Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cFU-hs7HfE-qbgoeRLUog-SOki8.roa
File: cFU-hs7HfE-qbgoeRLUog-SOki8.roa (raw, json)
Hash identifier: ZSYz7RpUC4VylOxCi3XRboi66W1cRtPkE4lYGgVz9FI=
Subject key identifier: 70:55:3E:86:CE:C7:7C:4F:AA:6E:0A:1E:44:B5:28:83:E4:8E:92:2F
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C45DCBB8A1E194D99911D19A036E
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cFU-hs7HfE-qbgoeRLUog-SOki8.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.92.0/22 maxlen: 22
37.191.64.0/22 maxlen: 22
37.191.68.0/22 maxlen: 22
37.191.74.0/24 maxlen: 24
37.191.72.0/22 maxlen: 22
37.191.76.0/22 maxlen: 22
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 22
188.136.161.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 21
188.136.174.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.186.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.187.0/24 maxlen: 24
188.136.188.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.196.0/22 maxlen: 22
188.136.195.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.202.0/24 maxlen: 24
188.136.204.0/24 maxlen: 24
188.136.206.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.203.0/24 maxlen: 24
188.136.205.0/24 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.212.0/24 maxlen: 24
188.136.207.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
188.136.213.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.140.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.144.0/24 maxlen: 24
31.25.104.0/22 maxlen: 22
188.136.149.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
31.25.108.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
188.136.146.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.214.0/24 maxlen: 24
188.136.216.0/22 maxlen: 22
188.136.215.0/24 maxlen: 24
188.136.220.0/24 maxlen: 24
188.136.222.0/24 maxlen: 24
188.136.223.0/24 maxlen: 24
185.85.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 05 Mar 2023 14:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c4:5d:cb:b8:a1:e1:94:d9:99:11:d1:9a:03:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70553e86cec77c4faa6e0a1e44b52883e48e922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:3c:c5:10:5a:1d:11:67:dc:ef:1a:2e:c2:
7c:80:85:73:d0:d3:50:af:bc:1f:96:79:72:ed:1d:
21:15:5b:da:0a:d5:66:eb:ff:42:7a:f4:af:1b:83:
9f:b5:6c:fb:6f:5b:5b:28:e2:ce:d0:aa:93:66:4f:
b8:1a:e9:e2:44:b8:c4:74:9a:33:10:fa:3a:15:e1:
85:6f:d6:9b:35:c9:cc:57:94:8a:13:5b:48:03:29:
e7:56:1b:00:e7:39:2c:17:27:8e:d9:fa:d7:c3:70:
4b:94:ba:3b:e3:0e:0a:7b:e1:37:a5:be:07:1d:3e:
f3:f4:9f:43:13:c5:19:41:15:4b:c8:92:81:62:de:
85:8c:c2:af:70:ed:6f:31:e4:66:34:15:39:08:ab:
ef:d4:16:3d:a8:43:43:d1:e3:ff:b2:af:22:4b:36:
71:c0:32:40:32:3e:b2:34:65:52:a3:29:9b:e6:5b:
