Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_v2LzS758Ma5WA-3W7rPYXAI9YI.roa
File: _v2LzS758Ma5WA-3W7rPYXAI9YI.roa (raw, json)
Hash identifier: x3g1M7lQezmc7dzKkAwH6FRorHsdDNWrgMi6TkXBOfw=
Subject key identifier: FE:FD:8B:CD:2E:F9:F0:C6:B9:58:0F:B7:5B:BA:CF:61:70:08:F5:82
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0188E35AFD3994BAF7E39276E5AF9F2943A7
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_v2LzS758Ma5WA-3W7rPYXAI9YI.roa
Signing time: Thu 22 Jun 2023 13:46:11 +0000
ROA not before: Thu 22 Jun 2023 13:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208677
IP address blocks: 178.170.242.0/24 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
188.72.108.0/23 maxlen: 23
37.230.192.0/21 maxlen: 21
188.72.106.0/23 maxlen: 23
188.72.118.0/24 maxlen: 24
188.72.117.0/24 maxlen: 24
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
94.139.252.0/22 maxlen: 22
178.170.192.0/22 maxlen: 22
178.170.191.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
45.89.224.0/22 maxlen: 22
46.243.172.0/24 maxlen: 24
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
37.230.139.0/24 maxlen: 24
37.18.102.0/24 maxlen: 24
37.18.100.0/23 maxlen: 23
37.18.112.0/23 maxlen: 23
37.18.108.0/22 maxlen: 22
37.18.107.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.114.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.230.179.0/24 maxlen: 24
37.18.122.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
37.230.186.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.180.0/23 maxlen: 23
46.243.206.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
37.18.72.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
141.101.201.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.151.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Jul 2023 09:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:5a:fd:39:94:ba:f7:e3:92:76:e5:af:9f:29:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Jun 22 13:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fefd8bcd2ef9f0c6b9580fb75bbacf617008f582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:10:2e:41:d5:00:63:ae:da:32:71:78:53:
c3:2f:4c:a4:53:c5:e7:84:2a:3d:00:06:61:69:e8:
3d:32:c5:9b:d6:7d:12:ff:f6:8f:4d:0a:69:31:c8:
9a:57:b9:ba:ac:3f:ad:9e:44:35:c5:30:cf:9e:ce:
67:f1:2c:58:98:0f:5e:9d:64:b2:54:a6:e5:a5:6d:
bd:cd:4c:44:9b:7e:d2:a2:11:63:0d:ea:a9:01:61:
92:9c:c7:a5:49:29:75:b2:48:d4:23:40:ec:ce:94:
43:2f:66:d4:46:db:e8:2d:59:78:5e:cc:f4:62:16:
d0:cc:56:a9:e8:a9:7c:94:4b:15:bf:77:10:33:47:
61:b3:39:ac:39:60:09:83:59:ff:81:ae:0e:c6:f4:
a7:ef:8b:32:5e:77:3d:77:0f:b0:53:4a:7b:ac:52:
be:43:5c:24:86:2e:1d:7f:f2:b9:1f:fb:e2:90:4c:
22:d7:2f:34:2c:8b:42:f5:f0:29:bd:66:8a:f4:a7:
3a:f6:c4:76:c6:70:d4:f5:bb:61:92:43:c3:ab:c5:
ad:a4:9c:af:94:5d:e9:30:14:cb:46:94:d4:1a:23:
ce:a2:67:34:b1:1a:65:1e:8d:5e:9d:a6:18:1a:c5:
53:b6:5f:5f:3a:f7:08:22:8f:7b:b4:7d:8d:15:69:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:8B:CD:2E:F9:F0:C6:B9:58:0F:B7:5B:BA:CF:61:70:08:F5:82
