Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/jgZekKGmLyqUrI0NBrounJLir4s.roa
File: jgZekKGmLyqUrI0NBrounJLir4s.roa (raw, json)
Hash identifier: bUXKOsSEx3rhH8pqdL/bjQ+vqtSY/nuDF/3nWBSsuTY=
Subject key identifier: 8E:06:5E:90:A1:A6:2F:2A:94:AC:8D:0D:06:BA:2E:9C:92:E2:AF:8B
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186C618B556C6C180DC66633BAECCC70948
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/jgZekKGmLyqUrI0NBrounJLir4s.roa
Signing time: Thu 09 Mar 2023 11:19:13 +0000
ROA not before: Thu 09 Mar 2023 11:19:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 91.73.80.0/20 maxlen: 20
91.73.96.0/20 maxlen: 20
91.73.112.0/20 maxlen: 20
91.73.252.0/22 maxlen: 22
94.201.251.0/24 maxlen: 24
91.74.10.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
94.200.163.0/24 maxlen: 24
5.32.64.0/19 maxlen: 19
5.32.72.0/24 maxlen: 24
91.72.188.0/22 maxlen: 22
94.200.192.0/19 maxlen: 19
91.72.204.0/24 maxlen: 24
5.32.94.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
5.32.23.0/24 maxlen: 24
94.200.131.0/24 maxlen: 24
5.32.27.0/24 maxlen: 24
5.32.32.0/19 maxlen: 19
5.32.36.0/24 maxlen: 24
94.200.145.0/24 maxlen: 24
94.200.156.0/24 maxlen: 24
87.201.14.0/24 maxlen: 24
91.73.16.0/20 maxlen: 20
91.73.32.0/20 maxlen: 20
87.201.40.0/24 maxlen: 24
94.207.239.0/24 maxlen: 24
87.201.46.0/24 maxlen: 24
91.73.48.0/20 maxlen: 20
91.73.64.0/20 maxlen: 20
80.227.200.0/22 maxlen: 22
5.32.111.0/24 maxlen: 24
91.72.229.0/24 maxlen: 24
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.206.148.0/22 maxlen: 22
94.206.152.0/23 maxlen: 23
94.206.164.0/24 maxlen: 24
5.31.128.0/20 maxlen: 20
5.31.128.0/19 maxlen: 19
94.206.183.0/24 maxlen: 24
94.206.181.0/24 maxlen: 24
94.206.182.0/24 maxlen: 24
5.31.144.0/20 maxlen: 20
94.206.84.0/24 maxlen: 24
94.206.92.0/24 maxlen: 24
94.206.97.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.106.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.208.0/20 maxlen: 20
5.31.224.0/20 maxlen: 20
5.31.224.0/19 maxlen: 19
5.31.240.0/20 maxlen: 20
87.200.0.0/15 maxlen: 19
5.31.160.0/19 maxlen: 19
5.31.160.0/20 maxlen: 20
80.227.0.0/16 maxlen: 19
5.31.176.0/20 maxlen: 20
91.72.0.0/14 maxlen: 19
5.31.192.0/20 maxlen: 20
5.31.192.0/19 maxlen: 19
94.200.47.0/24 maxlen: 24
94.200.51.0/24 maxlen: 24
5.30.160.0/19 maxlen: 19
94.205.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
94.206.31.0/24 maxlen: 24
94.206.40.0/22 maxlen: 22
5.31.0.0/19 maxlen: 19
94.206.51.0/24 maxlen: 24
213.132.32.0/19 maxlen: 19
94.206.61.0/24 maxlen: 24
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
94.205.240.0/24 maxlen: 24
94.205.254.0/24 maxlen: 24
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
