Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EFOdFgGHxPwBScbzstHMBp9uOxI.roa
File: EFOdFgGHxPwBScbzstHMBp9uOxI.roa (raw, json)
Hash identifier: 6v5oosoMnhh/pvbQ56mzGnPFHCVjNHF+5cFu9Ia7lXo=
Subject key identifier: 10:53:9D:16:01:87:C4:FC:01:49:C6:F3:B2:D1:CC:06:9F:6E:3B:12
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01856EC20544AF86B7AD32E2C61180378D34
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EFOdFgGHxPwBScbzstHMBp9uOxI.roa
Signing time: Sun 01 Jan 2023 19:14:47 +0000
ROA not before: Sun 01 Jan 2023 19:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
188.241.146.0/24 maxlen: 32
45.116.168.0/22 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
176.119.8.0/21 maxlen: 32
77.95.116.0/22 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:05:44:af:86:b7:ad:32:e2:c6:11:80:37:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 19:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10539d160187c4fc0149c6f3b2d1cc069f6e3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:51:b6:9f:27:ac:1b:00:fd:fe:96:a6:ad:
23:20:3a:32:9c:e9:cc:9e:06:e1:75:69:bf:77:a2:
39:75:8b:e6:16:25:77:01:65:74:27:74:af:e1:6c:
6b:4c:47:09:c5:f7:23:1e:e8:50:4d:a7:81:6e:a6:
eb:cc:fa:7e:86:c1:8e:63:81:53:ad:bb:dc:c2:bc:
3f:13:9d:9d:d4:18:4f:2f:ee:fa:8e:f8:24:13:37:
af:3e:f9:f3:d6:9c:4f:51:09:09:cf:76:27:1c:43:
34:9e:40:9a:f8:57:85:39:c1:76:b4:16:a8:1c:d0:
b6:b2:fb:f5:81:fd:5f:a5:28:fa:f2:a9:b1:6f:eb:
e8:6f:c8:0d:dc:28:6d:c1:a4:8e:b0:d5:0a:98:b9:
38:f4:1a:22:6b:60:46:63:fc:85:b0:8e:59:be:43:
48:a5:10:35:c6:d8:f5:9c:cc:7d:b2:1d:a2:68:c8:
dc:87:e9:fb:22:82:00:4c:5e:69:f2:4e:5a:89:32:
11:ba:f1:4a:2d:37:2e:21:61:c9:8d:da:6f:87:f8:
44:c2:86:99:c8:05:49:7c:6a:f4:fe:e3:12:3a:2c:
d2:e5:46:17:2c:c2:27:8f:6f:41:c1:ce:53:e3:77:
c4:6d:a7:13:9b:eb:6f:c9:52:ca:e7:d4:15:b9:69:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:9D:16:01:87:C4:FC:01:49:C6:F3:B2:D1:CC:06:9F:6E:3B:12
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EFOdFgGHxPwBScbzstHMBp9uOxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.119.8.0/21
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:17:41:83:d2:1e:bd:75:f2:d9:10:18:22:73:af:6d:99:22:
99:62:fe:3b:5d:ad:6e:88:e9:1d:7e:e8:61:63:7e:a1:72:2b:
fe:10:ef:28:2b:12:ae:ac:4c:93:3b:81:2b:e0:71:50:0c:28:
47:80:d5:fe:7c:65:48:80:5b:26:eb:3c:12:83:3f:f7:02:d1:
db:b8:bd:b5:35:a0:cf:2a:c0:2c:20:48:8d:87:17:15:fb:51:
30:5c:aa:31:68:c2:38:53:89:bd:37:da:20:82:34:69:8f:d1:
