Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/OOHeyHfhjyNCSfQ1PEE0iLPuuv4.roa
File: OOHeyHfhjyNCSfQ1PEE0iLPuuv4.roa (raw, json)
Hash identifier: L3PVQZMUa4cUOSOsMkSNj9a17cObfNtws8ZbGrLhUrU=
Subject key identifier: 38:E1:DE:C8:77:E1:8F:23:42:49:F4:35:3C:41:34:88:B3:EE:BA:FE
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B15426A51D275E41BAA860F655AB856CE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/OOHeyHfhjyNCSfQ1PEE0iLPuuv4.roa
Signing time: Mon 09 Oct 2023 16:25:55 +0000
ROA not before: Mon 09 Oct 2023 16:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.135.0/24 maxlen: 32
188.132.134.0/24 maxlen: 24
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.157.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.219.0/24 maxlen: 32
188.132.217.0/24 maxlen: 32
188.132.218.0/24 maxlen: 24
188.132.224.0/24 maxlen: 24
188.132.226.0/24 maxlen: 32
188.132.225.0/24 maxlen: 24
188.132.223.0/24 maxlen: 32
188.132.220.0/24 maxlen: 24
188.132.227.0/24 maxlen: 32
188.132.231.0/24 maxlen: 24
188.132.228.0/24 maxlen: 32
188.132.233.0/24 maxlen: 24
188.132.232.0/24 maxlen: 24
188.132.230.0/24 maxlen: 32
77.92.130.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.128.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
188.132.234.0/24 maxlen: 32
77.92.133.0/24 maxlen: 32
188.132.241.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.244.0/24 maxlen: 32
77.92.135.0/24 maxlen: 24
77.92.134.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.245.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.141.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
77.92.144.0/24 maxlen: 32
188.132.252.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.149.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
77.92.158.0/24 maxlen: 24
77.92.156.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.159.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.177.0/24 maxlen: 24
188.132.183.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.195.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.211.0/24 maxlen: 32
188.132.208.0/24 maxlen: 32
188.132.213.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.56.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
31.210.33.0/24 maxlen: 24
31.210.32.0/24 maxlen: 24
31.210.36.0/24 maxlen: 24
31.210.35.0/24 maxlen: 24
31.210.44.0/24 maxlen: 24
31.210.40.0/24 maxlen: 32
31.210.41.0/24 maxlen: 24
31.210.46.0/24 maxlen: 24
31.210.47.0/24 maxlen: 24
31.210.51.0/24 maxlen: 32
31.210.50.0/24 maxlen: 32
31.210.45.0/24 maxlen: 32
31.210.49.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.58.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
78.135.98.0/24 maxlen: 24
78.135.103.0/24 maxlen: 24
78.135.99.0/24 maxlen: 32
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
78.135.115.0/24 maxlen: 24
78.135.114.0/24 maxlen: 32
212.68.37.0/24 maxlen: 32
212.68.33.0/24 maxlen: 32
212.68.38.0/24 maxlen: 24
212.68.36.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.42.0/24 maxlen: 32
212.68.39.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.49.0/24 maxlen: 24
