Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/iPyr1BZKrcRzABde57esOgYIcPo.roa
File: iPyr1BZKrcRzABde57esOgYIcPo.roa (raw, json)
Hash identifier: cMtuGsiXIyIZKpBdKqc+O2puYBwJemcjf8/Kmcpd7tE=
Subject key identifier: 88:FC:AB:D4:16:4A:AD:C4:73:00:17:5E:E7:B7:AC:3A:06:08:70:FA
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F5377E3079B6257A4FDECDFDB225C9DA7
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/iPyr1BZKrcRzABde57esOgYIcPo.roa
Signing time: Tue 07 May 2024 14:31:56 +0000
ROA not before: Tue 07 May 2024 14:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
89.254.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
212.45.160.0/19 maxlen: 19
212.125.252.0/22 maxlen: 22
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 12 May 2024 22:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:77:e3:07:9b:62:57:a4:fd:ec:df:db:22:5c:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 7 14:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88fcabd4164aadc47300175ee7b7ac3a060870fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:ad:1f:ec:59:63:ce:1a:7a:3a:65:32:4a:
32:28:e2:b2:81:73:8d:40:ab:53:d5:f7:53:d3:9e:
f5:4b:d1:e9:19:49:59:97:df:21:de:86:5e:ca:67:
a1:ab:67:2c:b6:cb:ac:37:8f:72:c7:93:f5:7c:22:
7b:58:67:f7:4b:94:bf:e3:31:0f:16:50:72:8f:c6:
e1:41:a4:72:84:d6:35:e8:33:a4:21:6e:19:eb:04:
15:1f:55:a8:b6:28:73:cc:de:8b:71:db:fe:f9:b6:
b0:25:e2:f0:32:e3:07:ec:80:56:1f:a1:6a:b7:40:
94:e8:12:48:ae:95:bb:ae:e5:e7:fc:9e:fe:1b:66:
6e:26:c0:52:0f:25:c3:b6:eb:67:11:81:3e:83:68:
6b:e1:f2:57:13:84:a6:84:42:67:6c:4b:de:21:9f:
37:20:3b:ce:81:54:69:78:f0:dd:c2:2b:60:74:72:
1b:02:7e:a8:96:85:db:16:de:4e:91:12:55:dc:2e:
f6:23:c0:73:7b:a0:fe:ae:37:8f:48:0d:80:bf:80:
01:57:4e:86:ac:b7:0a:67:ec:f5:11:74:4b:91:11:
a5:fc:dd:ee:04:64:33:70:02:4a:48:bb:18:40:bb:
6f:97:6d:07:20:ba:96:fd:e7:36:1e:16:dd:19:98:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:AB:D4:16:4A:AD:C4:73:00:17:5E:E7:B7:AC:3A:06:08:70:FA
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/iPyr1BZKrcRzABde57esOgYIcPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.252.0/24
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
80.232.124.0/24
80.239.0.0/17
82.194.192.0/19
84.208.0.0/13
89.254.64.0/18
109.108.192.0/19
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
212.45.160.0/19
212.125.252.0/22
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
bc:99:99:61:e9:0c:4e:dc:04:c2:33:12:3c:55:92:80:9d:11:
92:a9:59:d5:c4:81:7f:e4:d3:a5:5a:95:4b:15:1e:8c:68:c4:
0a:1f:a6:98:d2:8c:c2:97:f5:fb:82:f3:ce:49:60:3f:db:08:
3a:2c:dc:35:ca:be:b8:63:7d:8c:22:67:18:02:90:84:38:53:
9c:c4:4d:31:48:d9:e8:c0:fc:49:b7:ce:52:7f:5f:73:f8:ef:
14:e3:4d:23:f9:f9:b7:89:a0:f3:cd:a5:e4:ee:95:1c:d9:9f:
31:15:c5:80:88:41:17:51:c2:72:ef:96:7e:da:98:94:3b:08:
ec:f8:5d:a9:65:5c:ae:7b:81:ab:7f:f0:30:62:34:12:c6:29:
6b:05:58:9b:da:81:34:18:fb:90:b5:47:58:65:2e:47:09:7e:
fc:cd:97:47:17:08:45:31:c3:95:f4:80:8d:0a:0d:52:fb:29:
62:a9:d1:ea:f0:3f:96:ed:e8:ca:4e:0c:c7:b8:44:30:54:15:
e8:a1:af:80:82:3a:45:cd:51:5f:23:00:0f:28:ab:75:32:53:
61:d5:61:9e:ba:6a:a7:00:7e:ef:ce:8b:b7:36:c1:b8:39:66:
b7:e2:cc:8a:05:ee:61:85:43:e8:34:60:4b:b7:a8:e5:4e:54:
5c:0f:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org