Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0_iE-QKd94NpNwipBCWQOQT4hNI.roa
File: 0_iE-QKd94NpNwipBCWQOQT4hNI.roa (raw, json)
Hash identifier: LNY8wsTBAbgoPgtP7ju5CoKvl9o1pKuz1cJrVpXsZKc=
Subject key identifier: D3:F8:84:F9:02:9D:F7:83:69:37:08:A9:04:25:90:39:04:F8:84:D2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0189F278EDB116E2A2295DC93BCAF68D99C4
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0_iE-QKd94NpNwipBCWQOQT4hNI.roa
Signing time: Mon 14 Aug 2023 05:15:58 +0000
ROA not before: Mon 14 Aug 2023 05:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.0.0/19 maxlen: 19
217.60.0.0/18 maxlen: 18
217.60.0.0/16 maxlen: 16
217.60.24.0/21 maxlen: 21
217.60.32.0/22 maxlen: 22
217.60.36.0/22 maxlen: 22
217.60.36.0/23 maxlen: 23
217.60.32.0/20 maxlen: 20
217.60.38.0/23 maxlen: 23
217.60.40.0/21 maxlen: 21
217.60.48.0/20 maxlen: 20
37.148.0.0/18 maxlen: 24
37.148.0.0/17 maxlen: 18
217.60.108.0/22 maxlen: 22
217.60.128.0/18 maxlen: 18
217.60.128.0/19 maxlen: 19
217.60.150.0/24 maxlen: 24
217.60.64.0/20 maxlen: 20
217.60.64.0/18 maxlen: 18
217.60.80.0/20 maxlen: 20
217.60.96.0/21 maxlen: 21
217.60.104.0/22 maxlen: 22
151.244.128.0/19 maxlen: 19
94.183.176.0/21 maxlen: 21
84.241.0.0/18 maxlen: 24
31.56.80.0/20 maxlen: 20
31.56.16.0/20 maxlen: 20
31.56.0.0/14 maxlen: 24
31.56.32.0/20 maxlen: 20
185.73.3.0/24 maxlen: 24
185.73.0.0/22 maxlen: 22
151.238.0.0/15 maxlen: 24
185.73.2.0/24 maxlen: 24
185.73.2.0/23 maxlen: 23
185.73.0.0/23 maxlen: 23
151.240.0.0/13 maxlen: 24
85.15.0.0/18 maxlen: 24
151.247.64.0/18 maxlen: 18
217.60.219.0/24 maxlen: 24
217.60.216.0/21 maxlen: 21
217.60.224.0/20 maxlen: 20
217.60.230.0/24 maxlen: 24
217.60.231.0/24 maxlen: 24
217.60.240.0/20 maxlen: 20
37.202.128.0/18 maxlen: 18
37.202.128.0/17 maxlen: 17
217.60.160.0/19 maxlen: 19
217.60.160.0/21 maxlen: 21
217.60.160.0/20 maxlen: 20
217.60.161.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.170.0/24 maxlen: 24
217.60.168.0/23 maxlen: 23
217.60.176.0/21 maxlen: 21
217.60.176.0/24 maxlen: 24
217.60.184.0/22 maxlen: 22
37.148.78.0/24 maxlen: 24
217.60.188.0/22 maxlen: 22
217.60.192.0/22 maxlen: 22
217.60.192.0/20 maxlen: 20
217.60.196.0/22 maxlen: 22
217.60.192.0/18 maxlen: 18
217.60.200.0/22 maxlen: 22
94.182.0.0/15 maxlen: 24
217.60.207.0/24 maxlen: 24
217.60.212.0/22 maxlen: 22
217.60.209.0/24 maxlen: 24
217.60.208.0/20 maxlen: 20
217.60.208.0/23 maxlen: 23
37.202.192.0/18 maxlen: 18
37.202.136.0/24 maxlen: 24
31.57.208.0/20 maxlen: 20
