Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/hPurTjzaZc2Eb4sDDnZLRXV430E.roa
File: hPurTjzaZc2Eb4sDDnZLRXV430E.roa (raw, json)
Hash identifier: 8oLQErLXwyPl0pgaUt12Yd44KCnEHwUnHIiO6O8sGGE=
Subject key identifier: 84:FB:AB:4E:3C:DA:65:CD:84:6F:8B:03:0E:76:4B:45:75:78:DF:41
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 01856C4155FFEBCEE35CDA5350079D893D7C
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/hPurTjzaZc2Eb4sDDnZLRXV430E.roa
Signing time: Sun 01 Jan 2023 07:34:59 +0000
ROA not before: Sun 01 Jan 2023 07:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30873
IP address blocks: 94.26.192.0/21 maxlen: 21
94.26.200.0/21 maxlen: 21
94.26.208.0/21 maxlen: 21
94.26.216.0/21 maxlen: 21
5.100.160.0/21 maxlen: 21
109.200.160.0/21 maxlen: 21
109.200.168.0/21 maxlen: 21
109.200.176.0/21 maxlen: 21
109.200.184.0/21 maxlen: 21
5.255.0.0/21 maxlen: 21
5.255.8.0/21 maxlen: 21
5.255.16.0/21 maxlen: 21
5.255.24.0/21 maxlen: 21
80.253.176.0/21 maxlen: 21
80.253.184.0/21 maxlen: 21
188.240.96.0/21 maxlen: 21
188.240.104.0/21 maxlen: 21
185.11.8.0/22 maxlen: 22
188.240.112.0/21 maxlen: 21
188.240.120.0/21 maxlen: 21
31.31.176.0/21 maxlen: 21
31.31.184.0/21 maxlen: 21
213.246.0.0/21 maxlen: 21
213.246.8.0/21 maxlen: 21
81.91.24.0/21 maxlen: 21
213.246.16.0/21 maxlen: 21
213.246.24.0/21 maxlen: 21
78.137.72.0/21 maxlen: 21
78.137.80.0/21 maxlen: 21
78.137.88.0/21 maxlen: 21
131.117.160.0/21 maxlen: 21
134.35.152.0/21 maxlen: 21
134.35.160.0/21 maxlen: 21
134.35.168.0/21 maxlen: 21
134.35.176.0/21 maxlen: 21
134.35.184.0/21 maxlen: 21
134.35.192.0/21 maxlen: 21
134.35.96.0/21 maxlen: 21
134.35.104.0/21 maxlen: 21
134.35.112.0/21 maxlen: 21
134.35.120.0/21 maxlen: 21
176.123.16.0/21 maxlen: 21
134.35.128.0/21 maxlen: 21
176.123.24.0/21 maxlen: 21
134.35.136.0/21 maxlen: 21
134.35.144.0/21 maxlen: 21
178.130.80.0/21 maxlen: 21
110.238.32.0/21 maxlen: 21
175.110.32.0/21 maxlen: 21
178.130.88.0/21 maxlen: 21
110.238.40.0/21 maxlen: 21
175.110.40.0/21 maxlen: 21
178.130.96.0/21 maxlen: 21
178.130.104.0/21 maxlen: 21
110.238.48.0/21 maxlen: 21
175.110.48.0/21 maxlen: 21
110.238.56.0/21 maxlen: 21
175.110.56.0/21 maxlen: 21
178.130.112.0/21 maxlen: 21
178.130.120.0/21 maxlen: 21
78.137.64.0/21 maxlen: 21
134.35.200.0/21 maxlen: 21
134.35.208.0/21 maxlen: 21
134.35.216.0/21 maxlen: 21
134.35.224.0/21 maxlen: 21
175.110.0.0/21 maxlen: 21
134.35.232.0/21 maxlen: 21
175.110.8.0/21 maxlen: 21
178.130.64.0/21 maxlen: 21
175.110.16.0/21 maxlen: 21
134.35.240.0/21 maxlen: 21
175.110.24.0/21 maxlen: 21
134.35.248.0/21 maxlen: 21
178.130.72.0/21 maxlen: 21
188.209.232.0/21 maxlen: 21
188.209.240.0/21 maxlen: 21
188.209.248.0/21 maxlen: 21
188.209.224.0/21 maxlen: 21
134.35.40.0/21 maxlen: 21
134.35.48.0/21 maxlen: 21
134.35.56.0/21 maxlen: 21
46.35.64.0/21 maxlen: 21
134.35.64.0/21 maxlen: 21
134.35.72.0/21 maxlen: 21
46.35.72.0/21 maxlen: 21
46.35.80.0/21 maxlen: 21
134.35.80.0/21 maxlen: 21
46.35.88.0/21 maxlen: 21
134.35.88.0/21 maxlen: 21
134.35.0.0/21 maxlen: 21
134.35.8.0/21 maxlen: 21
134.35.16.0/21 maxlen: 21
134.35.24.0/21 maxlen: 21
134.35.32.0/21 maxlen: 21
46.161.232.0/21 maxlen: 21
46.161.240.0/21 maxlen: 21
46.161.248.0/21 maxlen: 21
109.74.32.0/21 maxlen: 21
109.74.40.0/21 maxlen: 21
82.114.160.0/21 maxlen: 21
