Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/8JQxA-s34kXYr1PN58ByZ1nOLHM.roa
File: 8JQxA-s34kXYr1PN58ByZ1nOLHM.roa (raw, json)
Hash identifier: PMnMwzZ8UlvG5+WRu62RMdBjg5vqrOi2/tm2XvRl+pQ=
Subject key identifier: F0:94:31:03:EB:37:E2:45:D8:AF:53:CD:E7:C0:72:67:59:CE:2C:73
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 018F1515AD16E5E3178B762B93B6F47DF6AC
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/8JQxA-s34kXYr1PN58ByZ1nOLHM.roa
Signing time: Thu 25 Apr 2024 11:48:13 +0000
ROA not before: Thu 25 Apr 2024 11:48:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208677
IP address blocks: 37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
94.139.252.0/22 maxlen: 22
95.174.88.0/21 maxlen: 21
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
176.109.96.0/20 maxlen: 20
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 May 2024 19:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:15:ad:16:e5:e3:17:8b:76:2b:93:b6:f4:7d:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Apr 25 11:48:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0943103eb37e245d8af53cde7c0726759ce2c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:40:a1:2f:98:bc:de:ba:82:9a:e7:89:ed:
21:6e:d3:17:81:01:8c:8b:d5:db:70:68:b1:a6:aa:
44:f8:62:df:8a:4e:af:a3:41:a1:7c:bb:66:f9:25:
0b:46:90:57:2c:88:8d:51:33:dc:64:14:fd:3e:61:
81:aa:e3:5b:48:a3:98:4f:6a:ae:48:42:dd:e5:b1:
a7:ba:cc:66:c7:20:e0:ca:45:65:87:be:89:2a:01:
03:9b:1b:db:2c:e8:31:3d:9a:64:1b:ea:e1:98:c4:
d8:6b:02:38:c1:e5:bd:95:93:69:32:63:92:e8:46:
9e:fb:38:3e:99:ff:49:82:73:46:35:93:a7:d7:ef:
a4:f6:80:83:64:6a:b5:40:c6:01:c5:29:e4:f1:fa:
27:bd:2d:05:be:ca:34:41:93:70:82:ac:f9:a5:03:
4e:9c:63:01:33:9e:47:bf:87:55:04:93:10:16:60:
a0:a8:e8:16:4f:7c:a5:7d:14:1f:30:7b:92:c6:31:
fa:2a:a9:4c:1d:98:f2:63:98:ad:ba:58:1f:f5:d9:
24:f2:62:6e:e8:2e:79:97:1c:42:f0:ce:30:0e:ef:
80:c4:82:f0:65:d0:ec:14:cd:78:dc:64:b6:30:2c:
df:17:00:db:e0:16:72:5e:83:c7:d1:30:f9:d4:b7:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:31:03:EB:37:E2:45:D8:AF:53:CD:E7:C0:72:67:59:CE:2C:73
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/8JQxA-s34kXYr1PN58ByZ1nOLHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
89.232.160.0-89.232.171.255
89.232.176.0/22
94.139.252.0/22
95.174.88.0/21
141.101.151.0-141.101.152.255
141.101.201.0/24
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
194.5.92.0/23
195.128.152.0/24
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
49:fb:51:68:94:d4:40:71:7e:68:31:3c:9a:47:14:aa:ed:6f:
f6:7d:88:fe:56:e2:97:1d:d8:3b:43:66:15:9c:fd:37:e4:f5:
09:be:e4:c2:d7:80:0a:03:a1:ba:2a:74:ab:9a:1c:54:0c:06:
7b:03:70:22:cd:e3:e5:e8:c2:cb:96:e6:c4:25:a0:80:6b:2d:
fd:8a:87:41:6f:a6:54:ff:1e:26:03:0c:b8:e6:85:c8:84:c5:
11:7f:5a:27:2b:d8:ac:ac:e1:c5:95:81:5b:ca:0f:05:4c:2d:
7d:41:4d:ae:4b:62:44:c7:02:b0:f6:2b:4f:1a:85:3b:9d:82:
2e:4d:6f:e4:50:82:51:87:f6:ef:48:67:13:68:18:ca:4f:56:
df:55:39:b1:b0:aa:3e:45:2d:dd:d7:e8:94:e4:e7:e6:20:d3:
d0:ba:bc:e5:bc:b6:d5:07:2e:2b:c4:d8:a6:5a:d0:a0:db:c4:
98:ac:d2:8e:3e:84:1b:a0:17:df:49:f7:d0:3e:fb:16:0c:11:
e4:f9:21:de:d1:5b:ef:fa:90:2e:53:92:e8:80:d9:34:d4:b1:
6a:2d:96:f6:49:2a:93:dd:71:34:70:00:08:86:cd:67:9a:01:
8d:4f:01:8f:cc:9e:e1:c5:47:f5:b3:b2:17:37:d5:10:b7:09:
2c:07:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:55 2024 by rpki-client on console-ams.rpki-client.org