2a0e:0:3000::/52 maxlen: 52
2a0e:0:2000::/52 maxlen: 52
2a0e:0:1000::/52 maxlen: 52
2a0e:0:1::/52 maxlen: 52
2a0e::/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:78:ed:b1:16:e2:a2:29:5d:c9:3b:ca:f6:8d:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 14 05:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f884f9029df783693708a90425903904f884d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:eb:31:16:08:f4:27:2c:99:29:ce:8d:2d:
36:83:d3:cf:89:8b:44:51:07:ed:02:24:4b:56:33:
34:14:51:0d:f1:ed:9e:be:37:68:03:a8:c4:88:30:
d1:ae:49:56:3c:6e:20:26:53:4d:b9:1d:72:e6:88:
ad:e3:35:36:97:6d:c6:59:b7:62:2e:d0:44:27:f8:
f6:3e:ab:d3:f3:a5:8b:6a:cc:0b:ca:93:94:0a:94:
19:40:1b:11:97:22:b2:60:9b:64:5b:59:4a:3f:81:
d3:79:7d:c9:78:fc:f2:80:a0:69:b4:f8:2d:27:ce:
96:fb:c7:9f:03:dc:da:5b:a3:e4:74:c9:2d:6e:0d:
8b:aa:e9:53:bb:8e:42:20:f6:67:7e:6e:71:21:58:
d0:3e:b7:eb:cb:b3:7b:e0:76:6b:db:5c:0c:1c:f2:
9c:b3:99:e8:44:53:a3:e4:22:60:d5:16:a7:32:36:
ef:6f:f9:fa:4e:46:92:ae:ce:62:64:89:51:ab:dc:
74:14:5e:ba:8e:12:2e:4d:12:1b:89:5b:38:32:16:
78:84:6d:e1:50:dd:22:01:9d:c3:59:4e:54:37:64:
5b:08:47:df:73:cf:58:b6:dd:f2:2c:e8:bc:c1:09:
14:8f:9a:de:1d:3c:ae:2f:a9:65:fc:dd:4e:d0:46:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:84:F9:02:9D:F7:83:69:37:08:A9:04:25:90:39:04:F8:84:D2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0_iE-QKd94NpNwipBCWQOQT4hNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
37.148.0.0/17
37.202.128.0/17
84.241.0.0/18
85.15.0.0/18
94.182.0.0/15
151.238.0.0-151.247.255.255
185.73.0.0/22
217.60.0.0/16
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
1d:1c:96:10:fc:72:3b:55:5a:39:02:8d:cb:1e:22:a4:f3:0d:
a0:ea:80:a6:d7:7f:9f:a2:6a:08:8c:2d:a2:19:45:ff:1b:d9:
4e:55:6e:bd:4d:45:44:d8:79:07:32:e3:ed:df:aa:ae:a1:6d:
07:22:86:09:42:7c:2e:b5:09:a1:fa:fc:c0:e8:8d:76:5d:bc:
03:d6:85:7d:5e:3b:f2:48:d0:bd:22:c2:b1:50:58:64:d9:66:
46:9a:f5:e7:b7:0a:f7:e1:a3:1c:ee:29:57:a2:c3:3d:d1:21:
03:6d:b7:7d:71:55:2b:83:d3:1f:42:2b:e1:19:29:08:22:41:
cf:27:58:7a:f3:77:ff:cc:f7:82:a5:51:f0:5e:7c:4e:f9:a0:
62:97:71:f5:0e:af:15:7c:0f:29:4d:db:76:33:d6:06:98:d6:
ce:c8:fd:c5:47:a6:3a:f1:c9:59:6a:22:f0:9c:58:96:1a:c7:
9a:79:ca:e3:94:47:37:7e:82:ad:3b:73:00:30:89:63:12:d5:
46:28:d1:54:f4:70:ed:91:0f:b4:5b:2b:ab:66:d5:ce:75:36:
13:02:c9:2e:d9:d6:e9:f6:be:e7:fa:9b:0c:f0:12:a9:d9:6c:
91:e3:01:2b:44:4d:af:cd:3c:a3:cb:f0:05:08:12:1b:90:59:
f1:e9:1b:00
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 12:14:43 2023 by rpki-client on console-ams.rpki-client.org