Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/x1_4jV9Z2HMVXI-taJ8AoFyEDdo.roa
File: x1_4jV9Z2HMVXI-taJ8AoFyEDdo.roa (raw, json)
Hash identifier: ez8+4qzP6+22BW/ruIVc0xVY6qeCBushzwb9NYpww0M=
Subject key identifier: C7:5F:F8:8D:5F:59:D8:73:15:5C:8F:AD:68:9F:00:A0:5C:84:0D:DA
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0188489FFDACBBDB411A9A1EFF7113F5CDE9
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/x1_4jV9Z2HMVXI-taJ8AoFyEDdo.roa
Signing time: Tue 23 May 2023 12:40:24 +0000
ROA not before: Tue 23 May 2023 12:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/24 maxlen: 24
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 Jun 2023 15:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:9f:fd:ac:bb:db:41:1a:9a:1e:ff:71:13:f5:cd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 23 12:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75ff88d5f59d873155c8fad689f00a05c840dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:21:d1:3d:85:5a:a1:8c:94:f6:eb:2f:74:
2f:0b:f2:77:15:d5:de:fe:4d:49:2b:89:90:f3:ad:
ca:01:0a:96:eb:9a:b8:ae:cc:64:55:5f:b9:22:80:
80:ad:c3:55:8f:5b:7f:66:fc:02:3f:a9:9e:99:d3:
01:6e:ce:c2:94:4c:62:2a:89:41:ee:d8:18:b1:ba:
ef:b6:01:7c:76:28:3c:e3:ed:95:70:e8:17:1a:99:
78:a8:97:6e:9f:37:25:97:5a:88:71:59:a1:b9:99:
fa:41:bd:e5:2e:0f:5d:b1:bf:5f:23:08:87:ba:e3:
d5:1a:2e:73:d3:bd:10:5c:c2:2d:aa:84:6a:1e:59:
c1:3e:d8:3a:7b:1f:90:c1:bf:a0:61:77:38:9c:a7:
98:02:74:35:58:7b:d3:c5:5b:97:f0:aa:49:62:24:
e5:c2:ec:8a:9d:49:76:d1:ea:b8:36:7f:dc:3c:03:
ad:da:4b:01:c4:1b:bc:09:e4:41:8d:54:6b:74:dd:
bf:b7:0e:8c:5a:74:d6:78:f0:5f:21:7d:88:b9:ea:
7f:23:09:24:7f:ff:92:4c:82:ad:2d:15:00:11:5f:
24:9c:5a:4d:52:ac:bd:b5:d3:47:26:cb:19:e0:91:
ba:f3:08:d5:ec:c2:26:f3:30:b5:1d:8e:1e:08:b8:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:F8:8D:5F:59:D8:73:15:5C:8F:AD:68:9F:00:A0:5C:84:0D:DA
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/x1_4jV9Z2HMVXI-taJ8AoFyEDdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0/21
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.61.0/24
185.76.63.0/24
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.216.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0/24
188.119.182.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
32:31:02:2e:a3:85:53:83:44:5c:71:a4:ba:8f:93:7c:31:90:
c6:b1:cf:26:58:3f:1d:58:39:c3:2e:b1:96:00:be:de:96:61:
e6:9c:ee:42:61:07:2b:d8:d4:42:d7:bd:3c:57:31:98:06:ad:
88:c7:8b:06:ad:5e:75:90:d2:63:75:19:a8:71:ee:a2:d8:8f:
d7:22:5c:ec:a8:61:18:4e:3b:df:8b:ef:2a:b2:ad:91:bd:86:
42:52:97:54:bc:b6:a6:f5:0c:95:4e:9f:41:a2:56:f1:14:03:
47:44:99:73:5c:28:65:95:88:51:60:0f:bc:d1:e4:9b:08:03:
b3:75:6b:29:db:b1:8f:7f:40:53:6e:24:08:ea:8c:3d:29:cd:
d3:c7:20:69:18:2d:b8:15:43:1a:fa:32:b5:45:e4:6b:a3:77:
0f:c5:ba:40:b4:fe:37:ef:6d:51:c0:53:f1:57:49:f3:4a:37:
4e:49:d8:b8:28:48:f4:e7:04:e5:59:5d:ff:5f:26:af:6f:2c:
da:2c:e2:53:b9:be:64:6a:e5:da:94:28:7b:95:14:f1:df:7a:
4c:10:99:38:a2:e0:c5:e5:5e:87:25:8e:a5:9b:76:1d:54:e4:
0f:1a:30:a3:4e:69:8d:f0:87:26:e2:00:5b:65:cc:59:f9:bc:
46:2d:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org