Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/az0yi1KtHtnySX4IKFi34ktDDnY.roa
File: az0yi1KtHtnySX4IKFi34ktDDnY.roa (raw, json)
Hash identifier: UeC+ujR4EQVXrswWLS8Kri5qQ4i3IfY4HbMfEtlaxhI=
Subject key identifier: 6B:3D:32:8B:52:AD:1E:D9:F2:49:7E:08:28:58:B7:E2:4B:43:0E:76
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018A7E90C85FBDD77768E96833A3171711DC
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/az0yi1KtHtnySX4IKFi34ktDDnY.roa
Signing time: Sun 10 Sep 2023 10:08:52 +0000
ROA not before: Sun 10 Sep 2023 10:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.21.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 23 Sep 2023 08:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:90:c8:5f:bd:d7:77:68:e9:68:33:a3:17:17:11:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Sep 10 10:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b3d328b52ad1ed9f2497e082858b7e24b430e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:e7:f7:32:4f:0b:47:24:87:91:c5:f1:07:
be:7f:a0:21:df:d9:05:18:86:a9:e7:73:0b:62:2e:
6b:be:a7:6c:c6:6f:43:31:50:47:14:fe:47:fb:04:
13:ef:da:0f:04:c4:98:81:c3:bb:ad:a2:58:1c:d6:
5b:07:b3:49:b3:d6:2d:10:e1:a7:6c:79:30:a4:e4:
ac:06:bc:d8:c5:3d:4e:58:88:a0:3c:7f:f1:62:7b:
ff:ad:9e:91:22:16:bb:06:8e:6d:b8:ae:e5:06:00:
f0:74:a7:3a:86:6a:56:16:74:d9:56:03:98:3d:70:
fa:f4:82:bb:fe:15:0c:e0:b3:e3:5d:bb:e9:f6:04:
a6:53:75:6b:30:8e:97:0c:7c:90:c1:ed:2f:84:11:
92:ef:c3:26:1e:13:8a:84:c9:54:36:37:d4:e8:18:
13:4c:49:7b:59:58:6b:d8:16:45:dc:96:c9:e9:84:
f7:dc:6a:40:5b:c9:b6:94:96:21:b3:95:18:4a:5b:
dc:4a:7b:96:f6:48:6e:b0:1b:ae:c9:34:2b:0b:2a:
e6:5b:c4:53:dd:54:1d:f3:b3:70:9e:1d:ff:fc:98:
e6:e2:e5:ec:b0:4c:2d:22:80:6b:d7:b5:f1:bd:7b:
e5:da:93:2b:c6:62:5a:42:47:3e:6a:25:04:a1:14:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:32:8B:52:AD:1E:D9:F2:49:7E:08:28:58:B7:E2:4B:43:0E:76
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/az0yi1KtHtnySX4IKFi34ktDDnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
03:5f:47:dc:4d:a4:dc:76:75:d2:be:73:1b:71:36:4b:82:ea:
95:a1:1f:3e:d6:f3:fd:d0:09:08:2c:37:64:56:99:d0:ba:39:
c1:16:33:49:6c:cc:a1:82:41:9a:aa:cb:09:d2:5b:3d:71:a9:
bc:1e:1f:f9:55:46:ee:9e:f2:a0:22:58:6f:a3:00:e3:ab:03:
21:90:c4:50:23:15:26:97:7e:29:d3:50:81:5a:d8:87:87:69:
4f:d7:90:c5:ed:77:22:63:9d:30:af:43:f3:5a:86:51:4d:0b:
38:6e:05:bc:b9:b6:bc:6b:ba:46:62:79:7a:77:2e:ed:16:df:
28:81:50:77:6e:ea:f5:67:89:58:6d:de:b6:a0:d5:9b:3d:52:
ee:95:fc:4d:6c:af:ce:fd:6a:04:8b:22:28:19:c5:f4:31:e3:
ef:1e:56:a7:2f:b0:24:25:10:e4:31:a2:5a:0b:3e:fa:12:26:
2e:3d:ee:b2:9d:aa:d6:28:27:39:ce:5e:50:85:7f:25:9f:65:
13:e5:ed:cb:93:f1:34:df:7f:de:bb:4f:ef:e9:ca:46:dd:24:
e1:12:7d:6f:54:7e:29:58:11:6c:75:4c:b3:24:b2:52:2f:d1:
32:a9:1b:6c:a6:aa:bd:16:a4:0f:5d:65:1c:2c:29:e0:a4:a0:
7e:cc:a5:a3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYp+kMhfvdd3aOloM6MXFxHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjMwOTEwMTAwODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjNkMzI4YjUyYWQxZWQ5ZjI0OTdlMDgyODU4YjdlMjRiNDMwZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaHn9zJPC0ckh5HF8Qe+f6Ah39kF
GIap53MLYi5rvqdsxm9DMVBHFP5H+wQT79oPBMSYgcO7raJYHNZbB7NJs9YtEOGn
bHkwpOSsBrzYxT1OWIigPH/xYnv/rZ6RIha7Bo5tuK7lBgDwdKc6hmpWFnTZVgOY
PXD69IK7/hUM4LPjXbvp9gSmU3VrMI6XDHyQwe0vhBGS78MmHhOKhMlUNjfU6BgT
TEl7WVhr2BZF3JbJ6YT33GpAW8m2lJYhs5UYSlvcSnuW9khusBuuyTQrCyrmW8RT
3VQd87Nwnh3//Jjm4uXssEwtIoBr17XxvXvl2pMrxmJaQkc+aiUEoRQxywIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGs9MotSrR7Z8kl+CChYt+JLQw52MB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvYXoweWkxS3RIdG55U1g0SUtGaTM0a3RERG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwQGBcmA
MAwDBAQlnBADBAIlnBgDBAElnB4DBARZJQAwCwMDAFkrAwQBWSsMAwQEXHIQAwQE
XmWAAwQBuRYeAwQCuWdUAwQCuYfkAwQCuYhkAwQCuaIoAwQCua9MAwQCubAgAwQC
ubbcAwQEvNVAMA0EAgACMAcDBQAqAFygMA0GCSqGSIb3DQEBCwUAA4IBAQADX0fc
TaTcdnXSvnMbcTZLguqVoR8+1vP90AkILDdkVpnQujnBFjNJbMyhgkGaqssJ0ls9
cam8Hh/5VUbunvKgIlhvowDjqwMhkMRQIxUml34p01CBWtiHh2lP15DF7XciY50w
r0PzWoZRTQs4bgW8uba8a7pGYnl6dy7tFt8ogVB3bur1Z4lYbd62oNWbPVLulfxN
bK/O/WoEiyIoGcX0MePvHlanL7AkJRDkMaJaCz76EiYuPe6ynarWKCc5zl5QhX8l
n2UT5e3Lk/E033/eu0/v6cpG3SThEn1vVH4pWBFsdUyzJLJSL9EyqRtspqq9FqQP
XWUcLCngpKB+zKWj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org