Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/dWslraZBPRu5GBGhh_S4FEeHynU.roa
File: dWslraZBPRu5GBGhh_S4FEeHynU.roa (raw, json)
Hash identifier: UDD+QrZK9v5ry/Ympzs7yD12cVq0ipUF3oO6/MeXj5k=
Subject key identifier: 75:6B:25:AD:A6:41:3D:1B:B9:18:11:A1:87:F4:B8:14:47:87:CA:75
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018AF57796BBFA3DE9CC8302C7480C5DF0E2
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/dWslraZBPRu5GBGhh_S4FEeHynU.roa
Signing time: Tue 03 Oct 2023 12:16:09 +0000
ROA not before: Tue 03 Oct 2023 12:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50129
IP address blocks: 185.188.16.0/23 maxlen: 23
185.194.209.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
5.61.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:77:96:bb:fa:3d:e9:cc:83:02:c7:48:0c:5d:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 3 12:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=756b25ada6413d1bb91811a187f4b8144787ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:1f:f4:4b:13:1b:32:a7:11:dc:b1:80:5b:
da:b7:da:78:8f:fb:8f:29:05:af:e5:a7:b0:cd:50:
0e:8b:ed:50:ac:60:25:67:11:d3:c3:67:a5:f4:c9:
6d:39:db:ce:62:5b:e9:b4:22:5a:37:2b:6c:31:86:
b6:cc:1b:d7:e4:51:af:13:2d:0c:bd:06:5d:c5:cb:
71:9a:eb:de:e6:b0:b9:71:d7:17:3f:f6:cf:e5:77:
8e:ea:b9:da:a1:77:d1:bf:cd:77:66:d4:12:0c:eb:
7a:e6:c0:54:ff:d2:db:30:a7:c6:86:7d:4f:b3:55:
24:96:e5:e4:dc:6c:d3:92:18:07:e3:9b:ef:9d:57:
25:d9:e2:38:3a:81:e0:3c:aa:a4:e4:2b:fd:c0:8f:
cd:2c:4e:52:bf:97:f3:29:1c:e5:d1:54:08:fe:87:
d4:0a:73:50:e6:93:bf:82:48:2b:4a:55:b4:05:93:
bb:3d:f3:07:fc:39:d0:43:ff:8c:1c:00:90:44:7c:
0c:15:e2:e4:c1:a4:8d:9d:4c:59:ac:57:a3:5b:ff:
f3:b9:c2:63:b6:59:49:60:7e:c7:9b:cb:be:90:35:
18:9e:72:24:0c:75:25:c0:5c:5d:d2:df:8d:76:8f:
6f:4a:23:09:2e:35:e0:f7:cf:d1:f0:cf:5c:67:69:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:25:AD:A6:41:3D:1B:B9:18:11:A1:87:F4:B8:14:47:87:CA:75
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/dWslraZBPRu5GBGhh_S4FEeHynU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.76.78.0/23
185.84.44.0/22
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
1e:e6:86:ce:95:e9:80:78:4b:19:0b:b9:27:ee:52:f7:30:e0:
41:25:69:d3:4b:bf:f7:af:bf:e7:7f:77:fd:92:b3:12:6c:02:
44:a7:e0:18:29:74:ac:0a:65:be:23:37:5e:9f:01:2b:e0:c7:
11:8f:b5:af:d1:db:51:22:a4:51:68:37:f1:c4:60:0b:8b:bf:
0d:4b:9d:8a:e9:25:c2:b2:37:3f:5a:b1:c5:c3:09:61:ee:e8:
cf:48:c3:be:91:d1:83:39:f4:60:f3:74:5a:98:48:99:5e:f9:
41:92:fb:79:e2:7d:7f:c2:0a:7f:9b:84:63:81:ce:99:ef:0c:
8f:f2:ab:ec:e6:dd:ea:72:a2:7e:9a:2c:c1:5c:65:ca:c6:12:
f1:86:73:59:9d:b3:fe:9f:54:73:b5:4d:f1:a0:8a:ad:51:e3:
b1:c9:d5:cb:4c:a9:38:89:75:2e:01:f9:25:ec:46:26:b2:7f:
e9:bc:2b:da:90:ff:bb:0d:17:1b:8b:9c:47:b0:e8:64:43:94:
5d:70:47:b4:5f:7a:bb:17:25:67:1a:b8:b2:b0:20:b3:91:ba:
7b:a2:ca:53:c7:a5:0c:c7:e4:14:ef:9b:f0:33:19:1c:db:26:
b9:de:0a:5a:6b:58:9e:e0:cc:1f:b0:bd:d7:48:1d:3f:1d:05:
83:d2:7f:fa
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 01:24:45 2023 by rpki-client on console-fra.rpki-client.org