Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/fXS1-LVqr4TewTR2nqutWLibBRY.roa
File: fXS1-LVqr4TewTR2nqutWLibBRY.roa (raw, json)
Hash identifier: tEWgyLGcujhHPi8O9ma6VumO0f7zbNKz553X0AaKevc=
Subject key identifier: 7D:74:B5:F8:B5:6A:AF:84:DE:C1:34:76:9E:AB:AD:58:B8:9B:05:16
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 018D82EDBF38FCF74CBB398340970E8C605F
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/fXS1-LVqr4TewTR2nqutWLibBRY.roa
Signing time: Wed 07 Feb 2024 09:37:15 +0000
ROA not before: Wed 07 Feb 2024 09:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206262
IP address blocks: 5.206.232.0/21 maxlen: 21
5.206.232.0/24 maxlen: 24
5.206.233.0/24 maxlen: 24
5.206.234.0/24 maxlen: 24
5.206.235.0/24 maxlen: 24
5.206.236.0/24 maxlen: 24
5.206.237.0/24 maxlen: 24
5.206.238.0/24 maxlen: 24
5.206.239.0/24 maxlen: 24
37.26.64.0/21 maxlen: 21
37.26.64.0/24 maxlen: 24
37.26.65.0/24 maxlen: 24
37.26.66.0/24 maxlen: 24
37.26.67.0/24 maxlen: 24
37.26.68.0/24 maxlen: 24
37.26.69.0/24 maxlen: 24
37.26.70.0/24 maxlen: 24
37.26.71.0/24 maxlen: 24
87.238.208.0/21 maxlen: 21
87.238.208.0/24 maxlen: 24
87.238.209.0/24 maxlen: 24
87.238.210.0/24 maxlen: 24
87.238.211.0/24 maxlen: 24
87.238.212.0/24 maxlen: 24
87.238.213.0/24 maxlen: 24
87.238.214.0/24 maxlen: 24
87.238.215.0/24 maxlen: 24
95.86.40.0/22 maxlen: 22
95.86.40.0/24 maxlen: 24
95.86.41.0/24 maxlen: 24
95.86.42.0/24 maxlen: 24
95.86.43.0/24 maxlen: 24
95.86.56.0/22 maxlen: 24
95.86.56.0/24 maxlen: 24
95.86.57.0/24 maxlen: 24
95.86.58.0/24 maxlen: 24
95.86.59.0/24 maxlen: 24
147.78.160.0/24 maxlen: 24
185.171.60.0/22 maxlen: 22
185.171.60.0/24 maxlen: 24
185.171.61.0/24 maxlen: 24
185.171.62.0/24 maxlen: 24
185.171.63.0/24 maxlen: 24
185.174.208.0/22 maxlen: 22
185.174.208.0/24 maxlen: 24
185.174.209.0/24 maxlen: 24
185.174.210.0/24 maxlen: 24
185.174.211.0/24 maxlen: 24
185.179.28.0/22 maxlen: 22
185.179.28.0/24 maxlen: 24
185.179.29.0/24 maxlen: 24
185.179.30.0/24 maxlen: 24
185.179.31.0/24 maxlen: 24
185.186.80.0/22 maxlen: 22
185.186.80.0/24 maxlen: 24
185.186.81.0/24 maxlen: 24
185.186.82.0/24 maxlen: 24
185.186.83.0/24 maxlen: 24
185.191.164.0/22 maxlen: 22
185.191.164.0/24 maxlen: 24
185.191.165.0/24 maxlen: 24
185.191.166.0/24 maxlen: 24
185.191.167.0/24 maxlen: 24
2a0c:b340::/29 maxlen: 29
2a0c:b340::/32 maxlen: 32
2a0c:b340::/48 maxlen: 48
2a0c:b340:1::/48 maxlen: 48
2a0c:b341::/32 maxlen: 32
2a0c:b342::/32 maxlen: 32
2a0c:b343::/32 maxlen: 32
