Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/XNmKFbwkqGlTPYzc5quGIx73N2c.roa
File: XNmKFbwkqGlTPYzc5quGIx73N2c.roa (raw, json)
Hash identifier: nE1zhEOnlQHMLji9NdTMKl3nbWD1BOnP/xTfNZzx2mU=
Subject key identifier: 5C:D9:8A:15:BC:24:A8:69:53:3D:8C:DC:E6:AB:86:23:1E:F7:37:67
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 0185BF2213FAA73E47222C123111ED9D5A34
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/XNmKFbwkqGlTPYzc5quGIx73N2c.roa
Signing time: Tue 17 Jan 2023 09:49:19 +0000
ROA not before: Tue 17 Jan 2023 09:49:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47583
IP address blocks: 45.93.136.0/22 maxlen: 22
45.87.80.0/22 maxlen: 22
194.11.214.0/23 maxlen: 23
153.92.4.0/23 maxlen: 23
153.92.3.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.6.0/23 maxlen: 23
153.92.9.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.6.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.8.0/21 maxlen: 21
153.92.8.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.16.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.20.0/23 maxlen: 23
31.220.22.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.48.0/20 maxlen: 20
31.220.108.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
194.11.154.0/23 maxlen: 23
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.88.0/23 maxlen: 23
2.57.91.0/24 maxlen: 24
212.1.212.0/24 maxlen: 24
212.1.212.0/22 maxlen: 22
212.1.211.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.208.0/21 maxlen: 21
212.1.215.0/24 maxlen: 24
195.110.58.0/23 maxlen: 23
31.170.160.0/22 maxlen: 22
31.170.164.0/23 maxlen: 23
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 23
185.28.21.0/24 maxlen: 24
185.28.20.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
93.188.160.0/21 maxlen: 21
45.13.132.0/23 maxlen: 23
45.13.134.0/23 maxlen: 23
156.67.208.0/20 maxlen: 20
45.13.252.0/23 maxlen: 23
45.13.254.0/23 maxlen: 23
2a02:4780::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jul 2023 11:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:22:13:fa:a7:3e:47:22:2c:12:31:11:ed:9d:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jan 17 09:49:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cd98a15bc24a869533d8cdce6ab86231ef73767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:66:f5:b5:b7:72:11:55:a6:d9:c0:39:23:
9c:7d:e2:fc:c1:02:06:f9:eb:20:96:87:76:70:5a:
63:97:bb:b6:99:b8:63:6c:57:b5:58:11:d4:ea:a2:
21:17:68:97:99:8a:97:bd:71:f9:df:da:9f:75:8b:
bc:97:08:57:00:d9:5e:3e:f9:58:23:7f:2a:e5:2e:
a7:3e:d4:1d:64:41:74:92:f8:99:10:a4:6f:d6:57:
19:06:24:77:5d:b7:ab:d3:ad:a0:ed:d2:21:4f:1d:
4e:a7:b6:c3:f0:60:b7:de:17:05:ae:89:8c:0c:bf:
69:23:21:0e:24:4c:bd:7e:79:30:ad:50:3d:94:66:
98:b7:25:13:3c:27:47:c8:e9:73:d2:32:15:dd:4d:
06:d9:db:b1:a7:8d:f6:96:48:df:ee:d2:4d:a5:08:
64:b9:cb:a3:9b:97:f0:33:e1:ad:7d:23:04:c6:c5:
08:a4:09:2e:66:b5:b3:8f:a4:83:84:01:3b:95:9e:
1f:0b:7f:6d:49:01:c0:96:ec:2b:0d:2f:d2:6f:12:
7b:7f:cd:63:d3:c6:2e:7f:47:32:84:31:0e:50:50:
8a:33:c7:6a:0a:57:e6:d7:7c:88:be:03:39:75:f2:
ac:08:9f:f7:ae:cd:68:ee:3c:a7:8b:66:5d:5f:50:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:8A:15:BC:24:A8:69:53:3D:8C:DC:E6:AB:86:23:1E:F7:37:67
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/XNmKFbwkqGlTPYzc5quGIx73N2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
153.92.1.0-153.92.15.255
156.67.208.0/20
185.28.20.0/22
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:27:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:32:f5:b5:c0:10:35:3f:08:33:cd:a4:a1:f5:ac:ae:0a:9a:
50:96:58:4d:2e:67:c9:ad:16:61:91:03:a7:c3:f6:62:d6:41:
e7:ce:db:b5:bb:01:59:49:ca:14:b3:fc:cb:8e:58:ad:52:c2:
dd:b8:8e:89:d1:16:e0:ad:e0:bf:cf:85:87:d5:3c:fd:19:92:
03:0e:0f:2b:6b:63:b7:e1:15:54:5d:b5:b6:d2:5a:0f:b1:11:
d2:67:53:e5:05:91:d5:36:ca:82:e0:ec:f3:f8:8d:18:73:a9:
70:59:e5:d6:39:0f:5a:9a:ba:02:17:4d:f5:69:bc:d6:5a:65:
60:2a:7b:fd:d0:e8:7a:45:8d:53:9f:37:30:9e:3d:1b:51:79:
0d:7b:df:32:cd:83:94:0f:df:59:71:20:23:bf:ed:52:b5:18:
e3:d3:bc:87:f2:2c:73:da:86:41:66:5c:2e:95:7b:b8:bb:44:
b1:42:1b:49:5f:35:3d:6b:e7:fc:91:66:a0:7a:0c:91:5e:34:
ed:52:da:1a:cb:10:ff:bc:94:2b:84:26:09:2a:63:32:c3:dc:
f0:2e:0e:cb:91:e8:17:65:5b:5d:a0:50:28:94:14:28:31:ab:
8f:79:0b:61:b1:fd:42:e6:6f:3a:34:5b:14:a1:c7:35:7f:22:
fa:04:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org