21:a3:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: May 19 04:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85e3eda16847641aefa8a121700d762c33ebc2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:a5:b9:22:82:cc:4c:67:f0:84:85:8e:b2:
0f:3d:e2:e9:df:6d:f0:9b:23:84:ad:0e:3f:a2:c0:
33:7f:f9:b4:9d:a8:ce:8c:fb:0d:be:a4:80:99:89:
55:21:7f:01:53:82:20:e5:7c:3e:dc:e0:d2:82:2b:
34:14:25:85:20:76:90:7c:2a:21:37:62:22:af:7a:
49:53:70:da:0e:5f:af:d3:e6:24:66:59:e4:4e:df:
f7:df:50:b1:b7:39:e2:9e:60:a7:05:4e:ac:1d:e5:
a1:70:c4:0c:1a:d6:2e:03:52:a6:bc:6e:0f:49:72:
2e:b0:d9:f5:61:7f:63:8d:f7:8f:6f:75:c7:5d:68:
1a:89:6f:2c:b6:85:a0:96:16:b3:ef:9e:0e:b7:1b:
6b:25:af:71:09:59:a6:c2:43:67:9f:1d:ba:7f:b4:
d7:da:35:8e:ba:e2:fb:a0:80:8c:b7:db:99:01:f0:
da:7f:82:e9:10:66:69:a0:3d:0d:b7:ef:cf:50:11:
53:56:a4:e6:a0:95:20:a6:e4:c5:2b:6f:e0:1e:f9:
de:fa:fc:18:fc:7c:73:50:0c:49:16:8b:6b:9d:aa:
c9:b2:68:89:07:e7:c8:cf:ac:89:8b:0a:8f:57:83:
05:4c:03:44:40:dd:ff:61:c3:46:66:27:b4:47:65:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:ED:A1:68:47:64:1A:EF:A8:A1:21:70:0D:76:2C:33:EB:C2:CB
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/hePtoWhHZBrvqKEhcA12LDPrwss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/23
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
Signature Algorithm: sha256WithRSAEncryption
21:01:04:f1:64:ad:01:fa:cc:5d:6b:d4:03:44:7f:c6:89:fb:
61:16:48:72:d6:dc:89:07:f6:62:4c:55:1d:34:c7:f9:aa:ae:
3f:f0:33:3b:6d:5f:67:1b:18:7f:cc:96:1a:9e:f2:ba:d0:ca:
ca:67:86:15:ab:2b:48:7b:27:5c:89:3b:c0:a8:fe:e3:71:94:
cd:e8:84:6e:c1:5a:4a:d5:7f:bc:99:8a:f6:ac:84:f5:bd:db:
aa:e4:43:3a:a7:08:c5:6a:56:03:84:3d:37:c1:ff:97:8b:22:
6d:f6:81:ee:09:b6:90:24:80:95:76:30:89:fe:99:d0:af:75:
5e:35:e6:39:6d:d9:0e:74:84:3c:6f:0a:cf:1c:1a:27:7f:36:
41:85:30:f7:7a:01:7c:c3:66:5f:60:8b:f9:7d:cd:d2:ef:e6:
b9:95:26:42:f5:1f:cf:f4:f0:bd:ed:dc:1f:a8:52:a1:de:05:
57:45:7d:fd:72:2e:38:e6:90:b4:d8:8c:75:bd:b4:7b:a5:d4:
b7:7f:46:af:07:cd:8d:77:a9:aa:26:04:cf:dd:d7:5b:d6:8d:
d5:92:53:1d:82:72:1f:41:1f:ab:53:2c:af:a2:2a:f9:0c:46:
c8:80:ef:48:c8:42:ad:bf:0e:88:aa:1b:9c:0e:fa:fd:ed:b8:
6b:a8:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:00 2023 by rpki-client on console-ams.rpki-client.org