36:11:d5:c2:98:af:db:b5:91:9d:b9:f4:97:79:bf:
ca:f4:e1:57:83:e8:2f:7c:a0:df:14:74:9b:19:13:
af:82:44:2a:37:7d:72:09:7a:56:9e:4e:77:b6:72:
ee:63:d8:6e:01:8a:a9:d7:4e:71:ba:9a:9a:2e:b3:
43:ae:34:6d:d9:d7:13:44:d7:0f:3c:fa:bf:89:34:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:3E:86:CE:C7:7C:4F:AA:6E:0A:1E:44:B5:28:83:E4:8E:92:2F
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cFU-hs7HfE-qbgoeRLUog-SOki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0/19
185.85.68.0/22
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.220.255
188.136.222.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:0a:1d:7a:3a:da:59:b9:e1:f2:14:a1:72:42:a0:b8:07:02:
ec:7b:87:03:2e:f0:25:a9:0b:72:73:4d:4a:a5:7f:b6:9c:89:
24:98:4a:bd:51:79:35:01:5d:b2:ac:db:3e:36:ce:cf:89:1c:
85:03:50:1d:e1:75:ac:35:96:b6:9c:fe:9d:ed:c5:2e:c0:46:
8c:6f:1d:45:2a:6f:6c:e7:57:01:22:1b:8a:98:81:87:fa:a9:
99:eb:33:8a:b1:a6:3a:9e:f7:b5:5f:27:53:26:7c:f7:c0:b3:
7f:66:00:32:0c:d6:bf:ad:df:2a:c2:9e:49:23:2d:07:65:8c:
84:81:e2:b5:73:f6:85:ac:ec:b2:19:31:9d:ca:1c:24:73:21:
cf:59:73:08:cf:26:a0:74:98:76:f5:11:99:cd:15:98:a1:57:
b5:88:f4:34:b1:6b:ee:bc:13:f4:50:57:e0:d1:aa:d1:be:a4:
05:87:64:9d:a2:02:ea:ab:74:df:e9:cd:5a:71:df:a9:22:cb:
75:20:16:00:e9:0f:cd:24:cc:4d:65:ad:80:da:a9:cd:d7:f4:
a3:47:0d:3b:ce:02:2d:37:8b:f3:d3:42:38:72:57:3d:23:ef:
b7:ac:d5:95:e1:ce:d1:86:52:9f:be:0d:45:7e:b4:77:3c:de:
0f:b8:57:2a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYVvlMRdy7ih4ZTZmRHRmgNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMwMTAxMjMwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDU1M2U4NmNlYzc3YzRmYWE2ZTBhMWU0NGI1Mjg4M2U0OGU5MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJo8xRBaHRFn3O8aLsJ8gIVz0NNQ
r7wflnly7R0hFVvaCtVm6/9CevSvG4OftWz7b1tbKOLO0KqTZk+4GuniRLjEdJoz
EPo6FeGFb9abNcnMV5SKE1tIAynnVhsA5zksFyeO2frXw3BLlLo74w4Ke+E3pb4H
HT7z9J9DE8UZQRVLyJKBYt6FjMKvcO1vMeRmNBU5CKvv1BY9qEND0eP/sq8iSzZx
wDJAMj6yNGVSoymb5ls2EdXCmK/btZGdufSXeb/K9OFXg+gvfKDfFHSbGROvgkQq
N31yCXpWnk53tnLuY9huAYqp105xupqaLrNDrjRt2dcTRNcPPPq/iTQ+vQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFHBVPobOx3xPqm4KHkS1KIPkjpIvMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvY0ZVLWhzN0hmRS1xYmdvZVJMVW9nLVNPa2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQDHxloAwQF
Jb9AAwQCuVVEAwQDvIiAMAwDBAK8iIwDBAK8iJAwDAMEALyIlQMEALyI3AMEAbyI
3jANBgkqhkiG9w0BAQsFAAOCAQEAoAodejraWbnh8hShckKguAcC7HuHAy7wJakL
cnNNSqV/tpyJJJhKvVF5NQFdsqzbPjbOz4kchQNQHeF1rDWWtpz+ne3FLsBGjG8d
RSpvbOdXASIbipiBh/qpmeszirGmOp73tV8nUyZ898Czf2YAMgzWv63fKsKeSSMt
B2WMhIHitXP2hazsshkxncocJHMhz1lzCM8moHSYdvURmc0VmKFXtYj0NLFr7rwT
9FBX4NGq0b6kBYdknaIC6qt03+nNWnHfqSLLdSAWAOkPzSTMTWWtgNqpzdf0o0cN
O84CLTeL89NCOHJXPSPvt6zVleHO0YZSn74NRX60dzzeD7hXKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org