Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/z8TaEjaXmdp2AN_tT7Nh-K54Pjs.roa
File: z8TaEjaXmdp2AN_tT7Nh-K54Pjs.roa (raw, json)
Hash identifier: AzsyDysWbexqBurN2rmcAPLwUZljltD31l4cZwtxLfM=
Subject key identifier: CF:C4:DA:12:36:97:99:DA:76:00:DF:ED:4F:B3:61:F8:AE:78:3E:3B
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01877529D45E5ED1566623E8BE749CD10CF4
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/z8TaEjaXmdp2AN_tT7Nh-K54Pjs.roa
Signing time: Wed 12 Apr 2023 11:11:28 +0000
ROA not before: Wed 12 Apr 2023 11:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202422
IP address blocks: 5.188.4.0/24 maxlen: 24
5.188.0.0/24 maxlen: 24
5.188.6.0/24 maxlen: 24
5.181.77.0/24 maxlen: 24
188.241.250.0/24 maxlen: 24
5.188.32.0/24 maxlen: 24
80.93.210.0/24 maxlen: 24
5.188.36.0/24 maxlen: 24
80.93.209.0/24 maxlen: 24
80.93.218.0/24 maxlen: 24
80.93.214.0/24 maxlen: 24
80.93.219.0/24 maxlen: 24
80.93.215.0/24 maxlen: 24
80.93.217.0/24 maxlen: 24
80.93.223.0/24 maxlen: 24
5.181.25.0/24 maxlen: 24
5.181.27.0/24 maxlen: 24
5.188.108.0/24 maxlen: 24
5.188.110.0/24 maxlen: 24
5.188.122.0/24 maxlen: 24
5.188.124.0/24 maxlen: 24
83.229.4.0/24 maxlen: 24
5.188.148.0/24 maxlen: 24
87.121.53.0/24 maxlen: 24
45.80.209.0/24 maxlen: 24
83.229.6.0/24 maxlen: 24
45.80.211.0/24 maxlen: 24
45.80.208.0/24 maxlen: 24
45.80.210.0/24 maxlen: 24
5.188.70.0/24 maxlen: 24
5.188.93.0/24 maxlen: 24
5.45.185.0/24 maxlen: 24
5.45.184.0/24 maxlen: 24
79.133.110.0/24 maxlen: 24
92.38.187.0/24 maxlen: 24
79.133.120.0/24 maxlen: 24
79.133.122.0/24 maxlen: 24
79.133.124.0/24 maxlen: 24
95.85.67.0/24 maxlen: 24
95.85.71.0/24 maxlen: 24
95.85.72.0/24 maxlen: 24
95.85.76.0/24 maxlen: 24
95.85.73.0/24 maxlen: 24
95.85.75.0/24 maxlen: 24
95.85.77.0/24 maxlen: 24
95.85.89.0/24 maxlen: 24
95.85.91.0/24 maxlen: 24
202.78.164.0/24 maxlen: 24
202.78.167.0/24 maxlen: 24
202.78.168.0/24 maxlen: 24
202.78.173.0/24 maxlen: 24
89.44.194.0/24 maxlen: 24
89.44.199.0/24 maxlen: 24
45.65.9.0/24 maxlen: 24
45.65.11.0/24 maxlen: 24
92.38.148.0/24 maxlen: 24
92.38.155.0/24 maxlen: 24
92.38.160.0/24 maxlen: 24
92.38.166.0/24 maxlen: 24
194.99.78.0/24 maxlen: 24
194.99.81.0/24 maxlen: 24
92.38.173.0/24 maxlen: 24
92.38.176.0/24 maxlen: 24
92.38.178.0/24 maxlen: 24
92.38.186.0/23 maxlen: 24
92.38.181.0/24 maxlen: 24
92.38.184.0/24 maxlen: 24
92.38.186.0/24 maxlen: 24
92.38.180.0/24 maxlen: 24
80.240.115.0/24 maxlen: 24
92.38.132.0/24 maxlen: 24
78.111.105.0/24 maxlen: 24
78.111.99.0/24 maxlen: 24
78.111.102.0/24 maxlen: 24
78.138.52.0/24 maxlen: 24
82.97.203.0/24 maxlen: 24
146.185.236.0/24 maxlen: 24
146.185.237.0/24 maxlen: 24
146.185.248.0/24 maxlen: 24
146.185.250.0/24 maxlen: 24
146.185.251.0/24 maxlen: 24
103.30.211.0/24 maxlen: 24
146.185.214.0/24 maxlen: 24
146.185.216.0/24 maxlen: 24
146.185.217.0/24 maxlen: 24
146.185.219.0/24 maxlen: 24
5.252.24.0/24 maxlen: 24
31.184.206.0/24 maxlen: 24
2.56.221.0/24 maxlen: 24
2.56.223.0/24 maxlen: 24
89.43.109.0/24 maxlen: 24
89.43.108.0/24 maxlen: 24
