Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3V8Y1LuUh5bbjNYTb6yUw4Q3Mw.roa
File: e3V8Y1LuUh5bbjNYTb6yUw4Q3Mw.roa (raw, json)
Hash identifier: CYFH0g2sTNRPCCfioAZyFWFv+JeaPv95+0yV3JtAlKY=
Subject key identifier: 7B:75:7C:63:52:EE:52:1E:5B:6E:33:58:4D:BE:B2:53:0E:10:DC:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DC0DEC9107947360C05EE0AB8B437C51F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3V8Y1LuUh5bbjNYTb6yUw4Q3Mw.roa
Signing time: Mon 19 Feb 2024 10:17:22 +0000
ROA not before: Mon 19 Feb 2024 10:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 2.58.92.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.217.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.245.0/24 maxlen: 24
31.13.248.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.37.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.253.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
87.121.42.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
87.121.161.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.169.173.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:de:c9:10:79:47:36:0c:05:ee:0a:b8:b4:37:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 19 10:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b757c6352ee521e5b6e33584dbeb2530e10dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:5a:19:4b:47:4b:10:82:b4:8e:01:97:d2:
cd:c3:51:5f:ad:b7:03:c9:3c:97:be:53:1a:aa:4c:
46:e6:49:31:82:1b:44:51:fe:18:bb:4b:ec:bc:9a:
e9:05:72:9f:ad:e1:92:35:b5:e8:66:34:fa:39:0e:
e8:95:4d:35:a6:84:17:bd:54:85:7d:f1:a2:37:59:
61:5b:9a:9a:73:02:0e:16:69:4e:3b:e3:9d:5e:46:
38:72:9f:c7:53:e7:aa:5a:a8:24:1f:02:2d:dd:d2:
4c:72:9e:2e:14:b4:e8:dd:cd:43:a5:c7:d1:44:b5:
4d:4b:0c:5d:b8:c6:62:fe:1c:c5:ba:51:42:70:0a:
08:f8:75:5c:3c:08:6f:a0:8b:19:bf:ac:46:97:67:
5d:77:ac:68:d7:88:da:cb:6b:8d:9a:43:59:73:1a:
7a:c3:cd:51:46:5b:bc:d8:e1:6a:e9:ac:e7:9d:e0:
ad:e1:50:26:db:3f:31:a6:ed:16:51:41:fd:fe:7a:
e9:7e:a2:85:44:1f:6f:d1:e5:41:f0:2e:f0:93:75:
5b:a6:65:e8:3f:04:ff:29:e7:92:1b:78:7d:17:d5:
ea:81:b8:fa:7d:23:c4:b6:2f:3c:60:55:59:15:86:
e9:bc:c0:9a:fe:c0:80:d4:b2:14:bc:f1:9c:c8:f3:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:7C:63:52:EE:52:1E:5B:6E:33:58:4D:BE:B2:53:0E:10:DC:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3V8Y1LuUh5bbjNYTb6yUw4Q3Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
31.13.248.0/24
37.60.138.0/23
45.81.38.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.79.0/24
87.121.82.0/23
87.121.90.0/23
87.121.111.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
ac:60:64:14:42:67:f4:a8:1b:b6:36:10:4f:e5:2a:ec:20:1f:
f5:5b:58:3f:d6:02:5d:84:9f:3f:18:59:e9:4a:a9:89:6b:96:
52:ca:08:00:9c:10:89:e4:d4:5a:b6:3b:f7:57:12:a7:d0:c2:
d9:2f:42:6d:47:e7:14:e9:f8:23:d3:a4:c7:45:7e:04:28:29:
dc:1d:87:95:f0:62:d3:63:49:f1:1e:b4:6e:93:0d:ea:ad:c0:
e1:e6:21:20:64:89:20:53:4e:8c:ac:d9:49:ea:46:d8:43:6a:
80:ca:8a:2f:f0:16:3e:83:92:33:3f:2c:1f:3f:4b:ee:c9:40:
4e:9f:84:23:4d:7a:cd:36:74:2b:5d:83:d6:b7:16:f5:0c:a1:
25:58:94:2f:29:61:77:97:5a:cd:b4:26:de:12:b3:78:5e:87:
0d:d4:e0:a8:fc:dd:27:db:e4:55:84:14:02:20:a6:f9:ee:a6:
f1:57:15:cb:88:03:64:a2:81:23:58:4b:15:18:df:db:bc:44:
c1:9c:4b:82:5f:eb:9a:e5:41:ec:29:d9:d9:fc:f9:24:04:5f:
c4:ae:bc:46:30:e2:89:a1:67:8c:ec:29:1e:88:4c:9b:1d:fa:
0d:15:88:0c:07:64:fc:ef:85:3e:8a:e1:91:90:c5:e7:1f:1e:
df:62:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org