a8:ca:0a:e5:7a:a5:57:ed:67:f2:c9:38:40:e7:d0:41:c4:ee:
9e:e9:72:3f:42:05:d0:b4:a0:4e:bf:f1:3d:1c:da:91:0a:1f:
fe:9e:6b:8a:9f:27:29:c8:55:ee:19:65:55:4d:fe:6a:44:74:
de:93:b6:e8:36:9f:94:98:6b:3c:07:bc:72:b9:47:aa:d8:80:
45:c2:fa:28:aa:1d:da:ef:97:93:c6:53:a3:ee:5b:13:c5:25:
2a:04:47:7d:90:00:eb:9a:fe:86:f6:be:99:d8:7f:e9:10:b1:
4b:07:6e:66:fb:8d:21:37:2f:90:3b:f6:c7:1e:84:fd:0a:a4:
db:91:4f:ea:39:40:e5:bb:3c:99:fc:35:fe:37:8a:3a:66:90:
fa:87:ad:9a
-----BEGIN CERTIFICATE-----
MIIG0jCCBbqgAwIBAgISAYVuwgVEr4a3rTLixhGAN400MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjMwMTAxMTkxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDUzOWQxNjAxODdjNGZjMDE0OWM2ZjNiMmQxY2MwNjlmNmUzYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGFRtp8nrBsA/f6Wpq0jIDoynOnM
ngbhdWm/d6I5dYvmFiV3AWV0J3Sv4WxrTEcJxfcjHuhQTaeBbqbrzPp+hsGOY4FT
rbvcwrw/E52d1BhPL+76jvgkEzevPvnz1pxPUQkJz3YnHEM0nkCa+FeFOcF2tBao
HNC2svv1gf1fpSj68qmxb+vob8gN3ChtwaSOsNUKmLk49Boia2BGY/yFsI5ZvkNI
pRA1xtj1nMx9sh2iaMjch+n7IoIATF5p8k5aiTIRuvFKLTcuIWHJjdpvh/hEwoaZ
yAVJfGr0/uMSOizS5UYXLMInj29Bwc5T43fEbacTm+tvyVLK59QVuWk8cwIDAQAB
o4ID3jCCA9owHQYDVR0OBBYEFBBTnRYBh8T8AUnG87LRzAafbjsSMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvRUZPZEZnR0h4UHdCU2NienN0SE1CcDl1T3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB8gYIKwYBBQUHAQcBAf8EggHhMIIB3TCCAdkEAgABMIIB
0QMEAB8O2wMEAR8O7AMEAi1e9AMEAi1fMAMEAi10qAMEAi2K6DAMAwQCLY5cAwQC
LY5gAwQCLZWUAwQDOmGAMAsDBAM6YegDAwE6YAMEA01RaAMEAk1fdDAMAwQATooB
AwQATooCAwQATooQAwQATooZAwQATooeAwQAToooMAwDBABOii8DBABOijADBABO
ijIDBAJT5UwDBAJT5WgDBANUJ+ADBAJZEygDBABZIIEDBABZIgcDBAFZIk4DBAFZ
JoQDBABZKT4DBABZLHMDBABZLPUDBANZLpgDBABZ+TMDBAJZ+TgDBAJbhLgDBAJb
xfwDBABb9esDBAJcK1QDBAFdcXwDBARdcgADBAFdcwwDBAResHADBABesKMDBAJe
sNgwDAMEAl6xNAMEAV6xOAMEAl/XJAMEAmfM1AMEBXcNwAMEA3lbUAMEAop8kAME
ApaBXAMEA7B3CAMEALkmZgMEALla8wMEArl9wAMEALmD3AMEALnd3QMEALnfOAME
AbnfOgMEArnhaAMEALnw/AMEALnw/wMEArnzbAMEA7xfmAMEArx3dAMEALzWXQME
ALzxkgMEAsq1FAMEAsttNAMEAsttPAMEAcumnAMEBdEUoDANBgkqhkiG9w0BAQsF
AAOCAQEAmhdBg9IevXXy2RAYInOvbZkimWL+O12tbojpHX7oYWN+oXIr/hDvKCsS
rqxMkzuBK+BxUAwoR4DV/nxlSIBbJus8EoM/9wLR27i9tTWgzyrALCBIjYcXFftR
MFyqMWjCOFOJvTfaIII0aY/RqMoK5XqlV+1n8sk4QOfQQcTunulyP0IF0LSgTr/x
PRzakQof/p5rip8nKchV7hllVU3+akR03pO26DaflJhrPAe8crlHqtiARcL6KKod
2u+Xk8ZTo+5bE8UlKgRHfZAA65r+hva+mdh/6RCxSwduZvuNITcvkDv2xx6E/Qqk
25FP6jlA5bs8mfw1/jeKOmaQ+oetmg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org