Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/7qVH_onzy5PW62yf-vnlV56IzOw.roa
File: 7qVH_onzy5PW62yf-vnlV56IzOw.roa (raw, json)
Hash identifier: uOgWSN1iNj7miUyZs1tEQbR6wqDi3K+B8Ziw9N5nl+c=
Subject key identifier: EE:A5:47:FE:89:F3:CB:93:D6:EB:6C:9F:FA:F9:E5:57:9E:88:CC:EC
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0185729EB78BE221C0D9CFA4DB76A59D0C72
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/7qVH_onzy5PW62yf-vnlV56IzOw.roa
Signing time: Mon 02 Jan 2023 13:14:42 +0000
ROA not before: Mon 02 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 81.201.124.0/22 maxlen: 22
81.29.192.0/19 maxlen: 19
81.29.208.0/20 maxlen: 20
81.201.96.0/22 maxlen: 22
89.107.16.0/21 maxlen: 21
81.201.100.0/23 maxlen: 23
81.201.104.0/24 maxlen: 24
81.201.112.0/22 maxlen: 22
81.201.108.0/22 maxlen: 22
81.201.118.0/23 maxlen: 23
88.80.160.0/20 maxlen: 20
88.80.176.0/21 maxlen: 21
85.90.224.0/20 maxlen: 20
217.20.32.0/21 maxlen: 21
217.20.32.0/20 maxlen: 20
217.20.44.0/22 maxlen: 22
217.20.40.0/23 maxlen: 23
217.20.42.0/23 maxlen: 23
85.90.240.0/22 maxlen: 22
212.111.32.0/21 maxlen: 21
217.117.144.0/20 maxlen: 20
80.252.80.0/20 maxlen: 20
87.237.184.0/21 maxlen: 21
213.52.132.0/22 maxlen: 22
213.52.136.0/21 maxlen: 21
213.52.144.0/20 maxlen: 20
213.52.160.0/20 maxlen: 20
213.52.172.0/22 maxlen: 22
213.52.176.0/22 maxlen: 22
213.52.180.0/23 maxlen: 23
213.52.184.0/22 maxlen: 22
213.52.190.0/23 maxlen: 23
213.52.192.0/18 maxlen: 18
188.95.96.0/21 maxlen: 21
80.85.82.0/23 maxlen: 23
80.85.88.0/21 maxlen: 21
212.71.224.0/21 maxlen: 21
212.71.240.0/22 maxlen: 22
80.85.64.0/20 maxlen: 20
109.237.16.0/21 maxlen: 21
62.216.224.0/21 maxlen: 21
109.237.28.0/24 maxlen: 24
85.233.192.0/19 maxlen: 19
62.216.233.0/24 maxlen: 24
62.216.236.0/22 maxlen: 22
85.233.196.0/24 maxlen: 24
62.216.234.0/23 maxlen: 23
85.233.194.0/24 maxlen: 24
62.216.244.0/22 maxlen: 22
85.233.205.0/24 maxlen: 24
62.216.246.0/24 maxlen: 24
62.216.240.0/20 maxlen: 20
213.219.40.0/21 maxlen: 21
213.219.48.0/20 maxlen: 20
62.209.32.0/19 maxlen: 19
212.111.44.0/22 maxlen: 22
85.90.248.0/21 maxlen: 21
212.111.48.0/20 maxlen: 20
85.90.252.0/22 maxlen: 22
213.219.0.0/19 maxlen: 19
217.114.160.0/20 maxlen: 20
87.252.192.0/20 maxlen: 20
213.219.32.0/22 maxlen: 22
87.252.208.0/20 maxlen: 20
217.68.16.0/22 maxlen: 22
217.68.16.0/20 maxlen: 20
217.68.24.0/21 maxlen: 21
217.68.20.0/22 maxlen: 22
89.21.0.0/19 maxlen: 19
213.168.224.0/20 maxlen: 20
82.199.64.0/19 maxlen: 19
213.168.240.0/21 maxlen: 21
213.168.252.0/22 maxlen: 22
2a02:170::/32 maxlen: 32
2001:4d78:f200::/40 maxlen: 40
2001:4d78::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Nov 2023 19:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b7:8b:e2:21:c0:d9:cf:a4:db:76:a5:9d:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jan 2 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea547fe89f3cb93d6eb6c9ffaf9e5579e88ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:e4:19:0e:eb:54:1c:65:02:d8:33:fc:32:
