Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1fFzoRLV6AoidzKCwFvW4qYpqKY.roa
File: 1fFzoRLV6AoidzKCwFvW4qYpqKY.roa (raw, json)
Hash identifier: 2+sh2421q24x7HfW0uS2WSdaNarBP4gtRfUkBhb1F0w=
Subject key identifier: D5:F1:73:A1:12:D5:E8:0A:22:77:32:82:C0:5B:D6:E2:A6:29:A8:A6
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018AA334547A4DA48F2F32A223C5A7FD2EB7
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1fFzoRLV6AoidzKCwFvW4qYpqKY.roa
Signing time: Sun 17 Sep 2023 12:53:50 +0000
ROA not before: Sun 17 Sep 2023 12:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.135.0/24 maxlen: 32
188.132.134.0/24 maxlen: 24
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.157.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.219.0/24 maxlen: 32
188.132.217.0/24 maxlen: 32
188.132.218.0/24 maxlen: 24
188.132.224.0/24 maxlen: 24
188.132.226.0/24 maxlen: 32
188.132.225.0/24 maxlen: 24
188.132.223.0/24 maxlen: 32
188.132.220.0/24 maxlen: 24
188.132.227.0/24 maxlen: 32
188.132.231.0/24 maxlen: 24
188.132.228.0/24 maxlen: 32
188.132.233.0/24 maxlen: 24
188.132.232.0/24 maxlen: 24
188.132.230.0/24 maxlen: 32
77.92.130.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.128.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
188.132.234.0/24 maxlen: 32
77.92.133.0/24 maxlen: 32
188.132.241.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.244.0/24 maxlen: 32
77.92.135.0/24 maxlen: 24
77.92.134.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.245.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.141.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
77.92.144.0/24 maxlen: 32
188.132.252.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.149.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
77.92.158.0/24 maxlen: 24
77.92.156.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.159.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.177.0/24 maxlen: 24
188.132.183.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.195.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.206.0/24 maxlen: 24
188.132.211.0/24 maxlen: 32
188.132.207.0/24 maxlen: 24
188.132.208.0/24 maxlen: 32
188.132.213.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.56.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
31.210.33.0/24 maxlen: 24
31.210.32.0/24 maxlen: 24
31.210.36.0/24 maxlen: 24
31.210.35.0/24 maxlen: 24
31.210.44.0/24 maxlen: 24
31.210.40.0/24 maxlen: 32
31.210.41.0/24 maxlen: 24
31.210.46.0/24 maxlen: 24
31.210.47.0/24 maxlen: 24
31.210.51.0/24 maxlen: 32
31.210.50.0/24 maxlen: 32
31.210.45.0/24 maxlen: 32
31.210.49.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.58.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
78.135.98.0/24 maxlen: 24
78.135.103.0/24 maxlen: 24
78.135.99.0/24 maxlen: 32
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
78.135.115.0/24 maxlen: 24
78.135.114.0/24 maxlen: 32
212.68.32.0/24 maxlen: 32
212.68.37.0/24 maxlen: 32
212.68.33.0/24 maxlen: 32
212.68.38.0/24 maxlen: 24
212.68.36.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.42.0/24 maxlen: 32
212.68.39.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.49.0/24 maxlen: 24
