Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/eJkcRWlk0WYzwFBXOjuoZWP8eqQ.roa
File: eJkcRWlk0WYzwFBXOjuoZWP8eqQ.roa (raw, json)
Hash identifier: f+6lixDbUR36sIrVyFG+Y7K0fWOTc3hlTEk6S14jwgY=
Subject key identifier: 78:99:1C:45:69:64:D1:66:33:C0:50:57:3A:3B:A8:65:63:FC:7A:A4
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 018D8480937CDC2FD143F54A2FC8DE36E104
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/eJkcRWlk0WYzwFBXOjuoZWP8eqQ.roa
Signing time: Wed 07 Feb 2024 16:57:15 +0000
ROA not before: Wed 07 Feb 2024 16:57:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206262
IP address blocks: 5.206.232.0/21 maxlen: 21
5.206.232.0/24 maxlen: 24
5.206.233.0/24 maxlen: 24
5.206.234.0/24 maxlen: 24
5.206.235.0/24 maxlen: 24
5.206.236.0/24 maxlen: 24
5.206.237.0/24 maxlen: 24
5.206.238.0/24 maxlen: 24
5.206.239.0/24 maxlen: 24
37.26.64.0/21 maxlen: 21
37.26.64.0/24 maxlen: 24
37.26.65.0/24 maxlen: 24
37.26.66.0/24 maxlen: 24
37.26.67.0/24 maxlen: 24
37.26.68.0/24 maxlen: 24
37.26.69.0/24 maxlen: 24
37.26.70.0/24 maxlen: 24
37.26.71.0/24 maxlen: 24
87.238.208.0/21 maxlen: 21
87.238.208.0/24 maxlen: 24
87.238.209.0/24 maxlen: 24
87.238.210.0/24 maxlen: 24
87.238.211.0/24 maxlen: 24
87.238.212.0/24 maxlen: 24
87.238.213.0/24 maxlen: 24
87.238.214.0/24 maxlen: 24
87.238.215.0/24 maxlen: 24
95.86.40.0/22 maxlen: 22
95.86.40.0/24 maxlen: 24
95.86.41.0/24 maxlen: 24
95.86.42.0/24 maxlen: 24
95.86.43.0/24 maxlen: 24
95.86.56.0/22 maxlen: 24
95.86.56.0/24 maxlen: 24
95.86.57.0/24 maxlen: 24
95.86.58.0/24 maxlen: 24
95.86.59.0/24 maxlen: 24
147.78.160.0/24 maxlen: 24
147.78.162.0/24 maxlen: 24
185.171.60.0/22 maxlen: 22
185.171.60.0/24 maxlen: 24
185.171.61.0/24 maxlen: 24
185.171.62.0/24 maxlen: 24
185.171.63.0/24 maxlen: 24
185.174.208.0/22 maxlen: 22
185.174.208.0/24 maxlen: 24
185.174.209.0/24 maxlen: 24
185.174.210.0/24 maxlen: 24
185.174.211.0/24 maxlen: 24
185.179.28.0/22 maxlen: 22
185.179.28.0/24 maxlen: 24
185.179.29.0/24 maxlen: 24
185.179.30.0/24 maxlen: 24
185.179.31.0/24 maxlen: 24
185.186.80.0/22 maxlen: 22
185.186.80.0/24 maxlen: 24
185.186.81.0/24 maxlen: 24
185.186.82.0/24 maxlen: 24
185.186.83.0/24 maxlen: 24
185.191.164.0/22 maxlen: 22
185.191.164.0/24 maxlen: 24
185.191.165.0/24 maxlen: 24
185.191.166.0/24 maxlen: 24
185.191.167.0/24 maxlen: 24
2a0c:b340::/29 maxlen: 29
2a0c:b340::/32 maxlen: 32
2a0c:b340::/48 maxlen: 48
2a0c:b340:1::/48 maxlen: 48
2a0c:b341::/32 maxlen: 32
2a0c:b342::/32 maxlen: 32
2a0c:b343::/32 maxlen: 32
