Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa
File: 1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa (raw, json)
Hash identifier: 0KKR4k7Y23ji6xXLVXqIVKMGq3NwEr27XzJ69VJ49yY=
Subject key identifier: F8:0A:FC:87:52:82:5B:C0:22:55:FD:8B:83:DC:EC:FF:9F:A3:DB:FE
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FBDACE0D48C56F955BA532B7A856D
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 81.161.12.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
89.46.112.0/23 maxlen: 24
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
195.80.142.0/23 maxlen: 24
188.213.233.0/24 maxlen: 24
93.120.64.0/21 maxlen: 21
31.133.192.0/24 maxlen: 24
193.221.82.0/23 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
31.133.196.0/23 maxlen: 23
31.133.194.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.72.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
93.120.84.0/24 maxlen: 24
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
91.234.222.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.88.0/23 maxlen: 23
93.120.86.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.92.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
93.120.28.0/23 maxlen: 23
93.120.27.0/24 maxlen: 24
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
171.25.223.0/24 maxlen: 24
176.112.84.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
91.246.201.0/24 maxlen: 24
89.45.92.0/23 maxlen: 24
178.159.152.0/21 maxlen: 21
178.159.148.0/22 maxlen: 22
91.233.202.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
77.232.192.0/23 maxlen: 24
77.232.196.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.204.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
86.104.132.0/23 maxlen: 24
176.124.180.0/22 maxlen: 22
176.118.88.0/22 maxlen: 22
77.232.220.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
91.233.2.0/23 maxlen: 23
89.44.100.0/23 maxlen: 24
91.225.35.0/24 maxlen: 24
91.231.226.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.223.0/24 maxlen: 24
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.76.0/24 maxlen: 24
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
176.110.106.0/24 maxlen: 24
77.36.80.0/21 maxlen: 21
176.110.107.0/24 maxlen: 24
77.36.88.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
85.204.196.0/23 maxlen: 24
77.36.89.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
77.36.96.0/20 maxlen: 20
77.36.92.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
37.97.122.0/23 maxlen: 23
185.9.240.0/22 maxlen: 22
185.9.236.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.111.0.0/22 maxlen: 22
91.239.0.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
188.191.248.0/22 maxlen: 22
91.232.16.0/23 maxlen: 23
91.232.20.0/24 maxlen: 24
31.131.12.0/22 maxlen: 22
193.36.192.0/21 maxlen: 21
193.36.202.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
91.237.194.0/23 maxlen: 23
77.36.8.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
77.36.30.0/24 maxlen: 24
77.36.28.0/23 maxlen: 23
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
89.42.232.0/23 maxlen: 24
77.36.40.0/21 maxlen: 21
77.36.38.0/23 maxlen: 23
77.36.48.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
31.135.1.0/24 maxlen: 24
31.135.3.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
176.121.96.0/21 maxlen: 21
193.0.190.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.159.0/24 maxlen: 24
91.229.158.0/24 maxlen: 24
89.34.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 14:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bd:ac:e0:d4:8c:56:f9:55:ba:53:2b:7a:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f80afc8752825bc02255fd8b83dcecff9fa3dbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:1e:6d:3b:e6:4b:8d:85:24:d9:64:9e:a8:
c5:d4:0d:4b:f0:27:22:52:44:d8:9f:ad:a8:ea:61:
80:e0:86:df:ed:a6:2f:11:42:8f:0c:16:43:d0:0b:
3f:e4:e8:65:3e:54:d1:3d:40:f3:e4:d1:8c:f6:e4:
2b:aa:bb:fa:91:d4:97:a7:a2:31:49:ee:3e:e3:29:
e7:7d:6d:af:25:66:06:3b:2e:e2:26:e6:62:21:7c:
d4:28:6a:2a:50:ad:d3:05:a6:70:c2:3f:13:df:b9:
a3:76:cc:8d:34:64:ae:ff:e4:9d:f1:5f:5e:f0:ea:
fe:52:bf:a3:22:72:41:ef:53:f2:1d:4e:7d:88:55:
6c:91:9e:a3:4f:d4:8e:c0:cd:ec:57:b0:39:6d:bb:
7d:cb:bc:d8:24:a3:a0:9f:f4:dc:2e:ee:ac:1c:a6:
ad:f4:c2:95:db:30:59:d0:41:44:91:3d:82:71:51:
6d:9c:ae:72:44:4d:5d:43:0e:6b:97:23:5e:a4:eb:
36:16:7c:89:66:2b:47:f4:2f:f5:a8:b6:46:f0:8c:
50:d8:c5:4e:30:0c:b9:d8:f9:79:91:99:27:b2:e7:
99:2f:d7:0f:7d:ec:47:66:15:5c:63:e6:ad:06:6b:
c6:7d:d1:25:29:65:05:55:6d:fe:b2:a4:c3:91:df:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:FC:87:52:82:5B:C0:22:55:FD:8B:83:DC:EC:FF:9F:A3:DB:FE
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.3.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.76.0/24
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.20.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
91.246.201.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/23
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
193.36.202.0/24
193.221.82.0/23
195.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:89:a8:6e:70:a6:4d:12:53:ca:49:ef:60:b1:ed:29:07:b7:
ee:b7:39:54:1a:a3:d7:23:87:22:eb:b4:ba:76:e4:cc:6a:76:
0f:dd:17:56:7d:15:b6:bb:c3:76:55:cb:be:35:b4:d1:35:db:
9b:2d:ac:b3:bf:02:a1:bc:80:20:f1:31:ce:9b:f2:39:cf:2d:
e8:1d:3f:de:82:ea:b2:97:ee:7d:31:ea:2f:8b:95:d4:c9:8b:
c9:0d:a1:e7:14:db:96:74:50:20:41:9a:21:e5:3b:19:ce:64:
d5:0f:a4:e9:aa:39:5b:ea:f5:02:86:29:50:65:78:0f:cd:af:
d8:00:56:b8:9a:72:d5:3a:89:2c:50:c8:ce:a7:f1:a8:9e:a9:
f4:f6:9a:41:17:d4:ae:76:1d:68:95:65:56:80:41:3d:52:1c:
85:e9:91:6c:8d:1d:21:1d:40:cd:b0:9c:3c:5c:2d:75:48:11:
a3:20:9d:93:86:24:9d:91:05:7f:20:4c:8e:9c:29:ac:8c:0d:
08:81:0d:9e:1d:60:60:f2:54:dc:c0:94:ec:ec:9c:93:d1:aa:
96:14:ca:ee:d0:9a:62:6e:a3:6f:d2:fa:9c:23:34:3c:e0:b6:
0c:37:f1:3b:47:bb:80:87:61:6c:de:4c:51:23:0e:5a:43:71:
60:4a:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 18:30:30 2024 by rpki-client on console-ams.rpki-client.org