Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/NRhpTV5Tw2a0WIBVC4RlKx6F2Y4.roa
File: NRhpTV5Tw2a0WIBVC4RlKx6F2Y4.roa (raw, json)
Hash identifier: b7Ds8MvM0aS+Fd9cuapuDCs0IuOengqqGbUguq93yKM=
Subject key identifier: 35:18:69:4D:5E:53:C3:66:B4:58:80:55:0B:84:65:2B:1E:85:D9:8E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018C71F8E5D7427A4735FC5374AE0625D235
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/NRhpTV5Tw2a0WIBVC4RlKx6F2Y4.roa
Signing time: Sat 16 Dec 2023 09:33:06 +0000
ROA not before: Sat 16 Dec 2023 09:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.0.0/19 maxlen: 19
217.60.0.0/18 maxlen: 18
217.60.0.0/16 maxlen: 16
217.60.24.0/21 maxlen: 21
217.60.36.0/23 maxlen: 23
217.60.32.0/20 maxlen: 20
217.60.32.0/22 maxlen: 22
217.60.36.0/22 maxlen: 22
217.60.38.0/23 maxlen: 23
217.60.40.0/21 maxlen: 21
217.60.48.0/20 maxlen: 20
37.148.0.0/18 maxlen: 24
37.148.0.0/17 maxlen: 18
217.60.108.0/22 maxlen: 22
217.60.128.0/18 maxlen: 18
217.60.128.0/19 maxlen: 19
217.60.150.0/24 maxlen: 24
217.60.64.0/20 maxlen: 20
217.60.64.0/18 maxlen: 18
217.60.80.0/20 maxlen: 20
217.60.96.0/21 maxlen: 21
217.60.104.0/22 maxlen: 22
84.241.0.0/18 maxlen: 24
185.73.3.0/24 maxlen: 24
185.73.0.0/22 maxlen: 22
185.73.2.0/24 maxlen: 24
185.73.2.0/23 maxlen: 23
185.73.0.0/23 maxlen: 23
151.240.0.0/13 maxlen: 24
151.247.64.0/18 maxlen: 18
151.245.248.0/21 maxlen: 21
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
31.57.208.0/20 maxlen: 20
151.244.128.0/22 maxlen: 22
151.244.128.0/19 maxlen: 19
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
94.183.176.0/21 maxlen: 21
31.56.80.0/20 maxlen: 20
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
31.56.16.0/20 maxlen: 20
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
31.56.0.0/14 maxlen: 24
151.244.192.0/22 maxlen: 22
31.56.32.0/20 maxlen: 20
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.238.0.0/15 maxlen: 24
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
85.15.0.0/18 maxlen: 24
217.60.219.0/24 maxlen: 24
217.60.216.0/21 maxlen: 21
217.60.224.0/20 maxlen: 20
217.60.230.0/24 maxlen: 24
217.60.231.0/24 maxlen: 24
217.60.240.0/20 maxlen: 20
37.202.128.0/18 maxlen: 18
37.202.128.0/17 maxlen: 17
217.60.160.0/19 maxlen: 19
217.60.160.0/21 maxlen: 21
217.60.160.0/20 maxlen: 20
217.60.161.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.168.0/23 maxlen: 23
217.60.170.0/24 maxlen: 24
217.60.176.0/21 maxlen: 21
217.60.176.0/24 maxlen: 24
217.60.184.0/22 maxlen: 22
37.148.78.0/24 maxlen: 24
217.60.188.0/22 maxlen: 22
217.60.192.0/22 maxlen: 22
217.60.192.0/20 maxlen: 20
217.60.192.0/18 maxlen: 18
217.60.196.0/22 maxlen: 22
217.60.200.0/22 maxlen: 22
94.182.0.0/15 maxlen: 24
