Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/O2rv1eEM6QkQLe2-9sC-b8KztUs.roa
File: O2rv1eEM6QkQLe2-9sC-b8KztUs.roa (raw, json)
Hash identifier: U9uZO8OSt3+5e43bxq9dC6owgFkvHJcuNFsRygNyvJ4=
Subject key identifier: 3B:6A:EF:D5:E1:0C:E9:09:10:2D:ED:BE:F6:C0:BE:6F:C2:B3:B5:4B
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018B5BC0AF192EB79FFEC3B08A94EF96D038
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/O2rv1eEM6QkQLe2-9sC-b8KztUs.roa
Signing time: Mon 23 Oct 2023 08:57:16 +0000
ROA not before: Mon 23 Oct 2023 08:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a07:3900::/48 maxlen: 48
2a07:3906::/32 maxlen: 32
2a0c:a7c0::/48 maxlen: 48
2a07:3905::/32 maxlen: 32
2a07:3900:1::/48 maxlen: 48
2a07:3901::/32 maxlen: 32
2a0c:a7c0:1::/48 maxlen: 48
2a07:3902::/32 maxlen: 32
2a07:3903::/32 maxlen: 32
2a07:3900::/32 maxlen: 32
2a07:3904::/32 maxlen: 32
2a07:3900::/29 maxlen: 29
2a07:3907::/32 maxlen: 32
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:c0:af:19:2e:b7:9f:fe:c3:b0:8a:94:ef:96:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 23 08:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6aefd5e10ce909102dedbef6c0be6fc2b3b54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:8a:8a:6f:db:68:73:3a:02:b4:ee:5a:2e:
4e:99:8b:37:6e:8b:4a:72:ba:be:69:b2:7f:1e:d4:
76:8e:7b:fc:ea:cb:42:6b:51:90:1b:4c:81:71:c4:
4c:c8:56:81:97:33:04:5b:3a:33:7f:91:f8:2a:35:
ea:1b:5c:c4:9b:ff:e0:d2:39:d8:15:41:3f:df:65:
89:52:13:24:58:d8:cd:bc:c2:5b:f0:6b:34:bf:71:
8a:52:6b:81:70:8f:6b:bc:b9:de:b6:dd:3f:9a:b0:
3a:86:ad:a3:ff:b9:f8:72:33:e9:00:1b:0d:1c:bf:
d2:7a:21:ab:f9:c1:31:c2:82:49:55:a4:af:74:b4:
aa:b5:7d:e9:7d:f7:ab:06:20:b9:38:d8:7b:fe:76:
e1:c6:ae:ee:77:8a:69:b2:7d:f7:1b:d2:d6:50:a0:
c0:76:27:1f:4e:76:ac:5c:cb:c9:08:07:07:77:e7:
77:a0:b8:ef:bc:a7:9e:39:d2:16:2b:10:b3:ef:35:
f2:95:98:82:6d:f0:b1:02:18:b0:7e:8c:53:e6:3e:
01:62:af:fb:36:8f:3c:53:14:9a:ca:15:df:e8:15:
fe:e1:52:17:e2:56:bd:41:b1:33:4a:65:ae:a7:bd:
58:ff:c1:6f:c6:39:68:af:a9:ab:16:a8:48:ca:7c:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:EF:D5:E1:0C:E9:09:10:2D:ED:BE:F6:C0:BE:6F:C2:B3:B5:4B
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/O2rv1eEM6QkQLe2-9sC-b8KztUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
63:5d:69:26:d0:b3:0b:90:af:d3:df:39:fa:ad:8f:78:f8:e0:
77:6d:01:9d:cd:bc:3d:a6:fc:94:41:cf:5e:ef:1d:cc:d4:7c:
7c:0c:33:05:69:22:3c:85:01:d0:11:44:52:65:02:55:7c:6a:
d4:d3:63:ac:5c:0c:78:6a:e2:cf:f7:af:5b:06:58:71:b3:71:
a5:c6:22:ce:6d:e1:28:0e:9e:61:24:24:2f:d9:7e:66:b9:78:
98:10:6c:40:4a:fb:dd:9e:55:f0:f1:83:60:ca:14:39:32:1e:
b3:18:29:22:18:b7:8e:36:e8:39:fb:4d:5c:c9:a8:72:f0:d0:
2f:33:ff:04:96:9f:0b:4c:c2:76:cd:1f:2c:55:e8:39:9c:f8:
d0:0c:0a:db:89:eb:03:8a:e4:bd:ae:d8:29:43:de:c5:84:e0:
ec:41:7b:1b:45:46:e6:cc:7d:6d:29:88:eb:b4:5d:62:f9:96:
7a:64:f2:3e:5e:55:2c:eb:b3:69:26:6b:b6:c5:5c:7e:0e:1c:
1a:85:7a:2b:17:5a:55:7d:64:74:d2:d5:f3:a7:2a:12:2c:13:
8c:85:cb:7e:64:49:cc:30:35:1b:b7:3f:70:03:f0:f3:69:2f:
2d:fe:2e:75:ca:b5:c5:6b:bb:57:28:3c:1a:00:bd:68:1d:d4:
26:b7:45:a3
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 5 06:57:54 2023 by rpki-client on console-ams.rpki-client.org