37.9.32.0/24 maxlen: 24
37.9.33.0/24 maxlen: 24
37.9.35.0/24 maxlen: 24
89.42.178.0/24 maxlen: 24
185.244.210.0/24 maxlen: 24
92.223.93.0/24 maxlen: 24
89.223.92.0/24 maxlen: 24
89.223.94.0/24 maxlen: 24
139.28.6.0/24 maxlen: 24
92.223.102.0/24 maxlen: 24
139.28.5.0/24 maxlen: 24
92.223.105.0/24 maxlen: 24
5.189.204.0/24 maxlen: 24
5.189.206.0/24 maxlen: 24
5.189.222.0/24 maxlen: 24
180.149.37.0/24 maxlen: 24
92.223.59.0/24 maxlen: 24
180.149.36.0/24 maxlen: 24
180.149.39.0/24 maxlen: 24
180.149.47.0/24 maxlen: 24
92.223.79.0/24 maxlen: 24
92.223.90.0/24 maxlen: 24
45.82.102.0/24 maxlen: 24
213.156.137.0/24 maxlen: 24
213.156.139.0/24 maxlen: 24
213.156.136.0/24 maxlen: 24
185.183.128.0/24 maxlen: 24
213.156.142.0/24 maxlen: 24
213.156.143.0/24 maxlen: 24
213.156.145.0/24 maxlen: 24
213.156.148.0/24 maxlen: 24
213.156.147.0/24 maxlen: 24
213.156.158.0/24 maxlen: 24
213.156.155.0/24 maxlen: 24
213.156.157.0/24 maxlen: 24
213.156.153.0/24 maxlen: 24
185.163.1.0/24 maxlen: 24
5.8.24.0/24 maxlen: 24
5.8.33.0/24 maxlen: 24
5.8.41.0/24 maxlen: 24
94.156.99.0/24 maxlen: 24
5.188.214.0/24 maxlen: 24
5.188.215.0/24 maxlen: 24
5.188.225.0/24 maxlen: 24
5.188.230.0/24 maxlen: 24
103.215.216.0/24 maxlen: 24
103.215.218.0/24 maxlen: 24
185.202.92.0/24 maxlen: 24
185.202.94.0/24 maxlen: 24
5.188.231.0/24 maxlen: 24
103.215.219.0/24 maxlen: 24
5.188.238.0/24 maxlen: 24
217.195.193.0/24 maxlen: 24
5.188.169.0/24 maxlen: 24
5.188.168.0/24 maxlen: 24
83.229.32.0/24 maxlen: 24
5.188.188.0/24 maxlen: 24
5.188.190.0/24 maxlen: 24
5.188.191.0/24 maxlen: 24
87.121.99.0/24 maxlen: 24
5.188.213.0/24 maxlen: 24
185.14.44.0/24 maxlen: 24
92.243.82.0/24 maxlen: 24
91.243.85.0/24 maxlen: 24
217.195.205.0/24 maxlen: 24
45.67.209.0/24 maxlen: 24
185.101.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:29:d4:5e:5e:d1:56:66:23:e8:be:74:9c:d1:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Apr 12 11:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc4da12369799da7600dfed4fb361f8ae783e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:cb:43:e4:dd:72:8b:b2:3f:c6:af:50:f0:f4:
6a:c5:db:1a:f3:25:39:e2:1e:22:24:8f:73:d5:0c:
75:68:fc:b3:93:8d:55:e0:c7:72:4d:99:fc:72:94:
63:bc:9e:bc:f1:13:9a:02:40:c6:b7:34:d5:ce:17:
3f:af:83:da:48:74:58:72:b6:f9:a7:8b:38:b4:8f:
c8:42:20:b3:c8:63:fb:fb:8e:6b:de:f5:08:fe:dd:
8e:15:b7:fb:2d:41:25:81:41:1a:b2:59:f4:81:19:
aa:13:4a:42:bb:38:7b:36:ab:8d:ec:10:bd:c9:ba:
f9:f3:e2:63:44:40:b2:fa:64:07:4a:02:51:e8:98:
01:f5:63:c6:51:a1:fe:a1:3d:63:9a:96:66:6c:f8:
7b:b6:a5:43:ce:ed:82:fb:4d:e2:5d:24:3c:8b:1c:
cc:40:ff:6b:fc:79:56:aa:83:5a:3d:4c:51:90:84:
ca:2d:03:59:c2:8a:8c:d9:ac:84:59:c4:86:10:78:
9b:78:4b:47:b8:96:ad:d5:bd:ce:0e:0d:fb:5a:da:
c9:99:87:9a:18:75:8b:e6:92:dd:d4:82:24:07:29:
7b:b9:47:7a:95:a3:f4:28:2e:51:fc:21:f8:d3:f5:
73:b7:77:fd:b1:fb:fe:68:23:c9:e7:78:07:68:66:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:DA:12:36:97:99:DA:76:00:DF:ED:4F:B3:61:F8:AE:78:3E:3B
