Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5TXV_KHBfM6fIdwovbJn-rEPLEU.roa
File: 5TXV_KHBfM6fIdwovbJn-rEPLEU.roa (raw, json)
Hash identifier: GtJbE49WIN+YHVaw/QSb5f3D4Wj93lHFUbR+BTfV/a0=
Subject key identifier: E5:35:D5:FC:A1:C1:7C:CE:9F:21:DC:28:BD:B2:67:FA:B1:0F:2C:45
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01856D0187B654A22A0AC543B1D97FE7C8BC
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5TXV_KHBfM6fIdwovbJn-rEPLEU.roa
Signing time: Sun 01 Jan 2023 11:04:54 +0000
ROA not before: Sun 01 Jan 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 92.63.96.0/21 maxlen: 21
92.63.104.0/22 maxlen: 22
92.63.108.0/24 maxlen: 24
92.63.108.0/22 maxlen: 22
92.63.110.0/23 maxlen: 23
92.63.109.0/24 maxlen: 24
62.181.44.0/24 maxlen: 24
149.154.64.0/23 maxlen: 23
62.181.53.0/24 maxlen: 24
149.154.66.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
62.181.54.0/23 maxlen: 23
91.228.224.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
86.110.194.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
188.120.240.0/21 maxlen: 21
86.110.215.0/24 maxlen: 24
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
188.120.252.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.249.0/24 maxlen: 24
188.120.253.0/24 maxlen: 24
92.63.192.0/23 maxlen: 23
188.120.254.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
79.143.72.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
83.136.235.0/24 maxlen: 24
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
62.109.0.0/21 maxlen: 21
62.109.0.0/20 maxlen: 20
62.109.8.0/21 maxlen: 21
78.24.216.0/21 maxlen: 21
62.109.16.0/21 maxlen: 21
82.146.32.0/23 maxlen: 23
82.146.32.0/21 maxlen: 21
82.146.34.0/23 maxlen: 23
62.109.24.0/22 maxlen: 22
82.146.36.0/23 maxlen: 23
82.146.38.0/23 maxlen: 23
62.109.28.0/22 maxlen: 22
82.146.40.0/21 maxlen: 21
82.146.48.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
82.146.50.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
82.146.56.0/21 maxlen: 21
82.146.54.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
82.146.52.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
212.57.124.0/23 maxlen: 23
212.57.122.0/24 maxlen: 24
212.57.126.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.8.0/23 maxlen: 23
31.135.11.0/24 maxlen: 24
31.135.14.0/23 maxlen: 23
31.135.12.0/23 maxlen: 23
212.57.116.0/24 maxlen: 24
212.57.115.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
2a01:230:2::/48 maxlen: 48
2a01:230:1::/48 maxlen: 48
2a01:230::/48 maxlen: 48
2a09:f900::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:87:b6:54:a2:2a:0a:c5:43:b1:d9:7f:e7:c8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 1 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e535d5fca1c17cce9f21dc28bdb267fab10f2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2c:53:09:09:f7:e1:3e:ca:ed:d9:05:b9:52:
f9:d1:5b:b0:fa:43:b5:cc:fd:32:d3:e5:61:67:e9:
a8:a8:0d:01:c0:66:a9:3c:8c:18:27:a0:71:38:fa:
68:7b:b6:2a:7e:c3:51:7d:c9:4b:bf:41:88:95:28:
44:43:d8:62:9f:1a:e0:e7:d0:68:e1:d1:c9:11:c6:
2f:9f:27:5a:15:d0:b5:30:08:c9:f6:16:64:b9:de:
3c:09:54:9d:4f:1b:51:9f:50:79:32:5d:07:bd:15:
17:98:64:65:b0:ea:ff:ad:38:39:37:aa:d2:a8:1e:
96:90:79:2c:94:60:b0:de:44:93:c4:38:41:e4:e9:
84:57:25:0c:c7:0d:0f:da:b6:78:24:86:d0:d2:f4:
8d:55:97:af:65:58:51:4a:e8:9f:b0:9c:8a:24:6a:
22:9b:5e:44:84:fc:68:c1:0c:ff:d0:6c:21:7b:35:
a6:83:2f:7b:77:98:86:b5:42:72:3d:c0:da:85:37:
33:33:27:3c:6a:78:f8:f6:4e:2b:a3:d1:75:03:fd:
e7:d2:b2:e7:fb:b7:5f:f2:af:ad:84:4c:47:65:c1:
dd:4a:87:77:61:0a:50:20:fd:1a:88:43:c3:69:30:
16:1b:e0:33:c7:72:91:4d:4c:1f:4f:46:ba:75:41:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:D5:FC:A1:C1:7C:CE:9F:21:DC:28:BD:B2:67:FA:B1:0F:2C:45
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5TXV_KHBfM6fIdwovbJn-rEPLEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.8.0/21
37.230.112.0/21
62.109.0.0/19
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
82.146.32.0/19
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
91.228.224.0/23
92.63.96.0/20
92.63.192.0/22
94.250.248.0/21
149.154.64.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0/19
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230::-2a01:230:4:ffff:ffff:ffff:ffff:ffff
2a09:f900::/48
Signature Algorithm: sha256WithRSAEncryption
2c:58:c2:31:f3:45:77:90:d3:69:7e:87:51:8a:2a:21:a2:c0:
18:b9:1d:f4:97:08:fd:1e:b0:05:f6:eb:39:aa:aa:93:5b:d3:
2f:f7:91:52:4a:7e:6f:17:98:1c:29:a4:14:02:df:69:71:28:
c0:70:21:72:49:94:bf:93:cd:cf:cb:95:d6:b8:30:71:a6:9c:
62:34:0f:31:df:d8:4b:8e:5b:24:74:a9:53:d6:d9:09:fd:77:
ae:f5:fc:78:e4:96:06:fc:fe:6d:0f:78:c9:b4:45:ca:c3:7b:
6f:2b:92:da:06:68:72:68:1b:e4:c9:52:9d:93:30:a0:53:72:
ff:c4:53:7a:f2:7b:10:be:1d:61:37:f5:7d:4d:ad:af:7e:1a:
b9:64:be:1a:15:d7:59:f9:57:f5:02:e9:de:a0:3a:54:93:2b:
36:02:cd:d7:3d:50:a8:84:6f:cd:2f:5f:7b:c4:45:18:e1:30:
a3:c4:4b:62:81:0f:00:d6:8f:f4:cd:86:ac:e4:27:a0:e7:44:
d5:81:2f:3d:13:66:65:14:00:e3:d1:49:33:2a:b2:c7:cd:52:
93:ac:e9:68:7c:d7:3e:51:f0:d1:28:6f:ce:19:a1:42:b9:96:
91:9c:7a:8c:26:b6:87:0a:c0:fc:69:d8:0d:e2:eb:9d:09:3d:
47:44:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:44 2024 by rpki-client on console-ams.rpki-client.org