Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gxzJcjb_D5dyXg0_0c6Z7NN_LwQ.roa
File: gxzJcjb_D5dyXg0_0c6Z7NN_LwQ.roa (raw, json)
Hash identifier: iRic8SCBb+S7ta9Q/bI8WxZ79KwokZmV9GPe3BieDLk=
Subject key identifier: 83:1C:C9:72:36:FF:0F:97:72:5E:0D:3F:D1:CE:99:EC:D3:7F:2F:04
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018570671DB0798A56C8FD295F672F203A22
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gxzJcjb_D5dyXg0_0c6Z7NN_LwQ.roa
Signing time: Mon 02 Jan 2023 02:54:43 +0000
ROA not before: Mon 02 Jan 2023 02:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 185.177.232.0/22 maxlen: 22
85.9.64.0/18 maxlen: 18
194.33.122.0/23 maxlen: 23
5.202.0.0/16 maxlen: 24
109.232.7.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
185.131.30.0/23 maxlen: 23
185.131.28.0/22 maxlen: 22
193.32.80.0/23 maxlen: 23
185.180.52.0/22 maxlen: 22
77.237.160.0/19 maxlen: 19
185.103.128.0/22 maxlen: 22
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
109.125.176.0/22 maxlen: 22
109.125.184.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.191.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
109.125.160.0/19 maxlen: 19
185.126.40.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.72.24.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.72.27.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
188.253.32.0/19 maxlen: 24
5.202.166.0/23 maxlen: 23
188.253.64.0/19 maxlen: 24
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Apr 2023 11:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:1d:b0:79:8a:56:c8:fd:29:5f:67:2f:20:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831cc97236ff0f97725e0d3fd1ce99ecd37f2f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:d9:76:6e:df:da:60:8a:30:06:db:2a:41:
a5:f8:8d:00:87:87:03:94:56:e7:82:e4:6a:8b:0e:
21:d9:3f:33:19:1c:10:d1:be:71:37:29:90:1d:4c:
59:45:2e:7f:cc:11:83:28:dd:a3:d9:68:59:0e:8d:
ed:75:6a:2a:eb:62:3e:36:32:bb:f0:6f:7d:05:86:
66:93:26:97:32:06:cf:b3:97:db:35:96:fa:08:9e:
0a:1e:b7:84:aa:7d:87:2a:91:09:5b:09:c9:3f:c9:
72:2c:a4:50:11:f2:56:75:e3:f5:59:c6:25:1b:33:
df:2a:fc:33:9c:d9:41:ad:15:bd:86:e6:1f:d7:09:
66:2b:53:e7:2e:30:57:67:5e:ad:7f:2e:7e:a7:94:
5b:1d:60:8a:7e:40:4c:e6:4c:b4:ad:11:03:8e:3b:
29:c2:9c:55:97:c8:4b:35:8e:2e:c7:f8:fe:1b:78:
5a:54:98:db:4f:b2:6c:84:04:3c:98:a3:2f:3e:dd:
bd:19:ab:22:fe:92:40:4d:5d:9d:cc:a0:bc:66:f3:
bc:be:6f:a4:ee:d8:46:54:4e:ee:f1:7d:bf:53:ac:
2a:ea:54:dd:58:51:24:e5:80:92:14:aa:eb:85:b8:
b6:f3:4a:c5:57:10:76:a9:31:e9:48:1f:79:fa:28:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:C9:72:36:FF:0F:97:72:5E:0D:3F:D1:CE:99:EC:D3:7F:2F:04
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gxzJcjb_D5dyXg0_0c6Z7NN_LwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
10:a8:8a:b5:ba:b2:ed:e6:cc:fb:1a:c7:09:2c:f0:a2:32:3b:
0d:77:98:a5:4e:f5:ba:20:14:9d:a2:b2:00:cf:55:d3:57:76:
b6:aa:f1:0f:93:1b:b7:3b:1f:45:61:d5:aa:8c:bb:82:b4:f3:
9f:ee:c0:48:3a:96:26:9f:46:6f:f4:84:c0:79:44:c0:99:7e:
ad:be:a1:a6:57:c9:03:66:5e:4b:ba:44:1c:7d:3c:be:5f:0b:
d8:0e:82:29:b1:c5:1f:cd:0b:c3:36:c9:67:35:59:46:93:79:
79:8d:5c:9e:bf:e2:7a:85:62:95:36:11:71:ec:b1:84:e7:16:
6b:ef:ee:31:2e:c6:11:78:8b:a3:e4:41:d0:d1:f5:27:01:05:
71:28:bf:8d:22:96:05:4a:a2:7d:37:d2:a0:47:58:2e:12:72:
3d:c8:d3:24:1c:4c:0c:86:9c:b4:1c:3b:70:56:87:da:26:01:
8a:01:b6:b1:0e:7f:29:b8:6e:06:19:a4:a3:a5:24:aa:5a:e3:
42:3f:39:00:5c:c0:99:94:fd:57:e5:a6:77:87:c6:f9:fb:35:
25:30:3c:44:c8:0e:73:32:3b:da:06:07:58:b7:c3:32:22:38:
6d:88:c2:33:67:e6:08:e0:72:67:50:af:8c:8b:f1:60:2c:9d:
5a:6e:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org