Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/9ZGE_vR_viWV2mmAVZ4njP34RhU.roa
File: 9ZGE_vR_viWV2mmAVZ4njP34RhU.roa (raw, json)
Hash identifier: SctMdma/PL4DOVmUdCKiuYp5J23zIncX/CgboL+oblQ=
Subject key identifier: F5:91:84:FE:F4:7F:BE:25:95:DA:69:80:55:9E:27:8C:FD:F8:46:15
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018976A624ADCE1E683AC3690880F29F3DD4
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/9ZGE_vR_viWV2mmAVZ4njP34RhU.roa
Signing time: Fri 21 Jul 2023 04:12:27 +0000
ROA not before: Fri 21 Jul 2023 04:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.188.62.0/24 maxlen: 24
185.188.63.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.201.188.0/24 maxlen: 24
89.40.24.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
5.154.174.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
45.156.224.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
77.246.152.0/22 maxlen: 22
45.95.24.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
89.35.249.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a01:4740::/32 maxlen: 32
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:76:a6:24:ad:ce:1e:68:3a:c3:69:08:80:f2:9f:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 21 04:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f59184fef47fbe2595da6980559e278cfdf84615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:4e:0f:a1:b5:e5:c7:51:ff:db:8e:6b:72:
66:70:2d:a1:0a:e8:9c:eb:36:68:ec:b3:53:2c:b9:
88:26:bb:00:b2:9d:e9:3c:a0:78:e2:64:f8:36:60:
d3:09:99:a9:fc:27:61:f6:8f:88:42:70:13:b9:7a:
a0:3d:91:65:80:cd:f3:af:b2:85:5b:74:a2:3d:6c:
60:67:1c:ab:73:fc:ae:0b:db:dc:0c:11:41:6f:55:
67:45:0f:56:1b:bb:76:9f:87:5b:57:9b:69:4f:e5:
4f:19:dd:5a:a1:30:4e:7d:b7:b1:b2:c0:87:72:04:
56:c7:b7:2e:13:76:89:b2:9c:85:03:d7:0a:ed:88:
0e:45:d6:26:91:d3:43:d2:c9:19:55:04:5f:a2:d1:
f2:0f:0a:ff:39:2d:b1:33:af:0e:5b:ba:50:24:66:
73:2b:56:3c:09:53:82:41:e2:02:57:fc:f7:cf:0c:
f2:cf:0f:06:e8:d9:12:2b:43:5e:5f:ba:3f:07:6c:
d2:bb:27:4d:0f:b8:c6:dc:bb:6c:a8:64:76:68:d3:
34:0f:36:bb:78:e3:80:2b:c0:54:eb:29:87:a4:63:
4e:9b:a3:7c:71:f5:78:72:ca:4d:51:04:b2:80:95:
91:a6:aa:4d:70:61:64:9a:40:f3:d7:1a:08:c4:f1:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:84:FE:F4:7F:BE:25:95:DA:69:80:55:9E:27:8C:FD:F8:46:15
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/9ZGE_vR_viWV2mmAVZ4njP34RhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.156.224.0/22
77.246.152.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0-185.188.63.255
185.201.188.0/24
185.217.64.0/22
