Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/qIy7H1fxcjulcRrkEp0zkYfoeN8.roa
File: qIy7H1fxcjulcRrkEp0zkYfoeN8.roa (raw, json)
Hash identifier: YPp6yhQ4bS3zlgiyQWuHBJ0UeH2bzKyjSQvoFxse4jw=
Subject key identifier: A8:8C:BB:1F:57:F1:72:3B:A5:71:1A:E4:12:9D:33:91:87:E8:78:DF
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0187B3442A44F7D0F2AFE9D8725AA036D68A
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/qIy7H1fxcjulcRrkEp0zkYfoeN8.roa
Signing time: Mon 24 Apr 2023 12:36:41 +0000
ROA not before: Mon 24 Apr 2023 12:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.193.0/24 maxlen: 24
31.214.196.0/22 maxlen: 22
31.214.195.0/24 maxlen: 24
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/24 maxlen: 24
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.220.0/23 maxlen: 23
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 21
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.161.0/24 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.162.0/23 maxlen: 23
31.214.166.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 21
37.10.104.0/23 maxlen: 23
37.10.107.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.118.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.119.0/24 maxlen: 24
37.10.124.0/22 maxlen: 22
45.159.4.0/23 maxlen: 23
45.159.7.0/24 maxlen: 24
45.159.6.0/24 maxlen: 24
5.83.160.0/22 maxlen: 24
5.83.164.0/24 maxlen: 24
5.83.165.0/24 maxlen: 24
5.83.163.0/24 maxlen: 24
5.83.166.0/24 maxlen: 24
5.83.172.0/23 maxlen: 23
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
85.190.138.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.136.0/24 maxlen: 32
85.190.137.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
85.190.141.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
85.190.140.0/24 maxlen: 24
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.143.0/24 maxlen: 24
85.190.144.0/24 maxlen: 24
85.190.142.0/24 maxlen: 24
85.190.145.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.164.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
85.190.172.0/22 maxlen: 22
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/20 maxlen: 20
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
5.62.112.0/21 maxlen: 21
95.156.198.0/24 maxlen: 24
5.62.120.0/22 maxlen: 22
5.62.124.0/23 maxlen: 23
5.62.127.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
85.190.130.0/23 maxlen: 23
95.156.211.0/24 maxlen: 24
85.190.128.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
85.190.132.0/23 maxlen: 23
109.230.240.0/23 maxlen: 23
95.156.213.0/24 maxlen: 24
5.62.64.0/21 maxlen: 21
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 21
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
5.101.166.0/24 maxlen: 24
2a03:4d45:800::/37 maxlen: 37
2a03:4d45::/37 maxlen: 37
2a03:4d44:2000::/37 maxlen: 37
2a03:4d44:800::/37 maxlen: 37
2a03:4d40::/32 maxlen: 32
2a03:4d43::/32 maxlen: 32
2a03:4d43:2000::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d43::/37 maxlen: 37
2a03:4d41:300::/40 maxlen: 40
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d41::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d47:800::/48 maxlen: 48
2a03:4d47::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:44:2a:44:f7:d0:f2:af:e9:d8:72:5a:a0:36:d6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Apr 24 12:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88cbb1f57f1723ba5711ae4129d339187e878df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:2d:19:35:2e:e6:22:75:7e:a0:95:04:6a:
af:f5:cb:ab:09:35:70:a2:4b:c5:00:f3:b5:0a:11:
99:db:c7:f3:c9:96:fa:b6:05:a2:3d:f7:c0:99:6f:
4a:fe:98:7c:54:cf:f5:a4:8b:f7:b2:72:b7:f1:70:
b3:fd:74:9e:1f:b4:54:4a:ec:f7:4e:bd:6d:f2:68:
05:55:5b:26:97:6e:bc:07:14:76:74:63:77:51:f6:
46:99:27:c8:e4:ad:f8:1e:ba:1c:2d:36:c6:3f:54:
65:21:00:7e:e2:05:b2:04:32:96:9f:9a:6e:af:7e:
2d:e8:c4:31:ab:21:d3:58:80:3e:1a:58:d2:00:4a:
cd:aa:0e:11:a6:05:d7:46:fd:4b:7f:31:57:fb:8d:
15:e4:7b:09:3e:fc:64:c1:e4:28:c7:90:ee:ac:15:
0e:24:77:18:5d:86:f9:51:16:33:e7:76:02:50:0e:
29:be:23:5c:36:1c:99:21:0f:36:d3:10:9d:ea:14:
64:75:1b:44:5e:ba:05:ab:a2:d0:65:32:59:1b:88:
7f:fc:45:39:20:5d:5c:6c:63:eb:d3:ed:9e:d7:93:
43:55:b0:41:2f:0b:4e:09:8a:35:70:3e:2b:9c:9f:
33:89:b8:ec:a1:45:bf:fc:52:84:bc:ae:82:cc:65:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8C:BB:1F:57:F1:72:3B:A5:71:1A:E4:12:9D:33:91:87:E8:78:DF
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/qIy7H1fxcjulcRrkEp0zkYfoeN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0/20
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.163.255
31.214.166.0/24
31.214.193.0/24
31.214.195.0-31.214.199.255
31.214.202.0-31.214.211.255
31.214.216.0/24
31.214.218.0-31.214.221.255
31.214.224.0/22
31.214.232.0/21
37.10.96.0-37.10.105.255
37.10.107.0/24
37.10.115.0/24
37.10.118.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0/21
85.190.128.0-85.190.150.255
85.190.152.0-85.190.175.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/31
2a03:4d44:800::/37
2a03:4d44:2000::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
1a:a1:f3:22:e2:3a:86:c0:e6:de:e0:df:94:cb:9b:e0:4f:57:
89:d1:1b:a3:fa:d6:12:d4:48:fc:7e:d3:26:a2:28:a1:67:fc:
0c:26:e1:1a:e0:ca:2e:c1:35:af:07:5f:50:c9:7f:92:2c:7f:
12:5a:9d:6e:dd:97:a3:2a:92:1d:67:46:b4:93:df:7d:b8:17:
84:98:54:7d:46:3c:5b:fe:9f:74:15:4f:b0:69:94:1f:6e:fb:
e4:68:4e:81:8e:4c:8a:e7:ab:3a:d7:96:d4:05:93:73:39:32:
13:f9:e8:ae:f3:72:e0:8f:21:53:5d:d7:80:2f:b1:5c:97:e9:
fd:de:d0:77:15:34:4c:09:65:75:3d:04:95:56:fb:c1:59:e5:
bb:de:ae:01:33:b4:91:55:3f:fc:85:09:d2:29:98:90:e6:b6:
df:66:4a:28:f1:7b:4b:5b:30:b3:24:fe:c3:d6:e9:95:1f:5f:
01:92:08:f1:60:8e:c5:17:ed:a6:b2:b1:e6:fe:2e:f1:6a:84:
e8:50:54:76:1a:a1:15:96:e6:58:c0:46:43:96:6f:e0:a0:81:
e2:dd:5e:95:0f:e6:6c:c7:13:b3:aa:de:77:d5:50:94:2a:5d:
2b:a3:06:22:7d:39:1a:fc:8c:76:83:66:87:bb:5f:20:53:e5:
48:81:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org