Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/DNEXSCwU_mtm3QhAoyqp_PqR4mI.roa
File: DNEXSCwU_mtm3QhAoyqp_PqR4mI.roa (raw, json)
Hash identifier: ECRfKhNhFd8ieQhOcdhILwDQ1++rEBWxdqxcklooqM4=
Subject key identifier: 0C:D1:17:48:2C:14:FE:6B:66:DD:08:40:A3:2A:A9:FC:FA:91:E2:62
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 018F86E28A476BA4314C276ED0E9FA17E766
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/DNEXSCwU_mtm3QhAoyqp_PqR4mI.roa
Signing time: Fri 17 May 2024 14:09:04 +0000
ROA not before: Fri 17 May 2024 14:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208677
IP address blocks: 37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
95.174.88.0/21 maxlen: 21
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
176.109.96.0/20 maxlen: 20
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
194.5.92.0/23 maxlen: 23
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Jun 2024 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:e2:8a:47:6b:a4:31:4c:27:6e:d0:e9:fa:17:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: May 17 14:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd117482c14fe6b66dd0840a32aa9fcfa91e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:2b:cb:5e:f1:69:e9:79:92:10:32:36:a5:
ee:97:a1:14:d2:c9:ad:c8:6c:a2:b4:59:ce:e5:5c:
5f:45:0d:56:93:64:24:04:35:ac:2c:d8:89:5e:9d:
4e:8c:b1:50:1b:40:da:a6:3e:93:bd:a3:43:19:02:
9a:11:d0:b3:0f:42:77:d4:20:ad:15:13:82:b9:5f:
20:c9:4d:19:56:52:76:49:98:75:d8:60:bd:14:b7:
0e:60:c8:53:ca:e4:b0:19:e5:95:54:7e:77:f1:64:
d0:7d:2c:50:90:5a:35:c3:40:9e:64:ab:21:1f:90:
71:56:66:aa:46:3d:72:8f:5c:09:3a:80:9c:aa:c3:
a2:3f:de:89:4f:55:d9:ba:e8:08:02:c8:95:9c:87:
b0:45:27:7e:62:e5:06:d2:8d:e5:4a:7b:4a:7d:81:
03:2d:e7:65:91:71:ce:88:55:d1:4a:08:e4:a0:27:
a0:f4:46:24:4c:ce:23:48:77:bd:c4:bc:27:18:78:
4e:3f:e4:cb:09:4f:39:4c:4d:6e:ff:82:1d:c4:ff:
20:f2:b8:c9:70:05:ea:cf:f8:f2:88:7c:18:cc:da:
b2:e3:6b:43:03:66:3d:25:e8:89:23:1d:13:1a:9e:
ac:ed:86:67:a2:75:c4:68:d8:0f:dd:dd:0c:f8:7c:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:17:48:2C:14:FE:6B:66:DD:08:40:A3:2A:A9:FC:FA:91:E2:62
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/DNEXSCwU_mtm3QhAoyqp_PqR4mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.224.86.0/23
94.139.252.0/22
95.174.88.0/21
141.101.151.0-141.101.152.255
141.101.201.0/24
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
194.5.92.0/23
194.113.34.0/23
195.128.152.0/24
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
76:9e:52:90:23:c0:13:c6:e4:b2:e0:06:b1:37:f8:25:36:31:
e7:ab:3e:9f:4d:6e:f0:83:03:50:62:b1:92:d6:c3:cc:6e:96:
ba:d3:0d:77:cb:56:04:12:1a:0e:98:7d:4d:7e:f9:e9:78:16:
a9:c3:a8:78:6c:f6:7c:0c:32:4f:55:7d:9b:29:76:0c:5d:51:
c7:79:7d:fb:b4:3d:f1:eb:43:e0:23:54:53:79:bf:91:73:62:
e0:74:88:64:8c:67:de:c6:7e:7f:8d:6e:29:78:8c:8f:27:08:
e5:b4:a0:40:07:11:c8:f6:e3:e2:00:71:8d:60:bf:ce:f8:5e:
52:b4:4a:97:9b:5c:50:17:30:07:81:a0:5d:bb:6b:43:b5:0e:
e9:ac:8b:f3:89:65:ef:aa:10:5b:0a:8b:48:ed:92:c6:6a:02:
c0:9d:a0:c9:44:e1:24:c5:3e:63:8d:a0:a1:79:0b:22:51:a5:
7f:ae:cf:84:92:2b:04:76:5f:34:da:40:2e:9d:e2:de:74:6c:
13:45:0d:cd:f9:c7:27:12:37:25:c0:dd:f1:1a:6b:e2:eb:7d:
0b:6b:a7:91:59:eb:69:4a:aa:fb:e0:d9:f5:81:01:ee:87:be:
1d:d8:a9:28:4c:5c:e5:07:cd:8e:27:7c:e2:02:92:4e:e5:c4:
8c:67:09:cf
-----BEGIN CERTIFICATE-----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Generated at Thu Jun 6 21:56:28 2024 by rpki-client on console-fra.rpki-client.org