Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/AqI2gr8caBGWVqvU9ahE9m73GQ4.roa
File: AqI2gr8caBGWVqvU9ahE9m73GQ4.roa (raw, json)
Hash identifier: 3FofWGhmVnr15ui//WICqM0NIFJ6hFOMjGN066gxqQQ=
Subject key identifier: 02:A2:36:82:BF:1C:68:11:96:56:AB:D4:F5:A8:44:F6:6E:F7:19:0E
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186DAEEF3F4E6104B48B36280E030D30A8E
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/AqI2gr8caBGWVqvU9ahE9m73GQ4.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 91.73.80.0/20 maxlen: 20
94.201.94.0/24 maxlen: 24
91.73.96.0/20 maxlen: 20
91.73.112.0/20 maxlen: 20
91.73.252.0/22 maxlen: 22
94.201.251.0/24 maxlen: 24
91.74.10.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
94.200.163.0/24 maxlen: 24
5.32.64.0/19 maxlen: 19
5.32.72.0/24 maxlen: 24
91.72.188.0/22 maxlen: 22
94.200.192.0/19 maxlen: 19
91.72.204.0/24 maxlen: 24
5.32.94.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
94.200.208.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
5.32.23.0/24 maxlen: 24
94.200.131.0/24 maxlen: 24
5.32.27.0/24 maxlen: 24
5.32.32.0/19 maxlen: 19
5.32.36.0/24 maxlen: 24
94.200.145.0/24 maxlen: 24
94.200.148.0/24 maxlen: 24
94.200.156.0/24 maxlen: 24
87.201.14.0/24 maxlen: 24
91.73.16.0/20 maxlen: 20
91.73.32.0/20 maxlen: 20
87.201.40.0/24 maxlen: 24
94.207.239.0/24 maxlen: 24
87.201.46.0/24 maxlen: 24
91.73.48.0/20 maxlen: 20
91.73.64.0/20 maxlen: 20
80.227.200.0/22 maxlen: 22
5.32.111.0/24 maxlen: 24
94.200.227.0/24 maxlen: 24
94.200.231.0/24 maxlen: 24
91.72.229.0/24 maxlen: 24
94.200.240.0/24 maxlen: 24
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.206.148.0/22 maxlen: 22
94.206.152.0/23 maxlen: 23
94.206.164.0/24 maxlen: 24
5.31.128.0/20 maxlen: 20
5.31.128.0/19 maxlen: 19
94.206.183.0/24 maxlen: 24
94.206.181.0/24 maxlen: 24
94.206.182.0/24 maxlen: 24
5.31.144.0/20 maxlen: 20
94.206.84.0/24 maxlen: 24
94.206.92.0/24 maxlen: 24
94.206.97.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.106.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.208.0/20 maxlen: 20
5.31.224.0/20 maxlen: 20
5.31.224.0/19 maxlen: 19
5.31.240.0/20 maxlen: 20
87.200.0.0/15 maxlen: 19
94.200.17.0/24 maxlen: 24
5.31.160.0/19 maxlen: 19
5.31.160.0/20 maxlen: 20
80.227.0.0/16 maxlen: 19
94.200.29.0/24 maxlen: 24
5.31.176.0/20 maxlen: 20
91.72.0.0/14 maxlen: 19
94.200.25.0/24 maxlen: 24
5.31.192.0/20 maxlen: 20
5.31.192.0/19 maxlen: 19
94.200.47.0/24 maxlen: 24
94.200.51.0/24 maxlen: 24
5.30.160.0/19 maxlen: 19
94.205.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
94.206.31.0/24 maxlen: 24
94.206.40.0/22 maxlen: 22
5.31.0.0/19 maxlen: 19
94.206.51.0/24 maxlen: 24
213.132.32.0/19 maxlen: 19
94.206.61.0/24 maxlen: 24
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
94.205.240.0/24 maxlen: 24
94.205.254.0/24 maxlen: 24
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
94.205.8.0/22 maxlen: 22
5.30.32.0/19 maxlen: 19
5.30.64.0/19 maxlen: 19
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
5.30.0.0/15 maxlen: 15
94.203.200.0/22 maxlen: 22
94.203.204.0/22 maxlen: 22
94.203.228.0/22 maxlen: 22
94.203.44.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
91.75.85.0/24 maxlen: 24
91.75.84.0/24 maxlen: 24
91.75.86.0/24 maxlen: 24
94.203.90.0/23 maxlen: 23
91.75.87.0/24 maxlen: 24
91.75.16.0/24 maxlen: 24
91.75.18.0/24 maxlen: 24
91.75.24.0/24 maxlen: 24
94.203.156.0/22 maxlen: 22
91.75.177.0/24 maxlen: 24
94.203.199.0/24 maxlen: 24
94.203.92.0/22 maxlen: 22
91.75.130.0/23 maxlen: 23
94.202.82.0/23 maxlen: 23
94.202.103.0/24 maxlen: 24
94.202.54.0/23 maxlen: 23
