Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Upyn3p2tcaEjW3BjrSApRJkhM9g.roa
File: Upyn3p2tcaEjW3BjrSApRJkhM9g.roa (raw, json)
Hash identifier: L5zsyZzLSSAW4D7Yl1iCfT/wdLNf0LrLetQZT0yZ65I=
Subject key identifier: 52:9C:A7:DE:9D:AD:71:A1:23:5B:70:63:AD:20:29:44:99:21:33:D8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018D9D945AA234A03EB6D897A770BFA2461F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Upyn3p2tcaEjW3BjrSApRJkhM9g.roa
Signing time: Mon 12 Feb 2024 13:49:21 +0000
ROA not before: Mon 12 Feb 2024 13:49:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.62.0/24 maxlen: 24
5.188.166.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.231.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.54.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
46.161.32.0/22 maxlen: 22
46.161.40.0/24 maxlen: 24
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked on Thu 15 Feb 2024 13:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:94:5a:a2:34:a0:3e:b6:d8:97:a7:70:bf:a2:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 12 13:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=529ca7de9dad71a1235b7063ad202944992133d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:69:d3:0a:d2:72:6e:94:c1:56:bf:1e:c1:
48:e1:3d:b0:77:65:28:bc:01:af:ea:3b:df:13:89:
d0:4c:76:e0:6a:31:d3:70:46:72:dc:13:70:bb:14:
43:a6:b5:47:c8:be:48:85:54:18:98:39:d5:c4:ff:
e1:87:cc:88:e2:6c:f9:38:fd:04:f3:51:76:f4:4f:
f2:35:3a:88:b8:e2:8d:2c:07:92:4b:2a:df:db:0b:
db:f9:a8:37:f7:23:15:18:1e:46:8c:ca:dd:19:90:
e7:5c:16:20:48:11:c3:9b:b3:e7:31:dc:cb:5f:31:
9b:16:39:d4:e6:39:43:1d:cd:72:2b:cb:81:e1:a1:
f9:e6:b4:c4:8e:3c:02:30:da:1b:ce:ea:51:21:fb:
2d:c6:59:ec:b9:9a:db:a8:7a:66:34:d9:e6:68:9d:
21:67:72:5d:21:b5:03:bd:12:3f:ff:3b:ff:b2:da:
74:44:51:40:38:e4:01:1b:99:27:64:e1:f8:a2:36:
fe:99:85:64:84:4f:bb:85:dd:65:48:30:7b:87:94:
a6:7a:f2:ae:23:f6:b6:3a:cd:6c:84:60:75:2f:aa:
96:6d:72:81:24:11:4f:8c:17:ba:08:d0:3a:66:7d:
2b:f3:31:16:21:e4:1b:fd:28:07:69:37:4f:3c:18:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:A7:DE:9D:AD:71:A1:23:5B:70:63:AD:20:29:44:99:21:33:D8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Upyn3p2tcaEjW3BjrSApRJkhM9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.40.0/24
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
0c:09:e8:35:01:02:0a:18:28:8d:34:fc:64:d6:9b:6a:fc:97:
e2:d4:af:e4:0e:3d:3d:35:17:ea:9f:3e:f2:2b:c3:41:9c:ef:
3a:f2:2a:67:9a:62:2b:68:b1:b2:bf:39:80:55:69:bd:fd:97:
b0:4a:08:6f:c1:12:60:cc:ef:4b:52:4e:48:16:86:25:98:f6:
d5:0d:33:af:c6:b1:68:da:40:d2:a1:84:3c:0a:94:66:2d:2e:
1a:05:fa:aa:be:c8:c2:52:8c:b2:d4:c7:65:a8:55:1b:62:1f:
d0:72:9f:5b:39:82:f2:71:43:9a:28:15:3e:28:5e:e1:83:91:
ed:35:9e:ef:26:b2:46:3d:50:ce:55:7e:78:cb:bb:6b:b5:8f:
e6:68:7a:0c:b2:1c:b8:8c:57:34:17:ca:4b:18:39:2b:4b:f2:
19:76:b1:7f:ac:91:18:50:1b:41:a5:e7:d4:78:c3:23:1a:fc:
e3:a4:70:cc:da:0b:01:68:51:71:8d:51:34:ff:28:21:b6:6d:
b9:06:51:6c:c4:80:28:38:3b:4c:44:27:4c:dc:96:24:d7:f9:
71:3f:73:c3:a3:f5:9c:5b:2d:f6:72:6f:b1:01:64:0e:cb:53:
81:84:71:bc:e2:95:a4:46:c4:5d:d5:f5:4c:03:01:cc:79:f1:
4c:7d:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:19 2024 by rpki-client on console-fra.rpki-client.org