Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/72xf_nQZEykc_i1gmilRpn7xX3w.roa
File: 72xf_nQZEykc_i1gmilRpn7xX3w.roa (raw, json)
Hash identifier: V6qDfFc6ZfylczjdAHyZCZ6xc2P6n62nxLxRWLl+Dyg=
Subject key identifier: EF:6C:5F:FE:74:19:13:29:1C:FE:2D:60:9A:29:51:A6:7E:F1:5F:7C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018780527AC3C76B59C2BE714EE83C024BBF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/72xf_nQZEykc_i1gmilRpn7xX3w.roa
Signing time: Fri 14 Apr 2023 15:11:41 +0000
ROA not before: Fri 14 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
46.33.64.0/19 maxlen: 24
193.242.80.0/20 maxlen: 20
194.121.52.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
77.67.0.0/17 maxlen: 24
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
134.222.0.0/16 maxlen: 16
212.222.0.0/16 maxlen: 24
194.45.182.0/23 maxlen: 23
212.221.0.0/17 maxlen: 24
213.251.0.0/18 maxlen: 24
185.160.40.0/22 maxlen: 22
213.254.192.0/18 maxlen: 24
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
62.132.132.0/23 maxlen: 23
192.129.32.0/23 maxlen: 23
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
194.45.4.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
212.115.128.0/18 maxlen: 24
213.200.64.0/18 maxlen: 18
195.143.0.0/16 maxlen: 24
194.45.98.0/23 maxlen: 23
141.136.96.0/20 maxlen: 20
194.45.12.0/23 maxlen: 23
89.149.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
194.45.47.0/24 maxlen: 24
92.71.0.0/17 maxlen: 17
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
77.77.128.0/18 maxlen: 24
193.141.140.0/23 maxlen: 23
62.41.16.0/21 maxlen: 24
62.132.0.0/22 maxlen: 22
62.41.24.0/22 maxlen: 24
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.132.28.0/24 maxlen: 24
92.71.128.0/18 maxlen: 18
62.41.56.0/21 maxlen: 24
62.132.42.0/23 maxlen: 23
194.41.62.0/24 maxlen: 24
62.41.64.0/20 maxlen: 24
192.54.104.0/24 maxlen: 24
62.41.0.0/20 maxlen: 24
2a00:1750::/32 maxlen: 32
2001:668::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:52:7a:c3:c7:6b:59:c2:be:71:4e:e8:3c:02:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef6c5ffe741913291cfe2d609a2951a67ef15f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:90:e6:0b:c5:62:3d:a9:e0:aa:53:95:1d:
fd:83:c7:1c:22:14:8c:25:24:04:d3:9b:c0:18:fe:
cc:b7:0a:f7:85:55:4d:15:16:bc:5c:fe:eb:15:d1:
2e:ea:ca:73:16:c2:af:9a:59:4d:c6:00:fd:d4:57:
3b:43:70:ed:51:43:af:df:fe:98:4e:d6:18:c0:a7:
93:a5:68:6e:98:2d:85:4d:d2:0c:50:ab:8c:2d:37:
db:ec:9a:a9:d9:0a:85:ae:7a:fd:8f:82:6d:a8:f9:
20:03:24:6b:d6:e0:b8:1e:2f:94:24:4b:6e:9b:1f:
4e:69:14:05:39:d8:05:cc:6d:a2:c9:d2:e3:46:a7:
f1:91:9a:c3:2c:1e:e2:5e:03:20:d6:98:65:34:0e:
92:5f:71:f1:b9:6b:ac:5a:e9:f6:9c:fd:4c:45:ba:
b2:09:a1:68:39:67:a0:06:21:f7:9b:c2:75:72:e7:
2d:0e:97:c9:bc:99:bd:48:b0:b3:1e:f6:45:e6:a3:
ea:6c:80:28:b8:84:f0:c6:ea:b2:31:34:0e:2a:89:
42:36:e8:79:81:0a:cb:97:63:56:dd:fb:ec:e4:e9:
92:8f:1a:e7:e2:22:d0:6a:8a:f3:d8:5d:ba:0b:6f:
fe:a2:86:25:9d:2c:61:49:d2:b8:6b:eb:62:b9:96:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:5F:FE:74:19:13:29:1C:FE:2D:60:9A:29:51:A6:7E:F1:5F:7C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/72xf_nQZEykc_i1gmilRpn7xX3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.121.52.0/22
195.143.0.0/16
212.115.128.0/18
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
3d:a9:27:3d:06:17:34:0e:02:86:b5:a3:23:fd:67:03:eb:3c:
34:91:e0:b7:91:f9:c7:51:9b:e5:0d:63:dc:f5:b4:06:ee:be:
3b:48:36:a3:08:24:aa:b0:8f:4c:99:ff:90:5f:63:d3:08:f0:
d3:83:9e:c8:38:45:d7:05:8b:3b:35:41:6d:80:b5:23:b7:23:
ba:10:c2:3f:6f:a9:74:34:2a:89:18:e2:cc:53:a4:90:7d:64:
89:5f:49:c0:75:1e:a0:08:37:a5:dc:d6:0f:e5:1b:a6:6b:0c:
f8:99:11:69:14:c5:7a:3a:6c:e6:a4:9f:73:53:87:23:e8:bc:
59:be:c0:a5:68:be:26:44:a5:f3:b1:40:18:b6:51:9d:9a:84:
17:d8:10:b8:67:cf:fd:5d:c1:ed:0a:0f:1b:ba:fb:44:7e:61:
ac:e1:bd:88:70:13:d8:c8:c1:fd:63:65:57:bf:62:50:2f:c9:
1b:35:e3:82:7b:00:bf:a8:f4:25:c3:4c:cb:f9:2e:0a:1a:73:
fc:20:47:2a:3b:a8:34:c3:04:25:5c:1d:21:e3:5e:63:15:71:
bd:7a:d3:aa:b7:45:11:f9:37:3b:3b:54:1f:80:68:5c:a8:2d:
67:da:fe:6f:35:d4:bd:e9:95:27:32:cb:b0:dd:19:af:4c:bd:
89:70:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org