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_v2LzS758Ma5WA-3W7rPYXAI9YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
87.242.84.0-87.242.95.255
87.242.116.0-87.242.127.255
89.232.160.0-89.232.171.255
89.232.176.0/22
94.139.252.0/22
141.101.151.0-141.101.152.255
141.101.201.0/24
178.170.191.0-178.170.197.255
178.170.242.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
16:18:28:be:83:1d:00:9e:75:01:8b:36:94:95:4b:53:23:83:
d2:d3:8a:06:13:bb:0a:84:05:8f:9d:54:79:72:fc:30:5b:de:
01:5b:c6:24:ec:bd:47:0b:2c:ca:4d:61:60:8f:dd:5e:20:7e:
43:c6:8b:c3:ee:ec:d7:99:70:da:49:d0:a8:23:6c:2b:2c:85:
25:d7:a2:87:8b:61:d5:60:b9:f8:8a:ba:94:7e:6b:3f:90:34:
40:2a:42:c9:0a:c1:93:e0:6a:5a:df:f3:09:16:32:e0:28:a4:
c4:5d:c3:cf:b4:14:eb:ea:46:28:c2:49:f4:03:5d:64:48:b2:
7b:10:ba:7a:2f:c6:d8:4d:0c:3f:44:0a:e5:a3:7a:7d:64:de:
a5:ad:e4:b3:f8:08:61:ba:d8:e9:46:75:64:d3:75:2d:d2:5b:
87:a6:fa:3d:14:51:60:ea:11:fa:9d:39:f0:3a:40:9b:4b:28:
cf:6f:8b:90:56:15:a3:9c:cd:b0:2d:33:80:36:b7:6f:f5:a2:
e8:99:72:ff:79:04:f7:d9:42:b8:6c:93:38:0c:6b:2c:43:fc:
2d:b3:d7:7a:3e:96:6c:32:cc:3d:28:c2:fa:fc:c7:0d:4b:7c:
07:ae:e9:d9:72:b0:8d:66:56:1e:29:18:79:e4:e3:96:6b:53:
10:1f:19:8a
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgISAYjjWv05lLr345J25a+fKUOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjMwNjIyMTM0NjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWZkOGJjZDJlZjlmMGM2Yjk1ODBmYjc1YmJhY2Y2MTcwMDhmNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg4QLkHVAGOu2jJxeFPDL0ykU8Xn
hCo9AAZhaeg9MsWb1n0S//aPTQppMciaV7m6rD+tnkQ1xTDPns5n8SxYmA9enWSy
VKblpW29zUxEm37SohFjDeqpAWGSnMelSSl1skjUI0DszpRDL2bURtvoLVl4Xsz0
YhbQzFap6Kl8lEsVv3cQM0dhszmsOWAJg1n/ga4OxvSn74syXnc9dw+wU0p7rFK+
Q1wkhi4df/K5H/vikEwi1y80LItC9fApvWaK9Kc69sR2xnDU9bthkkPDq8WtpJyv
lF3pMBTLRpTUGiPOomc0sRplHo1enaYYGsVTtl9fOvcIIo97tH2NFWmYQQIDAQAB
o4IDSDCCA0QwHQYDVR0OBBYEFP79i80u+fDGuVgPt1u6z2FwCPWCMB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xL192Mkx6Uzc1OE1hNVdBLTNXN3JQWVhBSTlZSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk
My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggFaBggrBgEFBQcBBwEB/wSCAUkwggFFMIIBMgQCAAEw
ggEqMAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUSZjAMAwQA
JRJrAwQAJRJ6AwQAJeaLMAwDBAAl5rMDBAEl5rQwDAMEAyXmuAMEACXmugMEAyXm
wAMEACXm4AMEACXm6QMEAi0JGAMEAi1Z4DAMAwQALvONAwQELvOAAwQALvOsAwQA
LvPJMAwDBAAu880DBAAu884DBAEu8+IDBAEu8/QwDAMEAlfyVAMEBVfyQDAMAwQC
V/J0AwQHV/IAMAwDBAVZ6KADBAJZ6KgDBAJZ6LADBAJei/wwDAMEAI1llwMEAI1l
mAMEAI1lyTAMAwQAsqq/AwQBsqrEAwQAsqryAwQAvEhgMAwDBAG8SGoDBAG8SGww
DAMEALxIdQMEALxIdjANBAIAAjAHAwUDKgwrgDANBgkqhkiG9w0BAQsFAAOCAQEA
FhgovoMdAJ51AYs2lJVLUyOD0tOKBhO7CoQFj51UeXL8MFveAVvGJOy9Rwssyk1h
YI/dXiB+Q8aLw+7s15lw2knQqCNsKyyFJdeih4th1WC5+Iq6lH5rP5A0QCpCyQrB
k+BqWt/zCRYy4CikxF3Dz7QU6+pGKMJJ9ANdZEiyexC6ei/G2E0MP0QK5aN6fWTe
pa3ks/gIYbrY6UZ1ZNN1LdJbh6b6PRRRYOoR+p058DpAm0soz2+LkFYVo5zNsC0z
gDa3b/Wi6Jly/3kE99lCuGyTOAxrLEP8LbPXej6WbDLMPSjC+vzHDUt8B67p2XKw
jWZWHikYeeTjlmtTEB8Zig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:52 2024 by rpki-client on console-fra.rpki-client.org