Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/V05DISQfcYvc1pXUkQmVXoxFEmA.roa
File: V05DISQfcYvc1pXUkQmVXoxFEmA.roa (raw, json)
Hash identifier: 5gjjGfJ3ZDqBnCgray53BDd/kPSPen0VSpOkuyBGxaE=
Subject key identifier: 57:4E:43:21:24:1F:71:8B:DC:D6:95:D4:91:09:95:5E:8C:45:12:60
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 018572CCC0F3974013669EFE275876FEB59A
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/V05DISQfcYvc1pXUkQmVXoxFEmA.roa
Signing time: Mon 02 Jan 2023 14:04:59 +0000
ROA not before: Mon 02 Jan 2023 14:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15943
IP address blocks: 80.245.104.0/22 maxlen: 24
84.242.16.0/20 maxlen: 24
149.249.16.0/20 maxlen: 24
185.29.240.0/22 maxlen: 24
216.83.208.0/20 maxlen: 24
45.131.16.0/22 maxlen: 24
193.178.56.0/22 maxlen: 24
185.232.32.0/22 maxlen: 24
213.195.24.0/21 maxlen: 21
45.82.192.0/22 maxlen: 22
185.220.216.0/22 maxlen: 24
94.72.168.0/21 maxlen: 24
176.109.192.0/19 maxlen: 24
95.163.160.0/20 maxlen: 24
94.72.184.0/21 maxlen: 24
81.25.160.0/20 maxlen: 24
212.146.136.0/22 maxlen: 24
149.224.0.0/16 maxlen: 24
212.146.144.0/20 maxlen: 24
94.72.128.0/21 maxlen: 24
46.22.0.0/20 maxlen: 24
45.157.100.0/22 maxlen: 22
193.218.16.0/20 maxlen: 24
212.127.32.0/19 maxlen: 24
195.123.96.0/20 maxlen: 24
188.136.224.0/19 maxlen: 24
31.29.32.0/19 maxlen: 24
84.46.0.0/17 maxlen: 24
46.59.128.0/17 maxlen: 24
149.233.128.0/17 maxlen: 24
185.82.16.0/22 maxlen: 24
213.21.32.0/20 maxlen: 24
95.129.0.0/21 maxlen: 24
185.207.4.0/22 maxlen: 22
37.122.136.0/21 maxlen: 24
192.119.48.0/20 maxlen: 24
109.230.96.0/20 maxlen: 20
192.196.192.0/20 maxlen: 24
45.159.176.0/22 maxlen: 24
185.23.224.0/22 maxlen: 24
185.215.236.0/22 maxlen: 24
95.81.0.0/19 maxlen: 24
2.57.116.0/22 maxlen: 24
149.249.248.0/22 maxlen: 24
77.223.8.0/21 maxlen: 21
195.250.0.0/20 maxlen: 24
77.223.16.0/20 maxlen: 20
213.209.64.0/18 maxlen: 24
134.101.128.0/17 maxlen: 24
31.172.104.0/21 maxlen: 24
2a04:4540::/29 maxlen: 29
2a02:2028::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c0:f3:97:40:13:66:9e:fe:27:58:76:fe:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jan 2 14:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574e4321241f718bdcd695d49109955e8c451260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:db:5d:79:6c:d1:c6:de:d2:0a:4d:a6:bf:
