Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa
File: 7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa (raw, json)
Hash identifier: NJpEE6KS2xjZkly49r+HSPlVfmk/CRwwJ2ZcANdnZfs=
Subject key identifier: ED:67:23:F0:38:71:79:90:CC:E8:BF:B8:BD:D0:47:CD:1D:2F:6A:EA
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186965A99EEBBCCB33303417B4746C975EE
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa
Signing time: Tue 28 Feb 2023 04:49:25 +0000
ROA not before: Tue 28 Feb 2023 04:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 5.30.32.0/19 maxlen: 19
94.201.251.0/24 maxlen: 24
5.30.64.0/19 maxlen: 19
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
5.30.0.0/15 maxlen: 15
5.32.64.0/19 maxlen: 19
91.72.204.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
94.203.204.0/22 maxlen: 22
5.32.32.0/19 maxlen: 19
94.200.156.0/24 maxlen: 24
80.227.200.0/22 maxlen: 22
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.203.44.0/23 maxlen: 23
94.206.152.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
5.31.128.0/19 maxlen: 19
94.206.181.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.224.0/19 maxlen: 19
5.31.160.0/19 maxlen: 19
87.200.0.0/15 maxlen: 19
80.227.0.0/16 maxlen: 19
91.72.0.0/14 maxlen: 19
5.31.192.0/19 maxlen: 19
5.30.160.0/19 maxlen: 19
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
91.74.78.0/23 maxlen: 23
5.31.0.0/19 maxlen: 19
213.132.32.0/19 maxlen: 19
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
2a00:f2b::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 Feb 2023 12:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:96:5a:99:ee:bb:cc:b3:33:03:41:7b:47:46:c9:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Feb 28 04:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed6723f038717990cce8bfb8bdd047cd1d2f6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:b0:4c:79:91:db:bd:c0:6d:08:c5:1c:62:
5d:fb:3f:08:c3:35:9b:e8:e9:48:26:bf:d8:82:a4:
56:57:a7:97:00:6a:cd:12:46:48:6d:fd:a1:32:42:
e6:db:54:51:63:8a:d7:43:b4:29:96:e1:99:94:11:
e4:9e:ed:98:9e:38:40:e2:f4:fd:3e:77:ce:da:67:
50:13:96:95:aa:ef:d3:b9:34:aa:10:5e:c2:ce:43:
5e:9a:d8:e6:17:b9:bb:ef:11:5c:2b:70:a1:39:dd:
68:03:ea:35:b7:58:e0:a8:f3:17:b3:04:30:ec:9c:
6b:52:66:41:df:8f:dd:2f:b8:cb:22:14:fa:1a:62:
a9:9b:ee:37:92:4c:1c:40:6d:fb:e9:d9:58:51:dd:
b1:78:e9:25:43:21:6e:33:a3:73:5f:af:dd:e6:8c:
de:05:5b:40:ce:2e:aa:e9:ba:0e:17:44:cb:a8:b7:
98:9a:37:29:4f:45:8a:dc:97:5f:7f:89:91:91:5b:
b0:5b:bd:4c:de:de:65:f2:4d:4a:86:50:51:76:55:
4a:59:9a:41:6f:85:4e:fb:a7:7b:65:5a:c0:df:5b:
6d:19:4a:a6:19:c5:75:b2:25:f3:d6:4f:ba:cf:05:
10:60:71:c2:2f:d6:b9:66:a1:16:89:1c:d8:09:25:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:23:F0:38:71:79:90:CC:E8:BF:B8:BD:D0:47:CD:1D:2F:6A:EA
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:16:19:2e:9c:1f:a5:0b:99:db:22:44:6a:43:cd:f5:64:2b:
ce:ac:ec:e4:21:a3:3c:2b:a2:1a:42:4b:c6:7d:62:f3:8f:ae:
36:32:b3:cb:16:69:62:cb:49:87:fd:50:da:a4:87:18:81:b8:
5c:2a:a6:8f:ac:a0:12:d9:95:4f:6a:91:58:a8:1a:ab:9d:cf:
4a:36:0a:d2:3c:76:59:21:f5:db:71:46:a7:c3:a0:4b:0d:38:
78:ca:1d:ba:1f:64:83:07:f5:e6:8d:9f:45:f2:5b:0d:69:ad:
07:c2:cd:c6:34:7e:bf:dc:9c:cf:59:66:fc:ba:d6:ba:1c:23:
38:44:0f:57:97:c7:0f:42:41:3c:00:09:92:d0:ac:a5:b3:08:
33:53:23:c9:c1:d7:36:36:5f:8c:a3:16:43:f7:3b:85:ce:c3:
c3:ca:3e:3f:3c:77:20:c1:36:f9:68:b8:80:7f:3b:03:4f:31:
51:12:34:48:2d:38:b1:92:e7:16:c5:6c:b5:3e:fa:d9:d8:50:
07:41:ec:e6:12:6f:c9:4f:bd:de:49:33:cc:8d:9c:e7:47:13:
14:88:e1:f0:c6:ec:97:f0:7a:e4:14:83:fd:df:6c:91:76:40:
51:ea:ff:26:29:42:4b:59:4c:48:00:3e:bf:4d:84:18:63:24:
ed:0d:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:50 2024 by rpki-client on console-ams.rpki-client.org