Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PTNTIbJga0P9i5MmWfsImvc5j_g.roa
File: PTNTIbJga0P9i5MmWfsImvc5j_g.roa (raw, json)
Hash identifier: 67A/6hz/1wm4UNgf+zgtMDl4YGHGGglhAYEFc8QZtUo=
Subject key identifier: 3D:33:53:21:B2:60:6B:43:FD:8B:93:26:59:FB:08:9A:F7:39:8F:F8
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01892D33E902FDA607EC84F0A2B8B68D9848
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PTNTIbJga0P9i5MmWfsImvc5j_g.roa
Signing time: Thu 06 Jul 2023 21:55:24 +0000
ROA not before: Thu 06 Jul 2023 21:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3326
IP address blocks: 185.46.248.0/22 maxlen: 22
195.114.131.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.196.0/24 maxlen: 24
176.241.130.0/23 maxlen: 23
176.241.128.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.148.0/22 maxlen: 22
176.241.104.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
178.213.174.0/24 maxlen: 24
188.247.96.0/20 maxlen: 20
178.213.175.0/24 maxlen: 24
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
217.112.208.0/20 maxlen: 20
91.193.68.0/22 maxlen: 22
178.213.168.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
178.213.172.0/23 maxlen: 23
109.206.32.0/19 maxlen: 19
80.91.166.0/24 maxlen: 24
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
85.159.0.0/21 maxlen: 21
80.91.172.0/22 maxlen: 22
80.91.168.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.184.0/21 maxlen: 21
80.91.183.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
94.232.72.0/21 maxlen: 21
46.164.164.0/23 maxlen: 23
80.77.38.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.32.0/22 maxlen: 22
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.218.0/23 maxlen: 23
93.183.215.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.220.0/22 maxlen: 22
93.183.225.0/24 maxlen: 24
93.183.224.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.230.0/23 maxlen: 23
93.183.228.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.237.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
93.183.192.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.196.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.198.0/23 maxlen: 23
195.69.176.0/23 maxlen: 23
195.69.177.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.95.0/24 maxlen: 24
91.204.94.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
5.1.16.0/20 maxlen: 20
88.81.232.0/22 maxlen: 22
176.102.32.0/21 maxlen: 21
88.81.237.0/24 maxlen: 24
88.81.236.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
176.102.40.0/21 maxlen: 21
88.81.246.0/24 maxlen: 24
88.81.244.0/22 maxlen: 22
88.81.248.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
176.102.48.0/23 maxlen: 23
88.81.249.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
88.81.254.0/23 maxlen: 23
77.88.202.0/24 maxlen: 24
77.88.201.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.207.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.210.0/24 maxlen: 24
5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
77.88.216.0/22 maxlen: 22
77.88.214.0/23 maxlen: 23
77.88.221.0/24 maxlen: 24
77.88.220.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
185.8.40.0/22 maxlen: 22
77.222.137.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
31.128.68.0/22 maxlen: 22
77.222.152.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
77.222.158.0/23 maxlen: 23
31.128.76.0/23 maxlen: 23
77.222.156.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
193.108.51.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.48.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
195.114.149.0/24 maxlen: 24
195.114.148.0/24 maxlen: 24
195.114.147.0/24 maxlen: 24
195.114.146.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.150.0/24 maxlen: 24
77.222.128.0/21 maxlen: 21
193.108.129.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.41.48.0/22 maxlen: 22
80.249.224.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a01:758:ffe3::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a01:758:ffe1::/48 maxlen: 48
2a01:758:ffe4::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70:100::/40 maxlen: 40
2a01:758:fff3::/48 maxlen: 48
2a01:758:ffe2::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a02:70::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Sep 2023 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2d:33:e9:02:fd:a6:07:ec:84:f0:a2:b8:b6:8d:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jul 6 21:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d335321b2606b43fd8b932659fb089af7398ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:55:2f:f4:cf:91:06:1a:56:f3:87:c8:20:
17:c9:58:7d:09:c1:f2:53:8d:3c:60:29:a9:d5:50:
83:53:32:fa:d3:c9:88:f4:1b:dc:51:f0:4f:28:80:
ea:67:db:23:7d:37:0f:d8:b8:1b:ee:19:47:dc:3c:
18:58:24:33:56:0d:ff:04:24:68:41:8d:6c:5c:51:
7b:75:fc:72:f0:53:21:65:e8:5d:e4:84:fb:12:98:
77:6b:af:92:36:9e:29:84:ef:c2:46:64:99:c2:a0:
f9:99:94:18:61:fe:69:2a:8a:b1:88:40:ff:3f:3c:
6c:b8:09:36:b5:ac:f6:4e:b0:26:06:71:17:92:19:
75:48:36:aa:8d:e2:e2:d1:95:fb:b2:8a:95:7f:3d:
be:0e:d6:6a:3e:8d:2d:f2:98:12:e6:99:33:dc:30:
e4:5c:1f:71:5e:03:ea:6d:1d:e5:44:cc:ae:26:51:
da:14:48:01:fd:d1:ed:21:d3:49:8d:ee:39:1b:2f:
53:09:ed:a1:29:37:7b:28:13:c9:de:39:7f:b7:03:
27:da:56:8f:5f:67:85:1e:95:81:30:44:75:ec:69:
3a:89:19:33:9a:fd:01:58:34:42:41:c6:a0:ee:f1:
c0:e3:6b:90:eb:50:56:91:78:b8:f5:5d:ca:a4:30:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:53:21:B2:60:6B:43:FD:8B:93:26:59:FB:08:9A:F7:39:8F:F8
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/PTNTIbJga0P9i5MmWfsImvc5j_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
46.164.164.0/23
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
2f:2f:c1:92:0e:f5:14:4f:8d:7e:97:89:26:9e:9d:1b:a1:9a:
9c:65:68:8a:d7:26:19:49:59:4f:a7:fc:2b:06:16:15:c3:89:
ee:3b:f9:27:4a:0b:cb:77:63:10:7b:a1:92:18:63:74:10:cf:
ba:04:87:ef:fe:2d:b5:87:96:f0:a2:e9:6d:13:e7:0c:b3:47:
ce:75:cb:ee:92:3d:14:9c:24:52:3b:ec:fe:af:de:da:15:a9:
b4:1c:d3:79:90:ea:8c:c3:0b:b7:ae:6f:53:f7:af:ab:8c:67:
a3:64:e1:b8:91:78:73:06:7a:5f:7b:2f:8d:35:70:06:8f:7e:
b7:71:77:a7:36:80:74:7b:1c:a8:7b:40:fd:ed:89:dc:89:89:
c8:0e:6d:ed:50:7e:e9:14:1a:2c:00:08:a5:b0:ca:07:83:26:
07:46:82:89:86:ae:de:dc:4c:80:a2:6f:01:cf:81:aa:08:5d:
de:c0:7f:e5:9b:0c:1b:e7:1d:f2:2f:43:df:79:dc:11:72:c2:
4b:86:d6:cd:ad:f9:d3:57:aa:75:3b:99:e8:3c:72:09:f5:68:
d4:69:e2:ab:1c:be:df:fb:7c:ba:7d:c8:75:6a:db:4a:c9:3e:
1a:fe:3d:f7:e4:d4:32:1c:9b:d3:17:6d:79:21:63:12:9d:eb:
5b:78:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org