Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/X97m1cp8YKM8Mc6fARjKTOnmBKQ.roa
File: X97m1cp8YKM8Mc6fARjKTOnmBKQ.roa (raw, json)
Hash identifier: QEcHgrVsgwqApaPq/0KqRuAwIWk+h+Gp7HmC0KHGu34=
Subject key identifier: 5F:DE:E6:D5:CA:7C:60:A3:3C:31:CE:9F:01:18:CA:4C:E9:E6:04:A4
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018AB20F94D4B1E1E42063301B3E74FF2C6A
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/X97m1cp8YKM8Mc6fARjKTOnmBKQ.roa
Signing time: Wed 20 Sep 2023 10:08:00 +0000
ROA not before: Wed 20 Sep 2023 10:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6866
IP address blocks: 87.228.128.0/17 maxlen: 24
62.228.128.0/19 maxlen: 19
87.228.128.0/18 maxlen: 18
87.228.144.0/20 maxlen: 20
62.228.64.0/19 maxlen: 19
62.228.96.0/19 maxlen: 19
62.228.226.0/23 maxlen: 23
87.228.224.0/20 maxlen: 20
62.228.224.0/19 maxlen: 19
87.228.224.0/19 maxlen: 19
62.228.228.0/24 maxlen: 24
62.228.229.0/24 maxlen: 24
62.228.240.0/23 maxlen: 23
87.228.240.0/20 maxlen: 20
62.228.160.0/19 maxlen: 19
87.228.160.0/20 maxlen: 20
83.168.0.0/19 maxlen: 19
83.168.0.0/18 maxlen: 24
87.228.176.0/20 maxlen: 20
87.228.192.0/20 maxlen: 20
62.228.192.0/19 maxlen: 19
83.168.32.0/19 maxlen: 19
87.228.208.0/20 maxlen: 20
31.153.128.0/19 maxlen: 19
176.92.224.0/19 maxlen: 24
31.153.160.0/19 maxlen: 19
31.153.96.0/19 maxlen: 19
62.228.0.0/19 maxlen: 19
62.228.0.0/21 maxlen: 21
62.228.0.0/16 maxlen: 24
62.228.8.0/21 maxlen: 21
62.228.16.0/22 maxlen: 22
62.228.24.0/21 maxlen: 21
62.228.20.0/22 maxlen: 22
62.228.32.0/19 maxlen: 19
31.153.192.0/19 maxlen: 19
31.153.224.0/19 maxlen: 19
212.31.96.0/20 maxlen: 20
212.31.96.0/19 maxlen: 24
212.31.96.0/24 maxlen: 24
212.31.112.0/20 maxlen: 20
81.4.128.0/18 maxlen: 24
81.4.128.0/19 maxlen: 19
212.31.121.0/24 maxlen: 24
212.31.122.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
81.4.133.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
31.153.16.0/20 maxlen: 20
31.153.32.0/19 maxlen: 19
31.153.64.0/19 maxlen: 19
81.4.160.0/19 maxlen: 19
81.4.160.0/21 maxlen: 21
81.4.160.0/20 maxlen: 20
81.4.168.0/21 maxlen: 21
81.4.174.0/24 maxlen: 24
81.4.176.0/21 maxlen: 21
31.153.0.0/17 maxlen: 17
31.153.0.0/20 maxlen: 20
31.153.0.0/19 maxlen: 19
31.153.0.0/16 maxlen: 24
46.199.0.0/18 maxlen: 18
46.199.0.0/19 maxlen: 19
46.199.0.0/16 maxlen: 24
46.199.16.0/20 maxlen: 20
46.199.32.0/19 maxlen: 19
46.199.32.0/20 maxlen: 20
46.199.48.0/20 maxlen: 20
46.199.64.0/20 maxlen: 20
46.199.88.0/24 maxlen: 24
46.198.32.0/19 maxlen: 19
46.198.64.0/19 maxlen: 19
46.198.64.0/18 maxlen: 18
46.198.0.0/18 maxlen: 18
46.198.0.0/19 maxlen: 19
46.198.0.0/17 maxlen: 24
46.198.96.0/19 maxlen: 19
93.109.192.0/19 maxlen: 19
93.109.209.0/24 maxlen: 24
93.109.219.0/24 maxlen: 24
93.109.224.0/19 maxlen: 19
93.109.128.0/19 maxlen: 19
93.109.160.0/19 maxlen: 19
185.2.97.0/24 maxlen: 24
185.2.98.0/24 maxlen: 24
185.2.96.0/24 maxlen: 24
185.2.96.0/22 maxlen: 24
185.2.99.0/24 maxlen: 24
93.109.227.0/24 maxlen: 24
93.109.239.0/24 maxlen: 24
195.14.142.0/24 maxlen: 24
213.7.208.0/20 maxlen: 20
213.7.208.0/24 maxlen: 24
195.14.144.0/20 maxlen: 20
195.14.151.0/24 maxlen: 24
195.14.146.0/24 maxlen: 24
213.7.220.0/22 maxlen: 22
213.7.224.0/20 maxlen: 20
195.14.153.0/24 maxlen: 24
213.7.240.0/20 maxlen: 20
93.109.0.0/19 maxlen: 19
93.109.0.0/16 maxlen: 24
128.0.224.0/20 maxlen: 24
213.7.160.0/20 maxlen: 20
128.0.240.0/20 maxlen: 24
213.7.176.0/20 maxlen: 20
213.7.192.0/20 maxlen: 20
195.14.128.0/19 maxlen: 24
195.14.128.0/20 maxlen: 20
