Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/hvri6ugDoU0YN_lugdxwt_1P_lc.roa
File: hvri6ugDoU0YN_lugdxwt_1P_lc.roa (raw, json)
Hash identifier: HctK86TtVA/n5cniYB+0NMgAJM0gdXP/gjtv3Cad66A=
Subject key identifier: 86:FA:E2:EA:E8:03:A1:4D:18:37:F9:6E:81:DC:70:B7:FD:4F:FE:57
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 0187DBDC39FF472C57C1DE9CCDA730AD106C
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/hvri6ugDoU0YN_lugdxwt_1P_lc.roa
Signing time: Tue 02 May 2023 09:47:35 +0000
ROA not before: Tue 02 May 2023 09:47:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29518
IP address blocks: 188.120.160.0/19 maxlen: 19
94.255.128.0/17 maxlen: 17
31.208.0.0/16 maxlen: 16
85.235.0.0/19 maxlen: 19
85.235.17.0/24 maxlen: 24
85.235.24.0/24 maxlen: 24
85.235.20.0/22 maxlen: 22
85.235.18.0/23 maxlen: 23
89.160.0.0/17 maxlen: 17
62.220.160.0/19 maxlen: 19
185.18.164.0/22 maxlen: 22
77.53.0.0/16 maxlen: 16
87.241.64.0/18 maxlen: 18
185.52.180.0/22 maxlen: 22
185.113.96.0/22 maxlen: 22
37.17.248.0/21 maxlen: 21
217.118.208.0/20 maxlen: 20
5.44.192.0/20 maxlen: 20
217.72.56.0/22 maxlen: 22
217.72.54.0/24 maxlen: 24
217.72.52.0/23 maxlen: 23
217.72.60.0/23 maxlen: 23
217.72.62.0/24 maxlen: 24
178.132.248.0/21 maxlen: 21
185.58.144.0/22 maxlen: 22
89.233.192.0/18 maxlen: 18
195.78.224.0/22 maxlen: 22
146.247.80.0/21 maxlen: 21
217.78.32.0/20 maxlen: 20
31.192.192.0/20 maxlen: 20
5.172.144.0/21 maxlen: 21
83.219.192.0/19 maxlen: 19
83.233.0.0/16 maxlen: 16
87.253.64.0/19 maxlen: 19
82.117.96.0/19 maxlen: 19
91.191.128.0/20 maxlen: 20
94.198.64.0/21 maxlen: 21
94.245.16.0/20 maxlen: 20
94.245.48.0/20 maxlen: 20
178.251.240.0/21 maxlen: 21
213.185.16.0/23 maxlen: 23
213.185.12.0/22 maxlen: 22
213.185.24.0/24 maxlen: 24
91.232.60.0/23 maxlen: 23
91.232.59.0/24 maxlen: 24
213.185.20.0/23 maxlen: 23
195.238.255.0/24 maxlen: 24
213.185.26.0/24 maxlen: 24
109.124.128.0/18 maxlen: 18
79.138.0.0/17 maxlen: 17
85.238.192.0/19 maxlen: 19
109.225.64.0/18 maxlen: 18
193.23.57.0/24 maxlen: 24
85.30.0.0/18 maxlen: 18
213.185.4.0/24 maxlen: 24
213.185.10.0/24 maxlen: 24
213.185.7.0/24 maxlen: 24
213.185.6.0/24 maxlen: 24
213.185.8.0/23 maxlen: 23
80.244.64.0/19 maxlen: 19
87.251.192.0/19 maxlen: 19
94.245.0.0/20 maxlen: 20
87.96.128.0/17 maxlen: 17
217.76.80.0/20 maxlen: 20
88.83.32.0/19 maxlen: 19
213.21.64.0/18 maxlen: 18
188.122.128.0/19 maxlen: 19
88.129.0.0/16 maxlen: 16
85.8.0.0/18 maxlen: 18
89.236.4.0/22 maxlen: 22
89.236.2.0/23 maxlen: 23
89.236.0.0/23 maxlen: 23
89.236.11.0/24 maxlen: 24
89.236.8.0/23 maxlen: 23
89.236.15.0/24 maxlen: 24
89.236.17.0/24 maxlen: 24
89.236.20.0/22 maxlen: 22
89.236.18.0/23 maxlen: 23
89.236.24.0/23 maxlen: 23
89.236.26.0/24 maxlen: 24
89.236.36.0/23 maxlen: 23
89.236.35.0/24 maxlen: 24
89.236.38.0/24 maxlen: 24
89.236.48.0/24 maxlen: 24
89.236.47.0/24 maxlen: 24
62.182.0.0/21 maxlen: 21
31.209.0.0/18 maxlen: 18
83.209.0.0/16 maxlen: 16
82.209.128.0/18 maxlen: 18
95.155.192.0/18 maxlen: 18
89.236.56.0/22 maxlen: 22
89.236.54.0/23 maxlen: 23
89.236.53.0/24 maxlen: 24
46.236.64.0/18 maxlen: 18
213.142.0.0/19 maxlen: 19
87.236.88.0/21 maxlen: 21
46.162.64.0/18 maxlen: 18
217.115.32.0/19 maxlen: 19
2a00:1598::/29 maxlen: 29
2a02:7b8::/32 maxlen: 32
2a00:8280::/32 maxlen: 32
2a02:23c0::/32 maxlen: 32
2a01:b700::/32 maxlen: 32
