Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R073iM-g96tWhzx9P-lM6tmmv2s.roa
File: R073iM-g96tWhzx9P-lM6tmmv2s.roa (raw, json)
Hash identifier: 0yO/HddtCuGDkCcVOTuYPp/BLXPvWyrtm1/wTB13syc=
Subject key identifier: 47:4E:F7:88:CF:A0:F7:AB:56:87:3C:7D:3F:E9:4C:EA:D9:A6:BF:6B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0186CB9F2344F85B889BADA4F73D80E885F4
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R073iM-g96tWhzx9P-lM6tmmv2s.roa
Signing time: Fri 10 Mar 2023 13:04:09 +0000
ROA not before: Fri 10 Mar 2023 13:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 80.66.196.0/22 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
45.80.188.0/22 maxlen: 24
62.133.35.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.32.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
185.248.84.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
91.200.241.0/24 maxlen: 24
45.11.45.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.176.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
185.254.75.0/24 maxlen: 24
185.254.73.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
194.124.228.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
194.36.222.0/23 maxlen: 24
94.124.116.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
185.49.32.0/22 maxlen: 24
45.130.23.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
78.142.192.0/22 maxlen: 24
194.169.180.0/23 maxlen: 24
78.142.193.0/24 maxlen: 32
45.13.199.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
109.94.168.0/22 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.220.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09::/29 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a0d:de80::/29 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a03:d9c0::/29 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a0d:4bc0::/29 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:9f:23:44:f8:5b:88:9b:ad:a4:f7:3d:80:e8:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 10 13:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=474ef788cfa0f7ab56873c7d3fe94cead9a6bf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:3a:a5:74:66:e4:55:bc:24:b5:dd:b0:47:
9d:16:91:f4:dc:ff:69:87:6b:ad:f6:8c:b9:ca:eb:
87:43:04:1e:1f:cf:22:d7:10:da:b1:7c:18:65:e2:
3c:10:90:4f:50:c3:c1:b5:23:ac:c1:a0:c2:73:f3:
a5:cd:da:a4:07:ec:ee:28:b4:1d:6d:c8:02:f4:4d:
ab:ca:f9:26:82:23:c3:44:b4:aa:33:e2:55:13:67:
b3:60:4b:d6:00:9d:a4:ee:1a:2d:c3:fe:02:9b:e8:
78:67:a8:67:65:c5:0d:55:40:c9:10:c4:5a:08:90:
4e:95:ae:0c:fe:81:09:bf:50:c8:11:09:6a:ae:9a:
9e:85:4e:76:55:e5:12:c8:06:43:a9:bb:df:73:ab:
8f:c2:82:d6:ff:4c:45:d5:3f:1f:05:19:be:7e:14:
6d:ce:6a:b0:e9:fa:f2:eb:89:5b:38:55:51:12:d3:
1a:7d:83:e3:80:44:2b:e8:83:67:a8:88:fc:9f:8e:
80:64:76:fc:c6:99:85:94:b7:43:80:b9:4f:ab:fd:
3a:7d:9b:40:94:0f:fa:6f:a5:bf:b0:9e:2e:b8:2d:
10:90:0e:57:d2:eb:e4:35:ff:8d:a0:31:73:79:1c:
d8:b4:33:1f:e3:2a:2e:1a:11:e3:e7:7d:fa:d9:6b:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:F7:88:CF:A0:F7:AB:56:87:3C:7D:3F:E9:4C:EA:D9:A6:BF:6B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R073iM-g96tWhzx9P-lM6tmmv2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
79.143.140.0/22
80.66.196.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
149.62.44.0/22
185.49.32.0/22
185.194.52.0/22
185.200.64.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
194.36.24.0/23
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
98:22:20:75:6a:15:50:06:08:52:3e:e4:a9:18:33:e6:64:29:
11:0e:b9:51:07:67:0e:1d:87:dc:93:c0:e1:2d:84:34:c1:76:
b5:27:20:b1:3c:92:53:00:5f:9e:d7:26:4d:46:a5:ed:b6:6d:
ac:67:6c:7e:ec:5d:b8:93:0a:a0:40:92:16:f1:14:c3:56:43:
4c:9f:1a:7b:ac:8b:0f:2c:15:24:50:21:ad:62:2e:fc:7e:f9:
74:e8:35:c6:b3:9d:02:d5:ca:48:29:11:68:93:80:e2:78:59:
07:aa:8e:a7:d1:0a:f9:05:fd:64:09:58:4d:3d:7b:e5:3f:a0:
8a:8b:c5:ea:ed:f6:53:06:49:48:01:51:b6:3e:11:ec:c8:12:
dc:bb:c9:d8:95:fd:6a:46:ac:bb:bc:45:91:1e:40:6b:bb:e3:
2e:fa:ce:5f:6e:51:bb:cb:8b:3f:f4:97:82:d5:0e:3f:d7:48:
4d:eb:00:9d:c9:21:66:7b:c3:a2:77:3e:e3:0c:1d:64:3f:c5:
46:1c:b2:3b:8c:79:61:a5:cd:17:68:59:16:67:31:18:6f:87:
36:2e:20:27:ef:d1:7f:ba:d2:6b:35:b7:99:61:dc:6a:0d:a8:
20:a2:91:6a:da:28:3d:9c:b9:32:12:07:22:a8:47:52:71:da:
0e:7b:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org