Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eY4aXoSmWgcWwc_rLoK1lG8ZRXQ.roa
File: eY4aXoSmWgcWwc_rLoK1lG8ZRXQ.roa (raw, json)
Hash identifier: d1ieq/pGpuajbZhh63eV1OfQC006dgcwbyv2zVRvids=
Subject key identifier: 79:8E:1A:5E:84:A6:5A:07:16:C1:CF:EB:2E:82:B5:94:6F:19:45:74
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018A4C7B0277E0CD896692186BB3A2434794
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eY4aXoSmWgcWwc_rLoK1lG8ZRXQ.roa
Signing time: Thu 31 Aug 2023 16:44:04 +0000
ROA not before: Thu 31 Aug 2023 16:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 81.161.12.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
89.46.112.0/23 maxlen: 24
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
195.80.142.0/23 maxlen: 24
188.213.233.0/24 maxlen: 24
93.120.64.0/21 maxlen: 21
31.133.192.0/24 maxlen: 24
193.221.82.0/23 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
31.133.196.0/23 maxlen: 23
31.133.194.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.72.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
93.120.84.0/24 maxlen: 24
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
91.234.222.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.88.0/23 maxlen: 23
93.120.86.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.92.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
93.120.28.0/23 maxlen: 23
93.120.27.0/24 maxlen: 24
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
171.25.223.0/24 maxlen: 24
176.112.84.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
91.246.201.0/24 maxlen: 24
89.45.92.0/23 maxlen: 24
178.159.152.0/21 maxlen: 21
178.159.148.0/22 maxlen: 22
91.233.202.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
77.232.192.0/23 maxlen: 24
77.232.196.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.204.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
86.104.132.0/23 maxlen: 24
176.124.180.0/22 maxlen: 22
176.118.88.0/22 maxlen: 22
77.232.220.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
91.233.2.0/23 maxlen: 23
89.44.100.0/23 maxlen: 24
91.225.35.0/24 maxlen: 24
91.231.226.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.223.0/24 maxlen: 24
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.76.0/24 maxlen: 24
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
176.110.106.0/24 maxlen: 24
77.36.80.0/21 maxlen: 21
176.110.107.0/24 maxlen: 24
77.36.88.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
85.204.196.0/23 maxlen: 24
77.36.89.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
77.36.96.0/20 maxlen: 20
77.36.92.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
37.97.122.0/23 maxlen: 23
185.9.240.0/22 maxlen: 22
185.9.236.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.111.0.0/22 maxlen: 22
91.239.0.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
188.191.248.0/22 maxlen: 22
91.232.16.0/23 maxlen: 23
91.232.20.0/24 maxlen: 24
31.131.12.0/22 maxlen: 22
193.36.192.0/21 maxlen: 21
193.36.202.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
91.237.194.0/23 maxlen: 23
77.36.8.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
77.36.30.0/24 maxlen: 24
77.36.28.0/23 maxlen: 23
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
89.42.232.0/23 maxlen: 24
77.36.40.0/21 maxlen: 21
77.36.38.0/23 maxlen: 23
77.36.48.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
31.135.4.0/23 maxlen: 23
31.135.1.0/24 maxlen: 24
31.135.3.0/24 maxlen: 24
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
176.121.96.0/21 maxlen: 21
193.0.190.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.159.0/24 maxlen: 24
91.229.158.0/24 maxlen: 24
89.34.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 14:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:7b:02:77:e0:cd:89:66:92:18:6b:b3:a2:43:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 31 16:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=798e1a5e84a65a0716c1cfeb2e82b5946f194574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:92:87:a9:5a:0b:f6:b1:6d:a6:0b:a3:77:
d7:2d:fd:77:8d:df:db:95:8a:43:69:6d:8e:c4:ea:
ca:ce:d2:33:31:44:ce:5d:43:18:98:66:11:84:b7:
23:4f:3e:fa:f0:95:18:9a:ad:37:bd:2b:56:5a:db:
25:b4:d3:ef:28:42:5f:42:1c:87:8b:20:67:f8:03:
cc:ca:8f:29:d2:1c:96:19:40:a1:ff:4e:7a:ed:56:
8d:8e:e6:e7:57:36:d6:4c:19:19:a5:76:7f:92:91:
7f:14:5f:41:19:f3:a2:2a:44:b5:37:11:09:48:6b:
d1:ba:80:bd:c3:36:82:17:b8:65:0b:f1:99:56:c7:
90:18:62:47:a0:f6:6d:f2:53:72:7d:b8:69:97:3d:
74:d8:7f:ee:bd:6c:1c:36:30:9c:83:88:33:68:01:
75:9d:29:10:c3:af:1f:ba:f3:80:01:68:8c:3c:2e:
e6:25:4a:b2:b5:2a:30:b1:ef:ae:3b:c0:b3:42:32:
62:29:7e:58:03:49:f8:6b:69:4c:1c:7f:16:97:a3:
73:f2:be:1c:bd:91:99:e4:0e:f6:56:81:92:13:41:
bb:d4:b4:eb:a5:85:55:ac:2a:d2:fa:d3:16:d9:03:
ed:34:68:7b:b7:2e:e3:05:a6:a4:9e:c0:8e:39:a8:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:1A:5E:84:A6:5A:07:16:C1:CF:EB:2E:82:B5:94:6F:19:45:74
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eY4aXoSmWgcWwc_rLoK1lG8ZRXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.3.0-31.135.5.255
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.76.0/24
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.20.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
91.246.201.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/23
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
193.36.202.0/24
193.221.82.0/23
195.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b9:d4:7d:5e:64:6a:b9:f0:bb:8e:31:07:f5:bd:d5:4e:6c:
3d:6c:e6:ea:cd:e2:ca:0c:94:0a:66:a6:ab:a2:76:37:a6:43:
39:ed:fb:a6:ae:e5:b2:96:e3:a4:02:bb:da:c3:a6:c6:32:1d:
96:e6:d3:cf:ea:05:30:0b:dd:77:9f:3b:e8:a4:00:a8:10:a3:
cd:2d:d1:65:0d:75:e5:7f:93:25:d8:e7:a5:7b:5b:a0:55:ca:
9a:e8:2c:32:d6:9d:8c:5e:a6:de:66:fd:1b:f8:cb:4a:d2:a0:
d4:a9:fc:6d:e1:8f:a7:8c:a0:8c:37:c4:96:5a:84:a9:a2:1b:
52:ca:28:e2:ab:3d:15:45:80:8d:ef:08:b9:9a:44:0a:2e:62:
e5:10:00:d1:fa:9b:26:92:54:15:51:89:73:bc:25:e7:e6:56:
0b:8d:28:ec:15:24:0b:05:8d:6d:7c:d1:4d:ae:14:52:35:bd:
fd:29:18:c0:ca:11:f0:2c:03:75:89:a3:ee:01:f0:a1:1b:3f:
c5:dd:41:83:3a:f3:a4:c5:ab:eb:83:67:27:fc:80:db:70:c3:
22:03:b6:a1:f6:bf:de:1f:b0:aa:ea:87:ec:d8:02:f0:0b:02:
ea:71:36:36:1b:7e:16:c9:22:76:da:7b:12:d3:8c:c3:bc:de:
d9:99:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org