Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/qel2UvxFADS894l9kb690ezH4M8.roa
File: qel2UvxFADS894l9kb690ezH4M8.roa (raw, json)
Hash identifier: wJU7gAS+U/AjpupW1bQTkUGXeACPgfSRkkzL4UJ+ld4=
Subject key identifier: A9:E9:76:52:FC:45:00:34:BC:F7:89:7D:91:BE:BD:D1:EC:C7:E0:CF
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018A3CB51C0387EAEBFA648E022AFF5AFF85
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/qel2UvxFADS894l9kb690ezH4M8.roa
Signing time: Mon 28 Aug 2023 15:13:36 +0000
ROA not before: Mon 28 Aug 2023 15:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/24 maxlen: 24
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.100.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.80.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Sep 2023 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:b5:1c:03:87:ea:eb:fa:64:8e:02:2a:ff:5a:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Aug 28 15:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9e97652fc450034bcf7897d91bebdd1ecc7e0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:78:c7:fa:34:51:11:ab:bd:2a:01:bd:e1:
83:ea:b2:c4:68:b3:72:0c:e4:27:c2:aa:4f:4f:3c:
e4:d2:bd:82:5c:b6:4a:f3:79:29:14:67:18:22:bf:
33:ad:f8:64:f0:e6:89:75:4d:ff:9e:88:b1:c8:6f:
16:86:b1:d4:e4:6a:65:7b:57:ca:36:62:46:21:e4:
2a:b9:af:16:98:54:9f:eb:d0:79:0d:d9:d8:e0:bb:
a3:2e:9d:a7:91:74:26:1a:df:7a:00:76:47:d1:61:
77:44:c7:3e:9b:9f:36:98:c1:95:3d:23:a7:08:91:
39:a9:45:4b:e5:38:5d:2d:6f:c9:ec:4d:86:10:a1:
18:7f:c6:f2:5b:97:96:29:0e:c6:de:03:4a:83:88:
f1:92:b6:4a:66:c4:8c:be:49:5d:38:3a:45:c3:f6:
a5:5e:61:e4:e0:15:4f:c8:19:16:91:71:f7:1e:a8:
28:c8:89:f5:54:3f:44:8b:b4:f3:e7:3f:fa:eb:a0:
ac:85:22:6d:63:63:1d:ad:81:a1:5d:42:46:a9:f8:
43:6a:9f:0b:96:28:ea:37:e4:89:b3:10:3f:84:4b:
57:c6:06:75:05:28:36:4d:5c:b5:fe:ab:ed:38:6f:
88:07:92:54:9d:4c:99:60:a4:71:27:ae:20:6c:e4:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:76:52:FC:45:00:34:BC:F7:89:7D:91:BE:BD:D1:EC:C7:E0:CF
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/qel2UvxFADS894l9kb690ezH4M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0/21
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/22
62.216.92.0/22
178.157.68.0/22
178.157.94.0/24
178.157.100.0/23
178.157.112.0-178.157.123.255
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.216.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0/24
188.119.182.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
00:13:58:d0:a4:6c:e1:b6:2f:73:c7:1e:20:4a:68:ca:fa:2d:
f1:e5:88:92:36:b4:e5:af:ec:f7:96:1d:1f:a8:ee:cf:be:b5:
9e:e1:2c:bd:76:68:21:f7:1c:bf:4b:3f:d0:38:81:5c:fc:11:
3a:a4:d9:f3:84:b0:0e:1e:63:8f:48:49:8c:19:fe:32:b6:21:
9f:c1:f5:84:75:1e:a5:24:49:42:24:b5:96:cc:5a:d7:ab:6d:
a3:c4:08:4b:80:41:49:87:76:5b:b5:10:77:ae:bb:bb:c1:98:
25:e5:b8:00:f4:ae:8c:5c:bd:cb:84:3e:f7:d1:3b:88:e2:0e:
fe:c4:7d:8b:80:e0:0c:8f:36:90:4f:26:89:25:58:46:f7:e5:
16:6a:61:29:32:f8:46:52:ce:d9:47:df:de:ac:20:fc:22:39:
c9:d8:57:44:83:c2:18:56:0d:ea:d3:26:bd:3e:c5:65:5b:5c:
fb:62:5f:01:28:55:ae:e2:53:42:10:31:96:7f:5a:f4:73:64:
0a:e7:33:b7:30:18:7c:e1:5d:4c:35:d6:b7:57:57:ac:b5:5c:
96:22:57:c8:68:ad:80:c5:3a:5e:33:eb:5e:5e:e4:00:76:17:
3c:eb:df:81:12:1c:fd:ee:2d:de:e7:78:67:0b:ce:02:95:76:
74:4a:a1:76
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYo8tRwDh+rr+mSOAir/Wv+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjMwODI4MTUxMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWU5NzY1MmZjNDUwMDM0YmNmNzg5N2Q5MWJlYmRkMWVjYzdlMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyB4x/o0URGrvSoBveGD6rLEaLNy
DOQnwqpPTzzk0r2CXLZK83kpFGcYIr8zrfhk8OaJdU3/noixyG8WhrHU5Gple1fK
NmJGIeQqua8WmFSf69B5DdnY4LujLp2nkXQmGt96AHZH0WF3RMc+m582mMGVPSOn
CJE5qUVL5ThdLW/J7E2GEKEYf8byW5eWKQ7G3gNKg4jxkrZKZsSMvkldODpFw/al
XmHk4BVPyBkWkXH3HqgoyIn1VD9Ei7Tz5z/666CshSJtY2MdrYGhXUJGqfhDap8L
lijqN+SJsxA/hEtXxgZ1BSg2TVy1/qvtOG+IB5JUnUyZYKRxJ64gbOTAUwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFKnpdlL8RQA0vPeJfZG+vdHsx+DPMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvcWVsMlV2eEZBRFM4OTRsOWtiNjkwZXpINE04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBvwQCAAEwgbgDBAIF
nYQDBAMFnZgDBAMFnagDBAUFncAwDAMEAgWd5AMEBAWd4AMEAwWd+DAMAwQEJSMw
AwQAJSM0AwQCPthIAwQCPthQAwQCPthcAwQCsp1EAwQAsp1eAwQBsp1kMAwDBASy
nXADBAKynXgDBAO8SpADBAO8SqADBAK8SrgDBAS8SsAwDAMEA7xK2AMEBLxK4AME
A7xK+AMEBLx3gAMEA7x3qAMEALx3tDAMAwQBvHe2AwQGvHeAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAE1jQpGzhti9zxx4gSmjK+i3x5YiSNrTlr+z3lh0fqO7PvrWe4Sy9
dmgh9xy/Sz/QOIFc/BE6pNnzhLAOHmOPSEmMGf4ytiGfwfWEdR6lJElCJLWWzFrX
q22jxAhLgEFJh3ZbtRB3rru7wZgl5bgA9K6MXL3LhD730TuI4g7+xH2LgOAMjzaQ
TyaJJVhG9+UWamEpMvhGUs7ZR9/erCD8IjnJ2FdEg8IYVg3q0ya9PsVlW1z7Yl8B
KFWu4lNCEDGWf1r0c2QK5zO3MBh84V1MNda3V1estVyWIlfIaK2AxTpeM+teXuQA
dhc869+BEhz97i3e53hnC84ClXZ0SqF2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org