2001:9c8::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:dc:39:ff:47:2c:57:c1:de:9c:cd:a7:30:ad:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: May 2 09:47:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86fae2eae803a14d1837f96e81dc70b7fd4ffe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:fd:38:f8:30:49:32:a8:21:88:51:4c:cd:
e8:a7:d9:54:b6:b0:73:17:84:8b:3a:0b:0f:64:e1:
87:a2:be:7f:99:cd:35:b6:dc:fe:99:c8:72:6b:7c:
d7:73:69:95:01:48:10:e4:b0:bf:d7:12:b5:c2:d0:
fe:e8:69:6d:33:67:ac:45:2f:9e:1d:35:7a:d9:32:
c4:2d:ed:f4:73:22:5f:5b:f0:7e:c5:18:d8:f2:18:
b9:3c:07:0e:a3:52:ee:fe:a1:c9:ae:97:c9:f1:b9:
65:ad:5f:0d:03:a0:36:be:45:a4:ac:2e:eb:7b:de:
4c:e4:28:e4:e9:bd:93:60:cb:b2:17:09:9b:e2:6f:
ae:c2:7e:61:9b:1d:a8:bb:e9:c3:e2:5c:f6:8d:97:
e4:2b:01:ec:c0:8c:7a:47:1e:40:cf:63:00:83:dd:
6d:c7:ee:b6:00:ac:f6:01:db:10:af:03:99:4a:43:
3d:7d:8b:1c:a1:4b:1d:a9:7f:29:f8:3f:72:c0:49:
d2:75:ce:4c:4b:75:ce:b2:78:08:34:cd:0d:89:e4:
27:f2:d6:63:54:24:1d:14:3f:a1:75:7c:b5:59:5a:
af:95:3a:98:f0:6e:f0:1d:5a:7a:72:82:33:19:51:
5c:a7:23:8c:ae:62:51:c9:63:1c:68:bb:14:02:43:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:E2:EA:E8:03:A1:4D:18:37:F9:6E:81:DC:70:B7:FD:4F:FE:57
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/hvri6ugDoU0YN_lugdxwt_1P_lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.192.0/20
5.172.144.0/21
31.192.192.0/20
31.208.0.0-31.209.63.255
37.17.248.0/21
46.162.64.0/18
46.236.64.0/18
62.182.0.0/21
62.220.160.0/19
77.53.0.0/16
79.138.0.0/17
80.244.64.0/19
82.117.96.0/19
82.209.128.0/18
83.209.0.0/16
83.219.192.0/19
83.233.0.0/16
85.8.0.0/18
85.30.0.0/18
85.235.0.0/19
85.238.192.0/19
87.96.128.0/17
87.236.88.0/21
87.241.64.0/18
87.251.192.0/19
87.253.64.0/19
88.83.32.0/19
88.129.0.0/16
89.160.0.0/17
89.233.192.0/18
89.236.0.0-89.236.9.255
89.236.11.0/24
89.236.15.0/24
89.236.17.0-89.236.26.255
89.236.35.0-89.236.38.255
89.236.47.0-89.236.48.255
89.236.53.0-89.236.59.255
91.191.128.0/20
91.232.59.0-91.232.61.255
94.198.64.0/21
94.245.0.0/19
94.245.48.0/20
94.255.128.0/17
95.155.192.0/18
109.124.128.0/18
109.225.64.0/18
146.247.80.0/21
178.132.248.0/21
178.251.240.0/21
185.18.164.0/22
185.52.180.0/22
185.58.144.0/22
185.113.96.0/22
188.120.160.0/19
188.122.128.0/19
193.23.57.0/24
195.78.224.0/22
195.238.255.0/24
213.21.64.0/18
213.142.0.0/19
213.185.4.0/24
213.185.6.0-213.185.10.255
213.185.12.0-213.185.17.255
213.185.20.0/23
213.185.24.0/24
213.185.26.0/24
217.72.52.0-217.72.54.255
217.72.56.0-217.72.62.255
217.76.80.0/20
217.78.32.0/20
217.115.32.0/19
217.118.208.0/20
IPv6:
2001:9c8::/29
2a00:1598::/29
2a00:8280::/32
2a01:b700::/32
2a02:7b8::/32
2a02:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:14:e2:10:e7:74:7c:43:d8:9d:5e:b6:98:80:c6:c3:b5:92:
ab:d9:10:64:09:ca:70:f4:7e:b8:11:51:8e:3b:b2:1e:4a:c8:
d5:86:eb:62:e2:03:57:c7:f3:04:a1:b7:85:92:b6:43:63:0d:
e0:c0:de:3c:1b:87:d8:b6:fe:68:40:85:b9:47:0c:fe:83:2e:
be:0f:6e:ac:41:bb:7c:59:89:c8:94:00:34:a0:d2:7e:b0:17:
6d:96:53:fb:d7:25:a8:ee:a4:a0:f6:e8:93:24:dc:f7:9c:c7:
3a:2e:27:af:0c:29:a7:2e:0f:96:50:02:8b:b0:ba:5b:37:97:
14:18:ee:d4:d3:8b:ec:48:fd:97:5b:ed:ac:e1:83:b1:eb:f3:
c8:4c:95:dd:08:ff:60:e7:ae:38:d2:4d:f7:6c:a6:ff:e5:a0:
de:b9:5d:5f:8d:97:55:c9:00:62:71:0d:04:71:f9:21:d6:99:
82:90:8f:b8:60:d8:9b:fe:07:fc:7e:a0:74:b2:0a:1c:55:56:
13:88:d5:2d:10:88:d1:aa:10:66:42:04:37:6d:ad:08:f8:90:
76:e0:a6:bd:db:8c:9c:99:cd:53:1a:4c:74:7c:d2:a3:66:df:
fe:04:e0:e9:bd:e3:95:dc:83:ce:a4:a8:f9:b9:4f:a9:66:e3:
f1:68:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:46 2024 by rpki-client on console-fra.rpki-client.org