79:ee:31:06:88:7c:d0:3a:d3:a4:c3:74:9c:aa:bf:
e9:79:f8:e1:f8:90:f7:d8:90:d3:23:d4:cd:3d:8e:
1d:70:c7:b4:e7:27:d4:32:56:04:ab:b6:9b:f8:1f:
3c:3f:e1:76:3d:04:67:f3:f5:db:cf:d1:14:3c:7e:
bc:6f:f1:6b:51:d6:4f:5b:e6:45:1e:39:f2:55:f2:
dc:00:08:70:37:fc:c7:14:a7:d8:9c:12:d7:03:cc:
22:fd:48:0d:9a:a2:0a:a1:d9:17:93:69:b1:b9:4a:
b9:75:63:55:ae:51:56:dc:ce:f2:40:54:9e:91:2a:
b6:5b:4d:e7:7a:5c:c1:37:3b:25:fe:e3:7c:ed:c4:
ed:25:46:c6:a8:b5:7b:28:9f:e9:af:7a:90:d7:57:
85:8d:e5:a7:29:bd:33:ae:4f:9e:ca:7e:1a:76:0b:
ff:ab:a7:1d:68:2c:bd:18:65:57:43:7b:4e:57:07:
a6:63:89:8f:fe:b9:49:35:54:e6:31:fb:a6:a2:07:
cc:24:25:37:85:13:fa:b4:fa:ae:d4:b4:4e:9d:3d:
ab:91:07:e8:f5:1f:8c:02:a3:0b:b8:16:48:fa:f8:
dc:36:f4:1f:08:53:03:e3:91:21:68:62:98:ec:98:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:43:21:24:1F:71:8B:DC:D6:95:D4:91:09:95:5E:8C:45:12:60
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/V05DISQfcYvc1pXUkQmVXoxFEmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.116.0/22
31.29.32.0/19
31.172.104.0/21
37.122.136.0/21
45.82.192.0/22
45.131.16.0/22
45.157.100.0/22
45.159.176.0/22
46.22.0.0/20
46.59.128.0/17
77.223.8.0-77.223.31.255
80.245.104.0/22
81.25.160.0/20
84.46.0.0/17
84.242.16.0/20
94.72.128.0/21
94.72.168.0/21
94.72.184.0/21
95.81.0.0/19
95.129.0.0/21
95.163.160.0/20
109.230.96.0/20
134.101.128.0/17
149.224.0.0/16
149.233.128.0/17
149.249.16.0/20
149.249.248.0/22
176.109.192.0/19
185.23.224.0/22
185.29.240.0/22
185.82.16.0/22
185.207.4.0/22
185.215.236.0/22
185.220.216.0/22
185.232.32.0/22
188.136.224.0/19
192.119.48.0/20
192.196.192.0/20
193.178.56.0/22
193.218.16.0/20
195.123.96.0/20
195.250.0.0/20
212.127.32.0/19
212.146.136.0/22
212.146.144.0/20
213.21.32.0/20
213.195.24.0/21
213.209.64.0/18
216.83.208.0/20
IPv6:
2a02:2028::/32
2a04:4540::/29
Signature Algorithm: sha256WithRSAEncryption
82:e7:63:34:7f:80:9b:4a:3b:59:bb:07:44:33:d2:29:f2:cb:
eb:3d:40:5a:8b:4c:79:60:48:f1:fb:b3:fc:50:53:d1:53:0a:
b7:02:c7:4c:e0:88:e4:dd:4f:27:06:39:78:d1:cf:87:48:69:
7b:35:7f:e8:a4:4f:00:22:70:a2:e5:b1:71:4d:16:80:69:26:
75:ca:4d:2b:a2:66:4f:67:58:f1:33:67:fa:45:49:0e:0e:1e:
1b:8b:c4:c2:c1:80:d0:ff:5d:b4:4b:20:0c:4a:f9:82:76:cd:
88:22:31:c6:ce:ce:59:a7:83:1e:c4:f8:11:ec:96:2b:ae:47:
5d:0f:92:5b:12:0a:23:08:68:8d:d7:79:6c:34:78:79:c4:d9:
48:0d:9b:b2:6e:14:91:96:12:60:58:43:c5:4a:a0:28:d1:4a:
