Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/KQEdxhe3aUyDQkOx1IRXLl2F2dQ.roa
File: KQEdxhe3aUyDQkOx1IRXLl2F2dQ.roa (raw, json)
Hash identifier: Eave/0rJOa8HX68WHlBVGw3Toqw0DnfrvdiHL0nrlYU=
Subject key identifier: 29:01:1D:C6:17:B7:69:4C:83:42:43:B1:D4:84:57:2E:5D:85:D9:D4
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01856F798E7868042D0BB1F9CC6BEBA30A04
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/KQEdxhe3aUyDQkOx1IRXLl2F2dQ.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 80.188.0.0/17 maxlen: 17
80.188.0.0/16 maxlen: 16
83.208.64.0/18 maxlen: 18
88.83.160.0/19 maxlen: 19
194.228.128.0/17 maxlen: 17
88.83.175.0/24 maxlen: 24
90.178.0.0/15 maxlen: 15
80.188.40.0/24 maxlen: 24
83.208.0.0/18 maxlen: 18
194.228.59.0/24 maxlen: 24
83.208.0.0/16 maxlen: 16
194.228.68.0/24 maxlen: 24
109.80.0.0/15 maxlen: 15
194.228.76.0/24 maxlen: 24
217.194.160.0/20 maxlen: 20
194.228.79.0/24 maxlen: 24
85.70.0.0/17 maxlen: 17
85.70.0.0/16 maxlen: 16
85.70.0.0/15 maxlen: 15
80.188.128.0/17 maxlen: 17
37.188.128.0/17 maxlen: 17
37.188.128.0/21 maxlen: 21
37.188.136.0/21 maxlen: 21
217.117.208.0/20 maxlen: 20
37.188.144.0/20 maxlen: 20
37.188.144.0/21 maxlen: 21
37.188.152.0/21 maxlen: 21
83.208.128.0/19 maxlen: 19
81.90.160.0/20 maxlen: 20
81.90.170.0/24 maxlen: 24
81.90.168.0/24 maxlen: 24
81.90.173.0/24 maxlen: 24
85.70.128.0/17 maxlen: 17
85.160.0.0/15 maxlen: 15
83.69.32.0/19 maxlen: 19
90.177.0.0/16 maxlen: 16
194.228.0.0/17 maxlen: 17
194.228.11.0/24 maxlen: 24
194.228.0.0/16 maxlen: 16
88.100.0.0/15 maxlen: 15
194.228.13.0/24 maxlen: 24
194.228.20.0/24 maxlen: 24
88.100.0.0/14 maxlen: 14
160.218.0.0/16 maxlen: 16
194.228.32.0/24 maxlen: 24
160.218.13.0/24 maxlen: 24
90.176.64.0/18 maxlen: 18
92.243.192.0/19 maxlen: 19
109.81.213.0/24 maxlen: 24
109.81.211.0/24 maxlen: 24
109.81.212.0/24 maxlen: 24
109.81.209.0/24 maxlen: 24
90.176.32.0/19 maxlen: 19
109.81.210.0/24 maxlen: 24
88.102.0.0/16 maxlen: 16
109.81.208.0/24 maxlen: 24
88.102.0.0/15 maxlen: 15
109.81.214.0/24 maxlen: 24
109.81.215.0/24 maxlen: 24
85.193.0.0/18 maxlen: 18
90.180.0.0/14 maxlen: 14
185.61.228.0/22 maxlen: 22
90.176.128.0/17 maxlen: 17
90.183.78.0/24 maxlen: 24
90.183.76.0/24 maxlen: 24
90.183.77.0/24 maxlen: 24
90.183.72.0/24 maxlen: 24
80.188.222.0/24 maxlen: 24
37.188.224.0/21 maxlen: 21
37.188.232.0/21 maxlen: 21
85.71.0.0/16 maxlen: 16
37.188.240.0/21 maxlen: 21
37.188.240.0/20 maxlen: 20
37.188.248.0/21 maxlen: 21
37.188.160.0/21 maxlen: 21
37.188.160.0/20 maxlen: 20
37.188.168.0/21 maxlen: 21
37.188.176.0/20 maxlen: 20
37.188.176.0/21 maxlen: 21
37.188.184.0/21 maxlen: 21
37.188.192.0/23 maxlen: 23
