Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qHM55ugKTRngP2SIao0ycYD28Lg.roa
File: qHM55ugKTRngP2SIao0ycYD28Lg.roa (raw, json)
Hash identifier: 1AaQzk+QjIYPc5LKPHdjNgrGHdoOh+qPPwtYeryVVYg=
Subject key identifier: A8:73:39:E6:E8:0A:4D:19:E0:3F:64:88:6A:8D:32:71:80:F6:F0:B8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018C1A326D487DA5E7809CD6EACB13BA887B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qHM55ugKTRngP2SIao0ycYD28Lg.roa
Signing time: Wed 29 Nov 2023 08:29:21 +0000
ROA not before: Wed 29 Nov 2023 08:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:32:6d:48:7d:a5:e7:80:9c:d6:ea:cb:13:ba:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Nov 29 08:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a87339e6e80a4d19e03f64886a8d327180f6f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:99:f0:3b:d6:e9:d5:4b:93:24:d6:67:a3:
0a:17:96:c4:2b:94:33:6f:b0:e9:83:0b:23:d6:80:
a5:aa:11:1e:46:00:00:dc:05:c9:28:36:47:53:33:
03:c8:e8:20:d1:e5:44:0c:cd:64:ee:d3:d7:29:28:
f4:2e:65:b2:93:ee:f8:32:74:12:65:7a:43:2f:2c:
50:f0:66:93:f9:20:31:50:bc:e2:01:8f:90:8d:a2:
b9:40:18:af:8f:b8:be:64:f7:ca:91:76:9f:64:83:
ce:73:6c:d4:77:94:e1:24:b4:a5:46:25:6d:bc:55:
41:a7:84:55:28:a2:4a:2e:93:d0:60:fd:b6:48:03:
99:6e:61:8f:a7:f4:88:e0:33:d6:d6:c3:bf:c4:48:
41:04:0b:e5:57:38:74:2a:58:28:1b:d8:1f:58:18:
a9:e9:e3:68:b9:ba:bf:7a:0a:e5:12:aa:7a:21:88:
2b:3f:e8:c9:e2:85:46:46:d6:d1:57:86:c0:f6:e2:
2d:84:7d:11:b7:55:3e:51:78:1a:5e:fe:53:c2:13:
2f:c4:7d:23:2b:63:fb:e2:c8:df:1e:23:82:97:6a:
24:11:3b:07:cf:c2:e2:e6:c1:54:1e:e6:8f:b8:e8:
7d:1a:79:b5:49:47:0a:2a:8b:e0:d5:27:14:fa:38:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:39:E6:E8:0A:4D:19:E0:3F:64:88:6A:8D:32:71:80:F6:F0:B8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qHM55ugKTRngP2SIao0ycYD28Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
93:61:56:70:e7:b3:8b:b6:6b:88:3e:38:03:5a:d5:e7:b0:0e:
e8:37:28:4c:fd:c1:4f:f5:b3:df:ca:c2:52:f2:9c:2d:92:61:
72:cf:62:e2:19:da:ba:05:2d:32:41:60:6e:13:10:52:27:a9:
f0:e7:bf:85:8b:c1:d6:3a:9b:e4:04:e3:10:5b:e9:7c:b1:e5:
df:c1:8b:a3:4d:b6:1b:cc:6b:68:18:4f:72:8d:39:48:5f:a3:
f3:23:27:ff:83:6e:c9:f9:a4:8c:42:db:21:9b:2d:d7:5d:57:
79:62:2f:aa:94:53:1a:b4:56:b6:e5:8b:0c:4d:3d:eb:ce:47:
93:91:51:2c:f4:af:6f:a5:a9:06:d1:cc:e9:87:36:5d:00:a8:
72:7b:91:1c:9e:13:cd:1a:45:a5:b2:40:e5:12:a9:25:b0:ea:
74:58:3f:73:ce:76:c7:c7:a1:45:ea:3f:fb:c6:13:8f:5d:25:
9b:73:1c:d5:dc:65:46:c8:a9:ab:6f:2a:ce:2e:65:79:43:da:
6a:b5:a1:0a:60:f3:95:08:b0:ef:39:2b:19:e7:38:e8:6b:0c:
78:92:05:67:c6:ab:be:bf:e5:f0:f0:fc:48:7a:19:2f:17:25:
03:f8:09:da:38:92:85:65:76:ec:64:70:91:ce:94:b9:0d:13:
56:48:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 00:36:54 2023 by rpki-client on console-ams.rpki-client.org