Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/zzCsVu1SgE6AU6DI3gakXGfFkP0.roa
File: zzCsVu1SgE6AU6DI3gakXGfFkP0.roa (raw, json)
Hash identifier: GMZV7B9XV/hN/8az90ohRetVHmYL1wlsEjHX+xNX70k=
Subject key identifier: CF:30:AC:56:ED:52:80:4E:80:53:A0:C8:DE:06:A4:5C:67:C5:90:FD
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 0186C14921D6816181FA358E5520068C2FAC
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/zzCsVu1SgE6AU6DI3gakXGfFkP0.roa
Signing time: Wed 08 Mar 2023 12:54:00 +0000
ROA not before: Wed 08 Mar 2023 12:54:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 91.73.80.0/20 maxlen: 20
91.73.96.0/20 maxlen: 20
91.73.112.0/20 maxlen: 20
91.73.252.0/22 maxlen: 22
94.201.251.0/24 maxlen: 24
91.74.10.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
94.201.196.0/22 maxlen: 22
91.73.216.0/23 maxlen: 23
5.32.64.0/19 maxlen: 19
5.32.72.0/24 maxlen: 24
91.72.188.0/22 maxlen: 22
91.72.204.0/24 maxlen: 24
5.32.94.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
5.32.0.0/17 maxlen: 19
5.32.23.0/24 maxlen: 24
5.32.27.0/24 maxlen: 24
5.32.32.0/19 maxlen: 19
5.32.36.0/24 maxlen: 24
94.200.156.0/24 maxlen: 24
87.201.14.0/24 maxlen: 24
91.73.16.0/20 maxlen: 20
91.73.32.0/20 maxlen: 20
87.201.40.0/24 maxlen: 24
94.207.239.0/24 maxlen: 24
87.201.46.0/24 maxlen: 24
91.73.48.0/20 maxlen: 20
91.73.64.0/20 maxlen: 20
80.227.200.0/22 maxlen: 22
5.32.111.0/24 maxlen: 24
91.72.229.0/24 maxlen: 24
94.200.248.0/22 maxlen: 22
91.73.0.0/20 maxlen: 20
5.31.96.0/19 maxlen: 19
94.206.148.0/22 maxlen: 22
94.206.152.0/23 maxlen: 23
94.206.164.0/24 maxlen: 24
5.31.128.0/20 maxlen: 20
5.31.128.0/19 maxlen: 19
94.206.183.0/24 maxlen: 24
94.206.181.0/24 maxlen: 24
94.206.182.0/24 maxlen: 24
5.31.144.0/20 maxlen: 20
94.206.84.0/24 maxlen: 24
94.206.92.0/24 maxlen: 24
94.206.97.0/24 maxlen: 24
5.31.64.0/19 maxlen: 19
94.206.106.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
5.31.208.0/20 maxlen: 20
5.31.224.0/20 maxlen: 20
5.31.224.0/19 maxlen: 19
5.31.240.0/20 maxlen: 20
87.200.0.0/15 maxlen: 19
5.31.160.0/19 maxlen: 19
5.31.160.0/20 maxlen: 20
80.227.0.0/16 maxlen: 19
5.31.176.0/20 maxlen: 20
91.72.0.0/14 maxlen: 19
5.31.192.0/20 maxlen: 20
5.31.192.0/19 maxlen: 19
5.30.160.0/19 maxlen: 19
94.205.204.0/22 maxlen: 22
5.30.96.0/19 maxlen: 19
5.30.128.0/19 maxlen: 19
94.206.31.0/24 maxlen: 24
94.206.40.0/22 maxlen: 22
5.31.0.0/19 maxlen: 19
94.206.51.0/24 maxlen: 24
213.132.32.0/19 maxlen: 19
94.206.61.0/24 maxlen: 24
5.31.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
5.30.192.0/19 maxlen: 19
94.205.240.0/24 maxlen: 24
94.205.254.0/24 maxlen: 24
5.30.224.0/19 maxlen: 19
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
94.205.8.0/22 maxlen: 22
5.30.32.0/19 maxlen: 19