2a0c:b344::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 Feb 2024 16:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:ed:bf:38:fc:f7:4c:bb:39:83:40:97:0e:8c:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Feb 7 09:37:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d74b5f8b56aaf84dec134769eabad58b89b0516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:98:e8:2c:0d:1b:bb:b0:b3:26:0b:b3:3b:
50:6c:fb:cd:b5:d7:e0:b0:af:18:f7:69:58:ef:21:
66:ae:4f:f9:42:42:d7:58:fd:1d:67:04:cc:69:e4:
4e:11:41:e6:57:8b:1e:49:11:47:e4:52:be:12:6b:
32:b4:ca:99:10:cd:a4:a4:94:bd:be:19:42:27:04:
9f:0b:7f:c9:1b:bf:01:a7:02:b1:a3:f4:12:93:73:
24:17:2e:13:63:53:3c:3e:15:5f:5e:67:ed:5c:f7:
36:35:6a:f7:cd:eb:fa:e3:92:61:f1:17:f0:c8:27:
c5:e5:2e:d0:5a:3b:93:00:2e:58:f6:01:e9:ae:57:
96:4b:d7:69:78:7e:0b:4d:39:c7:84:9e:ab:1e:2b:
a8:7f:f4:d6:a4:c0:29:35:46:4f:bc:a5:2e:f1:2a:
a9:48:79:5b:68:51:f1:57:a4:8e:5d:64:e7:d4:34:
e0:c2:33:70:af:21:15:ca:3c:91:5f:de:a8:b6:38:
10:73:dc:69:73:c7:4c:fb:15:2e:0a:96:64:26:ee:
8f:39:ad:7b:23:70:3e:7e:ca:8f:0d:e6:9b:7d:f4:
5b:15:1b:25:2b:a8:b6:70:4c:da:6f:97:0c:03:58:
1f:e5:ce:ff:3e:d5:fd:ff:5e:3a:23:3c:42:0d:8c:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:B5:F8:B5:6A:AF:84:DE:C1:34:76:9E:AB:AD:58:B8:9B:05:16
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/fXS1-LVqr4TewTR2nqutWLibBRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.232.0/21
37.26.64.0/21
87.238.208.0/21
95.86.40.0/22
95.86.56.0/22
147.78.160.0/24
185.171.60.0/22
185.174.208.0/22
185.179.28.0/22
185.186.80.0/22
185.191.164.0/22
IPv6:
2a0c:b340::/29
Signature Algorithm: sha256WithRSAEncryption
84:93:44:d8:b9:8a:42:fb:45:d8:35:61:98:cf:4a:dc:cc:81:
b5:86:3a:64:85:cd:44:de:67:fe:b4:e5:cf:09:58:5f:98:a4:
09:e1:aa:35:fd:32:10:ba:d6:c4:1c:17:8e:59:7d:a0:68:8f:
51:ba:29:78:2c:48:86:b4:18:90:22:bf:7e:72:3f:f9:c4:e1:
7e:ef:87:31:92:08:39:d5:a5:42:b9:75:1a:66:9f:de:69:ce:
55:c5:24:26:fc:9a:e3:39:76:37:74:d4:07:41:85:5a:6c:34:
39:ab:3a:2a:18:5d:1e:dc:a8:30:fc:ab:8c:d6:f9:b5:32:de:
39:4c:1d:f2:a8:54:c3:1d:0c:ea:4a:90:da:ea:76:cf:c0:98:
4c:97:5e:bf:1c:77:7b:b7:0a:60:03:40:e5:a0:07:ed:8f:70:
40:00:a6:10:99:41:d8:71:e6:7e:20:24:6e:67:fc:8c:8a:c2:
0b:60:9e:08:14:ed:d3:b4:79:63:b6:73:93:9e:f0:da:45:43:
e8:09:d2:48:35:c9:ac:a8:ef:68:f7:f9:52:a4:21:a6:78:4e:
8b:00:91:3c:4d:87:93:2c:e9:73:f2:2b:48:62:98:e0:a4:38:
fa:a0:b1:60:ef:0a:72:ff:b7:f3:a8:e1:3e:22:0e:d8:24:40:
e8:22:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 20:26:38 2024 by rpki-client on console-fra.rpki-client.org