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
2a02:26b0:8001::/48 maxlen: 48
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:34:54:7a:4d:a4:8f:2f:32:a2:23:c5:a7:fd:2e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Sep 17 12:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5f173a112d5e80a22773282c05bd6e2a629a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:f8:19:bd:c2:a6:9f:a9:39:19:43:0b:2c:
ea:17:f2:84:2b:8a:a4:7f:01:03:fe:2a:8a:22:a1:
9c:c6:3f:fc:4e:76:e8:a0:ba:6d:7d:af:3f:f5:2c:
6d:47:47:4b:6d:7f:ff:fa:6d:ed:82:71:9b:fe:a0:
ae:46:d0:78:dd:ba:4f:ca:63:b3:d6:f2:ac:b6:9f:
13:15:56:05:2f:0c:70:93:41:a5:7d:99:50:af:04:
9d:29:51:f7:6c:0a:75:4c:08:d6:34:68:f6:91:8c:
04:f2:0c:31:c0:01:3c:69:21:58:7c:53:33:32:b5:
8a:57:4c:ba:fa:c2:d0:f7:84:a9:ae:2d:ad:3c:d1:
b6:40:ab:5e:d6:31:03:be:67:a3:88:d0:71:1b:e8:
82:1b:1e:ee:e3:7c:34:30:74:0d:37:34:cd:a3:37:
33:9f:45:67:e2:2a:74:ac:62:4d:f4:0e:77:ca:83:
c4:5d:60:fa:71:b5:10:2e:97:61:70:58:cd:74:fa:
cf:91:34:d1:0a:39:4f:89:7a:65:e9:90:22:b4:ba:
3e:69:93:58:71:88:ca:84:49:26:f1:de:88:89:50:
eb:31:af:57:2d:7a:7e:53:bf:3d:5c:2b:b2:78:d8:
c0:92:1e:cf:2a:0d:3a:43:d6:24:de:2a:23:e8:e3:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:73:A1:12:D5:E8:0A:22:77:32:82:C0:5B:D6:E2:A6:29:A8:A6
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1fFzoRLV6AoidzKCwFvW4qYpqKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.35.0-31.210.36.255
31.210.40.0/23
31.210.44.0-31.210.51.255
31.210.56.0-31.210.61.255
77.92.128.0-77.92.144.255
77.92.146.0/24
77.92.148.0/23
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.98.0/23
78.135.103.0/24
78.135.108.0/24
78.135.113.0-78.135.116.255
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.153.0/24
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.177.255
188.132.180.0/24
188.132.183.0/24
188.132.190.0/24
188.132.194.0/23
188.132.204.0-188.132.208.255
188.132.211.0-188.132.220.255
188.132.223.0-188.132.228.255
188.132.230.0-188.132.235.255
188.132.239.0/24
188.132.241.0/24
188.132.243.0-188.132.246.255
188.132.250.0-188.132.255.255
212.68.32.0/23
212.68.36.0-212.68.46.255
212.68.49.0-212.68.51.255
212.68.56.0/23
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
23:a4:ab:fa:00:b6:61:5e:0c:9b:f4:d2:7d:ea:fd:52:f1:77:
c3:9a:4a:47:0d:98:3d:00:8a:38:1c:f3:40:92:0e:92:85:2a:
b8:37:52:9f:c6:1a:90:28:12:6d:5d:44:b5:17:4b:45:b1:a0:
7a:6d:3a:15:72:c3:13:87:37:25:5e:50:ba:cd:e5:55:dd:61:
fc:53:24:29:9e:5c:96:d6:36:0f:32:bb:40:c7:a2:75:a3:6d:
5a:67:f2:db:b0:d9:b2:86:a1:03:0a:0e:1e:95:6d:f4:49:9c:
d2:b1:c0:2a:17:2d:7b:61:4d:cd:bf:8a:0a:b3:ce:a5:11:d4:
5e:08:3a:a2:33:dd:38:32:cd:22:9b:c9:c4:c7:66:7d:f0:37:
83:a2:cf:b3:06:4c:5b:09:25:e7:dd:f1:aa:61:be:62:e4:3a:
cf:76:f8:6d:10:eb:77:fa:e9:cb:14:28:36:a6:16:9a:16:7e:
58:b1:a5:d2:09:81:c3:02:46:d9:0b:4c:62:c2:6e:85:b4:2d:
51:ce:9c:e4:76:91:be:c3:7f:00:56:55:84:e4:a6:61:e7:98:
4a:4e:0d:bf:db:33:89:8c:c4:0a:15:b3:39:fc:97:d2:6d:89:
1c:b1:f5:73:5a:cb:dc:e3:90:fa:d6:b4:94:36:74:49:3e:d4:
5f:39:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 23:08:13 2023 by rpki-client on console-fra.rpki-client.org