5.30.64.0/19 maxlen: 19
5.30.0.0/19 maxlen: 19
5.30.8.0/22 maxlen: 22
5.30.0.0/15 maxlen: 15
94.203.200.0/22 maxlen: 22
94.203.204.0/22 maxlen: 22
94.203.228.0/22 maxlen: 22
94.203.44.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
94.203.156.0/22 maxlen: 22
94.203.199.0/24 maxlen: 24
91.74.56.0/24 maxlen: 24
91.74.78.0/23 maxlen: 23
2a00:f2b::/32 maxlen: 32
2a00:f2e::/32 maxlen: 32
2a00:f2c::/32 maxlen: 32
2a00:f2d::/32 maxlen: 32
2a00:f29::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:49:21:d6:81:61:81:fa:35:8e:55:20:06:8c:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 8 12:54:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf30ac56ed52804e8053a0c8de06a45c67c590fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:7d:2d:cc:90:01:57:13:83:eb:1d:4d:1d:
1e:05:e7:d4:28:17:29:7f:18:0b:47:cb:a7:d2:1f:
23:0d:fa:47:50:63:48:60:cd:5e:b6:d1:66:4e:76:
35:7a:25:d1:8e:c4:30:59:a1:8c:33:38:c2:5f:4d:
2e:d7:78:35:a1:de:48:1f:50:fc:e5:e1:65:3a:d3:
8d:7f:97:10:ed:af:25:e9:e9:df:93:ad:3f:d7:63:
14:cb:f9:79:de:97:02:83:db:32:85:66:71:41:d1:
ad:c1:a5:a0:ba:77:c0:f6:f7:20:4b:06:24:a1:47:
2e:78:f4:e3:ad:21:26:4a:5d:03:5e:c8:58:6e:1d:
05:0b:cb:37:14:67:d3:00:34:a4:34:46:b0:dd:65:
43:24:09:7a:3f:22:2d:8d:fe:7b:21:a2:21:7e:d1:
92:47:54:e2:3d:15:56:87:25:25:d8:a3:4b:a0:ea:
14:6e:94:2d:3b:74:d0:6e:2a:e5:e7:0c:4f:a5:a0:
d7:b7:3b:ee:8c:3a:ae:c9:4a:1b:7f:69:95:fd:c7:
44:9f:f6:34:a5:0c:c1:44:0a:b3:64:8e:7b:ca:ab:
76:05:6c:c7:17:32:ff:95:fa:c4:47:49:d8:42:9f:
3c:40:60:f6:68:26:75:4e:5b:78:48:f8:ff:d0:a4:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:AC:56:ED:52:80:4E:80:53:A0:C8:DE:06:A4:5C:67:C5:90:FD
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/zzCsVu1SgE6AU6DI3gakXGfFkP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.30.0.0-5.32.127.255
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
IPv6:
2a00:f29::/32
2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:1e:ba:5e:bd:ce:dd:dd:20:43:32:62:c2:bd:0e:a1:ef:c4:
14:3f:2e:de:5a:6d:16:77:62:cb:dd:d2:79:cf:11:8b:d3:45:
54:44:d7:b6:37:37:09:b8:25:72:54:28:1f:03:00:4e:56:70:
7e:db:6d:dc:03:41:b4:b9:56:e2:7c:6b:63:6c:8b:cc:02:a9:
fc:e3:5f:2c:e8:28:94:3d:89:64:d2:bc:68:6f:f7:c1:a4:19:
2e:9b:dc:74:4a:43:9d:5e:68:34:2f:c8:08:1f:b2:6b:6b:80:
d0:a9:e0:7c:e5:66:b7:bc:be:82:e3:22:9b:f6:92:e8:d0:4d:
07:e2:22:9a:3e:8c:33:1e:04:48:e5:a6:e7:b1:c8:ab:e1:38:
f0:46:53:ca:e2:fb:48:01:c8:bd:41:7e:c1:16:65:e2:fb:38:
08:3c:a8:91:15:a3:f5:a2:54:b2:10:b9:7b:fc:6e:21:55:87:
ad:cb:41:c6:ea:06:a4:2e:41:5a:61:ce:99:91:70:12:90:e5:
73:66:7c:71:78:28:89:c0:cd:22:b4:b0:32:07:a2:0d:e1:5f:
98:f5:21:c3:6b:37:a6:a2:cd:5e:0f:7b:5b:7e:b5:6a:3e:91:
b6:11:53:6c:8d:83:36:2c:60:d9:3e:70:01:5e:2b:d5:17:28:
6b:34:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org