2a0c:b344::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 Feb 2024 19:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:80:93:7c:dc:2f:d1:43:f5:4a:2f:c8:de:36:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Feb 7 16:57:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78991c456964d16633c050573a3ba86563fc7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:38:c8:15:4d:7f:2a:8c:b3:16:67:8f:2d:
8c:62:e6:4e:48:b1:79:71:40:be:be:c9:05:03:e3:
39:e1:22:39:c3:48:8c:f9:a7:06:9f:39:40:88:41:
5f:78:68:b5:12:87:c7:ef:57:37:3a:c2:e3:aa:3b:
b3:bb:15:11:8d:35:82:1c:e2:42:87:74:ea:85:42:
8c:fc:9e:70:82:f8:dc:93:bf:c7:91:ff:51:58:8c:
0a:47:bf:0a:99:4b:ae:7e:50:73:52:4d:3f:4a:24:
f6:82:42:0f:d2:12:bf:55:0b:a1:54:14:1a:25:20:
e9:a9:c7:f8:78:e6:3a:39:c7:5c:75:3d:fc:a3:46:
d7:77:08:ee:85:95:21:ee:6d:c5:d8:a9:66:f8:95:
2d:d9:e0:80:e3:e4:47:46:f6:f3:73:86:6a:9b:bd:
9d:db:47:e6:ac:c3:50:a3:7e:ec:57:0e:3f:d2:a9:
17:d8:ee:14:93:ae:1d:00:80:92:30:c6:61:8e:c2:
23:a9:07:48:45:6a:2a:df:ec:4d:02:da:95:83:f0:
7c:63:12:8f:a6:40:39:42:78:a5:b4:65:c4:a0:6d:
e6:11:a5:16:2b:02:94:6f:5c:7d:bd:91:eb:2a:3b:
25:f9:2b:3b:49:7d:b4:6c:88:75:df:ef:c4:c5:ef:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:1C:45:69:64:D1:66:33:C0:50:57:3A:3B:A8:65:63:FC:7A:A4
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/eJkcRWlk0WYzwFBXOjuoZWP8eqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.232.0/21
37.26.64.0/21
87.238.208.0/21
95.86.40.0/22
95.86.56.0/22
147.78.160.0/24
147.78.162.0/24
185.171.60.0/22
185.174.208.0/22
185.179.28.0/22
185.186.80.0/22
185.191.164.0/22
IPv6:
2a0c:b340::/29
Signature Algorithm: sha256WithRSAEncryption
2b:9e:c3:2a:5c:91:e5:3a:d0:b0:b4:bb:64:95:4b:9a:6e:1e:
c3:7e:5f:67:cf:90:e9:ed:6a:8d:38:cc:a2:a9:c1:d3:0f:dc:
89:07:73:8c:43:71:ec:b2:ba:cc:2b:db:2f:e3:ca:c5:6c:86:
67:4e:79:60:9d:29:f8:62:13:82:81:31:4a:f2:b0:2a:95:ae:
e2:01:ec:f4:0c:05:9e:4f:74:19:64:30:f7:c1:8e:2a:64:72:
2e:a9:5f:f6:a3:4f:ed:9a:5d:d1:1d:7f:63:97:11:10:31:be:
84:21:c8:d5:d1:63:df:ab:5a:c0:85:fe:46:60:93:af:35:8c:
b3:68:3b:7a:18:8c:7e:f0:c4:26:92:f6:ef:e3:b0:59:14:70:
82:66:50:f0:cf:66:14:bc:06:e4:67:45:a1:1e:16:7e:77:81:
4c:af:df:aa:2b:63:d3:96:cb:5d:b4:87:87:2f:29:cc:5d:0c:
38:1c:f7:95:93:be:62:04:29:8e:f8:4c:88:f4:e7:7e:a0:1f:
9e:08:b4:24:15:99:24:fd:a1:e2:7b:7c:e3:93:d0:b1:89:31:
37:af:ba:a3:d3:0d:5c:29:f4:85:35:31:8a:64:ea:90:b1:16:
51:c1:28:6e:19:c2:c0:04:c3:eb:93:c6:9c:df:9b:eb:4e:87:
88:19:1f:e7
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 7 23:23:06 2024 by rpki-client on console-ams.rpki-client.org