b5:53:58:fa:cc:7e:70:09:83:c2:0b:76:b7:96:00:e2:0b:ca:
d5:5b:8f:45:12:fc:9f:ac:2c:f8:f2:e4:a5:8a:13:50:a9:e1:
e3:18:3e:b1:9d:b2:c1:b0:51:5c:f3:06:83:03:c2:d2:63:38:
b1:30:9f:7c:16:bc:48:06:6a:91:14:33:37:f9:b4:eb:0a:ab:
c4:67:3c:96:24:66:45:5a:95:d5:a6:b8:4a:26:27:88:ef:af:
c4:7c:f9:62
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgISAYVyzMDzl0ATZp7+J1h2/rWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTAzNDk4ZmYxODVkMGM2MDczNTNmNDNmNTVlOTExZjYy
YTY4MDIwHhcNMjMwMTAyMTQwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzRlNDMyMTI0MWY3MThiZGNkNjk1ZDQ5MTA5OTU1ZThjNDUxMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6nbXXls0cbe0gpNpr957jEGiHzQ
OtOkw3Scqr/pefjh+JD32JDTI9TNPY4dcMe05yfUMlYEq7ab+B88P+F2PQRn8/Xb
z9EUPH68b/FrUdZPW+ZFHjnyVfLcAAhwN/zHFKfYnBLXA8wi/UgNmqIKodkXk2mx
uUq5dWNVrlFW3M7yQFSekSq2W03nelzBNzsl/uN87cTtJUbGqLV7KJ/pr3qQ11eF
jeWnKb0zrk+eyn4adgv/q6cdaCy9GGVXQ3tOVwemY4mP/rlJNVTmMfumogfMJCU3
hRP6tPqu1LROnT2rkQfo9R+MAqMLuBZI+vjcNvQfCFMD45EhaGKY7JgYIwIDAQAB
o4IDUDCCA0wwHQYDVR0OBBYEFFdOQyEkH3GL3NaV1JEJlV6MRRJgMB8GA1UdIwQY
MBaAFOVQNJj/GF0MYHNT9D9V6RH2KmgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQt
MWUyNzlmN2I2MDIzLzEvVjA1RElTUWZjWXZjMXBYVWtRbVZYb3hGRW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQtMWUyNzlmN2I2MDIz
LzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZAYIKwYBBQUHAQcBAf8EggFTMIIBTzCCATUEAgABMIIB
LQMEAgI5dAMEBR8dIAMEAx+saAMEAyV6iAMEAi1SwAMEAi2DEAMEAi2dZAMEAi2f
sAMEBC4WAAMEBy47gDAMAwQDTd8IAwQFTd8AAwQCUPVoAwQEURmgAwQHVC4AAwQE
VPIQAwQDXkiAAwQDXkioAwQDXki4AwQFX1EAAwQDX4EAAwQEX6OgAwQEbeZgAwQH
hmWAAwMAleADBAeV6YADBASV+RADBAKV+fgDBAWwbcADBAK5F+ADBAK5HfADBAK5
UhADBAK5zwQDBAK51+wDBAK53NgDBAK56CADBAW8iOADBATAdzADBATAxMADBALB
sjgDBATB2hADBATDe2ADBATD+gADBAXUfyADBALUkogDBATUkpADBATVFSADBAPV
wxgDBAbV0UADBATYU9AwFAQCAAIwDgMFACoCICgDBQMqBEVAMA0GCSqGSIb3DQEB
CwUAA4IBAQCC52M0f4CbSjtZuwdEM9Ip8svrPUBai0x5YEjx+7P8UFPRUwq3AsdM
4Ijk3U8nBjl40c+HSGl7NX/opE8AInCi5bFxTRaAaSZ1yk0romZPZ1jxM2f6RUkO
Dh4bi8TCwYDQ/120SyAMSvmCds2IIjHGzs5Zp4MexPgR7JYrrkddD5JbEgojCGiN
13lsNHh5xNlIDZuybhSRlhJgWEPFSqAo0Uq1U1j6zH5wCYPCC3a3lgDiC8rVW49F
EvyfrCz48uSlihNQqeHjGD6xnbLBsFFc8waDA8LSYzixMJ98FrxIBmqRFDM3+bTr
CqvEZzyWJGZFWpXVprhKJieI76/EfPli
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:59 2023 by rpki-client on console-fra.rpki-client.org