Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/eJCFZPuDkRvoayP1z3Lsco_WOlc.roa
File: eJCFZPuDkRvoayP1z3Lsco_WOlc.roa (raw, json)
Hash identifier: ju6a2V5DAITgUK2rBtZOxDQtNvxAEqRkMlmwPCDAhGE=
Subject key identifier: 78:90:85:64:FB:83:91:1B:E8:6B:23:F5:CF:72:EC:72:8F:D6:3A:57
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01895D713E4F8FA27CF92A98422DB668500D
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/eJCFZPuDkRvoayP1z3Lsco_WOlc.roa
Signing time: Sun 16 Jul 2023 06:44:09 +0000
ROA not before: Sun 16 Jul 2023 06:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198589
IP address blocks: 37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:1::/48 maxlen: 48
2a00:c9e0:8001::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0::/32 maxlen: 32
2a00:c9e0:5::/48 maxlen: 48
2a00:c9e7:1::/48 maxlen: 48
2a00:c9e0:c::/48 maxlen: 48
2a00:c9e0:8002::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:71:3e:4f:8f:a2:7c:f9:2a:98:42:2d:b6:68:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jul 16 06:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78908564fb83911be86b23f5cf72ec728fd63a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:b0:bc:12:a4:fb:ea:9f:93:02:4f:51:96:
4d:0c:46:2a:8c:28:05:b2:d0:02:21:09:27:01:62:
cf:38:82:3a:57:89:24:1c:15:f4:c8:7b:b9:a0:42:
b5:32:06:f6:9c:1c:21:8f:46:3a:a9:72:f7:8b:2a:
66:32:86:db:95:d8:4d:38:28:de:ad:28:2d:92:f8:
ed:c4:5b:ad:cb:e6:cc:b4:40:1d:f8:e9:01:d3:b7:
ef:46:2c:23:1f:e5:ee:25:3d:c2:1c:7a:a6:9a:95:
46:e0:23:ac:46:97:43:10:22:c3:1c:85:57:ba:76:
ee:2f:48:ac:84:82:ae:61:dd:69:34:b8:ff:54:ae:
e6:c1:1c:36:50:ba:62:0e:34:38:de:44:17:48:ec:
4d:5c:a0:13:41:3e:4d:06:b3:f5:a7:a7:f4:a7:d0:
7e:f7:4e:c2:74:9a:ad:54:9a:d4:e4:38:82:77:0a:
e8:fa:51:9e:4a:d2:e8:d1:74:23:9a:96:da:77:4d:
a0:66:5f:d7:72:6a:7b:be:33:ee:2d:ea:1a:27:5c:
c9:b4:25:d1:2e:91:99:38:1d:dc:cb:93:7c:aa:34:
5f:7e:fd:06:e3:0f:87:64:98:af:fa:ee:44:73:d8:
e6:93:f1:40:15:75:a3:46:49:ee:72:5e:07:1d:85:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:85:64:FB:83:91:1B:E8:6B:23:F5:CF:72:EC:72:8F:D6:3A:57
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/eJCFZPuDkRvoayP1z3Lsco_WOlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
2a00:c9e7:1::/48
Signature Algorithm: sha256WithRSAEncryption
04:c3:62:cf:4c:da:c8:17:93:02:e9:80:08:59:7a:bf:0b:70:
ee:4b:b4:3d:9b:02:8e:f6:f2:fb:22:67:36:00:b9:c7:11:f2:
53:d0:4e:a2:59:af:0b:da:90:d6:ea:0f:7a:30:e8:2e:b5:8a:
1b:fa:48:22:e1:df:20:28:71:d6:41:90:f6:4d:37:0d:6c:f4:
17:b3:70:52:be:47:c2:09:b0:f9:d2:40:7a:9d:3d:99:33:36:
db:a8:96:16:30:0d:a5:27:96:f8:93:3f:1d:09:d3:1a:a3:6d:
64:49:6a:0d:77:0c:3e:45:f0:78:80:09:04:84:8e:ec:ba:73:
18:d3:4a:14:c2:06:45:59:2a:9e:34:f5:b8:00:07:54:7f:c7:
20:64:ef:27:72:65:65:1c:b7:ba:09:7c:39:12:b3:8b:0c:6b:
97:2b:01:b5:1e:fc:1e:f0:05:96:96:89:f6:4f:09:0c:f0:1b:
57:82:32:b2:0e:1c:58:4e:26:d8:79:4b:44:aa:b4:61:26:b5:
28:d2:1a:4b:c5:61:62:84:34:f5:e1:00:bc:66:44:f5:4a:7f:
c7:9a:67:b4:ef:b8:a8:59:73:1b:3c:7b:7e:8b:1e:71:bd:73:
c2:36:f9:c3:86:45:c8:61:65:70:52:89:fc:12:5a:be:63:af:
bb:4c:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:52:40 2024 by rpki-client on console-ams.rpki-client.org