Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa
File: xepzK0hJTB7DmTLHjujGUDUaCIo.roa (raw, json)
Hash identifier: xfGxcNOcMRm6EN6qTZW8BhlD0Jao0UTN1lrMEoQuvKY=
Subject key identifier: C5:EA:73:2B:48:49:4C:1E:C3:99:32:C7:8E:E8:C6:50:35:1A:08:8A
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018C6D138B5067A840C5B4E6E04D87B65E6A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa
Signing time: Fri 15 Dec 2023 10:44:06 +0000
ROA not before: Fri 15 Dec 2023 10:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35470
IP address blocks: 213.187.240.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
89.31.96.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
178.18.80.0/20 maxlen: 24
31.3.96.0/21 maxlen: 24
85.10.188.0/22 maxlen: 22
141.138.192.0/20 maxlen: 24
193.138.204.0/22 maxlen: 24
141.138.207.0/24 maxlen: 24
185.3.208.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
185.110.172.0/22 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
79.170.88.0/21 maxlen: 24
185.96.4.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
37.230.96.0/21 maxlen: 24
194.60.207.0/24 maxlen: 24
37.34.48.0/21 maxlen: 24
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
2a02:348:59::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348::/32 maxlen: 32
2a02:348:60::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:3::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:13:8b:50:67:a8:40:c5:b4:e6:e0:4d:87:b6:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Dec 15 10:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5ea732b48494c1ec39932c78ee8c650351a088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:f7:43:8e:8b:f5:44:57:26:3d:b9:5d:67:
70:be:6c:d2:67:3e:3c:58:77:35:5c:d9:fe:43:91:
89:d0:86:3a:ef:ee:c5:8d:23:8d:ae:5a:fe:89:f1:
74:f1:b8:34:19:d2:89:92:a6:bd:46:42:97:62:e3:
a0:f1:fa:93:4a:ce:35:eb:c2:0c:0e:fa:d3:2d:b7:
b1:8e:0e:66:72:b0:39:00:ae:5f:4f:4a:19:15:ee:
c5:19:66:a6:5c:15:71:18:f5:ec:e8:7d:3a:c0:5b:
18:cc:d9:18:cd:6f:39:18:49:a4:3f:7a:99:40:ad:
0a:58:6b:e0:cf:f2:fb:b2:bd:66:55:59:10:a0:8a:
42:13:7d:b0:5f:bf:60:29:a4:ed:46:2e:1b:92:80:
9d:e2:3d:57:b2:9b:2b:e8:1c:38:e0:7b:e7:95:ee:
61:be:c5:bf:cd:08:a2:05:88:e4:ad:a9:78:92:4b:
cc:f0:e7:a6:be:32:7b:b0:f8:ab:17:e4:56:d4:81:
fc:f7:99:3b:09:54:c4:ef:68:fa:d7:39:91:78:d4:
28:a0:07:d8:09:f3:7a:bb:a5:16:9f:4a:12:6c:2f:
3e:e7:b4:71:79:d8:c6:4f:5d:93:6b:d4:ed:87:66:
6e:3b:31:29:0f:a1:a7:4e:b3:73:e2:37:cc:de:25:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:73:2B:48:49:4C:1E:C3:99:32:C7:8E:E8:C6:50:35:1A:08:8A
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
bc:56:42:37:f8:1c:e9:ac:42:13:8a:94:cd:54:06:f7:7c:15:
64:2e:37:42:a6:10:55:7e:47:26:53:ab:f0:92:55:ad:73:44:
07:13:19:e9:29:cb:0f:d4:86:22:df:23:9b:51:c3:e6:00:57:
f1:a6:5e:ec:da:f7:d7:e8:ab:55:3c:f7:25:2b:4b:31:4c:e8:
f9:97:20:93:29:ee:87:b7:36:68:9f:fa:64:96:95:ef:a5:ae:
ee:22:d8:3f:06:08:d6:0f:bd:e9:e6:3a:b5:dd:8e:3d:f4:c4:
76:6b:8d:ad:fd:87:39:a1:96:7e:81:e5:3d:36:3c:d0:e6:40:
74:c5:d2:33:30:6c:0b:a5:4b:b6:1b:cd:a0:0e:d8:23:f5:5e:
12:f9:ff:38:a8:1c:cc:53:dc:d2:a1:a1:0d:6a:21:e3:84:7a:
e3:3e:2f:d6:bf:2b:b1:4a:54:ee:9c:ee:af:64:26:27:6a:69:
ea:cf:15:c2:91:1f:c7:7b:21:3f:b1:22:cd:3a:0e:a4:2e:24:
30:d5:34:65:c2:18:e4:76:56:f6:eb:9a:e0:2a:25:28:c7:76:
4f:fd:f8:50:e8:f3:8a:d8:b0:c8:ad:32:f7:ba:46:1e:37:d1:
69:4a:7c:c4:a4:c8:b1:f7:45:d8:f5:87:0c:4c:f8:f5:89:4c:
98:cb:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org