Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/V3fRI3xdtmkCXrm1Mk7es7cXToo.roa
File: V3fRI3xdtmkCXrm1Mk7es7cXToo.roa (raw, json)
Hash identifier: SkwGW3keLMrG3TI4BiScgK+DRygmfNJQBX4juV+lUlc=
Subject key identifier: 57:77:D1:23:7C:5D:B6:69:02:5E:B9:B5:32:4E:DE:B3:B7:17:4E:8A
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01896531D4B28BFD73ED641A8220FE3B61F7
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/V3fRI3xdtmkCXrm1Mk7es7cXToo.roa
Signing time: Mon 17 Jul 2023 18:51:51 +0000
ROA not before: Mon 17 Jul 2023 18:51:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39010
IP address blocks: 85.112.64.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.3.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
2a00:1580::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580::/29 maxlen: 29
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:31:d4:b2:8b:fd:73:ed:64:1a:82:20:fe:3b:61:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jul 17 18:51:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5777d1237c5db669025eb9b5324edeb3b7174e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:dd:16:81:e4:bf:94:b6:7b:93:21:9d:1e:
de:8b:33:21:26:0c:19:b6:a1:66:4f:16:a0:60:69:
a2:f3:69:f3:08:2b:80:bd:bb:1c:fb:54:d4:f2:da:
73:96:71:1b:75:13:4c:75:09:7c:4b:76:bf:b6:04:
0a:70:fe:16:55:c0:96:4e:ac:a0:7d:4b:93:46:cc:
1f:f6:8c:26:9c:75:61:79:9d:58:2d:e3:2a:0a:2c:
ad:b6:ff:2b:67:58:dc:80:72:04:d1:f5:b8:83:ac:
e8:fd:86:47:53:a5:6c:a7:a5:4f:72:11:c8:d0:be:
78:f0:c1:03:33:16:a3:3e:12:c1:04:e5:9c:bd:02:
94:0f:25:f8:4e:7a:4d:07:5e:e7:03:0c:36:9b:87:
23:d1:8c:f8:f5:61:7c:d0:9f:cb:66:42:4a:a0:c9:
52:fe:df:6c:59:8d:e5:8e:a2:a1:b3:7a:75:97:81:
70:b7:ba:41:10:20:eb:9c:a8:af:7d:0d:d4:fd:4b:
25:20:a2:dc:ba:97:36:ec:ed:14:f5:0c:1a:a7:04:
85:63:0a:3f:af:d5:c6:75:a6:0b:41:92:a2:f4:ea:
7c:0e:4d:99:56:9b:4f:0d:77:ed:b4:b0:9b:0f:73:
00:a9:7c:f5:97:89:f5:ed:5e:f3:50:d6:fc:28:fc:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:D1:23:7C:5D:B6:69:02:5E:B9:B5:32:4E:DE:B3:B7:17:4E:8A
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/V3fRI3xdtmkCXrm1Mk7es7cXToo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
71:35:37:ab:c2:03:48:28:b5:31:bd:bd:4f:a9:80:1b:09:ef:
c5:43:ba:f5:e6:63:b3:c0:3d:7b:e8:e7:00:ec:98:41:99:cf:
cc:72:e4:10:c9:e9:39:23:2c:ec:98:97:fd:bf:23:59:04:61:
45:d7:0b:6d:20:40:bc:22:34:93:8b:06:96:a2:e7:83:c6:b8:
48:58:70:2e:46:a1:ef:a9:e9:2b:a1:2a:a6:4e:7b:56:c9:53:
da:68:4d:f7:f5:ef:4b:3a:bd:9b:de:5c:80:09:3f:7d:c8:bc:
ac:1e:5a:2b:bd:54:da:c4:d9:2b:9e:80:5c:e1:ba:85:06:f2:
ef:4d:f4:5b:76:89:e7:c6:56:4a:53:7e:d9:91:80:92:c3:09:
9d:2d:61:ed:02:82:cb:22:a9:9a:c1:88:53:37:0b:fe:34:51:
c1:54:63:ab:6a:5e:f2:62:80:67:b5:3e:95:68:70:00:3b:f5:
d7:11:0c:e9:19:87:f0:51:88:a5:b8:34:f2:ed:67:76:2c:e3:
03:26:67:8b:6e:21:3e:c4:5e:04:a0:da:77:9f:00:71:ee:17:
50:6e:0c:1a:24:b4:01:1a:03:d1:92:a1:4d:69:45:0e:ce:b8:
b2:a1:71:b8:4f:ec:4b:29:8e:62:61:ab:d9:fc:51:30:2f:ba:
2d:5d:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org