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
2a02:26b0:8001::/48 maxlen: 48
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:42:6a:51:d2:75:e4:1b:aa:86:0f:65:5a:b8:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 9 16:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38e1dec877e18f234249f4353c413488b3eebafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:51:c1:91:4d:57:e8:7c:92:70:a7:0a:12:
81:5b:27:d6:30:a7:03:ee:8d:8c:f1:5c:c6:fd:ea:
18:4f:c6:60:6f:06:6f:b3:b9:70:a6:7e:3c:1b:e7:
0e:8e:26:dd:db:48:67:54:f4:52:65:65:a5:5b:bc:
06:b8:a4:70:5c:a9:0e:f3:37:6c:eb:8c:64:31:ee:
ca:ba:dc:31:ae:a6:51:37:08:da:8f:68:2d:35:ee:
b9:34:02:f1:2c:92:48:a8:fd:97:88:cf:5e:2d:9c:
07:22:30:70:91:c3:25:09:de:2e:be:a7:63:be:fd:
52:83:dd:78:fe:9a:47:d6:76:c8:87:db:ce:8d:c0:
41:3a:6c:02:25:92:62:ac:de:c8:a7:da:35:6e:49:
32:c7:26:a2:d4:44:66:ae:78:a9:1d:25:5a:0e:df:
bb:59:28:90:06:49:56:59:6c:44:03:7c:e6:71:e4:
71:32:75:c0:6f:e5:db:4a:2d:bf:1b:e9:a2:e2:e5:
24:c4:f5:92:3f:6d:a7:ed:3b:e9:37:1e:ff:3e:30:
25:33:22:7a:3d:7f:0f:10:80:b8:43:4b:59:93:7e:
e1:24:1c:c3:52:ab:58:3a:ca:fd:04:93:7b:e1:bf:
73:34:d9:e0:96:9c:33:3d:fc:98:e6:28:95:24:93:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:DE:C8:77:E1:8F:23:42:49:F4:35:3C:41:34:88:B3:EE:BA:FE
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/OOHeyHfhjyNCSfQ1PEE0iLPuuv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.35.0-31.210.36.255
31.210.40.0/23
31.210.44.0-31.210.51.255
31.210.56.0-31.210.61.255
77.92.128.0-77.92.142.255
77.92.144.0/24
77.92.148.0/23
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.98.0/23
78.135.103.0/24
78.135.108.0/24
78.135.113.0-78.135.116.255
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.177.255
188.132.180.0/24
188.132.183.0/24
188.132.190.0/24
188.132.194.0/23
188.132.204.0/23
188.132.208.0/24
188.132.211.0-188.132.220.255
188.132.223.0-188.132.228.255
188.132.230.0-188.132.235.255
188.132.239.0/24
188.132.241.0/24
188.132.243.0-188.132.246.255
188.132.250.0-188.132.255.255
212.68.33.0/24
212.68.36.0-212.68.46.255
212.68.49.0-212.68.51.255
212.68.56.0/23
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:3d:f4:ca:a9:d0:ca:eb:a0:78:10:d4:25:41:3f:56:2c:a8:
06:90:a5:01:38:ec:a1:4f:77:25:7c:47:23:a9:26:08:48:60:
7f:75:ef:77:37:13:f7:af:f3:e8:f7:a4:85:7a:ff:4a:fc:25:
71:7f:67:39:25:86:0f:52:9e:99:8a:be:9f:34:b6:ca:e1:71:
3b:54:d8:83:4d:51:65:b5:f8:c2:bf:f2:4f:27:04:6f:ce:26:
2d:94:49:76:9d:23:e2:9a:c5:00:84:c7:8e:f4:e2:3a:5a:be:
75:9d:59:10:30:14:31:da:dd:71:3b:bf:af:8b:71:81:87:9f:
45:36:f2:01:4d:96:e8:b4:91:5c:6f:22:db:9a:53:2a:79:18:
c1:16:1a:28:b2:fb:97:80:9f:ff:71:f3:a7:fd:d3:5f:f9:8f:
30:37:b4:1b:a9:37:5b:76:6c:0c:12:3a:b7:50:cd:ad:4e:4d:
91:2b:85:fe:a8:77:56:1d:a4:4c:7b:07:c6:74:da:43:b6:93:
a0:8f:c8:fa:f5:6f:7d:7d:ee:f1:a7:b9:78:ee:86:45:0a:db:
e5:11:7a:45:e1:48:e5:6e:fd:67:dc:d3:7e:cc:68:3e:98:79:
ec:56:8e:ff:2c:23:88:07:cc:30:7f:4a:72:5d:2b:41:db:5b:
be:e4:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 15:50:30 2023 by rpki-client on console-fra.rpki-client.org