Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/rDXyJ7pm6fIsmnVUvrATsBhWVuw.roa
File: rDXyJ7pm6fIsmnVUvrATsBhWVuw.roa (raw, json)
Hash identifier: lY18S9RBEwhbYhW1aBKd5RG4/18MyAzhOyq5p6wTRCk=
Subject key identifier: AC:35:F2:27:BA:66:E9:F2:2C:9A:75:54:BE:B0:13:B0:18:56:56:EC
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186C151D636F2654985018278DE55AEE3B9
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/rDXyJ7pm6fIsmnVUvrATsBhWVuw.roa
Signing time: Wed 08 Mar 2023 13:03:31 +0000
ROA not before: Wed 08 Mar 2023 13:03:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 91.73.80.0/20 maxlen: 20
91.73.96.0/20 maxlen: 20
91.73.112.0/20 maxlen: 20
91.73.252.0/22 maxlen: 22
94.201.251.0/24 maxlen: 24
91.74.10.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
5.32.64.0/19 maxlen: 19
5.32.72.0/24 maxlen: 24
91.72.188.0/22 maxlen: 22
91.72.204.0/24 maxlen: 24
5.32.94.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
5.32.23.0/24 maxlen: 24
5.32.27.0/24 maxlen: 24
5.32.32.0/19 maxlen: 19
5.32.36.0/24 maxlen: 24
94.200.156.0/24 maxlen: 24
87.201.14.0/24 maxlen: 24
91.73.16.0/20 maxlen: 20
91.73.32.0/20 maxlen: 20
87.201.40.0/24 maxlen: 24
94.207.239.0/24 maxlen: 24
87.201.46.0/24 maxlen: 24
91.73.48.0/20 maxlen: 20
91.73.64.0/20 maxlen: 20
80.227.200.0/22 maxlen: 22
5.32.111.0/24 maxlen: 24
91.72.229.0/24 maxlen: 24
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.206.148.0/22 maxlen: 22
94.206.152.0/23 maxlen: 23
94.206.164.0/24 maxlen: 24
5.31.128.0/20 maxlen: 20
5.31.128.0/19 maxlen: 19
94.206.183.0/24 maxlen: 24
94.206.181.0/24 maxlen: 24
94.206.182.0/24 maxlen: 24
5.31.144.0/20 maxlen: 20
94.206.84.0/24 maxlen: 24
94.206.92.0/24 maxlen: 24
94.206.97.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.106.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.208.0/20 maxlen: 20
5.31.224.0/20 maxlen: 20
5.31.224.0/19 maxlen: 19
5.31.240.0/20 maxlen: 20
87.200.0.0/15 maxlen: 19
5.31.160.0/19 maxlen: 19
5.31.160.0/20 maxlen: 20
80.227.0.0/16 maxlen: 19
5.31.176.0/20 maxlen: 20
91.72.0.0/14 maxlen: 19
5.31.192.0/20 maxlen: 20
5.31.192.0/19 maxlen: 19
5.30.160.0/19 maxlen: 19
94.205.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
94.206.31.0/24 maxlen: 24
94.206.40.0/22 maxlen: 22
5.31.0.0/19 maxlen: 19
94.206.51.0/24 maxlen: 24
213.132.32.0/19 maxlen: 19
94.206.61.0/24 maxlen: 24
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
94.205.240.0/24 maxlen: 24
94.205.254.0/24 maxlen: 24
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
94.205.8.0/22 maxlen: 22
5.30.32.0/19 maxlen: 19