94.205.8.0/22 maxlen: 22
5.30.32.0/19 maxlen: 19
5.30.64.0/19 maxlen: 19
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
5.30.0.0/15 maxlen: 15
94.203.200.0/22 maxlen: 22
94.203.204.0/22 maxlen: 22
94.203.228.0/22 maxlen: 22
94.203.44.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
91.75.85.0/24 maxlen: 24
91.75.86.0/24 maxlen: 24
91.75.16.0/24 maxlen: 24
94.203.156.0/22 maxlen: 22
94.203.199.0/24 maxlen: 24
91.74.56.0/24 maxlen: 24
91.74.78.0/23 maxlen: 23
94.202.192.0/22 maxlen: 22
2a00:f2b::/32 maxlen: 32
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:18:b5:56:c6:c1:80:dc:66:63:3b:ae:cc:c7:09:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 9 11:19:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e065e90a1a62f2a94ac8d0d06ba2e9c92e2af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:87:48:3a:96:21:05:4a:ab:2e:ba:cc:ed:
50:d8:dd:6b:15:30:df:11:29:24:01:4a:c7:bf:2c:
de:27:8a:96:47:fb:79:16:ea:46:a6:32:9d:b7:f7:
fc:70:e9:cc:8a:25:ac:4e:a8:42:1e:42:05:de:2a:
0e:60:74:64:67:14:8e:3f:78:b7:c9:84:5a:95:61:
46:90:85:a7:47:3b:bf:a1:34:a2:fb:34:98:94:2d:
10:cf:f2:16:86:63:1a:3e:88:eb:3c:a3:48:d8:ba:
14:57:e6:f3:47:d8:d6:0a:25:e2:db:f7:b0:21:26:
fc:e3:54:c4:27:00:49:10:4e:59:e6:b4:3e:c4:3c:
e9:c1:db:46:34:ba:d4:98:52:0b:84:94:37:59:d7:
ed:86:f8:80:c6:11:46:24:46:d6:64:ba:15:1f:20:
9e:da:9c:81:5f:54:15:a1:a7:d9:a7:63:f0:1e:1b:
a9:6b:76:8d:56:34:e7:de:dc:16:cb:34:ed:65:68:
d8:80:9d:ff:58:d2:36:54:9b:ac:2e:30:c7:d0:89:
0a:9d:d6:df:12:a2:54:08:6a:a0:ff:9b:cf:6a:62:
50:66:71:90:68:95:00:ef:3e:bf:dd:99:86:dc:e7:
98:7f:11:92:15:7a:04:66:0f:97:a4:14:a7:01:44:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:5E:90:A1:A6:2F:2A:94:AC:8D:0D:06:BA:2E:9C:92:E2:AF:8B
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/jgZekKGmLyqUrI0NBrounJLir4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:37:91:1e:e2:14:78:c8:c3:d6:5c:25:dd:72:47:18:f0:d0:
c8:33:2d:85:a2:89:e0:4c:c0:03:24:cb:c4:44:3b:da:29:aa:
0a:a9:a3:6b:05:e9:57:c8:02:26:d9:df:79:f9:c3:4d:47:82:
7b:81:f1:e4:23:d9:75:e0:57:60:e7:ea:26:b1:30:ba:21:ba:
71:f1:69:9b:83:ef:57:ce:f1:9c:a0:85:d8:00:a0:49:c3:64:
e3:41:f7:3f:08:64:0c:76:eb:f0:65:7d:f7:f9:17:d7:c5:9f:
35:c3:08:3c:fa:b6:fb:ae:bb:ad:ca:52:b1:eb:75:f5:2d:bf:
83:b6:29:2e:70:6c:6b:eb:6d:46:dd:4c:d5:da:7d:0c:c7:f7:
40:b8:13:3f:c3:a9:24:4a:02:8b:3c:23:ec:76:68:4b:94:3b:
ab:19:57:f0:b7:ec:05:37:55:0c:8f:9e:b6:4b:7e:72:81:83:
2a:c1:66:66:b7:44:0d:ea:0c:df:b3:91:3e:71:3f:e5:d5:52:
3f:32:80:15:ed:aa:d6:ec:33:12:08:6e:b9:ba:47:b5:ce:2d:
10:e0:73:27:24:71:c1:fe:fa:91:6a:8c:6d:77:53:a1:ae:6a:
53:83:58:6b:a9:16:e1:50:8b:04:3c:2a:49:26:40:14:77:8b:
9b:30:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org