Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rHgk_HjEwFONObyNAxUiuQDyExQ.roa
File: rHgk_HjEwFONObyNAxUiuQDyExQ.roa (raw, json)
Hash identifier: ZdGSMD75IDhas3gozDldnHeDMJnte6g1R+683EX0mrs=
Subject key identifier: AC:78:24:FC:78:C4:C0:53:8D:39:BC:8D:03:15:22:B9:00:F2:13:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FE2E4ABB8CED1C0C9300E5C1B76FA83F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rHgk_HjEwFONObyNAxUiuQDyExQ.roa
Signing time: Tue 04 Jun 2024 10:56:28 +0000
ROA not before: Tue 04 Jun 2024 10:56:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 2.58.92.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.217.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.245.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.37.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.253.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
87.121.42.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.110.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
87.121.161.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.169.173.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:e4:ab:b8:ce:d1:c0:c9:30:0e:5c:1b:76:fa:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 10:56:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac7824fc78c4c0538d39bc8d031522b900f21314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:c6:14:ef:27:1d:ff:64:5f:77:e2:b5:8f:
5c:46:c0:8c:15:5f:5f:8a:19:c1:80:45:72:45:d6:
75:5f:28:26:a2:5c:3a:29:b5:32:1b:45:ac:5a:f5:
0c:9b:92:bc:55:e2:ff:00:ef:c3:6f:a4:9f:f9:ad:
1f:84:11:8f:65:d4:06:76:83:9a:30:55:ab:77:2b:
e1:2d:cf:94:3f:b9:4a:0c:32:5e:a3:f1:0d:3c:ea:
b4:f6:55:eb:52:e9:64:3f:55:34:90:8c:e2:9b:6a:
02:2e:03:dc:77:c7:3d:a1:95:f6:bc:18:23:6e:56:
da:90:00:58:21:63:99:00:2d:ab:d7:94:56:20:b9:
72:45:ed:19:24:a6:5c:61:11:7f:2d:2d:67:42:1f:
d9:4b:a9:0f:cf:7d:2f:e9:0d:2b:79:b9:65:36:1f:
61:b3:32:fc:95:aa:e0:07:e2:82:b7:c6:7a:09:2c:
c4:a8:9f:57:c7:8b:b7:e8:8b:77:51:65:d6:a4:58:
9e:03:89:51:ae:51:e8:de:c7:f9:ed:ca:67:43:f3:
15:db:08:36:ac:09:38:ac:15:9f:c1:80:8b:31:9f:
82:03:9c:87:09:64:21:47:89:38:55:4c:fd:b8:53:
da:99:ab:07:18:7e:90:93:ed:95:36:41:2f:a0:32:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:24:FC:78:C4:C0:53:8D:39:BC:8D:03:15:22:B9:00:F2:13:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rHgk_HjEwFONObyNAxUiuQDyExQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.79.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
1c:46:6b:cf:2a:55:8e:6a:04:a8:e4:86:72:7f:17:9e:d8:30:
2b:1a:f4:20:e4:cb:1f:cd:b1:3e:68:61:88:2e:68:c9:28:6d:
3f:c4:5e:4a:c5:23:bc:98:2e:c8:0c:ea:7a:5b:f2:5b:7b:6e:
3e:63:20:a2:db:e3:d7:b0:78:d4:1e:4e:15:9c:f5:48:4e:68:
f8:84:5b:24:0d:8c:00:c9:87:99:6b:5d:40:cd:68:3e:ec:06:
e6:e2:8d:45:35:9f:c0:98:2e:b7:d5:e5:82:0d:4d:02:79:00:
78:8d:e6:94:7c:6b:ab:2a:40:f5:93:ed:52:ae:a4:55:35:41:
1f:13:4a:38:57:21:5e:7b:25:a9:09:cd:e0:d3:b9:2f:d3:81:
a3:d8:2b:7b:fb:e7:ad:36:73:83:76:b0:bd:94:66:55:ff:1b:
29:e6:aa:3e:3d:17:87:bc:cf:fb:bf:15:84:3c:f6:63:04:ae:
22:c4:28:b0:92:62:dd:7c:80:8c:ae:f1:b7:ad:79:ea:1e:ff:
7d:7f:10:b6:db:34:72:79:1f:28:a3:ac:43:3a:8d:dc:61:43:
4c:05:a2:12:c0:ee:f2:53:c7:73:36:c8:7c:9c:86:53:8a:6a:
36:6d:4f:a3:4b:e8:8f:96:2e:08:45:4b:b2:60:a1:6a:44:49:
0d:9b:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:31 2024 by rpki-client on console-fra.rpki-client.org