217.60.207.0/24 maxlen: 24
217.60.209.0/24 maxlen: 24
217.60.208.0/20 maxlen: 20
217.60.212.0/22 maxlen: 22
217.60.208.0/23 maxlen: 23
37.202.192.0/18 maxlen: 18
37.202.136.0/24 maxlen: 24
2a0e:0:1:3000::/52 maxlen: 52
2a0e:0:1:2000::/52 maxlen: 52
2a0e:0:1:1000::/52 maxlen: 52
2a0e:0:1::/52 maxlen: 52
2a0e::/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:f8:e5:d7:42:7a:47:35:fc:53:74:ae:06:25:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 16 09:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3518694d5e53c366b45880550b84652b1e85d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:aa:8d:54:c9:ab:48:46:fb:00:d6:4d:4b:
28:93:a4:54:b2:cb:28:d8:b2:af:24:3c:82:d0:07:
09:54:3f:f1:b3:d7:84:ca:d6:09:b6:c1:7b:3f:95:
2f:86:b6:ee:24:6c:75:17:81:5b:54:4e:0b:2d:cb:
51:65:2b:dd:b9:19:f4:16:14:72:66:2a:2b:4f:9d:
3d:5a:5b:26:29:81:a3:fd:f9:2b:f2:b5:88:61:e0:
8c:cc:f3:e4:eb:7c:68:7e:43:4e:70:eb:65:7e:61:
9b:c1:11:75:53:62:a7:14:0f:33:71:b2:47:83:02:
74:c6:69:02:28:c0:17:be:a0:88:00:39:6a:b1:06:
49:53:7e:3d:42:26:91:63:1e:39:0f:3d:c9:16:47:
1b:7a:60:1c:d2:df:ce:e9:94:35:38:d8:8e:cb:b1:
60:83:ca:ac:4b:c6:fb:ad:d9:4e:4c:69:ac:57:a2:
23:d6:24:de:49:01:f3:a1:64:07:3d:b6:4a:54:24:
7d:67:d1:6a:a6:05:88:eb:79:c0:57:79:c8:02:f4:
11:af:42:c7:db:6c:81:1d:88:46:64:11:32:26:85:
4b:52:6c:2f:44:b6:a4:93:ae:39:8d:62:0c:23:b8:
b4:72:8e:eb:69:d4:2f:77:94:c2:9c:9d:db:b7:3e:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:69:4D:5E:53:C3:66:B4:58:80:55:0B:84:65:2B:1E:85:D9:8E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/NRhpTV5Tw2a0WIBVC4RlKx6F2Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
37.148.0.0/17
37.202.128.0/17
84.241.0.0/18
85.15.0.0/18
94.182.0.0/15
151.238.0.0-151.247.255.255
185.73.0.0/22
217.60.0.0/16
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
7a:3a:d1:6b:21:2b:5c:22:ae:bc:f1:62:7e:83:21:a4:a1:5c:
b7:1e:fb:ab:d4:96:5e:bb:00:9d:b9:59:16:c8:cd:ef:78:ee:
f5:2f:11:06:77:19:4f:02:71:de:34:0a:55:9a:40:00:87:52:
9b:d4:13:e6:5d:a3:8c:1e:21:7b:35:fe:ef:4a:d3:78:30:b1:
52:cc:0d:28:fd:64:16:c5:67:89:ba:32:02:d6:37:69:67:d7:
30:4d:a8:19:c8:6a:f7:f9:e1:e0:13:58:ee:e1:9e:b4:6d:12:
5e:ff:74:b1:ad:14:a4:64:1a:76:23:3b:25:6a:3e:02:51:13:
91:da:23:e8:50:fa:90:7b:d8:8b:82:4c:01:5a:6c:6a:5e:2c:
ef:9e:2d:c0:b6:ac:fe:e7:35:55:24:18:16:95:6c:17:c0:49:
9f:d5:fd:7b:cd:64:22:11:96:58:13:47:88:06:01:b0:80:75:
05:6f:ea:99:2d:38:6d:cb:b5:53:96:f3:6f:36:d9:7b:a9:a5:
77:37:79:b9:a9:ec:4f:70:04:30:de:b0:f7:36:5c:b5:ce:65:
ca:04:61:d9:52:07:23:6d:15:ed:11:1b:51:f5:83:ea:2f:62:
00:5f:0e:ae:af:28:dd:18:80:f2:60:02:55:5e:a4:46:7c:81:
96:ce:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 09:59:53 2023 by rpki-client on console-fra.rpki-client.org