Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/3qzT3crKkeT5qrNLDkMKr1MlClE.roa
File: 3qzT3crKkeT5qrNLDkMKr1MlClE.roa (raw, json)
Hash identifier: aqmUMiFKt79lXcP3b/FvKzYk9l1C2PiSdWnB/XYR7Y0=
Subject key identifier: DE:AC:D3:DD:CA:CA:91:E4:F9:AA:B3:4B:0E:43:0A:AF:53:25:0A:51
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186C52F28395895C5C6FFF51B6E24D2CDE7
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/3qzT3crKkeT5qrNLDkMKr1MlClE.roa
Signing time: Thu 09 Mar 2023 07:04:07 +0000
ROA not before: Thu 09 Mar 2023 07:04:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 91.73.80.0/20 maxlen: 20
91.73.96.0/20 maxlen: 20
91.73.112.0/20 maxlen: 20
91.73.252.0/22 maxlen: 22
94.201.251.0/24 maxlen: 24
91.74.10.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
5.32.64.0/19 maxlen: 19
5.32.72.0/24 maxlen: 24
91.72.188.0/22 maxlen: 22
94.200.192.0/19 maxlen: 19
91.72.204.0/24 maxlen: 24
5.32.94.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
5.32.23.0/24 maxlen: 24
5.32.27.0/24 maxlen: 24
5.32.32.0/19 maxlen: 19
5.32.36.0/24 maxlen: 24
94.200.156.0/24 maxlen: 24
87.201.14.0/24 maxlen: 24
91.73.16.0/20 maxlen: 20
91.73.32.0/20 maxlen: 20
87.201.40.0/24 maxlen: 24
94.207.239.0/24 maxlen: 24
87.201.46.0/24 maxlen: 24
91.73.48.0/20 maxlen: 20
91.73.64.0/20 maxlen: 20
80.227.200.0/22 maxlen: 22
5.32.111.0/24 maxlen: 24
91.72.229.0/24 maxlen: 24
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.206.148.0/22 maxlen: 22
94.206.152.0/23 maxlen: 23
94.206.164.0/24 maxlen: 24
5.31.128.0/20 maxlen: 20
5.31.128.0/19 maxlen: 19
94.206.183.0/24 maxlen: 24
94.206.181.0/24 maxlen: 24
94.206.182.0/24 maxlen: 24
5.31.144.0/20 maxlen: 20
94.206.84.0/24 maxlen: 24
94.206.92.0/24 maxlen: 24
94.206.97.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.106.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.208.0/20 maxlen: 20
5.31.224.0/20 maxlen: 20
5.31.224.0/19 maxlen: 19
5.31.240.0/20 maxlen: 20
87.200.0.0/15 maxlen: 19
5.31.160.0/19 maxlen: 19
5.31.160.0/20 maxlen: 20
80.227.0.0/16 maxlen: 19
5.31.176.0/20 maxlen: 20
91.72.0.0/14 maxlen: 19
5.31.192.0/20 maxlen: 20
5.31.192.0/19 maxlen: 19
94.200.47.0/24 maxlen: 24
94.200.51.0/24 maxlen: 24
5.30.160.0/19 maxlen: 19
94.205.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
94.206.31.0/24 maxlen: 24
94.206.40.0/22 maxlen: 22
5.31.0.0/19 maxlen: 19
94.206.51.0/24 maxlen: 24
213.132.32.0/19 maxlen: 19
94.206.61.0/24 maxlen: 24
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
94.205.240.0/24 maxlen: 24
94.205.254.0/24 maxlen: 24
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
94.205.8.0/22 maxlen: 22
