Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/kD5-FeAGs6YoygHTw2t_r-SMRNI.roa
File: kD5-FeAGs6YoygHTw2t_r-SMRNI.roa (raw, json)
Hash identifier: aOIJtyhNsLyuPJ4rSuitJAZ1/0/1xkU7vGqd+Lu3k5g=
Subject key identifier: 90:3E:7E:15:E0:06:B3:A6:28:CA:01:D3:C3:6B:7F:AF:E4:8C:44:D2
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018C0DC14F13D6D074F618F3A41A1CA82ED1
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/kD5-FeAGs6YoygHTw2t_r-SMRNI.roa
Signing time: Sun 26 Nov 2023 22:30:21 +0000
ROA not before: Sun 26 Nov 2023 22:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 45.141.8.0/22 maxlen: 24
185.224.250.0/24 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
45.150.232.0/22 maxlen: 24
195.238.124.0/22 maxlen: 24
185.140.209.0/24 maxlen: 24
185.140.208.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
89.36.161.0/24 maxlen: 24
89.36.160.0/24 maxlen: 24
103.97.88.0/24 maxlen: 24
217.30.8.0/22 maxlen: 24
194.59.46.0/24 maxlen: 24
185.140.12.0/22 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
194.59.142.0/24 maxlen: 24
89.34.238.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.32.0/24 maxlen: 24
5.182.228.0/22 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
88.210.38.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
77.72.16.0/23 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
213.183.63.0/24 maxlen: 24
92.119.88.0/22 maxlen: 24
212.23.200.0/24 maxlen: 24
91.192.83.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
45.135.120.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
213.226.68.0/22 maxlen: 24
93.189.58.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
93.189.57.0/24 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
2a06:f906::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f900::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:c1:4f:13:d6:d0:74:f6:18:f3:a4:1a:1c:a8:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Nov 26 22:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=903e7e15e006b3a628ca01d3c36b7fafe48c44d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:08:da:3c:04:81:d9:76:2a:db:98:4f:07:
9b:c7:6f:76:79:d4:68:dd:18:46:25:76:da:a5:19:
c8:1b:3c:9c:a2:8c:10:4c:6a:a0:9b:7d:41:a7:75:
26:f9:69:2a:ed:8f:6b:49:e4:3a:c8:e1:ec:22:9f:
6a:fb:b1:ec:38:d9:a0:6c:7c:08:e8:dc:7c:be:30:
55:1f:2a:a0:19:ef:56:9a:cb:da:31:e6:c1:34:e9:
ac:17:2f:c2:68:dc:a9:b4:3c:73:d9:d0:90:33:7a:
dd:73:68:4c:81:15:ba:04:40:b9:cb:13:c0:0e:33:
c2:de:db:fc:74:da:e9:6a:5c:83:48:cb:34:9b:4f:
b1:a9:35:a2:76:e3:2c:cc:64:b3:f1:76:96:99:4a:
7c:a8:e0:2b:c2:1c:4b:9c:6c:2d:6c:66:a3:7a:33:
61:94:89:bd:a3:a7:fb:19:17:03:8d:f3:29:41:19:
1e:0c:da:31:52:92:87:cf:14:ad:c8:97:b4:71:c8:
5a:70:12:01:0e:ef:a2:e1:07:9c:65:8b:e3:33:4d:
1d:55:f7:2e:65:32:95:ec:8b:29:b7:03:fd:d1:f1:
f2:f6:3d:16:41:e6:f0:4f:89:ec:c5:93:4b:26:b7:
cd:2b:48:6d:4c:fc:cb:4a:11:9f:17:ef:b3:64:22:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:7E:15:E0:06:B3:A6:28:CA:01:D3:C3:6B:7F:AF:E4:8C:44:D2
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/kD5-FeAGs6YoygHTw2t_r-SMRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
89.34.238.0/24
89.36.160.0/23
91.192.80.0/24
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
103.97.88.0/24
185.6.12.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.250.0/24
185.246.152.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
212.23.200.0/24
213.183.32.0/23
213.183.36.0-213.183.53.255
213.183.58.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f903::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
c8:5e:bb:76:a0:a4:a1:f9:aa:6f:f0:bc:b3:2d:c0:e6:e3:97:
4e:57:6d:1c:82:84:4c:8b:bf:b4:82:2b:44:80:56:81:9c:2d:
2a:6a:3b:17:59:0e:63:61:89:63:8d:b1:a9:25:fe:56:45:c9:
db:73:92:71:3b:d6:c5:f4:42:94:41:5c:67:50:2e:da:6a:90:
22:ff:3c:3e:52:72:12:09:b5:04:c4:b1:bf:64:4b:1e:a9:93:
3b:26:e3:d7:65:94:5a:fd:4a:c8:af:08:0e:7f:3a:db:54:04:
7f:31:a8:21:b1:5c:dc:e2:a8:3e:28:aa:8e:96:23:b8:01:9f:
ed:58:fa:ad:28:76:6e:12:a1:e5:8e:64:13:ec:4c:c9:40:06:
8d:33:6f:e0:03:29:98:6d:ff:7e:23:10:f9:7b:44:5a:cd:08:
e6:79:a9:b1:5e:c8:4b:f7:ae:33:69:55:5a:ad:2d:f2:56:83:
0f:89:e1:4a:05:16:4f:29:56:f5:3c:0b:da:dc:48:78:e0:f2:
74:45:e0:f0:e7:83:4d:aa:86:44:57:98:c8:05:98:53:44:58:
4f:71:07:72:89:c7:1c:c9:40:9e:9c:6c:45:3d:61:02:19:79:
a5:46:8e:d0:ce:c2:11:41:0f:0c:cd:e7:4a:3d:99:cc:fc:81:
c6:10:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:38 2024 by rpki-client on console-fra.rpki-client.org