Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rdliqEZ9KNoMuUSS4Pk_3TC4N2g.roa
File: rdliqEZ9KNoMuUSS4Pk_3TC4N2g.roa (raw, json)
Hash identifier: LEYOF4FxepcmeTQQbEy9zCbZnix+tNDrfMUJmiaMMm8=
Subject key identifier: AD:D9:62:A8:46:7D:28:DA:0C:B9:44:92:E0:F9:3F:DD:30:B8:37:68
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0186C53DE570F8E09F209C3A1BB9810BD48C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rdliqEZ9KNoMuUSS4Pk_3TC4N2g.roa
Signing time: Thu 09 Mar 2023 07:20:13 +0000
ROA not before: Thu 09 Mar 2023 07:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58272
IP address blocks: 188.72.114.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
37.18.0.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.171.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.246.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.253.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.133.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:3d:e5:70:f8:e0:9f:20:9c:3a:1b:b9:81:0b:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 9 07:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=add962a8467d28da0cb94492e0f93fdd30b83768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:68:4c:52:fe:a7:e5:33:a1:c7:5c:77:21:
4f:ec:02:51:60:73:1f:ea:ea:e5:13:95:e2:c1:06:
a7:49:70:ab:5f:89:bc:7c:83:60:b7:73:6c:e8:4a:
b7:a3:27:a7:e6:70:db:94:1c:9d:67:dc:2b:29:c2:
a7:c6:0c:9a:bb:07:53:1c:99:32:17:62:bf:7b:43:
14:74:6d:b5:c1:8c:de:56:04:01:7c:fd:15:14:af:
d6:b9:72:b4:f8:f9:a7:f5:90:44:bc:85:7e:20:9a:
9a:c3:15:b6:ea:40:06:93:fd:45:29:7c:ea:00:26:
71:c9:f7:d8:7d:bf:d5:96:ba:56:05:76:e5:60:8b:
45:80:50:47:cf:ac:59:be:54:ed:dd:2f:d2:c2:19:
b6:33:a1:46:86:4f:84:ed:16:4c:b9:6f:50:18:35:
cd:7f:3a:87:75:4f:38:67:35:70:b2:16:f6:91:22:
98:25:3d:ea:df:cb:66:e3:e8:f6:dd:1c:2c:ea:03:
0b:8f:38:21:99:69:c7:61:20:c8:7c:66:8b:48:5a:
aa:38:80:27:4b:45:51:27:1d:b1:09:1b:05:29:69:
b3:21:cf:21:3b:cd:de:a5:ef:79:db:83:91:36:bd:
b3:27:39:e3:7d:3b:1b:e5:91:82:7d:a0:56:dd:7d:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D9:62:A8:46:7D:28:DA:0C:B9:44:92:E0:F9:3F:DD:30:B8:37:68
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rdliqEZ9KNoMuUSS4Pk_3TC4N2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.63.0/24
37.18.78.0/24
37.230.134.0/24
37.230.151.0/24
37.230.163.0/24
37.230.170.0/23
37.230.176.0/24
37.230.178.0/24
37.230.182.0/23
37.230.187.0/24
37.230.254.0/24
46.243.138.0-46.243.140.255
46.243.149.0/24
46.243.204.0/24
46.243.214.0/23
46.243.221.0-46.243.225.255
46.243.236.0-46.243.238.255
46.243.240.0/22
46.243.246.0-46.243.251.255
46.243.253.0/24
128.0.71.0/24
141.101.132.0/23
141.101.135.0/24
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.172.255
141.101.174.0/24
141.101.179.0/24
141.101.191.0/24
141.101.199.0/24
141.101.255.0/24
178.170.136.0/23
178.170.139.0-178.170.141.255
178.170.145.0/24
185.4.148.0/22
188.72.80.0/23
188.72.83.0-188.72.87.255
188.72.89.0/24
188.72.95.0/24
188.72.102.0/24
188.72.114.0-188.72.116.255
188.72.119.0/24
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
63:19:3f:e4:b5:eb:2c:08:8b:3d:4b:16:57:40:40:f8:33:4a:
32:74:0e:f8:08:85:a2:4a:ce:00:b7:e0:49:b5:9c:d1:7c:13:
96:69:db:70:94:ea:58:df:f7:b8:8f:07:96:e6:5a:92:35:ec:
78:fa:27:51:30:11:98:ac:3d:4d:ea:59:e4:25:96:25:21:b1:
33:28:de:32:d8:6e:96:65:b9:93:07:79:b8:d6:39:db:c1:35:
77:40:20:b1:1c:3a:c3:5b:24:18:20:16:fd:51:0c:e2:14:1e:
79:41:94:2d:96:ba:13:8f:7b:ce:7d:37:91:0f:a9:72:27:65:
e6:2e:d3:b6:b7:b4:c2:4d:49:80:a8:21:6f:35:04:28:7b:3f:
e8:20:99:35:d4:d6:8b:60:8c:c0:0e:43:a8:b9:fe:de:46:a1:
9c:17:59:89:9f:67:3a:27:fe:80:33:5d:a2:22:12:d7:fb:9d:
5f:c3:e8:07:78:91:e7:b6:7b:f3:c1:20:28:90:3e:c6:08:b8:
55:97:d7:bb:26:d3:35:f5:6c:d4:20:fb:31:a5:5c:c3:67:07:
a9:a3:d0:61:8b:38:19:5b:43:3d:a2:68:8f:db:dd:6a:78:ba:
64:3a:6c:26:a6:1b:c5:be:7e:8f:06:30:51:6a:0f:d0:cd:de:
4e:2f:3d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org