82.114.160.0/22 maxlen: 22
82.114.164.0/22 maxlen: 22
82.114.168.0/21 maxlen: 21
82.114.176.0/21 maxlen: 21
46.161.224.0/21 maxlen: 21
82.114.184.0/21 maxlen: 21
89.189.72.0/21 maxlen: 21
89.189.80.0/21 maxlen: 21
89.189.88.0/21 maxlen: 21
89.189.64.0/21 maxlen: 21
2a02:2719::/32 maxlen: 32
2a02:271a::/32 maxlen: 32
2a02:271c::/32 maxlen: 32
2a02:271d::/32 maxlen: 32
2a02:2719:4400::/44 maxlen: 44
2a02:2719:4300::/44 maxlen: 44
2a02:2719:4100::/44 maxlen: 44
2a02:271b::/32 maxlen: 32
2a02:2719:4410::/44 maxlen: 44
2a02:2719:4310::/44 maxlen: 44
2a02:2719:4110::/44 maxlen: 44
2a02:271f::/32 maxlen: 32
2a02:2718::/32 maxlen: 32
2a02:271e::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:55:ff:eb:ce:e3:5c:da:53:50:07:9d:89:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Jan 1 07:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84fbab4e3cda65cd846f8b030e764b457578df41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:61:52:55:97:9b:81:e5:98:01:b8:56:a3:
37:02:a1:24:84:ee:ff:58:66:a8:62:39:03:f9:39:
12:63:62:85:cd:a9:06:32:4e:d0:d1:dc:7d:0e:15:
a9:c5:61:de:bc:1c:19:11:d0:69:66:fa:fd:f2:af:
94:da:4f:83:7d:fd:0e:c9:f4:98:f1:89:a3:e1:71:
92:f4:e6:5b:e5:91:98:ce:49:8c:1c:84:83:6e:5b:
b8:5a:e8:6e:8d:ba:1f:a3:40:73:d5:77:32:36:99:
1a:aa:77:1f:5e:a1:6c:53:5c:8f:7c:83:db:8d:62:
86:44:b9:95:fc:dc:a4:e7:bd:64:36:3b:06:ff:c9:
db:e5:f4:aa:09:46:f6:c1:93:bc:20:c0:dd:c0:17:
da:3e:e4:23:59:07:8e:11:22:2f:9f:03:49:7d:24:
61:29:7b:46:be:75:c6:a3:53:60:9f:c4:af:5a:92:
43:88:d9:3c:58:86:60:20:f7:aa:79:17:a2:ca:0b:
f1:d4:d5:9a:eb:ac:b3:df:39:79:a4:cb:64:c4:25:
f2:fb:db:c0:54:43:f2:e1:e2:37:6e:32:c5:8a:29:
5d:9f:44:35:75:63:36:1b:76:f7:2c:ee:80:00:a6:
a1:34:aa:c9:f4:28:fd:00:39:ab:da:d6:72:30:aa:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:AB:4E:3C:DA:65:CD:84:6F:8B:03:0E:76:4B:45:75:78:DF:41
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/hPurTjzaZc2Eb4sDDnZLRXV430E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.160.0/21
5.255.0.0/19
31.31.176.0/20
46.35.64.0/19
46.161.224.0/19
78.137.64.0/19
80.253.176.0/20
81.91.24.0/21
82.114.160.0/19
89.189.64.0/19
94.26.192.0/19
109.74.32.0/20
109.200.160.0/19
110.238.32.0/19
131.117.160.0/21
134.35.0.0/16
175.110.0.0/18
176.123.16.0/20
178.130.64.0/18
185.11.8.0/22
188.209.224.0/19
188.240.96.0/19
213.246.0.0/19
IPv6:
2a02:2718::/29
Signature Algorithm: sha256WithRSAEncryption
0b:b9:c5:19:34:91:d3:b8:64:36:45:85:10:19:42:d2:f5:05:
f2:9d:b8:91:d4:67:e2:e3:70:38:4b:e4:8b:3e:b7:b3:66:18:
2a:ad:f7:8f:f2:63:df:84:4c:4c:32:56:91:af:31:4d:01:25:
79:fb:a2:d9:c9:01:76:eb:e0:3e:0d:f7:18:29:04:7b:1d:73:
d9:3d:f6:6e:8e:3c:d1:73:ab:ec:8c:ec:2d:c3:36:e9:68:5d:
a7:31:2b:a5:e7:ed:14:cd:ae:bf:25:f4:ce:6c:2f:a1:b9:88:
9d:d9:e3:ba:80:05:3b:45:c7:bd:22:23:a8:49:fc:52:d5:f8:
d9:8f:71:fa:3b:7e:a5:21:ad:59:96:0d:e1:f3:27:2f:3f:72:
01:b0:b9:d0:7d:a0:78:75:65:75:25:56:48:bf:d2:36:b6:f5:
05:3d:4d:85:d9:82:4e:d0:18:3f:9b:2b:84:3a:22:eb:60:c7:
b6:c7:dd:c7:0a:e0:e5:4a:fb:49:1c:b9:04:10:b4:3a:ed:39:
a1:85:68:01:e6:a5:e1:e8:19:52:f4:c7:e3:41:ab:88:76:5a:
a3:41:44:34:4a:5f:c8:7d:a0:d3:6d:c0:a1:78:46:d4:ec:29:
ef:bf:0b:20:d1:58:1c:32:54:7a:45:e7:67:63:06:20:98:eb:
95:d9:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:50 2024 by rpki-client on console-ams.rpki-client.org