Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4NhqCfFGiDP884sYODE5eDGrE2M.roa
File: 4NhqCfFGiDP884sYODE5eDGrE2M.roa (raw, json)
Hash identifier: 6bllKmeSxMV4fv/kKYcVfYO125/xhW3/VaboYQ24vns=
Subject key identifier: E0:D8:6A:09:F1:46:88:33:FC:F3:8B:18:38:31:39:78:31:AB:13:63
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F9B0A0E75B7CEA1BF704E91B13DD4402B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4NhqCfFGiDP884sYODE5eDGrE2M.roa
Signing time: Tue 21 May 2024 12:04:38 +0000
ROA not before: Tue 21 May 2024 12:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.163.20.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 16:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:0a:0e:75:b7:ce:a1:bf:70:4e:91:b1:3d:d4:40:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 21 12:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0d86a09f1468833fcf38b183831397831ab1363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:44:b0:a2:b3:15:cb:e3:07:99:5f:1b:c9:
21:48:24:fb:f5:a1:f0:f5:79:d9:e3:82:89:42:80:
6b:fb:79:57:4e:23:a1:6a:06:09:70:14:f1:d7:9c:
e7:29:2b:97:60:f5:1a:de:6b:a1:25:37:66:d8:33:
7b:a9:2c:f2:57:a8:d1:ac:4e:14:56:25:4b:ee:9c:
7f:f9:4e:db:77:5c:13:33:68:38:62:cd:76:7e:c8:
9f:be:4c:2f:63:c6:84:ca:bd:9d:91:a6:c4:30:e3:
c8:73:ae:8f:0c:0a:3e:be:ca:bc:30:d5:d7:40:2e:
28:c9:e8:d0:7c:00:f1:c7:08:a9:92:76:55:a4:f0:
01:20:ad:d5:64:cb:e1:83:52:c8:af:bb:d5:7c:39:
7a:9a:b0:81:dc:a0:ca:e5:99:a6:a6:b9:73:83:58:
07:f7:a9:75:d2:5b:35:8d:1a:5c:2c:57:34:f1:3b:
56:6a:1c:a8:49:5c:4a:d7:35:c1:21:bb:ca:cf:5d:
de:0b:db:b8:80:29:6d:d2:4c:af:8c:67:f2:ff:0a:
82:36:f9:d2:e7:78:25:30:d6:dc:3d:17:71:54:02:
64:cb:69:d6:3d:6f:72:de:44:6e:c2:4d:75:49:72:
7f:bb:03:ab:ea:f3:5c:21:39:62:2f:05:83:7f:1c:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:6A:09:F1:46:88:33:FC:F3:8B:18:38:31:39:78:31:AB:13:63
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4NhqCfFGiDP884sYODE5eDGrE2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.138.159.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.2.0-62.3.4.255
62.3.23.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.212.0/24
84.246.81.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.163.20.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:80:d6:8b:06:21:9c:dc:c0:21:dd:a2:4c:ba:ec:bd:7f:bb:
aa:a4:02:e2:f8:a4:95:15:9b:81:93:06:d6:7c:20:20:40:30:
8b:01:6a:05:af:36:33:c9:18:a1:fc:f9:fb:2d:21:5d:61:ad:
73:71:9e:33:0b:8e:39:18:cc:79:38:68:9a:27:38:a7:eb:da:
fd:15:ba:9b:97:99:e4:fa:58:5f:5c:64:66:74:b0:39:fc:e0:
3c:b8:2d:aa:7a:96:68:58:5e:2f:88:77:60:6f:90:91:98:4a:
b6:e4:1d:af:8d:f4:b5:e1:d4:3e:ff:68:5c:96:a1:a9:fe:37:
b7:ae:95:f5:8d:1e:81:68:5f:31:bf:a9:03:00:fe:07:ac:44:
29:cc:01:c4:20:e2:97:ad:a6:6f:f7:88:69:7d:f3:b7:60:9e:
2f:9a:be:6c:1b:71:37:68:6d:cf:29:82:51:97:7f:78:cc:a6:
29:25:a6:07:b9:1a:69:cd:12:71:26:8c:17:9a:fe:c3:8a:71:
c5:e3:05:44:ad:60:98:4d:70:af:22:a4:66:b2:f4:b8:b1:86:
2f:35:6a:ac:ce:9e:14:a1:cd:08:71:ab:29:2d:b1:a5:44:15:
8b:f3:48:14:b7:93:e6:2f:57:5c:76:a4:3c:59:a2:5b:a3:73:
62:e4:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org