Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/fUOhMwly_qIqKSN5BHzZZLd0DmA.roa
File: fUOhMwly_qIqKSN5BHzZZLd0DmA.roa (raw, json)
Hash identifier: NRTB+OPYyTCcTmeS6ZpFgI8flkGSfDCLAyCMIKJvZQ4=
Subject key identifier: 7D:43:A1:33:09:72:FE:A2:2A:29:23:79:04:7C:D9:64:B7:74:0E:60
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018A6FBD0AF1270ED1AEA408BD213052AEB3
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/fUOhMwly_qIqKSN5BHzZZLd0DmA.roa
Signing time: Thu 07 Sep 2023 13:02:54 +0000
ROA not before: Thu 07 Sep 2023 13:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3326
IP address blocks: 185.46.248.0/22 maxlen: 22
195.114.131.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.196.0/24 maxlen: 24
176.241.130.0/23 maxlen: 23
176.241.128.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.148.0/22 maxlen: 22
176.241.104.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
178.213.174.0/24 maxlen: 24
188.247.96.0/20 maxlen: 20
178.213.175.0/24 maxlen: 24
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
217.112.208.0/20 maxlen: 20
91.193.68.0/22 maxlen: 22
178.213.168.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
178.213.172.0/23 maxlen: 23
109.206.32.0/19 maxlen: 19
80.91.166.0/24 maxlen: 24
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
85.159.0.0/21 maxlen: 21
80.91.172.0/22 maxlen: 22
80.91.168.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.184.0/21 maxlen: 21
80.91.183.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
94.232.72.0/21 maxlen: 21
46.164.164.0/23 maxlen: 23
80.77.38.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.32.0/22 maxlen: 22
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.218.0/23 maxlen: 23
93.183.215.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.220.0/22 maxlen: 22
93.183.225.0/24 maxlen: 24
93.183.224.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.230.0/23 maxlen: 23
93.183.228.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.237.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
93.183.192.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.196.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.198.0/23 maxlen: 23
195.69.176.0/23 maxlen: 23
195.69.177.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.95.0/24 maxlen: 24
91.204.94.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
5.1.16.0/20 maxlen: 20
88.81.232.0/22 maxlen: 22
176.102.32.0/21 maxlen: 21
88.81.237.0/24 maxlen: 24
88.81.236.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
176.102.40.0/21 maxlen: 21
88.81.246.0/24 maxlen: 24
88.81.244.0/22 maxlen: 22
88.81.248.0/24 maxlen: 24
88.81.247.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
176.102.48.0/23 maxlen: 23
88.81.249.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
88.81.254.0/23 maxlen: 23
77.88.202.0/24 maxlen: 24
77.88.201.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.207.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.210.0/24 maxlen: 24
5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
77.88.216.0/22 maxlen: 22
77.88.214.0/23 maxlen: 23
77.88.221.0/24 maxlen: 24
77.88.220.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
185.8.40.0/22 maxlen: 22
77.222.137.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
31.128.68.0/22 maxlen: 22
77.222.152.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
77.222.158.0/23 maxlen: 23
31.128.76.0/23 maxlen: 23
77.222.156.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
193.108.51.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.48.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
195.114.149.0/24 maxlen: 24
195.114.148.0/24 maxlen: 24
195.114.147.0/24 maxlen: 24
195.114.146.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.150.0/24 maxlen: 24
77.222.128.0/21 maxlen: 21
193.108.129.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.41.48.0/22 maxlen: 22
80.249.224.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a01:758:ffe3::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a01:758:ffe1::/48 maxlen: 48
2a01:758:ffe4::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70:100::/40 maxlen: 40
2a01:758:fff3::/48 maxlen: 48
2a01:758:ffe2::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a02:70::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:bd:0a:f1:27:0e:d1:ae:a4:08:bd:21:30:52:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Sep 7 13:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d43a1330972fea22a292379047cd964b7740e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:56:39:b4:95:c3:9c:94:c6:b1:f0:cb:fc:
3f:c0:cd:fc:b2:2a:60:5b:93:13:f5:5a:55:9b:f5:
59:f3:08:55:18:15:ef:7a:47:12:5f:e8:09:21:cf:
41:9b:84:a0:76:b0:79:fb:86:41:46:7f:38:ec:62:
8d:37:48:2d:49:06:68:75:81:16:ff:f3:8f:62:79:
70:6a:b4:5a:e2:f8:b7:ce:44:6a:1f:05:fe:8a:9f:
ee:ba:48:76:e4:c8:e2:91:4f:24:35:eb:4d:84:bf:
93:eb:64:93:70:b9:dd:bd:b8:78:ff:17:cf:f2:71:
d6:65:13:d5:79:e7:ed:41:90:0e:8b:70:5a:65:a6:
7f:09:93:e8:ba:81:b5:f0:40:10:18:82:c0:c9:50:
56:85:ff:68:57:b8:52:a9:ba:69:62:7c:67:58:31:
83:ed:eb:fa:d7:a9:e2:f4:9a:06:12:3c:a0:ab:a7:
5a:f9:9f:f4:a6:c0:2d:77:d1:b9:ec:0e:39:a9:57:
e7:bb:dc:d7:9f:84:81:28:8a:d6:12:59:a3:b2:b7:
38:03:0e:ac:d1:bc:0d:08:7f:27:38:ec:8e:71:f7:
96:e6:ad:07:60:27:f3:2b:10:39:1d:4c:54:7a:de:
05:d5:54:b7:75:83:bb:14:30:64:af:a8:87:b1:f6:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:A1:33:09:72:FE:A2:2A:29:23:79:04:7C:D9:64:B7:74:0E:60
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/fUOhMwly_qIqKSN5BHzZZLd0DmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
46.164.164.0/23
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
7a:62:77:bc:17:f2:28:b6:6f:30:7f:60:dc:33:60:fc:09:2c:
3e:b6:97:ba:03:91:da:10:bb:b7:87:ff:5f:02:ee:28:10:10:
35:a6:cd:28:41:bc:27:9e:20:01:f2:21:46:09:80:cc:f1:50:
9d:1c:d7:0d:3e:36:5c:b8:48:58:3a:29:9e:93:06:d3:d4:2e:
72:9e:4f:c9:ff:53:a0:a0:71:5b:62:d5:e4:4b:3e:f8:b4:9d:
cc:36:f1:f3:c7:42:21:5a:e0:49:bf:8e:28:55:ae:4d:4a:9a:
af:ad:b9:05:54:25:05:12:f1:d4:82:36:a1:f4:2a:b6:61:13:
00:c1:7e:a5:f0:3f:1e:2e:e2:70:70:16:fe:b1:cc:0e:09:d5:
77:d4:25:99:2e:c1:68:a8:8d:d0:09:48:6d:f1:b3:6a:4c:6f:
23:05:40:49:78:1c:9a:b7:a6:7c:c2:64:54:0c:bf:33:7f:4c:
98:83:66:5b:60:ec:f9:84:48:50:ed:75:e6:d0:3c:4c:e7:5d:
99:10:5a:99:ab:a7:dc:1f:14:c8:f4:7b:2f:77:47:fc:e3:73:
99:0a:d0:31:68:c7:2e:24:55:4b:8e:1e:fa:b3:4c:55:ca:0f:
ff:08:2b:89:74:e2:e1:98:76:a6:59:1c:11:5c:67:a6:2f:c4:
7f:49:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org