Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/kYCXe_49D7_ebcPVSjc8JuwIZDw.roa
File: kYCXe_49D7_ebcPVSjc8JuwIZDw.roa (raw, json)
Hash identifier: 5ddfrbmhHYUJkDDqigPfGfCp2Lg+Kg4tfiTliBc9qD0=
Subject key identifier: 91:80:97:7B:FE:3D:0F:BF:DE:6D:C3:D5:4A:37:3C:26:EC:08:64:3C
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01856F4B790DB414B40EA87990C54B58583C
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/kYCXe_49D7_ebcPVSjc8JuwIZDw.roa
Signing time: Sun 01 Jan 2023 21:44:55 +0000
ROA not before: Sun 01 Jan 2023 21:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47883
IP address blocks: 94.79.93.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.64.0/18 maxlen: 18
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.0.0/20 maxlen: 20
5.104.4.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.0.0/19 maxlen: 19
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:79:0d:b4:14:b4:0e:a8:79:90:c5:4b:58:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 21:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9180977bfe3d0fbfde6dc3d54a373c26ec08643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:ea:ee:0b:a5:d5:d2:35:2a:b8:74:30:30:
41:6b:aa:63:08:a1:c2:25:39:09:46:66:48:30:d7:
06:e6:97:ae:16:7c:e0:ad:4a:f5:f3:3c:8e:37:56:
33:a2:4d:02:bd:c6:e7:f0:6e:fc:fd:78:be:7a:4f:
62:f4:29:76:08:85:73:28:ba:a8:a5:cc:6f:9d:0c:
01:9c:0c:82:4e:1b:ec:0f:9d:9b:52:f5:93:a8:b0:
9a:63:44:c6:5d:53:6e:09:fa:50:be:42:83:f9:98:
09:36:4e:38:d8:2b:17:f2:3e:94:02:26:bf:22:fd:
30:7a:46:c4:47:c5:76:13:0c:bd:24:10:82:50:b9:
d6:a7:eb:2c:60:5b:99:2a:84:91:56:ef:7b:54:80:
56:18:70:a2:14:06:45:33:18:2b:74:49:96:2a:cf:
f8:9b:f6:5a:09:70:51:94:30:c0:4a:43:78:1a:4f:
28:14:87:df:b4:57:a6:46:24:0d:0e:07:b2:90:3a:
cc:37:df:51:d5:26:58:67:3c:07:4b:dc:7f:3e:ea:
9e:17:70:53:74:6c:d5:1c:33:13:3c:a6:dc:11:b3:
fd:e9:d1:52:fb:54:74:da:1a:de:13:f4:63:53:3a:
4f:f6:f8:87:06:4b:e6:bd:f7:e2:1e:db:3b:9e:14:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:97:7B:FE:3D:0F:BF:DE:6D:C3:D5:4A:37:3C:26:EC:08:64:3C
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/kYCXe_49D7_ebcPVSjc8JuwIZDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:5a:52:29:9d:19:55:09:65:aa:e2:d6:9a:99:29:58:1b:f3:
d7:e4:59:b9:6b:2f:9b:56:70:cf:f1:d2:c1:af:64:6c:c3:f3:
87:71:7c:8e:dc:d0:44:31:74:6f:a5:45:fb:0b:d5:fd:9b:a0:
73:b3:fd:5b:c6:57:23:ee:2f:1f:24:fc:e0:93:9c:e2:5a:82:
88:47:9f:c1:a1:46:9e:3b:e2:eb:97:53:92:2c:42:14:ba:00:
37:92:09:29:4d:6a:15:5e:a9:13:04:46:17:6c:88:96:9b:31:
4d:5c:0b:b7:7d:91:34:53:4e:09:2f:73:4f:08:d7:57:70:fc:
7f:7b:82:cf:55:6d:da:91:92:35:e5:ca:9b:4c:9f:c0:bd:03:
94:6d:83:13:f2:67:c4:e7:3b:76:e0:7e:f6:37:5a:84:c6:e8:
08:f2:26:c1:93:05:00:e0:13:3d:91:27:d5:13:f3:17:74:1c:
2a:a6:2f:dd:80:6c:58:fe:eb:f0:b7:45:fb:34:49:ea:d1:07:
ea:0d:b0:76:d8:ff:98:45:ec:30:aa:79:0d:fe:3f:d3:62:79:
49:6c:40:72:47:48:fb:48:6f:cc:15:44:ef:9c:f6:40:73:82:
ca:50:17:27:a7:b1:8c:34:bc:03:71:e9:4d:da:f3:8e:cb:31:
95:13:59:e1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvS3kNtBS0Dqh5kMVLWFg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz
MDc0YWMwHhcNMjMwMTAxMjE0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTgwOTc3YmZlM2QwZmJmZGU2ZGMzZDU0YTM3M2MyNmVjMDg2NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjADq7gul1dI1Krh0MDBBa6pjCKHC
JTkJRmZIMNcG5peuFnzgrUr18zyON1Yzok0Cvcbn8G78/Xi+ek9i9Cl2CIVzKLqo
pcxvnQwBnAyCThvsD52bUvWTqLCaY0TGXVNuCfpQvkKD+ZgJNk442CsX8j6UAia/
Iv0wekbER8V2Ewy9JBCCULnWp+ssYFuZKoSRVu97VIBWGHCiFAZFMxgrdEmWKs/4
m/ZaCXBRlDDASkN4Gk8oFIfftFemRiQNDgeykDrMN99R1SZYZzwHS9x/PuqeF3BT
dGzVHDMTPKbcEbP96dFS+1R02hreE/RjUzpP9viHBkvmvffiHts7nhSVsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJGAl3v+PQ+/3m3D1Uo3PCbsCGQ8MB8GA1UdIwQY
MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt
Mjg0ZWM4MTYwMmU3LzEva1lDWGVfNDlEN19lYmNQVlNqYzhKdXdJWkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3
LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBWgAAwQF
JSIAAwQGXk9AMA0GCSqGSIb3DQEBCwUAA4IBAQBRWlIpnRlVCWWq4taamSlYG/PX
5Fm5ay+bVnDP8dLBr2Rsw/OHcXyO3NBEMXRvpUX7C9X9m6Bzs/1bxlcj7i8fJPzg
k5ziWoKIR5/BoUaeO+Lrl1OSLEIUugA3kgkpTWoVXqkTBEYXbIiWmzFNXAu3fZE0
U04JL3NPCNdXcPx/e4LPVW3akZI15cqbTJ/AvQOUbYMT8mfE5zt24H72N1qExugI
8ibBkwUA4BM9kSfVE/MXdBwqpi/dgGxY/uvwt0X7NEnq0QfqDbB22P+YRewwqnkN
/j/TYnlJbEByR0j7SG/MFUTvnPZAc4LKUBcnp7GMNLwDcelN2vOOyzGVE1nh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org