Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HCvq93C8SWLWD8L_3IuZUpec-o0.roa
File: HCvq93C8SWLWD8L_3IuZUpec-o0.roa (raw, json)
Hash identifier: VMX3y8xs1pWX+1apNI3Thb/65Rcxo2UB3tRufFbeEzM=
Subject key identifier: 1C:2B:EA:F7:70:BC:49:62:D6:0F:C2:FF:DC:8B:99:52:97:9C:FA:8D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018E3784AC9CA577C3B9537F230CF079893D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HCvq93C8SWLWD8L_3IuZUpec-o0.roa
Signing time: Wed 13 Mar 2024 11:13:45 +0000
ROA not before: Wed 13 Mar 2024 11:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.62.0/24 maxlen: 24
5.188.166.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.231.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.54.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
46.161.32.0/22 maxlen: 22
46.161.40.0/24 maxlen: 24
46.161.43.0/24 maxlen: 24
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.212.0/24 maxlen: 24
146.185.213.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
146.185.233.0/24 maxlen: 24
146.185.238.0/24 maxlen: 24
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked on Thu 14 Mar 2024 06:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:84:ac:9c:a5:77:c3:b9:53:7f:23:0c:f0:79:89:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 13 11:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2beaf770bc4962d60fc2ffdc8b9952979cfa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:56:1a:46:8b:a4:c1:07:4a:e6:ed:80:e8:
e3:fd:38:11:7e:e9:d0:b1:4e:40:5b:b3:25:ee:2c:
66:6d:9b:99:27:34:5e:e6:cc:c5:cb:f7:14:91:1f:
22:5d:57:db:1c:95:9c:12:00:3d:d5:e1:d8:3d:4b:
74:c6:f6:ae:5e:6c:9f:24:04:50:ca:1e:2a:eb:fc:
b7:e3:b8:a6:ea:7f:27:aa:5a:b2:b4:9a:c1:a4:8c:
74:96:cd:62:1d:2a:c0:ba:9b:9b:01:14:ff:ef:91:
79:e3:8e:4c:03:45:8d:34:af:66:53:30:0f:fa:d8:
c2:44:3f:a0:ad:0e:56:04:ed:57:0d:52:8f:5a:6e:
40:45:06:38:90:bf:88:1d:3d:95:1d:2a:3d:66:4c:
f5:09:4e:23:f6:d7:22:60:cd:75:4e:9b:ba:36:bb:
92:56:2d:d6:22:b1:6a:83:52:a4:67:45:8a:c3:44:
51:70:19:3f:8e:eb:d4:97:41:36:0e:d4:9e:9d:a4:
27:bc:e6:78:21:66:6f:9a:a1:6a:8c:60:80:81:c6:
37:78:d6:9c:79:d9:7e:67:d4:c3:55:23:75:c5:e3:
5a:b2:a4:c5:2b:e6:ad:df:d5:2b:83:a6:0e:65:9b:
40:ea:e0:c2:bd:ec:13:46:3a:b8:ff:c2:ba:32:79:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:EA:F7:70:BC:49:62:D6:0F:C2:FF:DC:8B:99:52:97:9C:FA:8D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HCvq93C8SWLWD8L_3IuZUpec-o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.40.0/24
46.161.43.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.212.0/23
146.185.223.0-146.185.231.255
146.185.233.0/24
146.185.238.0/24
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
52:db:60:7e:d1:29:ad:3b:6d:17:4b:98:cf:cd:f1:9e:ce:7d:
22:7e:73:8a:62:69:28:ff:d9:3d:77:ae:74:9d:a4:88:ed:38:
24:f6:dd:90:b6:4e:50:c2:c3:b2:e0:c1:72:d8:0c:85:1a:b4:
a7:20:6e:5c:41:1d:73:42:da:a8:73:a5:ae:8e:71:9d:1c:59:
83:ae:73:04:64:f8:e8:49:50:3c:54:25:dd:39:9a:da:ae:75:
a3:a6:c4:6d:76:e2:a0:87:a7:30:30:4b:fd:07:77:fd:89:12:
b3:04:4f:4a:36:aa:0d:b9:8c:8b:c2:98:ca:f6:9b:8e:77:b5:
ae:5c:16:32:4b:04:6d:b4:28:91:96:c5:eb:04:64:17:51:fb:
62:36:33:a8:b5:ae:06:c4:02:81:93:06:19:77:2b:92:ef:38:
3a:b5:22:b8:d2:e6:90:60:ea:58:aa:d8:49:07:a1:12:2a:38:
8e:84:19:59:ea:d9:8f:b3:6f:ee:3d:51:23:a5:46:e4:d6:f7:
9e:d0:41:ec:f2:f3:6f:d8:21:c7:e3:45:fd:81:ac:79:93:ce:
3c:6f:2b:32:c0:41:d0:ab:7a:be:55:e9:2b:05:67:98:7c:72:
b2:ac:74:c5:7c:2c:e4:9b:4b:9d:32:27:6f:b8:0e:85:40:bc:
6a:9d:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 09:18:40 2024 by rpki-client on console-ams.rpki-client.org