5.30.64.0/19 maxlen: 19
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
5.30.0.0/15 maxlen: 15
94.203.200.0/22 maxlen: 22
94.203.204.0/22 maxlen: 22
94.203.228.0/22 maxlen: 22
94.203.44.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
91.75.16.0/24 maxlen: 24
94.203.156.0/22 maxlen: 22
94.203.199.0/24 maxlen: 24
91.74.56.0/24 maxlen: 24
91.74.78.0/23 maxlen: 23
94.202.192.0/22 maxlen: 22
2a00:f2b::/32 maxlen: 32
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:51:d6:36:f2:65:49:85:01:82:78:de:55:ae:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 8 13:03:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac35f227ba66e9f22c9a7554beb013b0185656ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:8e:bb:28:89:df:97:52:3a:9c:7c:8b:9d:
f0:65:b6:40:4c:8f:88:72:f0:57:a2:71:b7:33:89:
cd:99:f4:c8:87:61:85:81:97:d7:22:c4:9f:1c:90:
78:0f:e6:8c:79:3f:fa:75:1a:b7:64:1e:91:57:3d:
9f:02:41:ad:23:b9:7f:9c:75:5d:84:2a:fa:17:b2:
80:c1:e4:be:0b:82:cc:61:c4:14:5e:70:8c:da:3a:
8c:97:44:ca:41:c0:68:97:e6:07:12:15:2e:19:6c:
09:b2:69:c7:24:dd:06:b4:84:35:24:f0:99:15:87:
6d:9d:24:c0:48:b7:df:89:f9:08:b5:14:16:47:ff:
62:15:cf:78:a5:12:af:01:6c:e8:d1:f0:a9:08:02:
45:e9:d1:55:fa:99:fc:6b:3f:24:4d:e1:6b:ce:16:
ee:3c:ab:b6:7c:c3:e8:78:86:e5:96:fb:f0:c0:26:
66:53:59:d5:1f:cf:df:9a:35:a2:0e:c1:dd:7d:2c:
e4:1c:47:e3:68:2e:d4:14:d2:e9:18:14:a5:a4:fc:
36:c9:ce:41:88:7f:2b:ff:ab:da:64:b3:a6:ad:10:
1b:f9:f7:78:e3:87:14:e2:45:3c:fd:35:bd:d6:92:
34:d9:38:0a:fe:af:e7:a4:fd:1b:51:6d:f0:19:e3:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:F2:27:BA:66:E9:F2:2C:9A:75:54:BE:B0:13:B0:18:56:56:EC
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/rDXyJ7pm6fIsmnVUvrATsBhWVuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:d0:8d:d8:49:3f:3d:67:0f:23:fe:ec:1b:ec:2f:b1:05:53:
f9:23:6e:63:57:f2:63:8a:52:94:f7:e3:87:aa:34:eb:ee:40:
ac:a8:d4:96:26:28:ef:99:ff:d6:c1:6f:49:59:3b:b3:03:23:
83:a4:58:40:69:d7:63:df:91:e6:86:fb:c4:c2:40:88:fe:c3:
fd:9d:b8:c7:b3:00:e5:f5:cc:4c:d3:31:ae:96:48:74:9b:18:
fd:73:66:c2:83:26:ad:90:cb:18:00:70:95:55:bc:97:23:77:
1e:85:91:71:e3:74:cd:7a:c2:2b:82:23:5a:c7:e9:29:30:50:
49:73:86:b5:28:e8:3b:f9:4b:8a:70:f0:f7:3e:6c:3b:d9:35:
a6:5d:3b:86:11:45:5d:3f:a9:5e:34:4e:84:2b:b5:8a:84:d7:
e5:fa:04:ea:fa:de:a2:8a:3a:a7:77:ba:c2:b9:d3:b6:cd:2c:
b4:4a:b5:a4:be:3f:08:86:de:84:81:37:44:41:7d:97:58:a8:
3b:e1:39:3c:5b:71:81:c7:d1:a8:88:67:12:97:eb:15:76:b9:
46:15:c0:ca:59:e2:1f:a2:e2:b4:b6:fa:30:6f:21:16:44:90:
fd:da:0e:1d:c1:56:0e:53:5b:69:fd:a4:7c:31:fe:69:95:e9:
04:a9:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org