Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/2sCXvsc28VVLRTbM3_C30K_4QA8.roa
File: 2sCXvsc28VVLRTbM3_C30K_4QA8.roa (raw, json)
Hash identifier: 48pyyZPiXaQHTmRg3eOi/J9v5Df4pMZkAlfhiL/Wk9o=
Subject key identifier: DA:C0:97:BE:C7:36:F1:55:4B:45:36:CC:DF:F0:B7:D0:AF:F8:40:0F
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018C61ACD6F836F4330ED1758B9EF1A7BA35
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/2sCXvsc28VVLRTbM3_C30K_4QA8.roa
Signing time: Wed 13 Dec 2023 05:36:06 +0000
ROA not before: Wed 13 Dec 2023 05:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.21.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
2a00:5ca4::/31 maxlen: 31
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/29 maxlen: 29
2a00:5ca2::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:ac:d6:f8:36:f4:33:0e:d1:75:8b:9e:f1:a7:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Dec 13 05:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dac097bec736f1554b4536ccdff0b7d0aff8400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:3f:d0:43:49:33:ef:dd:91:d7:7d:77:06:
af:2e:44:09:eb:86:cd:d5:09:c6:6c:04:63:4d:a7:
aa:f1:a3:4a:62:85:9e:0d:f4:60:bc:ca:d0:36:54:
a5:18:aa:1d:57:17:56:84:93:23:fa:2a:97:88:36:
06:3d:e8:ab:a3:a6:0a:49:2f:27:5b:5d:78:1e:b6:
c8:fe:33:d8:27:3f:76:9e:e8:af:36:56:71:c8:73:
bc:82:0a:87:aa:db:33:10:72:2b:d1:ce:b7:82:94:
fb:f8:1c:59:b1:a1:a1:ab:14:cd:5c:52:52:19:e5:
e6:17:e5:d9:ea:59:86:91:ef:14:cc:90:a1:79:16:
13:fc:ac:9b:9a:3a:18:68:ef:1e:6a:d0:3f:61:e3:
9a:d0:c5:d1:3d:30:aa:50:f4:aa:4c:2c:59:48:20:
8c:ec:dc:86:2f:73:db:46:1c:07:4d:14:7a:6d:35:
91:d1:21:81:fa:23:e8:ef:96:f6:75:96:14:5f:0e:
67:d3:85:15:7d:47:53:cc:1c:da:8d:bb:f2:9c:e1:
c1:f5:76:26:98:41:94:20:61:83:00:b0:b7:26:90:
c1:74:d0:20:a4:bd:84:66:c4:02:05:ed:0c:af:8e:
8e:8d:79:80:6c:70:de:18:da:fa:f1:0b:a8:3e:33:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:97:BE:C7:36:F1:55:4B:45:36:CC:DF:F0:B7:D0:AF:F8:40:0F
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/2sCXvsc28VVLRTbM3_C30K_4QA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:79:4e:6a:3a:49:94:4d:64:7c:87:89:9e:ea:e7:e3:ec:e9:
cd:2b:14:5b:7f:66:7d:d2:6a:51:b2:38:26:94:25:36:f2:bb:
67:dd:72:ab:2a:7c:ff:60:7a:c2:1a:c9:0f:c4:78:2a:ea:ec:
dd:cb:12:09:42:e5:4a:d2:34:3d:bb:db:5d:75:c4:d7:28:75:
fe:d4:21:e8:a7:d7:c6:9a:bc:a8:0c:5b:0c:7a:52:87:94:ef:
f6:ba:dc:cf:ef:30:57:1d:58:9c:83:a7:89:c1:37:98:a0:89:
76:b0:aa:0b:2e:c6:d6:89:21:3e:bb:e6:f0:df:59:0d:89:9b:
14:bb:23:ae:c7:a9:2d:40:a2:20:c7:b3:ab:c9:16:c4:ec:96:
b7:fb:22:45:aa:4d:c0:25:39:b3:ca:84:ed:35:2c:a5:37:ce:
3a:b0:9a:50:fc:79:ef:23:c4:5c:d0:1b:d6:68:28:47:26:6f:
c3:2c:72:5e:2d:7b:6d:d6:d2:73:57:73:ec:55:e9:fc:96:dd:
f5:c9:41:34:79:ef:3b:aa:92:aa:1a:ed:f7:c6:9d:38:ac:e9:
fe:f9:00:5b:a1:c4:11:44:a9:8d:dc:b6:fb:26:ee:3b:91:e7:
e7:dd:8d:a7:f4:27:c7:77:b4:12:36:30:97:f4:a2:df:a4:c6:
5c:ad:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:41 2024 by rpki-client on console-fra.rpki-client.org