Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/m4JCTwp35tKyjXQN4vdA7YcSm-Q.roa
File: m4JCTwp35tKyjXQN4vdA7YcSm-Q.roa (raw, json)
Hash identifier: r3gyn7fLk2MCdRM272aZKQ29NXj3wQ3uaqSBAcEQEtA=
Subject key identifier: 9B:82:42:4F:0A:77:E6:D2:B2:8D:74:0D:E2:F7:40:ED:87:12:9B:E4
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018991C497F523C332A1D88ACCA807840E25
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/m4JCTwp35tKyjXQN4vdA7YcSm-Q.roa
Signing time: Wed 26 Jul 2023 10:35:27 +0000
ROA not before: Wed 26 Jul 2023 10:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
31.56.116.0/24 maxlen: 24
151.241.224.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.238.0/23 maxlen: 23
151.247.237.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.183.0.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
94.182.192.0/18 maxlen: 18
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
151.240.168.0/22 maxlen: 22
151.240.188.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
94.183.128.0/18 maxlen: 18
151.244.48.0/22 maxlen: 22
31.58.236.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
151.242.136.0/21 maxlen: 21
94.182.97.192/28 maxlen: 28
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.82.0/24 maxlen: 24
151.242.254.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
151.243.36.0/23 maxlen: 23
94.182.128.0/18 maxlen: 18
151.243.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:c4:97:f5:23:c3:32:a1:d8:8a:cc:a8:07:84:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 26 10:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b82424f0a77e6d2b28d740de2f740ed87129be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:a5:f9:fa:3b:20:ee:59:4a:cc:54:ad:82:
21:ff:98:50:6c:fa:57:ea:1d:85:79:06:fb:8b:1a:
8a:bf:c2:d1:4c:b8:77:f0:34:4d:c2:ef:f7:3d:c5:
b9:6f:1e:20:dd:d5:c8:97:28:14:38:1c:cc:a2:b7:
50:fa:13:c6:df:7a:f3:9d:d5:80:a1:5b:05:30:70:
b5:c9:45:45:3c:0a:7c:1c:12:dd:4e:a2:36:33:c4:
6a:8a:5f:87:31:5f:a8:c5:d4:96:07:d7:50:ab:1e:
9f:35:00:1d:2f:28:3c:8b:47:94:c8:07:70:62:41:
fa:b1:2e:08:b1:7c:1a:0a:90:1f:09:cd:a2:f0:53:
64:a9:7d:c8:6d:50:35:5d:99:50:d6:67:9e:f5:46:
15:c4:7c:d5:4f:c2:ec:56:81:07:da:5f:13:a7:64:
57:64:19:9b:6b:6b:b8:07:c5:85:5e:3c:4e:b2:28:
be:c2:c2:3a:a6:c2:d7:2f:48:c1:88:91:d1:90:53:
52:0a:5e:15:28:46:8c:2a:45:b7:c2:15:af:33:d5:
a6:84:22:c6:1f:22:21:f1:2b:72:76:f9:b0:b6:d1:
ad:de:e5:ed:92:48:e3:04:0a:1b:aa:23:ab:c8:83:
c0:9e:9b:e4:c5:90:f9:2e:1d:7c:4e:c8:35:76:56:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:42:4F:0A:77:E6:D2:B2:8D:74:0D:E2:F7:40:ED:87:12:9B:E4
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/m4JCTwp35tKyjXQN4vdA7YcSm-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.188.0-151.240.199.255
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.242.136.0/21
151.242.254.0/23
151.243.32.0-151.243.37.255
151.244.48.0/20
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:73:e8:bd:56:7a:05:70:76:38:99:5a:b0:5c:a9:60:59:c7:
d5:60:5f:27:0d:d5:ca:58:6b:54:18:31:8b:d6:ed:a3:d7:1d:
f4:f7:1c:13:4d:36:7e:04:5d:3f:3c:8b:63:c6:00:fb:5a:c4:
d7:06:c6:aa:c9:92:61:27:cc:27:ed:e2:19:5c:8e:9a:36:4e:
e5:a0:61:f2:29:84:36:f2:6c:27:79:a2:6d:45:c2:8a:53:cf:
82:54:af:50:19:aa:37:4a:67:1f:55:b6:1d:79:52:cb:af:a8:
73:69:36:dd:1e:e2:7a:ea:16:ea:40:3c:49:ba:fb:dc:9a:5f:
c8:78:03:0a:19:21:5f:21:9b:f1:93:8b:ea:ee:31:f8:ad:e5:
16:ed:21:a3:7f:3a:e6:d9:1d:76:d2:7c:f0:7a:2e:df:54:b9:
2a:1d:ef:72:78:a5:e6:25:9a:9c:31:32:e7:d2:58:4d:d8:88:
e3:6f:92:4f:65:5f:c3:04:b7:2f:c4:e2:c0:d6:6f:b3:46:d4:
c8:38:97:62:da:c0:ad:c2:2e:31:71:15:ad:59:1a:23:95:ed:
82:7d:21:d3:44:3e:ef:9f:44:40:b5:8f:9d:15:7e:35:e1:70:
71:f6:bc:0a:ca:d7:3e:df:31:30:ed:69:e5:8d:ad:ff:7e:65:
58:3f:fc:55
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 12:05:58 2023 by rpki-client on console-fra.rpki-client.org