213.149.176.0/20 maxlen: 20
93.109.96.0/19 maxlen: 19
93.109.32.0/19 maxlen: 19
213.149.160.0/19 maxlen: 24
213.149.160.0/20 maxlen: 20
93.109.64.0/19 maxlen: 19
213.7.0.0/17 maxlen: 17
213.7.0.0/20 maxlen: 20
213.7.0.0/16 maxlen: 24
213.7.16.0/20 maxlen: 20
213.7.32.0/20 maxlen: 20
213.7.96.0/20 maxlen: 20
213.7.112.0/20 maxlen: 20
213.7.128.0/18 maxlen: 18
213.7.128.0/20 maxlen: 20
128.0.200.0/21 maxlen: 24
128.0.208.0/20 maxlen: 24
37.149.0.0/16 maxlen: 24
213.7.144.0/20 maxlen: 20
128.0.107.0/24 maxlen: 24
213.7.48.0/20 maxlen: 20
213.7.64.0/20 maxlen: 20
213.7.80.0/20 maxlen: 20
2a00:135d::/32 maxlen: 48
2a00:135c::/32 maxlen: 48
2a00:135c::/30 maxlen: 48
2a00:135e::/32 maxlen: 48
2a00:1358:df00::/48 maxlen: 48
2a00:1358:1000::/48 maxlen: 48
2a00:135b::/32 maxlen: 48
2a00:1359::/32 maxlen: 48
2a00:1358::/30 maxlen: 48
2a00:135f::/32 maxlen: 48
2a00:1358:f080::/41 maxlen: 41
2a00:1358:f000::/41 maxlen: 41
2a00:135a::/32 maxlen: 48
2a00:1358::/31 maxlen: 48
2a00:135e::/31 maxlen: 48
2a00:1358::/29 maxlen: 48
2a00:135a::/31 maxlen: 48
2a00:1358:b000::/44 maxlen: 44
2a00:135c::/31 maxlen: 48
2a00:1358:d000::/40 maxlen: 40
2a00:1358:f000::/40 maxlen: 40
2a00:1358::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:0f:94:d4:b1:e1:e4:20:63:30:1b:3e:74:ff:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Sep 20 10:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fdee6d5ca7c60a33c31ce9f0118ca4ce9e604a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:f4:c4:bb:ee:30:d7:f7:d2:e6:9d:99:a7:
e6:86:4e:7b:9b:64:8d:71:f2:84:4c:ee:d5:c3:46:
56:a1:7b:6d:88:06:4d:83:e2:70:80:a5:54:d0:e0:
94:d1:68:8e:25:a6:3a:15:55:13:6d:1b:8c:ea:24:
f8:72:e3:3f:d8:4f:c0:4f:04:e0:cd:d5:08:30:33:
dd:25:89:b2:49:fc:79:7d:6a:29:99:98:5c:f1:fb:
37:2b:00:01:2d:53:70:e6:6c:77:48:7b:8b:a2:99:
0a:7e:fb:11:82:69:64:ae:cb:f0:67:56:1c:90:38:
64:bd:ec:da:ec:2e:22:90:f7:ca:a2:ec:84:e2:07:
26:d9:69:f5:87:d8:b7:d9:de:6f:3e:10:f4:c4:a4:
c6:3e:b0:34:25:20:3f:42:37:49:88:96:97:3c:01:
71:3f:60:38:41:c9:73:2a:da:75:33:81:5a:b9:b5:
0a:2a:2c:2e:77:d3:71:6e:c3:03:0f:2f:1b:42:11:
66:4a:4b:ef:bc:8e:f2:dd:af:9a:d1:b4:df:35:1a:
c3:4d:98:dd:59:1b:ec:7e:3a:d1:3c:1a:25:5e:72:
0c:fb:48:85:21:f7:da:aa:f1:77:e1:b6:b6:9f:a0:
12:cd:94:b0:22:b5:6f:dc:57:be:1a:7b:47:78:1e:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:E6:D5:CA:7C:60:A3:3C:31:CE:9F:01:18:CA:4C:E9:E6:04:A4
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/X97m1cp8YKM8Mc6fARjKTOnmBKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0/24
128.0.200.0-128.0.255.255
176.92.224.0/19
185.2.96.0/22
195.14.128.0/19
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
Signature Algorithm: sha256WithRSAEncryption
09:db:64:c5:e2:2c:cb:0e:69:e9:28:a2:87:72:2a:3b:fd:f8:
16:35:25:7c:a6:e0:7e:c7:36:90:5a:b3:cf:55:45:80:8c:17:
bb:9f:07:7f:4f:ba:28:80:71:1e:ad:91:cc:d2:c5:ac:49:d0:
50:45:c8:dd:db:7c:ea:66:29:5c:6c:19:59:51:77:1f:00:fa:
05:04:f0:42:b4:b7:ed:ad:63:a4:a2:29:ec:6a:e4:1c:2b:b0:
16:ff:8f:fc:1a:d6:94:8c:dc:bf:30:c8:b6:b6:a9:dc:3e:72:
20:f9:4a:ea:12:71:5d:82:01:94:4d:66:b4:e6:cc:34:f1:81:
80:e2:26:ef:05:6a:81:9f:a5:3c:73:d2:7a:77:ea:49:92:ce:
14:1f:db:14:db:5f:83:d5:83:da:22:fa:dc:48:50:6a:d8:05:
af:0b:ee:25:0e:f4:1a:eb:fc:f1:35:41:60:6a:5c:db:ef:08:
22:91:b4:cd:07:d0:06:14:7c:0b:45:5f:5e:90:9d:97:74:e1:
3d:01:75:aa:de:74:c6:8a:54:da:02:eb:44:76:d1:44:41:31:
ee:2d:63:16:d5:04:e7:c8:14:8c:85:b8:81:e2:1d:d2:22:f0:
bd:8b:75:26:19:0c:a4:b2:a0:c6:cb:c6:8f:86:89:67:ea:55:
b2:0e:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org