Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/zHq6DPhIcRU3UARvz4ZY2Dy126c.roa
File: zHq6DPhIcRU3UARvz4ZY2Dy126c.roa (raw, json)
Hash identifier: gMLBpQve7gm0tKh49hW2fk38XYZDsPTrVTKDLLGfPQY=
Subject key identifier: CC:7A:BA:0C:F8:48:71:15:37:50:04:6F:CF:86:58:D8:3C:B5:DB:A7
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0187710027C8D70557846A593E7C3CC51D74
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/zHq6DPhIcRU3UARvz4ZY2Dy126c.roa
Signing time: Tue 11 Apr 2023 15:47:28 +0000
ROA not before: Tue 11 Apr 2023 15:47:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202422
IP address blocks: 5.188.0.0/24 maxlen: 24
5.188.6.0/24 maxlen: 24
80.93.209.0/24 maxlen: 24
80.93.210.0/24 maxlen: 24
5.188.36.0/24 maxlen: 24
31.184.206.0/24 maxlen: 24
80.93.219.0/24 maxlen: 24
80.93.218.0/24 maxlen: 24
80.93.214.0/24 maxlen: 24
80.93.215.0/24 maxlen: 24
80.93.217.0/24 maxlen: 24
80.93.223.0/24 maxlen: 24
5.188.148.0/24 maxlen: 24
87.121.53.0/24 maxlen: 24
83.229.4.0/24 maxlen: 24
45.80.211.0/24 maxlen: 24
45.80.210.0/24 maxlen: 24
2.56.223.0/24 maxlen: 24
89.43.109.0/24 maxlen: 24
5.188.93.0/24 maxlen: 24
5.45.184.0/24 maxlen: 24
5.45.185.0/24 maxlen: 24
79.133.110.0/24 maxlen: 24
92.38.187.0/24 maxlen: 24
37.9.33.0/24 maxlen: 24
37.9.32.0/24 maxlen: 24
37.9.35.0/24 maxlen: 24
79.133.124.0/24 maxlen: 24
89.42.178.0/24 maxlen: 24
95.85.71.0/24 maxlen: 24
95.85.67.0/24 maxlen: 24
139.28.6.0/24 maxlen: 24
95.85.76.0/24 maxlen: 24
95.85.77.0/24 maxlen: 24
92.223.102.0/24 maxlen: 24
95.85.91.0/24 maxlen: 24
5.189.204.0/24 maxlen: 24
5.189.206.0/24 maxlen: 24
202.78.168.0/24 maxlen: 24
180.149.36.0/24 maxlen: 24
180.149.47.0/24 maxlen: 24
89.44.194.0/24 maxlen: 24
89.44.199.0/24 maxlen: 24
45.65.9.0/24 maxlen: 24
45.65.11.0/24 maxlen: 24
92.223.90.0/24 maxlen: 24
92.38.148.0/24 maxlen: 24
92.38.155.0/24 maxlen: 24
213.156.136.0/24 maxlen: 24
92.38.160.0/24 maxlen: 24
92.38.166.0/24 maxlen: 24
213.156.143.0/24 maxlen: 24
213.156.145.0/24 maxlen: 24
194.99.81.0/24 maxlen: 24
213.156.148.0/24 maxlen: 24
213.156.147.0/24 maxlen: 24
92.38.173.0/24 maxlen: 24
92.38.186.0/23 maxlen: 24
213.156.155.0/24 maxlen: 24
213.156.157.0/24 maxlen: 24
92.38.181.0/24 maxlen: 24
92.38.184.0/24 maxlen: 24
92.38.186.0/24 maxlen: 24
92.38.180.0/24 maxlen: 24
185.163.1.0/24 maxlen: 24
5.8.24.0/24 maxlen: 24
5.8.33.0/24 maxlen: 24
5.8.41.0/24 maxlen: 24
92.38.132.0/24 maxlen: 24
5.188.225.0/24 maxlen: 24
78.111.105.0/24 maxlen: 24
78.111.99.0/24 maxlen: 24
78.111.102.0/24 maxlen: 24
5.188.230.0/24 maxlen: 24
103.215.218.0/24 maxlen: 24
217.195.193.0/24 maxlen: 24
5.188.169.0/24 maxlen: 24
5.188.168.0/24 maxlen: 24
5.188.190.0/24 maxlen: 24
146.185.236.0/24 maxlen: 24
146.185.237.0/24 maxlen: 24
146.185.248.0/24 maxlen: 24
146.185.250.0/24 maxlen: 24
146.185.251.0/24 maxlen: 24
92.243.82.0/24 maxlen: 24
217.195.205.0/24 maxlen: 24
185.101.139.0/24 maxlen: 24
146.185.216.0/24 maxlen: 24
146.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:00:27:c8:d7:05:57:84:6a:59:3e:7c:3c:c5:1d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Apr 11 15:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc7aba0cf84871153750046fcf8658d83cb5dba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:6c:0e:ce:34:92:f9:92:ca:cc:9d:90:90:
