Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/QWMYeYQINvmJ1k_wv0uB3zkzoJs.roa
File: QWMYeYQINvmJ1k_wv0uB3zkzoJs.roa (raw, json)
Hash identifier: q4yr5C1aQypbDgOFHE/GwEWzIh7xEBHMG/TGOnube08=
Subject key identifier: 41:63:18:79:84:08:36:F9:89:D6:4F:F0:BF:4B:81:DF:39:33:A0:9B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018D6A427389BC50A9B4183630D178AB7C0E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/QWMYeYQINvmJ1k_wv0uB3zkzoJs.roa
Signing time: Fri 02 Feb 2024 14:39:16 +0000
ROA not before: Fri 02 Feb 2024 14:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
46.10.0.0/16 maxlen: 24
46.10.166.0/23 maxlen: 24
46.10.193.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
62.73.64.0/18 maxlen: 24
62.176.64.0/19 maxlen: 24
62.176.96.0/19 maxlen: 24
62.176.117.0/24 maxlen: 24
62.176.124.54/32 maxlen: 32
77.85.0.0/16 maxlen: 24
77.85.128.0/19 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
78.154.0.0/19 maxlen: 24
79.100.0.0/16 maxlen: 24
82.137.64.0/18 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
83.148.64.0/18 maxlen: 24
83.228.0.0/17 maxlen: 24
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
84.238.128.0/22 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
87.116.64.0/22 maxlen: 24
87.116.66.160/32 maxlen: 32
87.116.72.0/21 maxlen: 24
87.116.82.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
87.243.80.0/20 maxlen: 24
87.243.96.0/21 maxlen: 24
87.243.104.0/21 maxlen: 24
87.243.112.0/22 maxlen: 22
87.243.116.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
89.25.64.0/21 maxlen: 24
89.25.72.0/22 maxlen: 24
90.154.128.0/17 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
94.236.180.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
95.42.0.0/15 maxlen: 24
95.43.0.0/17 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
95.87.192.0/18 maxlen: 24
151.237.140.0/23 maxlen: 24
185.20.156.0/22 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.16.32.0/19 maxlen: 24
213.91.128.0/17 maxlen: 24
213.91.154.0/24 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8:2:5::/64 maxlen: 64
Validation: Failed, certificate revoked on Tue 06 Feb 2024 09:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:42:73:89:bc:50:a9:b4:18:36:30:d1:78:ab:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Feb 2 14:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41631879840836f989d64ff0bf4b81df3933a09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:de:ec:4e:70:65:f1:34:9a:19:0d:e2:cc:
b8:6f:8b:14:c2:d4:91:de:d6:48:dc:c4:f2:74:35:
bc:03:70:62:7e:ef:13:68:9b:c7:75:57:f0:89:24:
30:dc:3b:6a:92:5f:88:61:18:a2:ea:88:93:ca:3d:
b7:51:3a:26:26:6d:60:fe:5d:d3:9d:72:50:7f:9a:
3c:91:2f:e0:65:87:9c:05:9e:79:11:af:6d:ff:bb:
16:4f:64:55:69:60:30:00:f3:6e:8c:13:f2:ae:28:
14:43:78:ae:a9:62:05:2e:45:0b:68:70:d8:53:7f:
71:86:1c:49:ce:9e:a7:99:19:5b:3d:19:0c:2b:6f:
da:9b:d8:19:6e:f3:1e:c9:10:10:c1:44:13:db:83:
c1:b2:e0:10:f8:80:6f:e9:d1:b3:3b:09:00:3a:40:
77:2c:1e:1c:e5:bc:90:4b:89:1a:67:80:b5:8e:d2:
6f:86:25:e1:69:28:7a:d9:50:f5:ea:d3:63:a8:d5:
10:30:04:f2:b1:ee:fb:5c:73:9f:cb:e1:9e:eb:a3:
82:fa:9f:bd:52:29:2e:81:84:d8:30:fe:f8:fa:dc:
21:36:59:56:7e:4d:84:2c:40:4c:d5:5c:28:a9:22:
d3:98:0e:88:4a:47:8d:35:c7:7e:d1:6f:ba:63:15:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:18:79:84:08:36:F9:89:D6:4F:F0:BF:4B:81:DF:39:33:A0:9B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/QWMYeYQINvmJ1k_wv0uB3zkzoJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.64.0/22
87.116.72.0/21
87.116.82.0/24
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.64.0-89.25.75.255
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.112.0-94.155.123.255
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:eb:54:c9:1c:32:b2:e6:d5:0b:5d:67:1e:57:1b:76:34:06:
da:89:ce:92:96:f1:33:f3:76:12:0e:20:58:5b:a7:b3:a9:96:
01:eb:e2:85:66:d3:e7:a5:d6:4c:a5:32:44:2e:e3:1b:05:fc:
d2:bc:1d:ff:40:67:5d:80:4d:3c:e7:d2:e9:b3:10:6d:ec:f9:
fd:5e:9e:32:00:da:1c:ea:6d:76:51:75:b9:9e:e1:c6:45:74:
aa:dc:02:5b:90:ed:b3:9b:d0:da:54:db:c3:ba:ed:d1:20:43:
a1:45:bf:2a:f5:ed:4e:60:55:7c:01:9d:d4:d6:6c:cb:e0:b7:
be:68:be:de:ff:60:b5:df:23:8a:06:07:5b:c1:6e:8e:9e:d1:
ce:ee:3c:42:ee:9c:00:6a:8b:67:08:7d:3b:18:d3:ef:9c:84:
13:1a:9b:c5:1c:39:ac:ee:79:41:1d:dd:74:45:a5:d5:e2:9c:
32:ce:5c:fb:66:63:17:8d:a5:52:b4:86:30:a5:69:a9:4f:bc:
0c:88:c0:50:7f:30:d0:a9:e3:c6:d3:b3:db:fe:85:e1:8d:23:
26:5c:79:be:39:00:5a:f2:33:a3:3f:79:eb:f8:1e:7a:5d:f9:
da:a8:64:91:47:ab:8d:57:76:1f:ff:4e:32:25:8e:45:42:ca:
4d:2d:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org