91.74.56.0/24 maxlen: 24
91.74.70.0/24 maxlen: 24
91.74.68.0/23 maxlen: 23
91.74.78.0/23 maxlen: 23
94.202.192.0/22 maxlen: 22
2a00:f2b::/32 maxlen: 32
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f3:f4:e6:10:4b:48:b3:62:80:e0:30:d3:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02a23682bf1c68119656abd4f5a844f66ef7190e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:70:2a:07:4c:e3:25:68:63:c1:dc:08:3e:
a1:58:30:2a:66:90:dc:dd:89:24:d8:08:1a:f9:16:
05:87:58:25:91:5e:cf:2a:0d:a8:2f:b0:3b:04:b2:
89:61:9c:23:af:fe:02:8f:27:db:73:63:7e:ce:c3:
00:f6:7b:6d:b0:38:5a:fc:ca:4e:c7:c5:a5:2a:2d:
93:5a:3d:34:13:94:a3:ae:88:5b:a6:cb:76:c5:eb:
b1:7c:7f:1c:9f:0e:af:b5:74:07:54:f1:4d:70:95:
79:66:76:f7:b7:bd:ff:48:89:66:8c:c0:fc:0a:61:
cc:6c:ee:d3:46:39:f8:8d:81:9a:cb:41:e6:3b:d3:
e4:f4:84:0f:d3:5c:06:d4:b3:d5:83:f5:9f:17:72:
f3:b0:0d:bd:a4:e3:c5:1a:a7:92:7d:ab:48:cd:d0:
c8:a2:ad:98:e2:ac:77:d2:a8:bc:71:08:41:86:8a:
4d:36:09:79:74:54:26:32:8d:2f:da:0f:97:de:4b:
b6:c2:29:0d:de:51:af:93:9c:15:cc:e8:5a:99:f1:
34:3a:00:1e:6d:6e:52:ab:50:08:0f:cc:b1:68:93:
f7:83:0b:69:13:72:1c:29:77:45:31:72:e3:15:b0:
f7:84:68:a7:75:7d:2b:00:fc:3c:de:c5:24:f4:50:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:36:82:BF:1C:68:11:96:56:AB:D4:F5:A8:44:F6:6E:F7:19:0E
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/AqI2gr8caBGWVqvU9ahE9m73GQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
70:e9:ff:8f:d8:ba:f2:9c:63:67:1e:67:07:ba:63:13:27:95:
a4:cd:4b:b6:5e:85:a7:83:9c:c8:3b:4d:67:6e:a4:f8:c0:40:
e5:7a:ea:29:db:d7:f1:fe:64:21:fb:82:e9:88:84:77:b3:e1:
70:d2:93:a6:d0:d9:5b:b8:3f:8d:5d:62:58:1a:3d:c4:17:12:
9c:a6:aa:1a:46:09:59:68:a8:df:39:9a:1b:66:04:4c:93:f5:
0a:b1:7c:8e:15:a1:98:13:78:09:57:dc:9b:eb:20:96:da:2d:
a9:11:8c:d5:82:5f:8f:65:5b:3d:0c:e9:e9:d2:f7:82:2c:a4:
c0:db:52:e8:52:25:7c:42:58:0b:ae:59:92:a5:d2:a9:82:90:
b4:4e:67:ad:43:a3:1d:b1:17:cf:52:d3:7c:30:6d:8a:a7:21:
1f:60:58:f2:1e:16:56:41:92:12:97:84:e1:22:63:ea:72:a2:
c1:87:0d:45:2d:48:d4:fd:7d:30:3b:f8:ed:30:d6:f3:6a:ff:
d4:9f:5a:f2:69:56:a0:6c:97:66:38:08:d1:34:a7:1d:4b:9b:
ee:0c:0e:df:76:12:49:cf:9a:8f:1d:5e:7d:f9:8c:78:14:3d:
3e:b3:6d:e4:3e:13:50:46:b3:76:52:07:a7:ee:b6:3a:a8:67:
a5:7e:a8:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYba7vP05hBLSLNigOAw0wqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjMwMzEzMTIyNTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmEyMzY4MmJmMWM2ODExOTY1NmFiZDRmNWE4NDRmNjZlZjcxOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRZwKgdM4yVoY8HcCD6hWDAqZpDc
3Ykk2Aga+RYFh1glkV7PKg2oL7A7BLKJYZwjr/4Cjyfbc2N+zsMA9nttsDha/MpO
x8WlKi2TWj00E5Sjrohbpst2xeuxfH8cnw6vtXQHVPFNcJV5Znb3t73/SIlmjMD8
CmHMbO7TRjn4jYGay0HmO9Pk9IQP01wG1LPVg/WfF3LzsA29pOPFGqeSfatIzdDI
oq2Y4qx30qi8cQhBhopNNgl5dFQmMo0v2g+X3ku2wikN3lGvk5wVzOhamfE0OgAe
bW5Sq1AID8yxaJP3gwtpE3IcKXdFMXLjFbD3hGindX0rAPw83sUk9FAYnwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAKiNoK/HGgRllar1PWoRPZu9xkOMB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvQXFJMmdyOGNhQkdXVnF2VTlhaEU5bTczR1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAtBAIAATAnMAsDAwEFHgME
BwUgAAMDAFDjAwMBV8gDAwJbSAMDA17IAwQF1YQgMB0EAgACMBcDBQAqAA8pMA4D
BQAqAA8rAwUAKgAPLjANBgkqhkiG9w0BAQsFAAOCAQEAcOn/j9i68pxjZx5nB7pj
EyeVpM1Ltl6Fp4OcyDtNZ26k+MBA5XrqKdvX8f5kIfuC6YiEd7PhcNKTptDZW7g/
jV1iWBo9xBcSnKaqGkYJWWio3zmaG2YETJP1CrF8jhWhmBN4CVfcm+sgltotqRGM
1YJfj2VbPQzp6dL3giykwNtS6FIlfEJYC65ZkqXSqYKQtE5nrUOjHbEXz1LTfDBt
iqchH2BY8h4WVkGSEpeE4SJj6nKiwYcNRS1I1P19MDv47TDW82r/1J9a8mlWoGyX
ZjgI0TSnHUub7gwO33YSSc+ajx1effmMeBQ9PrNt5D4TUEazdlIHp+62OqhnpX6o
Ug==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org