5.30.32.0/19 maxlen: 19
5.30.64.0/19 maxlen: 19
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
5.30.0.0/15 maxlen: 15
94.203.200.0/22 maxlen: 22
94.203.204.0/22 maxlen: 22
94.203.228.0/22 maxlen: 22
94.203.44.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
91.75.16.0/24 maxlen: 24
94.203.156.0/22 maxlen: 22
94.203.199.0/24 maxlen: 24
91.74.56.0/24 maxlen: 24
91.74.78.0/23 maxlen: 23
94.202.192.0/22 maxlen: 22
2a00:f2b::/32 maxlen: 32
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:2f:28:39:58:95:c5:c6:ff:f5:1b:6e:24:d2:cd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 9 07:04:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deacd3ddcaca91e4f9aab34b0e430aaf53250a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:36:f5:c3:a1:29:ed:bd:9c:ad:7e:d8:16:
1e:0a:f3:47:7e:4e:4f:ce:4a:b3:66:0f:28:4a:74:
c6:be:53:24:7c:58:5d:0d:7f:8c:62:6f:9e:21:42:
47:ae:42:54:13:f2:5e:e9:54:da:35:87:c0:d4:16:
7d:15:e4:9b:12:e4:3f:5d:44:ed:40:ea:c9:20:76:
3d:cb:d6:e3:ea:86:c3:ff:c9:10:8d:1e:30:e4:8a:
56:c3:92:ad:04:44:8a:8a:85:62:ec:ec:61:74:c5:
c0:c7:8c:bb:c7:d9:52:4f:00:f9:d3:e6:f0:be:5a:
b6:75:cd:36:9b:16:98:8d:a8:63:18:a8:f5:e8:45:
99:9a:67:fa:6f:01:a7:46:13:65:5e:d3:86:61:c7:
53:f7:6f:73:20:87:53:2b:20:6d:cf:2e:f4:d2:06:
e1:ae:3e:f3:3f:bb:66:f2:da:bd:5d:95:f2:06:dc:
c5:60:bb:4b:88:7b:0b:91:4c:1f:c5:2c:3e:23:27:
6c:ea:92:b3:94:0f:a8:b8:d3:24:5c:f7:79:8c:36:
10:98:97:0c:4e:2a:85:4e:56:71:62:db:de:9f:e8:
1a:3a:e5:bd:e1:95:3d:53:aa:ff:45:e0:d4:db:f7:
d9:6b:45:95:28:db:b8:c3:2f:7c:ff:a2:3f:38:58:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:D3:DD:CA:CA:91:E4:F9:AA:B3:4B:0E:43:0A:AF:53:25:0A:51
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/3qzT3crKkeT5qrNLDkMKr1MlClE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:bd:b4:81:0f:c6:ec:b7:e4:67:80:9f:e5:4f:52:e8:c4:1a:
07:c1:da:38:58:14:1b:82:d6:1c:ae:59:ee:93:a1:f9:88:fe:
26:31:6d:dd:e3:f9:f7:4b:ba:59:b4:c8:35:50:94:9b:c6:1c:
58:70:92:36:eb:ab:03:4e:88:e9:0b:a5:9f:0f:3d:a8:36:25:
f6:90:0a:6d:c3:92:27:e0:a3:73:1d:83:0a:d0:52:b9:9c:d1:
68:3d:1f:ce:42:77:7e:be:6f:45:a1:26:c4:ca:e2:b5:52:f9:
f0:c5:6c:17:13:df:b6:43:2a:04:4e:8a:79:6a:81:5c:89:d7:
45:65:a7:4d:18:e0:0c:d5:f3:74:1a:02:de:60:48:9a:b8:78:
61:64:20:8a:2e:91:50:48:f1:5f:4a:7b:32:d2:d8:91:f2:37:
6b:79:9c:96:64:eb:30:ec:ad:fd:1f:12:f1:72:16:a9:40:a0:
3c:fd:c0:eb:8b:76:ba:03:4f:c1:5c:7e:97:2a:ad:0e:f9:b3:
7f:33:05:fb:11:24:48:9f:7a:2a:40:75:f0:af:87:3f:73:e0:
87:13:39:e4:16:ec:7a:d3:af:f7:3d:2c:71:f6:99:45:85:17:
cc:cf:39:b5:18:bf:09:e2:4d:45:de:a2:4a:58:d6:37:c1:5b:
84:ba:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org