Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/vlUYhj_d7OG8qBhB61eFZlKP74A.roa
File: vlUYhj_d7OG8qBhB61eFZlKP74A.roa (raw, json)
Hash identifier: BSP3yxkfyK9NUQEQqccx5L9QioGpBLaVm5rhKe5jYpw=
Subject key identifier: BE:55:18:86:3F:DD:EC:E1:BC:A8:18:41:EB:57:85:66:52:8F:EF:80
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01856D941FD7165272D16C41EDB502FC9001
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/vlUYhj_d7OG8qBhB61eFZlKP74A.roa
Signing time: Sun 01 Jan 2023 13:45:02 +0000
ROA not before: Sun 01 Jan 2023 13:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:1f:d7:16:52:72:d1:6c:41:ed:b5:02:fc:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 1 13:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be5518863fddece1bca81841eb578566528fef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:93:a8:22:37:2c:fe:3f:f7:27:8d:80:27:
ea:ba:48:da:28:63:1c:03:a8:ea:c0:41:5a:41:e0:
f3:66:fc:0b:ca:9b:b7:04:ca:f9:0a:ff:b9:05:be:
90:2f:d9:a4:c0:86:e6:0f:cc:26:9a:7e:80:b8:01:
e6:f1:52:c8:be:f3:e6:97:ab:41:4a:38:a2:49:b7:
14:fc:8e:fb:15:50:97:cd:31:55:61:83:11:8f:e6:
3a:be:fe:28:83:a2:41:0c:24:8b:d9:c8:52:57:34:
7c:66:69:54:79:21:a0:7f:4f:3c:86:7d:5a:1c:4e:
62:03:9b:8a:d1:db:21:64:96:3e:05:fe:c8:15:f4:
1d:db:6d:bb:6c:33:f9:f1:d6:08:23:49:78:89:12:
84:4d:f5:72:c2:62:16:ae:7e:cf:6c:c6:49:ed:03:
7c:e0:86:e4:92:32:5c:7e:f7:be:1a:14:c3:e1:9b:
0a:6d:29:6e:58:6f:58:f3:6c:a3:25:b2:51:81:9b:
3a:81:4c:1e:13:60:5f:ce:cb:83:fa:45:ee:8a:02:
51:3f:02:6c:29:d8:32:d3:81:ac:d3:08:23:af:0d:
af:79:66:8b:0c:f2:81:a3:b6:cf:22:0a:8a:d7:ac:
37:89:9a:1f:ee:29:da:b3:18:c4:ff:52:79:17:77:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:18:86:3F:DD:EC:E1:BC:A8:18:41:EB:57:85:66:52:8F:EF:80
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/vlUYhj_d7OG8qBhB61eFZlKP74A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
10:d6:16:e8:57:80:aa:23:fe:a2:05:19:f6:b4:08:e6:66:10:
43:16:15:a8:3f:d9:7f:23:7a:a5:22:a2:e8:f6:18:19:86:de:
24:42:9c:75:89:50:b8:76:c5:da:cb:43:fd:ff:40:ca:6f:e0:
9a:3e:ec:a9:cd:41:0d:20:8d:15:76:de:4a:5f:84:37:1c:75:
9b:be:d5:15:e8:92:dc:e5:37:68:65:a2:c7:00:6c:94:b4:3c:
a7:ed:cb:8e:f1:46:12:73:02:65:5a:4e:3d:53:6a:12:90:21:
ea:9f:91:b0:b3:01:af:96:6b:f3:9b:a3:9e:b6:99:00:03:fb:
07:68:10:be:8f:b1:ce:c9:c3:c9:66:ff:c3:b9:dc:b7:27:39:
6d:62:8f:68:da:9c:71:1a:4c:37:61:c4:e9:fc:61:dc:c6:3e:
0a:41:94:49:e5:7e:70:23:28:99:e8:0f:b4:19:09:42:cd:85:
d6:87:d1:53:a6:28:db:5d:d3:ee:a1:a1:ab:e6:eb:70:6b:14:
79:9c:9d:9d:84:48:0b:2d:a7:a2:60:10:f6:ab:0f:f1:25:7b:
29:0c:d5:a8:12:1b:12:66:42:df:02:d5:fb:8a:dd:84:d1:15:
e3:ca:2b:83:77:5b:da:66:57:4e:6f:aa:c8:30:27:ab:fd:c9:
08:28:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org