Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDIj6xROnXGxJEIKzkYC4LPyeCQ.roa
File: cDIj6xROnXGxJEIKzkYC4LPyeCQ.roa (raw, json)
Hash identifier: fcyUcY59kwqMtN8g+S/M7bTauZJ1xqDy/zqhWWy8qoc=
Subject key identifier: 70:32:23:EB:14:4E:9D:71:B1:24:42:0A:CE:46:02:E0:B3:F2:78:24
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01866DA7C9091F54F02A933703A17B7A8096
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDIj6xROnXGxJEIKzkYC4LPyeCQ.roa
Signing time: Mon 20 Feb 2023 07:09:17 +0000
ROA not before: Mon 20 Feb 2023 07:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58272
IP address blocks: 188.72.114.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
37.18.0.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.171.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.246.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.253.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.133.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:a7:c9:09:1f:54:f0:2a:93:37:03:a1:7b:7a:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Feb 20 07:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703223eb144e9d71b124420ace4602e0b3f27824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:77:1c:10:da:d0:1e:63:94:20:7f:29:9c:
a1:71:66:b6:3a:60:8b:35:04:81:69:be:87:aa:b7:
c2:6e:6c:a1:52:34:5c:65:41:48:bf:7d:be:1a:25:
d8:79:54:36:ba:f2:b3:e0:66:a4:d3:2c:d3:05:56:
6d:ec:b9:0a:81:18:d7:09:e0:1c:1b:8c:e2:a7:91:
e3:24:07:13:12:fb:22:cb:91:75:80:d0:19:52:b8:
af:d9:d4:1b:4a:dc:e4:b2:ef:42:e1:f4:a4:6c:6f:
e3:1d:0e:fa:81:ed:35:01:af:9c:34:e6:be:b2:39:
98:41:e6:c6:2d:cd:94:7c:f7:1d:0a:68:34:66:92:
0b:a4:b9:49:ad:2c:39:08:4b:76:eb:94:89:29:21:
95:85:48:4b:23:ba:22:1d:90:17:ff:4c:a2:e2:2f:
3c:14:8c:4f:7c:df:49:ad:d1:97:5b:2d:9b:6f:c8:
5e:5b:27:a3:bf:36:9a:8b:83:2c:66:3d:83:98:36:
02:86:c5:a7:7f:f1:2d:7b:75:cb:eb:36:c2:c2:c8:
f0:ec:ef:d2:88:4b:73:e8:2e:66:04:eb:b2:9a:9c:
f6:66:a7:c0:f2:6f:44:f2:8c:b0:8a:6d:e7:34:fb:
de:58:fc:4c:81:12:4d:2d:ff:cf:20:70:a1:94:4c:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:23:EB:14:4E:9D:71:B1:24:42:0A:CE:46:02:E0:B3:F2:78:24
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDIj6xROnXGxJEIKzkYC4LPyeCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.63.0/24
37.18.78.0/24
37.230.134.0/24
37.230.151.0/24
37.230.163.0/24
37.230.170.0/23
37.230.176.0/24
37.230.178.0/24
37.230.182.0/23
37.230.187.0/24
37.230.254.0/24
46.243.138.0-46.243.140.255
46.243.149.0/24
46.243.204.0/24
46.243.214.0/23
46.243.221.0-46.243.225.255
46.243.236.0-46.243.238.255
46.243.240.0/22
46.243.246.0-46.243.251.255
46.243.253.0/24
128.0.71.0/24
141.101.132.0/23
141.101.135.0/24
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.172.255
141.101.174.0/24
141.101.179.0/24
141.101.191.0/24
141.101.199.0/24
141.101.255.0/24
178.170.136.0/23
178.170.139.0-178.170.141.255
178.170.145.0/24
185.4.148.0/22
188.72.80.0/23
188.72.83.0-188.72.87.255
188.72.89.0/24
188.72.95.0/24
188.72.102.0/24
188.72.114.0-188.72.116.255
188.72.119.0/24
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:02:c7:1f:0e:f9:43:98:86:46:92:1b:ea:bf:a7:25:f6:05:
68:01:97:ed:0a:0f:30:2c:13:86:59:7d:fe:51:6b:bd:82:ca:
cf:a3:81:ac:18:7b:eb:dc:e6:41:6b:54:75:2f:59:0e:9a:84:
bc:f2:5e:45:f5:cb:c7:80:24:94:fd:45:89:8d:f3:cd:af:61:
7c:58:49:a5:16:b9:fe:7a:67:83:b5:ad:8b:18:8b:35:7b:9f:
c2:02:a8:d9:7b:c0:6c:f2:78:43:84:9a:cc:f6:aa:b5:08:53:
62:d9:ed:77:01:80:3b:7f:e8:71:50:11:db:e9:13:98:77:58:
dc:0c:09:e2:26:6b:97:6b:bc:c8:52:10:d0:0b:89:54:42:29:
85:3c:68:0a:e9:3c:aa:76:e1:ed:1b:78:5e:03:9a:e4:0b:5c:
c1:8b:0f:b8:37:09:5f:ec:61:b1:17:cc:f7:79:dc:55:36:d7:
90:9d:9f:52:54:7f:2b:3b:02:8a:f8:c5:69:e5:8c:c0:fa:08:
e3:e3:95:94:13:35:e7:00:c6:c8:f4:4d:af:2e:7e:3c:9f:31:
13:dd:c5:3b:ea:54:03:a9:78:39:1c:a5:26:e9:83:4b:6e:97:
c3:ae:e7:2f:bd:d7:35:b9:df:a4:f6:8b:43:0e:de:3c:fd:3c:
6c:2e:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org