Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/RxZlT9ulw7Q4O8RgRiGZdLLO2jY.roa
File: RxZlT9ulw7Q4O8RgRiGZdLLO2jY.roa (raw, json)
Hash identifier: o6GypCYVGUGi59dBXUmnuhgMT6Pmf59+gS7Ms0BD8wI=
Subject key identifier: 47:16:65:4F:DB:A5:C3:B4:38:3B:C4:60:46:21:99:74:B2:CE:DA:36
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01867DBB12EDE9C252935AC5DA485BBDE003
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/RxZlT9ulw7Q4O8RgRiGZdLLO2jY.roa
Signing time: Thu 23 Feb 2023 10:04:17 +0000
ROA not before: Thu 23 Feb 2023 10:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 5.31.96.0/19 maxlen: 19
94.203.44.0/23 maxlen: 23
94.206.152.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
94.206.181.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.30.32.0/19 maxlen: 19
94.201.251.0/24 maxlen: 24
5.30.64.0/19 maxlen: 19
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
87.200.0.0/15 maxlen: 19
80.227.0.0/16 maxlen: 19
94.201.196.0/22 maxlen: 22
5.30.0.0/19 maxlen: 19
91.72.0.0/14 maxlen: 19
5.30.8.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
5.32.64.0/19 maxlen: 19
5.30.160.0/19 maxlen: 19
91.72.204.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 17
94.203.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.32.32.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
91.74.78.0/23 maxlen: 23
213.132.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
80.227.200.0/22 maxlen: 22
5.30.192.0/19 maxlen: 19
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
2a00:f2e::/32 maxlen: 32
2a00:f2b::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:bb:12:ed:e9:c2:52:93:5a:c5:da:48:5b:bd:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Feb 23 10:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4716654fdba5c3b4383bc46046219974b2ceda36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:45:c8:91:ff:a4:2c:c7:2f:a1:61:9b:95:d5:
44:0f:54:ee:07:00:91:51:8b:c9:18:1c:f6:69:7d:
08:97:ba:4d:f4:35:7b:b1:bd:98:9f:6a:2c:21:39:
37:42:1b:5b:d5:3e:75:b6:06:10:05:f9:98:2e:4f:
7b:98:ec:4b:29:9c:72:02:a9:52:10:e8:39:7f:7f:
ab:e8:db:48:8b:3a:56:52:7e:57:28:39:9e:fd:c5:
22:0b:25:4d:f7:bb:78:f7:2c:c7:48:40:9e:0a:ef:
61:c5:a8:71:3f:81:de:83:97:90:5a:ed:c1:ce:3f:
df:ad:47:ed:45:28:da:1f:47:af:44:75:9a:37:50:
48:77:21:a8:4d:e1:fb:b4:46:1b:4b:df:55:7e:51:
c3:69:60:b2:66:7a:c3:10:30:c1:0f:93:6b:03:ac:
ba:bd:ed:ec:6c:56:e4:10:c1:5f:45:d0:c1:1c:fc:
ad:54:65:ac:a9:2b:99:51:88:a8:7e:ce:98:a4:04:
e8:c6:15:29:b0:26:07:1f:4a:a2:a0:17:a2:ba:e9:
47:2d:33:01:32:18:f5:86:d8:b7:9d:57:48:a6:03:
d5:43:fe:a4:de:11:44:f8:36:e7:57:29:68:fc:8a:
54:70:e3:c7:59:c9:62:ed:52:ac:80:9e:c4:40:07:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:65:4F:DB:A5:C3:B4:38:3B:C4:60:46:21:99:74:B2:CE:DA:36
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/RxZlT9ulw7Q4O8RgRiGZdLLO2jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.30.223.255
5.31.64.0/18
5.32.0.0/17
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f2b::/32
2a00:f2e::/32
Signature Algorithm: sha256WithRSAEncryption
ad:a5:53:4c:fa:44:72:f2:8e:c4:f5:1a:79:fd:6a:b5:d4:e6:
41:81:fd:3a:d6:d8:c5:b8:76:a9:3c:ce:7e:cf:01:a3:e2:95:
08:a8:f5:ec:1e:00:dd:26:17:c0:a4:1d:60:b5:74:30:db:ea:
85:d8:3f:6b:3c:ea:27:e6:f9:06:a7:f1:5c:23:b1:95:4d:85:
91:5d:5b:f8:36:c8:ac:01:49:19:16:bf:be:9f:24:27:34:5a:
a3:71:da:bf:45:ee:0d:bc:18:29:75:35:d0:b2:a7:bc:c7:3a:
4e:eb:37:25:43:ff:fc:61:9c:25:bf:32:68:39:67:67:be:1e:
04:06:f0:69:d2:8b:fb:7f:18:05:98:9e:e7:7e:a0:23:05:a8:
0c:b4:8f:2e:a7:24:07:6a:d4:8d:ba:19:86:5d:b6:3c:b0:4d:
13:50:4d:e4:39:7c:15:f5:4d:a5:a0:bd:fd:d3:5c:05:e2:f0:
ac:72:bc:65:e3:43:2f:8e:d4:49:60:34:4f:f0:75:be:b3:02:
bd:ec:73:3d:b3:11:61:78:7e:e9:e2:8c:11:3f:46:c8:8f:3e:
f0:98:a2:59:5e:95:fc:81:5e:26:ba:5e:c6:04:2b:56:0d:26:
1f:a8:15:cd:4d:32:29:5e:3f:14:69:27:c6:3c:37:e2:77:79:
43:3c:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org