37.188.194.0/23 maxlen: 23
90.182.6.0/24 maxlen: 24
90.182.108.0/24 maxlen: 24
2001:41d8::/32 maxlen: 32
2a00:1028::/32 maxlen: 32
2a00:1028::/29 maxlen: 29
2a00:1028:d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8e:78:68:04:2d:0b:b1:f9:cc:6b:eb:a3:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29011dc617b7694c834243b1d484572e5d85d9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:fa:b3:ed:c2:35:cb:57:65:a5:04:59:42:
5e:29:82:2b:5c:61:e1:e2:ae:7b:7d:8d:5f:06:35:
00:99:a5:01:c5:8e:5b:0b:0e:4d:07:53:3c:0c:e0:
23:4f:1a:42:67:35:b7:74:23:fa:31:a1:41:18:d8:
eb:a8:4f:d2:cf:7c:48:73:4c:84:8e:e6:95:ad:14:
5a:2d:6d:41:fa:b7:06:7c:71:7e:f5:e4:06:31:8d:
c3:80:a7:d2:ac:d6:bd:d1:b7:66:6e:b9:06:54:7c:
a2:18:7c:97:06:7e:09:04:ec:e8:5e:5f:fc:5e:b9:
ab:63:d7:fd:05:3a:34:ce:2c:f4:42:7e:7a:35:2b:
ed:5b:50:81:9b:c6:89:e4:7d:0d:9b:b6:74:73:f2:
d2:4e:8f:be:52:2e:06:64:29:60:43:c2:45:5c:94:
97:2f:d6:6e:40:a8:52:8e:8f:b5:de:54:e2:d7:db:
e2:e0:15:14:a1:8c:e0:fe:03:3a:d7:95:5c:f7:c5:
51:a1:9e:40:b5:64:54:fa:f9:ee:a4:24:c1:17:45:
2f:1a:97:8e:e4:86:0f:42:5e:59:02:37:a2:f3:af:
f2:9e:18:b6:76:dc:64:13:a1:f0:8e:94:ab:9e:a9:
8b:21:f5:2f:5c:a7:cc:4e:ba:c9:d9:90:2f:b7:60:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:1D:C6:17:B7:69:4C:83:42:43:B1:D4:84:57:2E:5D:85:D9:D4
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/KQEdxhe3aUyDQkOx1IRXLl2F2dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.128.0/17
80.188.0.0/16
81.90.160.0/20
83.69.32.0/19
83.208.0.0/16
85.70.0.0/15
85.160.0.0/15
85.193.0.0/18
88.83.160.0/19
88.100.0.0/14
90.176.32.0-90.183.255.255
92.243.192.0/19
109.80.0.0/15
160.218.0.0/16
185.61.228.0/22
194.228.0.0/16
217.117.208.0/20
217.194.160.0/20
IPv6:
2001:41d8::/32
2a00:1028::/29
Signature Algorithm: sha256WithRSAEncryption
92:3f:f9:f6:ee:25:28:49:b3:7d:8f:82:29:3a:bd:aa:fc:e9:
bd:3f:0f:4e:5b:7e:c1:ca:07:b5:c0:1a:aa:33:07:e3:a5:be:
16:b1:3d:03:ba:38:33:d6:8a:67:1f:90:37:fb:ae:12:2e:70:
fb:8e:58:d0:16:89:28:bc:c0:8e:0b:49:67:3a:a1:ea:8c:ce:
cc:3b:1d:92:39:4a:49:44:60:b8:cb:a4:8a:75:4e:c3:b7:4b:
ae:84:7a:4f:b9:52:2f:83:e6:07:cf:af:6c:20:52:82:dc:02:
f2:5f:3e:fb:af:36:fc:80:24:ba:5b:39:e4:ee:0a:41:55:01:
d7:ed:04:77:54:3e:3f:3f:d1:65:4e:60:31:c1:82:2c:50:82:
8a:70:d1:72:69:4d:99:19:b3:98:a9:06:4c:df:02:38:69:26:
30:b0:d6:76:f2:e7:5d:69:fa:85:e9:58:9c:41:3f:ab:91:23:
0a:b0:85:e9:7d:5c:00:46:e5:b8:65:d8:80:fa:b9:c8:91:8e:
fa:c9:6d:97:1c:3d:d4:1a:25:cf:e6:00:ed:55:e3:d3:45:39:
ae:a1:fd:12:12:42:cc:31:e0:e4:b9:26:43:c6:2e:37:e3:1b:
bb:da:b6:0d:1d:6f:87:42:64:fa:49:ab:c5:32:64:80:06:82:
43:66:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:44 2024 by rpki-client on console-fra.rpki-client.org