Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa
File: tz1rboxtSzAi3XjM8GGkM22UjFc.roa (raw, json)
Hash identifier: keGmj02rGAcTn4RWGgsWT60Ji8/vfhDQamXucA0io8M=
Subject key identifier: B7:3D:6B:6E:8C:6D:4B:30:22:DD:78:CC:F0:61:A4:33:6D:94:8C:57
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0185782274AF4895256AA0CBD002DC76B8EA
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa
Signing time: Tue 03 Jan 2023 14:56:42 +0000
ROA not before: Tue 03 Jan 2023 14:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.100.232.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.233.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.161.0/24 maxlen: 24
185.173.160.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.220.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
185.180.223.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
185.132.132.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.135.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
62.112.8.0/24 maxlen: 24
62.112.8.0/22 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
89.38.96.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.177.0/24 maxlen: 24
89.38.96.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.1.0/24 maxlen: 24
178.132.0.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.88.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.91.0/24 maxlen: 24
217.23.0.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.0.0/20 maxlen: 20
217.23.2.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.197.0/24 maxlen: 24
178.218.196.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.185.48.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.51.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.136.0/24 maxlen: 24
93.190.136.0/21 maxlen: 22
93.190.139.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
185.2.80.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.2.82.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.191.0.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.3.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.243.0/24 maxlen: 24
212.8.242.0/24 maxlen: 24
212.8.248.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.250.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.33.0/24 maxlen: 24
185.183.32.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.21.60.0/24 maxlen: 24
185.21.60.0/22 maxlen: 22
185.21.63.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
91.229.23.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.104.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
109.236.83.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Feb 2023 14:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:22:74:af:48:95:25:6a:a0:cb:d0:02:dc:76:b8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jan 3 14:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b73d6b6e8c6d4b3022dd78ccf061a4336d948c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:f7:d6:e1:a8:88:a5:33:20:4f:b3:d6:82:
42:99:8e:66:5d:6a:9b:77:f7:90:e9:28:01:1a:3e:
8e:e8:e4:dc:a0:eb:74:63:a8:1b:76:c9:9f:29:7f:
f0:37:32:ff:a1:50:2c:9a:cb:eb:ec:d0:84:55:d3:
f5:91:28:d8:3b:d4:53:3d:19:82:13:3c:76:eb:91:
bc:a1:d5:8a:d3:c3:21:81:8a:67:a1:01:ca:3b:38:
4d:51:2f:9c:61:56:de:32:08:07:76:d0:6a:4c:0d:
9c:16:53:a9:ac:b8:b0:30:e0:ff:de:9b:83:d5:2a:
b4:60:16:e6:4d:4d:81:38:b6:28:aa:04:64:52:99:
86:69:2f:83:9c:de:5f:3c:9b:6c:cf:66:0a:10:fe:
1e:0c:c7:0d:62:62:70:1c:2e:76:66:f1:62:d7:dc:
94:b2:6f:9b:d6:bf:a0:95:0d:df:88:2e:13:89:49:
b7:01:89:03:20:75:03:e6:1d:11:de:a6:71:69:0e:
07:46:72:40:c6:a3:04:61:5e:c5:1d:3d:9c:43:11:
aa:51:3b:c8:08:99:bb:29:04:f8:78:2d:e8:5c:b8:
c4:bd:b7:18:ae:d8:b5:92:16:74:4a:80:83:cc:90:
a0:6a:0c:31:24:62:67:14:f1:04:33:f8:30:3b:8e:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:6B:6E:8C:6D:4B:30:22:DD:78:CC:F0:61:A4:33:6D:94:8C:57
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
217.23.0.0/20
IPv6:
2a00:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
95:da:dd:20:55:15:02:3d:d7:96:b0:38:90:b8:98:40:7a:e4:
b0:dd:53:31:cb:6c:d7:37:c9:60:77:87:64:6d:75:1d:d1:3c:
4c:91:53:b6:a3:a5:fe:ad:d8:87:0e:e7:2a:75:bb:73:eb:16:
df:d7:64:b5:d8:46:05:3b:79:84:d4:4a:f6:a3:23:b5:99:2a:
c0:29:05:b4:5a:83:56:80:28:a5:f5:12:76:83:a4:90:51:0c:
b4:83:06:fb:43:48:44:fd:f7:df:30:40:85:82:5c:2e:c6:a6:
a8:30:bc:43:83:3c:c8:d0:d5:e6:8b:ff:c5:5e:0c:ec:0a:25:
cc:9d:df:b9:b4:3d:99:47:a0:b2:9f:44:d0:ba:5f:be:3c:31:
b3:e5:86:c7:9d:28:f6:9b:18:14:55:45:f2:2e:54:89:2c:aa:
b7:8d:cc:95:ca:ca:14:ce:4c:8b:df:05:0d:d8:11:61:9e:74:
32:c5:c6:4b:92:ca:ff:10:6a:b7:d6:20:98:f2:21:c9:3a:30:
52:a7:0f:a5:f3:5a:d6:c6:67:10:6d:20:94:2f:ed:f7:10:d3:
63:68:43:4e:2c:0f:82:a3:de:58:bb:e6:1c:1b:03:fd:99:ce:
5b:fa:a6:d1:82:8a:e2:b4:01:e1:b9:cc:2e:ae:c0:92:8c:dc:
6b:9e:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org