Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6xpw4iXNiLuhLr7UrldbywNOzqQ.roa
File: 6xpw4iXNiLuhLr7UrldbywNOzqQ.roa (raw, json)
Hash identifier: 78/gCzromHOw/dS1SrisAOrjOFdGICyrczDmo8n/cPk=
Subject key identifier: EB:1A:70:E2:25:CD:88:BB:A1:2E:BE:D4:AE:57:5B:CB:03:4E:CE:A4
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018573438A3B91226A65BE13514ED20D53DA
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6xpw4iXNiLuhLr7UrldbywNOzqQ.roa
Signing time: Mon 02 Jan 2023 16:14:44 +0000
ROA not before: Mon 02 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31034
IP address blocks: 5.249.128.0/19 maxlen: 24
185.58.116.0/22 maxlen: 24
217.61.0.0/18 maxlen: 24
94.177.192.0/18 maxlen: 24
89.46.104.0/21 maxlen: 24
95.110.128.0/17 maxlen: 24
31.14.128.0/20 maxlen: 24
31.11.32.0/21 maxlen: 24
77.81.224.0/20 maxlen: 24
89.46.64.0/20 maxlen: 24
46.37.0.0/19 maxlen: 24
94.177.160.0/19 maxlen: 24
89.46.192.0/21 maxlen: 24
62.149.128.0/17 maxlen: 24
185.56.8.0/22 maxlen: 24
80.211.0.0/16 maxlen: 24
194.182.110.0/23 maxlen: 24
188.213.160.0/20 maxlen: 24
176.107.144.0/21 maxlen: 24
80.73.224.0/21 maxlen: 24
195.231.88.0/21 maxlen: 24
89.36.208.0/22 maxlen: 24
217.198.128.0/20 maxlen: 24
2a00:6d40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:8a:3b:91:22:6a:65:be:13:51:4e:d2:0d:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 2 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1a70e225cd88bba12ebed4ae575bcb034ecea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:c1:19:53:cf:a2:a5:c8:78:a0:99:4b:4f:
5f:2d:c6:72:bf:5f:ec:49:60:97:a7:85:84:91:5f:
0e:63:3a:93:98:4d:39:a1:60:5b:85:5c:c4:89:a9:
d8:d3:ea:22:09:bf:9e:10:5f:4b:67:07:04:09:2e:
8e:a1:9f:ac:d2:d1:47:40:92:dc:e2:75:02:cb:48:
01:2d:de:93:2e:35:9c:24:17:95:1a:82:a8:92:8f:
8e:eb:6d:b1:76:fd:a7:54:af:76:1a:4c:64:66:de:
50:f9:3d:d9:29:d4:46:b5:cc:be:0a:97:33:d5:1d:
60:54:8c:09:71:a5:71:d2:6f:9b:0b:db:22:53:25:
ec:c8:f9:f4:d1:0c:e1:83:5e:19:06:55:4e:84:30:
12:8e:bd:90:c2:ae:0b:54:33:e5:18:24:78:50:4a:
a8:95:ad:0d:ee:fc:ba:77:58:30:f5:71:d0:ae:5f:
85:e6:36:50:33:6a:5f:da:20:94:25:d0:66:5f:91:
83:8f:cf:69:78:50:90:f8:b7:87:e8:a0:bd:4b:fc:
43:dd:81:a9:72:2d:41:6a:71:66:25:f6:91:9c:56:
de:e2:19:9b:6b:b4:07:41:c6:7c:78:a0:bd:d4:03:
bf:7d:11:b6:f7:88:35:69:f7:a9:ae:4c:8c:40:d7:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:70:E2:25:CD:88:BB:A1:2E:BE:D4:AE:57:5B:CB:03:4E:CE:A4
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/6xpw4iXNiLuhLr7UrldbywNOzqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.128.0/19
31.11.32.0/21
31.14.128.0/20
46.37.0.0/19
62.149.128.0/17
77.81.224.0/20
80.73.224.0/21