a7:fc:8c:b8:61:97:ee:05:a6:72:3c:bf:fb:1f:37:
6c:13:df:b8:37:62:0d:04:ee:ce:7f:db:1c:8a:e9:
57:e1:db:8e:b0:64:00:02:d7:3e:f0:7a:b8:b6:aa:
40:3d:0b:69:49:06:51:43:30:08:05:41:07:d8:48:
d8:2b:a1:c8:52:39:49:dd:f6:c5:d3:b1:ed:7a:d4:
a7:c7:b7:77:af:79:d1:30:48:e7:85:e4:f0:f9:81:
51:05:f2:24:14:93:52:3e:72:68:92:bd:ae:47:f6:
7f:7a:15:08:3f:f7:ed:c4:5a:9f:a2:ea:ec:3c:52:
a9:15:5c:58:fa:3d:0d:be:b2:6e:6c:66:f1:b5:9f:
e3:f8:3e:45:e9:30:54:24:cc:97:cd:75:83:d4:b6:
93:1c:2b:d7:a0:f6:e9:04:ea:32:ad:35:14:df:cb:
3a:2b:dc:86:e0:7e:fc:10:7c:d2:e9:ae:d6:0f:ba:
12:ff:d5:d9:c6:85:f2:75:c3:fe:08:f3:8b:7e:f1:
4a:93:3d:e7:dd:cd:10:4c:40:63:f0:14:96:81:e5:
18:23:5d:3d:29:25:c5:7d:73:fa:b4:6e:04:aa:d5:
37:f6:c6:ba:9c:3d:ee:e2:2a:cb:d5:da:7e:ab:0f:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:BA:0C:F8:48:71:15:37:50:04:6F:CF:86:58:D8:3C:B5:DB:A7
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/zHq6DPhIcRU3UARvz4ZY2Dy126c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.223.0/24
5.8.24.0/24
5.8.33.0/24
5.8.41.0/24
5.45.184.0/23
5.188.0.0/24
5.188.6.0/24
5.188.36.0/24
5.188.93.0/24
5.188.148.0/24
5.188.168.0/23
5.188.190.0/24
5.188.225.0/24
5.188.230.0/24
5.189.204.0/24
5.189.206.0/24
31.184.206.0/24
37.9.32.0/23
37.9.35.0/24
45.65.9.0/24
45.65.11.0/24
45.80.210.0/23
78.111.99.0/24
78.111.102.0/24
78.111.105.0/24
79.133.110.0/24
79.133.124.0/24
80.93.209.0-80.93.210.255
80.93.214.0/23
80.93.217.0-80.93.219.255
80.93.223.0/24
83.229.4.0/24
87.121.53.0/24
89.42.178.0/24
89.43.109.0/24
89.44.194.0/24
89.44.199.0/24
92.38.132.0/24
92.38.148.0/24
92.38.155.0/24
92.38.160.0/24
92.38.166.0/24
92.38.173.0/24
92.38.180.0/23
92.38.184.0/24
92.38.186.0/23
92.223.90.0/24
92.223.102.0/24
92.243.82.0/24
95.85.67.0/24
95.85.71.0/24
95.85.76.0/23
95.85.91.0/24
103.215.218.0/24
139.28.6.0/24
146.185.216.0/23
146.185.236.0/23
146.185.248.0/24
146.185.250.0/23
180.149.36.0/24
180.149.47.0/24
185.101.139.0/24
185.163.1.0/24
194.99.81.0/24
202.78.168.0/24
213.156.136.0/24
213.156.143.0/24
213.156.145.0/24
213.156.147.0-213.156.148.255
213.156.155.0/24
213.156.157.0/24
217.195.193.0/24
217.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b8:41:78:51:07:8f:73:82:53:d0:2b:7d:61:48:fe:cd:b3:
a9:01:4d:07:e0:7f:8f:34:bd:fe:00:93:da:55:12:79:9b:49:
1a:ca:b1:31:04:23:bd:44:62:cf:f0:f1:7a:aa:f4:29:d1:0d:
c7:ef:32:92:55:f1:53:85:ec:ef:b1:98:d1:9f:7e:30:9a:ad:
51:43:65:19:46:28:11:00:36:c1:e6:04:be:a5:b6:fb:b8:82:
15:bd:11:9e:b5:c9:6c:5a:cf:4e:dd:b3:0b:a6:15:a0:b6:4c:
ee:17:b4:39:52:e2:91:dd:72:f3:98:a3:a7:b2:49:45:37:0c:
f2:89:f7:02:85:83:8f:43:05:75:51:ef:ab:1d:ae:c6:7b:c2:
b3:48:4a:a7:fe:c0:0a:86:88:b3:67:1f:24:6f:49:27:f8:6d:
61:1d:90:49:1a:98:5e:7c:d3:0a:81:fc:c5:31:f6:85:7d:34:
3a:92:d5:cc:e1:83:b9:3f:e5:bc:51:91:98:b7:80:ea:18:cf:
ff:32:c4:1c:4b:ff:21:8b:ce:19:ac:c1:36:d5:6b:7a:78:99:
be:48:2f:60:27:f9:da:33:6b:4a:35:80:72:11:b3:e0:f0:2d:
9a:8a:1e:c0:14:ae:a1:8f:d6:2b:b4:86:08:72:f1:e5:59:87:
f8:14:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org