Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yJjoPGEPxqDdS93zc-sOfo014S4.roa
File: yJjoPGEPxqDdS93zc-sOfo014S4.roa (raw, json)
Hash identifier: XRQgw97rquFELN5Giiysh4i1GuP5t8LYHFmdShzWPFQ=
Subject key identifier: C8:98:E8:3C:61:0F:C6:A0:DD:4B:DD:F3:73:EB:0E:7E:8D:35:E1:2E
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 01867CC2F624E0C609A718EF31C15A31F320
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yJjoPGEPxqDdS93zc-sOfo014S4.roa
Signing time: Thu 23 Feb 2023 05:33:17 +0000
ROA not before: Thu 23 Feb 2023 05:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202196
IP address blocks: 37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
5.57.20.0/23 maxlen: 23
37.10.1.0/24 maxlen: 24
37.10.24.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
91.195.236.0/24 maxlen: 24
2a01:5043:2007::/48 maxlen: 48
2a01:5043:7::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5041::/32 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5041:2::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Mar 2023 08:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:c2:f6:24:e0:c6:09:a7:18:ef:31:c1:5a:31:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Feb 23 05:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c898e83c610fc6a0dd4bddf373eb0e7e8d35e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:ec:9b:d7:c0:0e:d0:7f:3f:5a:e2:b8:09:
f7:b9:fd:53:bb:8f:9b:1e:d3:ba:d8:6c:67:9c:4d:
74:39:dc:ee:ed:ba:db:1a:c0:55:46:6c:b2:f2:c1:
59:d7:31:84:19:07:4b:06:47:f8:74:02:7f:16:3e:
84:ce:71:2b:30:b1:f2:69:ca:d4:d3:c9:a4:d4:9f:
bc:63:b1:4a:d5:56:43:30:4e:4f:08:62:9e:2a:4d:
a6:eb:8f:5b:6f:5a:36:e6:3d:5d:71:d0:cc:b4:3e:
00:be:a0:58:67:54:19:5a:27:4c:9e:c8:37:34:8a:
5e:64:9a:77:26:6a:4e:c9:6e:26:9b:94:35:b2:ba:
c2:ab:f4:c7:3e:a3:32:f9:4f:70:d5:05:48:e1:2d:
07:a1:d9:9b:d9:59:5a:35:05:3f:19:91:b0:3e:0c:
c9:14:ea:f9:3e:8f:14:d6:5c:31:23:29:81:4c:c7:
94:03:b3:ae:19:f0:84:6a:e8:35:74:cb:ef:73:bb:
1f:6c:ec:89:e5:68:6b:99:40:d9:6c:b1:8e:8c:4b:
e7:37:f0:66:8f:58:6b:50:78:61:0a:6f:0a:79:5f:
a5:de:e1:57:02:2c:38:a2:f2:74:ab:01:9f:78:e0:
66:3e:1a:34:b7:9a:2e:5f:e3:98:cd:50:c0:1e:20:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:E8:3C:61:0F:C6:A0:DD:4B:DD:F3:73:EB:0E:7E:8D:35:E1:2E
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yJjoPGEPxqDdS93zc-sOfo014S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.24.0/21
37.10.40.0-37.10.46.255
91.195.236.0/24
IPv6:
2a01:5041::/32
2a01:5042:1::/48
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2001::/48
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
66:a8:23:04:34:b4:09:c3:b7:3a:29:b1:be:92:c0:4f:ac:e1:
a7:e7:9d:84:73:4a:ff:84:80:15:2a:77:a9:06:2b:9f:16:16:
79:b3:0c:7d:46:40:bd:33:5b:81:30:bd:8b:f3:a3:a4:ab:71:
fd:f9:fe:eb:cf:09:f6:2b:d7:52:7b:6c:b1:dc:6b:f5:46:9b:
cc:81:38:ad:b0:ae:7c:ad:d4:2a:1a:6f:11:69:40:22:2e:23:
a5:38:49:f1:a2:b8:35:02:f8:b6:d0:36:51:de:f4:57:24:32:
b4:ed:8f:a3:c2:58:4e:a5:f3:cb:5d:7e:40:b9:22:99:89:51:
c7:bb:eb:44:3e:73:83:54:2d:69:94:ca:13:b7:c1:56:67:2a:
d7:f7:cb:71:87:5b:e0:3f:78:93:6f:da:1c:f3:8d:42:2a:23:
9d:df:35:e8:67:b5:25:a8:cd:92:39:8d:32:7e:41:fe:1a:78:
bf:a8:7b:05:94:86:80:79:83:ac:50:c8:a3:a6:26:3d:19:10:
3e:22:46:ac:f8:ea:86:cf:04:52:cd:05:91:76:f2:3a:80:aa:
83:fd:66:69:b9:9b:92:1e:96:14:db:1f:a2:62:34:75:0d:2f:
ef:ad:e4:7a:6d:43:6c:91:c8:1f:a2:05:1d:eb:dd:29:ac:a9:
be:b3:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:30 2024 by rpki-client on console-ams.rpki-client.org