Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsJHw7fUbV04wjz4cCAp1sAqH28.roa
File: DsJHw7fUbV04wjz4cCAp1sAqH28.roa (raw, json)
Hash identifier: KQEr7jtB+drmhGp9DbyNbAVhI0cbyX8Is0cC90N3X/I=
Subject key identifier: 0E:C2:47:C3:B7:D4:6D:5D:38:C2:3C:F8:70:20:29:D6:C0:2A:1F:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191F6D0DD7284097F85F8FD2B87245934AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsJHw7fUbV04wjz4cCAp1sAqH28.roa
Signing time: Sun 15 Sep 2024 17:52:48 +0000
ROA not before: Sun 15 Sep 2024 17:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 2.58.92.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.217.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.245.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.37.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.253.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
87.121.42.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.110.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
87.121.161.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.24.0/24 maxlen: 24
94.156.25.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.169.173.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Sep 2024 08:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:d0:dd:72:84:09:7f:85:f8:fd:2b:87:24:59:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 17:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec247c3b7d46d5d38c23cf8702029d6c02a1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:56:67:5e:df:0e:8a:9d:7f:af:00:75:57:
86:7a:b8:c7:3e:49:9e:35:bf:a3:9b:c7:0b:05:f0:
e9:25:8d:64:9b:18:2c:77:ea:04:2f:b5:ef:89:81:
a8:60:08:3e:54:49:5c:ee:56:4b:a9:6a:bd:8e:91:
0f:0e:36:38:b6:48:dd:52:11:c3:99:7f:81:28:94:
6b:c4:19:c4:71:17:e7:bc:19:4c:9b:64:94:63:9f:
d7:eb:38:ea:18:84:ef:34:54:63:9c:d5:4a:eb:ef:
95:f8:7f:55:f1:64:df:cd:dc:7a:77:3e:07:49:ee:
14:61:fc:6e:b2:86:25:f2:cf:92:fb:e2:dc:b6:5b:
1a:65:b0:e0:fd:1b:ec:ca:b1:d7:8f:84:1d:6b:c8:
5b:c0:17:0a:af:63:55:2c:10:e2:92:67:29:6c:c4:
47:54:f1:f8:df:32:d6:dc:6b:6d:a0:cb:5f:bd:8a:
2f:04:24:81:5e:95:50:cd:65:92:f7:64:80:ac:8b:
48:fd:92:f7:75:5e:d9:97:48:4a:b2:ce:fb:d3:b1:
51:b2:f2:e1:4b:e2:3b:ae:2e:f7:95:47:ee:f2:0e:
27:5b:99:36:ca:3a:0e:c6:46:64:07:cb:70:23:91:
0d:82:41:0e:69:30:66:cf:ab:07:26:98:f9:a8:86:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:47:C3:B7:D4:6D:5D:38:C2:3C:F8:70:20:29:D6:C0:2A:1F:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsJHw7fUbV04wjz4cCAp1sAqH28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
86:c2:74:98:ea:0d:21:99:55:b8:b2:47:e8:00:19:23:9c:66:
4b:84:31:a2:6c:79:58:7c:28:4d:9a:fd:24:48:2a:ba:30:39:
6d:a8:14:ae:6c:f1:b5:dc:40:d1:f1:f0:9c:53:c9:a7:0d:06:
88:13:a6:cf:48:84:4a:86:e5:dc:41:11:13:ca:66:fe:87:b0:
0d:e8:61:e2:64:c3:ec:4b:cb:85:d7:0e:89:3d:84:af:41:ca:
6d:1a:10:b7:2b:bd:09:84:56:2d:c7:7a:6e:c3:f8:de:3e:bd:
96:0b:1b:40:74:9d:a7:7a:87:4f:85:f8:40:f1:2a:48:b2:75:
63:4e:64:ca:13:49:a1:53:ee:80:c4:d1:36:a4:a4:b7:ee:f0:
2c:10:1f:47:f3:52:07:d5:fe:15:65:03:62:4c:7e:81:c0:8d:
68:87:ba:53:ab:6c:17:41:68:13:a9:62:bd:d5:32:3d:0b:30:
c1:05:ad:c3:60:9f:74:c7:60:e2:c5:38:e2:cc:3e:21:de:f7:
6a:63:26:00:9d:d4:2b:39:9b:a2:de:4a:b4:68:cd:0b:21:1d:
2a:07:72:46:a5:c7:af:38:20:28:28:b0:9f:f9:51:33:dc:70:
31:44:da:44:c6:ca:db:2e:67:bb:63:d4:48:e8:48:58:10:14:
85:3f:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 10:55:43 2024 by rpki-client on console-ams.rpki-client.org