Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/PYauA-SAHnMUHU8bSwe5O6g2Emc.roa
File: PYauA-SAHnMUHU8bSwe5O6g2Emc.roa (raw, json)
Hash identifier: li7YAhvyeD1LuB6SQcpa8rX+Cvk+WGeVb7Gm4hRMrFE=
Subject key identifier: 3D:86:AE:03:E4:80:1E:73:14:1D:4F:1B:4B:07:B9:3B:A8:36:12:67
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01856EC1FAA9F6FF28B3371A0469356D1AD7
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/PYauA-SAHnMUHU8bSwe5O6g2Emc.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39010
IP address blocks: 85.112.64.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.3.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
2a00:1580::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580::/29 maxlen: 29
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fa:a9:f6:ff:28:b3:37:1a:04:69:35:6d:1a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d86ae03e4801e73141d4f1b4b07b93ba8361267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:57:17:cb:07:b0:97:18:8c:fa:b4:4e:ea:
c4:c9:99:35:58:11:75:d3:f1:f8:42:21:48:ef:1f:
53:04:cb:cf:49:8b:ee:95:05:a9:ce:19:7c:34:4c:
8d:09:84:db:88:db:39:c8:84:da:92:27:44:fb:53:
9d:86:4e:65:59:5d:c3:2d:c4:75:6c:b9:4e:83:73:
c8:94:f1:00:16:41:2e:e3:84:da:90:d4:d3:6b:77:
ad:78:ec:9c:56:d9:6b:a0:f4:88:e8:2b:28:3f:8e:
2b:3b:57:00:26:55:70:bb:54:cb:76:a2:8e:4e:a0:
40:13:77:5a:ac:f5:10:70:c5:cc:62:d2:40:4c:87:
c6:37:27:13:69:7d:27:6c:2f:c1:72:d9:3c:cc:46:
20:95:c6:2e:ec:4b:56:75:3a:71:73:2c:98:7a:2f:
24:05:4a:68:ef:8f:4a:03:d5:a5:3a:a1:e0:a5:f4:
b6:b6:19:33:eb:29:b4:78:f7:63:1e:99:7e:3a:3a:
9c:87:8a:de:56:ab:d3:c2:2f:29:d3:6b:dc:d7:88:
be:b6:10:d5:d9:7f:7d:06:d5:5b:b7:fe:b5:ba:52:
e4:eb:53:2c:fb:ae:63:d9:4a:e3:7c:70:60:b5:26:
fb:71:39:3c:f2:87:16:b4:c6:74:cc:84:49:9e:f8:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:AE:03:E4:80:1E:73:14:1D:4F:1B:4B:07:B9:3B:A8:36:12:67
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/PYauA-SAHnMUHU8bSwe5O6g2Emc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
1e:79:a5:56:18:79:fd:5e:97:77:a9:41:6e:14:ae:f4:9a:02:
5c:fa:7d:1c:ca:82:4b:90:d5:74:a0:f3:db:db:32:38:13:23:
b9:71:ec:30:1b:14:ef:8d:a0:31:c9:ab:61:bd:c6:53:8f:1b:
2d:05:6d:ae:1a:ed:8d:e1:fa:8c:57:1a:38:b6:0d:f0:9e:3f:
9d:6e:20:9e:51:72:67:de:94:56:00:ec:ba:aa:57:4b:98:22:
7e:b6:d1:8e:e0:06:22:7f:c5:01:45:29:dc:b7:54:46:73:9e:
ec:e5:95:b5:27:5f:ed:54:80:58:55:81:f5:d7:01:e4:a3:a6:
72:e7:34:a5:b0:35:96:2a:10:ec:35:11:16:74:39:4c:2c:47:
20:d5:80:0a:6e:45:43:3b:af:9a:43:da:b3:7f:7c:e1:7c:43:
95:0e:52:84:21:c6:8a:40:6a:54:3b:05:88:18:d1:72:b5:9b:
9b:aa:dc:7f:df:33:b5:41:5f:4f:b0:21:2c:94:ec:b6:6f:4a:
ef:55:0a:90:c1:d6:cc:e1:63:ec:a5:be:3b:f1:ee:16:b2:89:
72:b5:b8:ae:6a:ca:4d:17:b6:16:9e:77:6d:3a:44:81:07:4e:
7a:95:ec:96:3e:85:30:6a:36:bc:0c:e8:28:fc:c5:74:18:6f:
27:eb:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org