d4:d7:7a:c1:3e:2f:6a:ad:ef:89:e6:47:bc:8b:6a:
74:a3:18:72:7d:b3:2b:c3:28:19:d4:91:5d:4c:66:
e1:d3:85:16:67:0c:f6:7f:ea:e6:72:f5:6c:53:9d:
55:c1:fd:9d:8c:a9:98:0f:7a:95:11:92:60:cc:f2:
5e:5d:3d:21:73:05:00:bf:d0:80:d6:e3:4f:4c:47:
9c:5f:1c:4a:71:d7:b8:b0:e7:7d:07:9a:29:6d:89:
f6:a6:1d:9e:b3:91:f4:c3:c9:35:28:5f:7f:d0:15:
bc:cd:e5:43:27:7d:4e:49:f5:29:9f:17:57:c9:09:
fa:f5:94:bb:c4:4b:b9:92:81:ce:02:35:8a:0a:f3:
16:af:f6:98:03:fa:c8:df:e8:3b:f9:bb:24:28:59:
3c:8d:f6:27:c8:eb:f5:90:29:4e:71:0c:61:43:87:
a3:31:57:b1:c7:4f:1b:2d:a5:e7:40:e0:85:07:1a:
d2:b4:c1:d9:2b:73:8b:44:14:9f:06:19:b3:d9:d2:
08:49:29:ec:a2:0a:c0:a0:47:c6:cf:8b:f8:52:74:
3d:2e:32:df:e3:5c:a6:f2:c5:04:0c:3f:b3:42:ac:
88:45:48:3e:35:7b:ab:f9:31:17:8b:98:52:79:d0:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:47:FE:89:F3:CB:93:D6:EB:6C:9F:FA:F9:E5:57:9E:88:CC:EC
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/7qVH_onzy5PW62yf-vnlV56IzOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.32.0/19
62.216.224.0/21
62.216.233.0-62.216.255.255
80.85.64.0/20
80.85.82.0/23
80.85.88.0/21
80.252.80.0/20
81.29.192.0/19
81.201.96.0-81.201.101.255
81.201.104.0/24
81.201.108.0-81.201.115.255
81.201.118.0/23
81.201.124.0/22
82.199.64.0/19
85.90.224.0-85.90.243.255
85.90.248.0/21
85.233.192.0/19
87.237.184.0/21
87.252.192.0/19
88.80.160.0-88.80.183.255
89.21.0.0/19
89.107.16.0/21
109.237.16.0/21
109.237.28.0/24
188.95.96.0/21
212.71.224.0/21
212.71.240.0/22
212.111.32.0/21
212.111.44.0-212.111.63.255
213.52.132.0-213.52.181.255
213.52.184.0/22
213.52.190.0-213.52.255.255
213.168.224.0-213.168.247.255
213.168.252.0/22
213.219.0.0-213.219.35.255
213.219.40.0-213.219.63.255
217.20.32.0/20
217.68.16.0/20
217.114.160.0/20
217.117.144.0/20
IPv6:
2001:4d78::/32
2a02:170::/32
Signature Algorithm: sha256WithRSAEncryption
4f:94:3b:8a:ab:5b:8e:d0:0f:16:67:5a:4b:7e:44:55:de:49:
e7:e1:dc:e9:05:a6:4d:d6:c1:24:e2:a5:c2:96:42:0c:e4:c4:
95:86:89:b2:bf:af:a2:06:68:40:de:c9:0f:94:b5:b2:ae:51:
ff:ff:7c:bb:31:87:5d:c6:a7:0d:41:42:4a:b2:54:b5:f0:3a:
e0:76:8b:a7:e9:e3:c4:b0:cd:1c:ab:de:62:65:91:a4:8c:6e:
53:b3:f9:a6:53:c2:0a:b0:47:f6:98:9d:2b:27:54:b2:ab:7b:
be:1c:5d:5e:33:38:c0:2b:21:3d:ea:1a:52:53:ca:82:43:e7:
6e:4b:ad:43:78:22:a6:26:6f:ca:0d:58:82:69:52:a9:65:97:
71:f7:5b:2c:9c:30:14:e5:3d:0e:72:91:36:8d:c5:be:8a:61:
8c:f8:c7:4b:f7:2c:69:b7:30:54:94:af:d2:65:60:5b:27:67:
6a:04:99:76:64:42:7b:c8:df:00:7b:38:49:c4:37:53:e8:91:
a5:3f:59:e9:74:0e:b7:7e:30:73:fe:4d:f1:c3:df:34:41:62:
f8:21:cc:fb:aa:a8:36:6f:90:5f:1e:bd:f0:73:e8:84:c5:3e:
95:c1:3f:b3:d5:ba:fc:db:9f:c3:6f:47:bf:ad:ee:2d:ea:30:
45:d0:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:00 2024 by rpki-client on console-fra.rpki-client.org