Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa
File: hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa (raw, json)
Hash identifier: jZUriQlG2P/QDH3Zt/REGWvdvrrGpew+bdI6Zvo4Gpw=
Subject key identifier: 86:98:E2:D1:8D:25:74:8F:CE:4C:D0:39:B2:00:EB:49:47:BB:67:43
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AF5BC7731E4EFACE5966D3499507B32DA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa
Signing time: Tue 03 Oct 2023 13:31:23 +0000
ROA not before: Tue 03 Oct 2023 13:31:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:bc:77:31:e4:ef:ac:e5:96:6d:34:99:50:7b:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 3 13:31:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8698e2d18d25748fce4cd039b200eb4947bb6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:4d:89:6f:b1:1e:c6:bb:72:15:44:27:d3:
f2:2c:1a:80:12:bf:88:01:bd:f5:50:40:8c:7a:45:
7b:6f:18:92:b6:d6:ef:89:06:7b:ef:ee:a4:17:ff:
15:84:48:b6:e2:f8:61:69:e2:35:f5:62:a4:1e:d7:
9b:0f:e8:d4:d8:1a:cc:d3:98:75:03:b2:6e:d0:51:
d6:46:34:56:fb:5c:71:13:f3:63:87:16:15:43:df:
83:45:8c:ef:ec:f0:37:00:05:4c:51:ef:31:93:a9:
14:eb:38:3d:8c:6b:fd:f3:e9:11:87:86:25:a1:f5:
9a:a1:59:a7:f1:ae:1a:aa:f1:a7:26:a7:d9:95:13:
26:98:4c:f7:22:b9:a2:cf:7c:8d:f9:a2:58:d5:cf:
2a:1c:99:3b:ea:a3:67:5e:60:d0:01:a5:b9:c7:2d:
65:d0:cf:e1:b6:b8:9a:de:4c:91:7c:eb:b8:d6:d6:
8a:21:8e:fe:66:5a:30:9f:68:76:27:cc:69:ea:5e:
9f:28:58:53:8f:d4:69:5a:9d:d7:b0:85:20:47:0d:
3f:e8:da:39:8d:81:38:bf:72:3b:16:42:d5:9d:8b:
be:84:b7:11:9e:53:8a:bb:0a:01:41:58:3d:83:2b:
a8:81:98:a3:2f:d1:41:68:18:db:bd:ca:22:2b:38:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:E2:D1:8D:25:74:8F:CE:4C:D0:39:B2:00:EB:49:47:BB:67:43
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0/24
5.188.210.0/23
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
3b:c5:10:be:70:2b:19:58:93:40:79:cf:82:5c:06:df:15:11:
e0:12:b2:36:65:8e:37:c8:62:70:f3:b2:6f:66:82:2d:d6:89:
52:6a:bd:8b:4d:2a:c8:b8:93:a2:00:0c:52:c3:fc:af:d0:15:
21:ae:a7:ce:54:9b:34:40:ea:d6:6c:d1:a8:75:5a:1b:25:e0:
bc:a0:d0:60:16:46:ed:e8:0c:7c:67:0e:5d:0a:f5:94:8a:e9:
52:5d:aa:dc:62:b6:dc:f5:06:d8:5b:a1:3a:65:06:24:54:ea:
d9:5a:00:90:05:11:36:d3:3d:bf:82:3e:6c:20:7b:cd:0a:b5:
54:46:8e:e0:76:71:3d:b5:ed:f7:60:20:e5:3e:c4:39:69:85:
7b:33:46:40:98:2e:be:14:d6:2e:ad:db:c2:1e:e0:5d:2c:21:
4b:36:e1:6e:ff:51:ff:dc:53:75:35:32:f9:6f:a7:c0:5f:cc:
8c:cd:10:4e:99:61:70:33:e0:c4:bc:43:2d:01:0f:93:82:a9:
d5:c8:98:db:e9:f7:d3:9c:24:2e:2c:02:77:8e:34:b7:42:de:
3c:3c:0f:3f:f0:8d:64:92:a6:61:de:e7:23:79:ca:86:d1:a5:
56:d6:38:da:47:79:7d:f5:2c:79:c7:0b:62:00:52:c9:70:b0:
d1:a6:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 09:40:43 2023 by rpki-client on console-fra.rpki-client.org