Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XE-wkApfOTMRURfE76b1j932ZH0.roa
File: XE-wkApfOTMRURfE76b1j932ZH0.roa (raw, json)
Hash identifier: npnYe+Tg1Q+rphaAMqDnFtGmq7SgJWlAY1lOyIM7tY4=
Subject key identifier: 5C:4F:B0:90:0A:5F:39:33:11:51:17:C4:EF:A6:F5:8F:DD:F6:64:7D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CD8DB218CF9B4435BBD2FCAE5259
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XE-wkApfOTMRURfE76b1j932ZH0.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.243.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cd:8d:b2:18:cf:9b:44:35:bb:d2:fc:ae:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c4fb0900a5f3933115117c4efa6f58fddf6647d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:ab:22:97:36:43:6d:8a:ac:d6:ce:20:56:
18:97:8e:c7:12:13:88:d1:6e:25:50:2f:6e:d5:6d:
3b:b8:d3:83:2d:6d:7d:a7:08:d8:5e:49:3a:f9:cf:
67:e3:76:a6:de:9b:45:49:77:d5:48:50:30:f7:0f:
a6:91:e2:83:2c:88:36:26:e8:ae:08:dd:b6:1c:57:
0b:b8:d8:9c:7b:1f:c7:8f:ed:cf:ba:3e:31:09:09:
76:e3:76:ae:79:ed:c5:0f:0d:48:0f:91:75:ee:d1:
a0:d6:b9:23:ca:51:16:80:f9:19:15:a6:9c:d5:ef:
ba:60:46:2d:5d:a2:c5:d9:a1:9b:ed:6a:c2:84:7a:
1e:bd:b9:77:8a:01:75:ce:61:9d:a9:68:7f:7b:5f:
79:d3:48:b8:01:9e:89:c2:25:e1:74:89:4b:c6:6a:
46:3f:3e:8b:4b:cd:f1:32:92:42:18:8c:5f:0c:cb:
e4:82:64:55:b9:bf:8d:a0:34:68:28:ab:c7:f3:c6:
93:f3:0d:8d:7a:fc:ac:1d:13:7d:0b:a6:8c:12:9f:
f1:5a:7c:6a:59:61:ad:28:fe:04:a2:e9:5e:ad:de:
16:62:d7:1e:fa:0c:8c:cd:66:d0:d7:c7:b5:a6:57:
2d:36:12:27:7a:f1:1c:6e:0e:40:0c:e9:34:64:68:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:B0:90:0A:5F:39:33:11:51:17:C4:EF:A6:F5:8F:DD:F6:64:7D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XE-wkApfOTMRURfE76b1j932ZH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
87:bf:88:3a:2c:f3:df:d3:1c:4a:cb:1a:13:eb:26:e7:04:17:
0f:61:37:1d:1b:6c:b3:2a:d9:6d:24:8c:b2:93:e5:74:4f:67:
51:10:7a:d1:e2:d5:77:25:68:f1:d6:f6:93:f6:5d:90:f9:bd:
2b:71:65:e5:9f:43:47:31:7c:aa:92:4c:24:28:67:f0:cf:e0:
c4:78:7a:4d:ca:5d:29:f4:e3:59:cd:39:93:13:3b:79:e6:04:
29:a1:26:7d:d6:af:ad:8a:42:99:9c:ec:74:25:5d:6b:3f:18:
c1:99:7c:ae:e3:b3:ac:07:f3:64:bc:c6:3e:0a:47:f5:ea:b2:
7d:7b:c6:d7:b6:77:b5:b7:60:fb:5b:e7:f3:2f:1f:58:42:1e:
3f:8d:c2:5a:e7:ac:48:84:31:a4:91:9e:d9:3c:67:c6:37:da:
bc:8f:e0:40:78:47:27:2f:33:d7:6c:20:9c:ab:de:7d:92:0f:
61:f4:36:3d:a7:06:cf:b6:84:57:d5:00:9a:51:1b:d0:a2:f6:
9b:6d:05:87:7c:8d:9c:65:e1:1f:a4:10:ca:e0:f9:68:e9:37:
d0:6e:da:92:24:f8:12:66:c9:5b:32:1e:19:19:ae:cb:7f:92:
54:2b:59:eb:e9:e5:37:20:ce:f2:b4:81:6a:3d:35:55:df:14:
2c:6e:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org