Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/s_frGJF1XHdn4DHqK8pnWPBwPPM.roa
File: s_frGJF1XHdn4DHqK8pnWPBwPPM.roa (raw, json)
Hash identifier: WadHRWyn5Ic/59y17wk1AxzM0bpfkLuJWPRV8vrcrP4=
Subject key identifier: B3:F7:EB:18:91:75:5C:77:67:E0:31:EA:2B:CA:67:58:F0:70:3C:F3
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 018C17859C4D22C959FA16D9634A10CE020A
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/s_frGJF1XHdn4DHqK8pnWPBwPPM.roa
Signing time: Tue 28 Nov 2023 20:01:21 +0000
ROA not before: Tue 28 Nov 2023 20:01:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44444
IP address blocks: 157.167.200.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.160.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.161.0/24 maxlen: 24
157.167.162.0/24 maxlen: 24
157.167.192.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
185.4.99.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
86.111.223.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.48.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.57.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.38.0/24 maxlen: 24
85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:85:9c:4d:22:c9:59:fa:16:d9:63:4a:10:ce:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Nov 28 20:01:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3f7eb1891755c7767e031ea2bca6758f0703cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:97:a6:94:df:76:8c:d3:e8:6a:06:bc:a5:
a2:06:23:bb:71:04:75:51:96:94:dc:02:2d:7b:b7:
b6:5f:d1:51:23:7c:13:7f:fb:8f:76:1c:96:1b:7b:
b8:60:c1:0d:57:8f:68:42:70:4d:87:77:e1:d5:e4:
43:ba:db:26:b5:cd:b6:28:78:f4:f2:01:68:4e:2e:
42:32:91:5e:f1:f7:2b:68:43:c0:43:d9:e7:53:22:
0e:da:37:19:09:bf:f5:ec:49:3b:8d:bf:d1:31:8f:
3c:12:ec:0c:7c:e0:09:74:09:1f:8e:5d:40:0c:e3:
82:f0:15:16:ea:19:f1:07:ea:8f:3e:74:dc:cb:58:
fb:96:fb:fd:35:21:dc:30:30:94:e3:68:0e:01:40:
97:a0:b0:be:b2:30:4d:37:e2:56:c9:0f:f9:66:9e:
a7:b0:a2:cf:13:47:ba:ea:40:94:85:f4:0a:5e:10:
5b:5c:dd:30:5e:ab:40:1a:47:13:ca:84:19:57:eb:
37:fe:c6:31:6e:78:3f:7c:2a:07:eb:56:3a:be:e8:
f4:de:1a:78:2a:22:fb:e8:21:2a:c8:5a:2c:7d:b2:
6f:4b:cf:5d:30:38:71:b3:f3:87:5e:1a:ba:b2:96:
89:57:6e:22:35:cb:ab:4b:ab:a1:fb:72:b4:79:44:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:EB:18:91:75:5C:77:67:E0:31:EA:2B:CA:67:58:F0:70:3C:F3
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/s_frGJF1XHdn4DHqK8pnWPBwPPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0/19
86.111.222.0/23
157.167.4.0/24
157.167.10.0-157.167.128.255
157.167.130.0-157.167.132.255
157.167.157.0-157.167.163.255
157.167.192.0/24
157.167.200.0/24
185.4.96.0/22
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
0c:d0:3a:be:e8:33:13:87:77:17:7f:e5:07:b1:6e:46:a3:3d:
ec:09:63:8f:6e:7c:f6:36:c2:f3:26:9c:f0:48:34:cb:72:93:
d3:b9:13:42:44:02:23:64:3b:ce:f2:09:ad:59:a5:6d:56:b4:
36:b7:b4:c0:26:b1:c7:e2:b7:72:eb:60:d4:c0:4d:77:1d:56:
15:67:71:1d:de:e7:f2:99:c7:b2:e6:04:cf:9f:06:10:2d:b0:
ef:e2:d6:d8:80:d0:89:f6:33:76:4e:5b:e3:b5:a6:a8:d3:28:
0d:26:8e:c5:cf:ba:00:a6:19:45:2f:1b:67:37:68:fc:00:25:
a7:19:7e:19:41:d9:97:ac:c7:4d:2d:13:29:b1:a6:ed:21:17:
47:00:0d:c9:5c:2a:29:b2:f8:68:aa:be:58:c6:28:ca:38:f7:
5a:b4:9d:77:ce:46:e2:78:11:e0:36:24:e7:cd:91:11:15:a0:
6c:f2:bb:b8:9b:fd:bc:57:4d:bd:bb:c5:a8:44:34:24:8d:0b:
12:14:7e:b9:77:da:75:f8:61:17:a8:f8:9f:6f:a2:4c:b9:4e:
d5:0e:ff:4c:00:d4:e9:21:55:a1:12:70:49:4b:49:10:9c:de:
4f:51:c9:69:f8:65:dc:0c:7d:bd:8c:b3:8c:b7:7c:47:75:34:
39:75:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org