80.211.0.0/16
89.36.208.0/22
89.46.64.0/20
89.46.104.0/21
89.46.192.0/21
94.177.160.0-94.177.255.255
95.110.128.0/17
176.107.144.0/21
185.56.8.0/22
185.58.116.0/22
188.213.160.0/20
194.182.110.0/23
195.231.88.0/21
217.61.0.0/18
217.198.128.0/20
IPv6:
2a00:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
04:bf:b9:c3:7e:d7:e6:f3:c9:aa:0d:4c:30:5c:d5:04:9f:f7:
86:d5:49:1a:fe:51:49:76:f4:6b:cb:e1:26:bb:57:14:d9:8d:
e6:48:d0:d7:27:23:11:c0:28:18:d0:d0:45:92:04:66:57:d6:
73:6d:fc:09:fe:03:4c:44:b7:19:6f:ee:d2:4d:7b:e2:af:be:
3f:05:a4:a2:68:b7:a6:03:ca:ca:70:5b:b9:18:6d:2e:f0:d1:
65:d6:3a:42:b1:26:16:26:7f:14:7d:55:33:df:76:c1:d5:7c:
a0:11:da:86:75:86:5a:94:4e:05:7b:f3:fe:b2:ac:ff:64:f3:
ab:6a:a1:38:89:e2:53:c4:e9:40:c1:53:61:ac:1e:3a:1b:74:
11:d6:f0:c9:00:7f:7d:a3:00:f2:4a:34:1a:4c:ea:4b:18:f0:
54:77:8b:a3:69:2e:29:1d:5f:af:ed:dc:1d:d9:51:38:9a:ab:
08:03:2a:e4:1f:ac:e8:02:90:74:1c:4b:91:01:e8:08:63:86:
5d:50:bc:08:52:dd:93:90:d8:de:a6:9f:bd:6e:8c:9c:e0:b0:
d5:22:3f:01:41:ef:92:b4:b1:e4:8d:70:17:eb:72:b8:a8:8c:
6f:ca:13:cd:e6:dd:b2:f3:3c:bf:fb:8c:ad:e9:5d:f7:07:90:
1d:0a:df:3e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYVzQ4o7kSJqZb4TUU7SDVPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjMwMTAyMTYxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjFhNzBlMjI1Y2Q4OGJiYTEyZWJlZDRhZTU3NWJjYjAzNGVjZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVrBGVPPoqXIeKCZS09fLcZyv1/s
SWCXp4WEkV8OYzqTmE05oWBbhVzEianY0+oiCb+eEF9LZwcECS6OoZ+s0tFHQJLc
4nUCy0gBLd6TLjWcJBeVGoKoko+O622xdv2nVK92GkxkZt5Q+T3ZKdRGtcy+Cpcz
1R1gVIwJcaVx0m+bC9siUyXsyPn00Qzhg14ZBlVOhDASjr2Qwq4LVDPlGCR4UEqo
la0N7vy6d1gw9XHQrl+F5jZQM2pf2iCUJdBmX5GDj89peFCQ+LeH6KC9S/xD3YGp
ci1BanFmJfaRnFbe4hmba7QHQcZ8eKC91AO/fRG294g1afeprkyMQNcWTQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFOsacOIlzYi7oS6+1K5XW8sDTs6kMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvNnhwdzRpWE5pTHVoTHI3VXJsZGJ5d05PenFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBkQQCAAEwgYoDBAUF
+YADBAMfCyADBAQfDoADBAUuJQADBAc+lYADBARNUeADBANQSeADAwBQ0wMEAlkk
0AMEBFkuQAMEA1kuaAMEA1kuwDALAwQFXrGgAwMBXrADBAdfboADBAOwa5ADBAK5
OAgDBAK5OnQDBAS81aADBAHCtm4DBAPD51gDBAbZPQADBATZxoAwDQQCAAIwBwMF
AyoAbUAwDQYJKoZIhvcNAQELBQADggEBAAS/ucN+1+bzyaoNTDBc1QSf94bVSRr+
UUl29GvL4Sa7VxTZjeZI0NcnIxHAKBjQ0EWSBGZX1nNt/An+A0xEtxlv7tJNe+Kv
vj8FpKJot6YDyspwW7kYbS7w0WXWOkKxJhYmfxR9VTPfdsHVfKAR2oZ1hlqUTgV7
8/6yrP9k86tqoTiJ4lPE6UDBU2GsHjobdBHW8MkAf32jAPJKNBpM6ksY8FR3i6Np
LikdX6/t3B3ZUTiaqwgDKuQfrOgCkHQcS5EB6Ahjhl1QvAhS3ZOQ2N6mn71ujJzg
sNUiPwFB75K0seSNcBfrcriojG/KE83m3bLzPL/7jK3pXfcHkB0K3z4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-fra.rpki-client.org