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/z8TaEjaXmdp2AN_tT7Nh-K54Pjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.221.0/24
2.56.223.0/24
5.8.24.0/24
5.8.33.0/24
5.8.41.0/24
5.45.184.0/23
5.181.25.0/24
5.181.27.0/24
5.181.77.0/24
5.188.0.0/24
5.188.4.0/24
5.188.6.0/24
5.188.32.0/24
5.188.36.0/24
5.188.70.0/24
5.188.93.0/24
5.188.108.0/24
5.188.110.0/24
5.188.122.0/24
5.188.124.0/24
5.188.148.0/24
5.188.168.0/23
5.188.188.0/24
5.188.190.0/23
5.188.213.0-5.188.215.255
5.188.225.0/24
5.188.230.0/23
5.188.238.0/24
5.189.204.0/24
5.189.206.0/24
5.189.222.0/24
5.252.24.0/24
31.184.206.0/24
37.9.32.0/23
37.9.35.0/24
45.65.9.0/24
45.65.11.0/24
45.67.209.0/24
45.80.208.0/22
45.82.102.0/24
78.111.99.0/24
78.111.102.0/24
78.111.105.0/24
78.138.52.0/24
79.133.110.0/24
79.133.120.0/24
79.133.122.0/24
79.133.124.0/24
80.93.209.0-80.93.210.255
80.93.214.0/23
80.93.217.0-80.93.219.255
80.93.223.0/24
80.240.115.0/24
82.97.203.0/24
83.229.4.0/24
83.229.6.0/24
83.229.32.0/24
87.121.53.0/24
87.121.99.0/24
89.42.178.0/24
89.43.108.0/23
89.44.194.0/24
89.44.199.0/24
89.223.92.0/24
89.223.94.0/24
91.243.85.0/24
92.38.132.0/24
92.38.148.0/24
92.38.155.0/24
92.38.160.0/24
92.38.166.0/24
92.38.173.0/24
92.38.176.0/24
92.38.178.0/24
92.38.180.0/23
92.38.184.0/24
92.38.186.0/23
92.223.59.0/24
92.223.79.0/24
92.223.90.0/24
92.223.93.0/24
92.223.102.0/24
92.223.105.0/24
92.243.82.0/24
94.156.99.0/24
95.85.67.0/24
95.85.71.0-95.85.73.255
95.85.75.0-95.85.77.255
95.85.89.0/24
95.85.91.0/24
103.30.211.0/24
103.215.216.0/24
103.215.218.0/23
139.28.5.0-139.28.6.255
146.185.214.0/24
146.185.216.0/23
146.185.219.0/24
146.185.236.0/23
146.185.248.0/24
146.185.250.0/23
180.149.36.0/23
180.149.39.0/24
180.149.47.0/24
185.14.44.0/24
185.101.139.0/24
185.163.1.0/24
185.183.128.0/24
185.202.92.0/24
185.202.94.0/24
185.244.210.0/24
188.241.250.0/24
194.99.78.0/24
194.99.81.0/24
202.78.164.0/24
202.78.167.0-202.78.168.255
202.78.173.0/24
213.156.136.0/23
213.156.139.0/24
213.156.142.0/23
213.156.145.0/24
213.156.147.0-213.156.148.255
213.156.153.0/24
213.156.155.0/24
213.156.157.0-213.156.158.255
217.195.193.0/24
217.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:e5:1e:a1:66:ef:93:63:c0:86:a9:78:f2:04:bd:44:09:61:
be:41:a8:ef:7a:a9:11:03:83:1e:c8:dc:9c:9e:95:70:f0:6f:
75:45:57:82:af:2d:7d:3b:14:52:fc:86:73:e8:85:a0:dd:d2:
9a:07:40:2f:ca:22:6d:a0:c9:0b:14:a4:e3:59:b4:d6:8c:44:
0d:6b:60:34:49:01:56:ba:7e:03:99:6b:20:b2:11:48:87:78:
88:8e:5d:3c:9d:9a:d9:05:28:cc:17:0d:68:0c:d9:40:8f:be:
b2:69:6d:14:86:d7:d5:ef:ad:ab:79:e3:66:7e:40:cc:c2:fd:
6c:37:44:44:b2:af:db:80:21:0f:29:39:c3:32:a0:f0:e8:47:
d4:55:1b:e1:54:3d:95:ba:1a:b1:fd:27:2e:ac:59:0e:88:b1:
f1:d0:8b:b9:2f:e5:59:8d:ad:9e:e2:a1:38:c0:81:18:fc:32:
aa:9c:10:7b:53:56:3c:81:92:3f:b2:15:5f:ef:bd:49:f0:5c:
6e:81:94:5d:11:08:ab:d9:36:05:43:43:37:9a:d3:34:f5:f4:
4a:2d:ea:2d:22:e7:4e:08:33:6c:cf:af:6f:91:f8:52:a4:c7:
54:e9:c8:6e:87:67:78:f9:7f:40:ec:8e:57:c7:2f:11:f7:da:
eb:03:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:35 2024 by rpki-client on console-fra.rpki-client.org