188.119.154.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
Signature Algorithm: sha256WithRSAEncryption
c3:f2:8e:7b:ed:83:5e:3a:6f:da:b6:ba:27:d6:07:4d:09:f3:
88:e2:a8:48:86:21:e3:6d:1c:17:73:18:fc:10:76:ba:73:10:
8a:a1:cc:c6:22:06:16:22:04:6d:8e:43:24:bd:52:a4:38:4e:
77:49:d9:37:c0:44:df:50:6e:30:8b:2b:ff:e4:c5:6a:1c:fe:
88:d1:02:85:35:3f:02:74:d2:fe:df:e7:43:6f:0d:32:8a:18:
ad:9d:3b:d8:f3:b4:88:5a:a6:6f:d0:73:51:0a:dc:07:07:2e:
81:56:b1:b6:08:00:d1:26:83:df:cd:1c:55:38:cf:30:62:15:
50:cc:cc:5b:7d:68:83:de:f9:9b:f0:82:43:01:d5:07:e3:85:
c5:49:af:04:1f:f2:70:ac:cb:27:d5:d5:e0:aa:3a:fb:67:7b:
cb:0a:02:46:ac:cd:5e:21:56:77:cd:58:11:99:44:ca:d5:83:
ed:22:f6:fc:6b:83:10:00:2d:95:c1:8d:f3:63:4d:09:44:a5:
95:1d:c2:d2:4e:aa:f7:37:52:9f:bd:4c:29:b4:c6:ec:e6:fc:
d6:5c:b5:ed:05:72:e8:a6:2d:01:e9:ae:a2:77:af:d6:b8:4d:
28:ae:89:a5:61:ea:7e:51:8f:2d:d7:e3:cb:28:90:7e:56:bc:
02:f7:62:79
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAYl2piStzh5oOsNpCIDynz3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwNzIxMDQxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTkxODRmZWY0N2ZiZTI1OTVkYTY5ODA1NTllMjc4Y2ZkZjg0NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvVOD6G15cdR/9uOa3JmcC2hCuic
6zZo7LNTLLmIJrsAsp3pPKB44mT4NmDTCZmp/Cdh9o+IQnATuXqgPZFlgM3zr7KF
W3SiPWxgZxyrc/yuC9vcDBFBb1VnRQ9WG7t2n4dbV5tpT+VPGd1aoTBOfbexssCH
cgRWx7cuE3aJspyFA9cK7YgORdYmkdND0skZVQRfotHyDwr/OS2xM68OW7pQJGZz
K1Y8CVOCQeICV/z3zwzyzw8G6NkSK0NeX7o/B2zSuydND7jG3LtsqGR2aNM0Dza7
eOOAK8BU6ymHpGNOm6N8cfV4cspNUQSygJWRpqpNcGFkmkDz1xoIxPFBhQIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFPWRhP70f74lldppgFWeJ4z9+EYVMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvOVpHRV92Ul92aVdWMm1tQVZaNG5qUDM0UmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBvQQCAAEwgbYD
BAAFmq4DBAItXxgDBAItkFgDBAItlRwDBAItnOADBAJN9pgDBABQ9h4DBABWabcD
BABX7/4DBABZI/kDBABZKBgDBABZLM0DBABb5NgDBABeLs4DBAC5JP4DBAC5YKID
BAG5bGgDBAK5k4wDBAK5mCQDBAK5mPgDBAC5mZcDBAK5oCwDBAC5plQDBAC5uOQw
DAMEALm8PQMEBrm8AAMEALnJvAMEArnZQAMEALx3mgMEAMMvwjA+BAIAAjA4AwUA
KgFHQAMFAyoFKMADBQMqBfTAAwUDKgYwQAMFAyoGRsADBQMqBkoAAwUDKgZQAAMF
AyoGVwAwDQYJKoZIhvcNAQELBQADggEBAMPyjnvtg146b9q2uifWB00J84jiqEiG
IeNtHBdzGPwQdrpzEIqhzMYiBhYiBG2OQyS9UqQ4TndJ2TfARN9QbjCLK//kxWoc
/ojRAoU1PwJ00v7f50NvDTKKGK2dO9jztIhapm/Qc1EK3AcHLoFWsbYIANEmg9/N
HFU4zzBiFVDMzFt9aIPe+ZvwgkMB1QfjhcVJrwQf8nCsyyfV1eCqOvtne8sKAkas
zV4hVnfNWBGZRMrVg+0i9vxrgxAALZXBjfNjTQlEpZUdwtJOqvc3Up+9TCm0xuzm
/NZcte0FcuimLQHprqJ3r9a4TSiuiaVh6n5Rjy3X48sokH5WvAL3Ynk=
Generated at Fri Jul 28 11:17:49 2023 by rpki-client on console-ams.rpki-client.org