Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pw8betzCVHFGWMMUmpMCWceLUXQ.roa
File: Pw8betzCVHFGWMMUmpMCWceLUXQ.roa (raw, json)
Hash identifier: oPtz+AEZKFnYTVoTL1jfCrBDcb0fJc+jvdA3PPI8wtY=
Subject key identifier: 3F:0F:1B:7A:DC:C2:54:71:46:58:C3:14:9A:93:02:59:C7:8B:51:74
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E2E37623A7EADEA55B4EA0DEC145EB071
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pw8betzCVHFGWMMUmpMCWceLUXQ.roa
Signing time: Mon 11 Mar 2024 15:52:45 +0000
ROA not before: Mon 11 Mar 2024 15:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 15:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:37:62:3a:7e:ad:ea:55:b4:ea:0d:ec:14:5e:b0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 11 15:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f0f1b7adcc254714658c3149a930259c78b5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:e9:42:c3:e1:9a:dd:f2:50:1a:03:21:f6:
60:bb:aa:de:54:0a:0b:a8:cb:ac:a9:08:4b:d2:f6:
79:ba:dc:f9:0c:b9:b2:77:cf:cf:38:ef:a6:74:6b:
f5:4e:f3:a7:71:ac:4e:0a:77:b0:f1:30:9f:e8:03:
45:4f:64:3b:ab:45:a0:48:4b:e3:d6:d0:68:e2:04:
d5:7e:51:5c:4e:e9:08:fd:49:4a:9a:db:73:07:22:
84:e5:41:19:9c:ce:d4:14:fc:24:05:f8:ed:26:45:
13:9f:9d:91:98:a4:a2:b2:60:e8:ed:ed:f2:43:df:
4d:35:22:09:19:39:76:56:ae:9f:d0:c2:bc:ed:fd:
8f:16:d1:2c:16:64:4b:42:0b:25:94:66:74:3c:02:
32:a0:bc:89:d8:74:11:90:a2:58:71:f5:af:76:0c:
2f:12:6d:c0:c9:2e:75:23:8f:bf:e3:a8:fd:62:43:
e8:98:da:34:86:af:76:62:fa:50:80:bd:d5:6a:4f:
f0:15:b5:47:78:ca:3a:c4:76:64:54:65:dd:67:97:
3e:30:fa:55:df:c1:17:67:13:f5:a9:2a:ca:5f:bd:
77:88:3e:77:ab:92:c1:b2:00:47:b7:62:66:46:8e:
3c:c2:30:75:cf:39:1b:87:59:03:86:28:4c:2a:ef:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:1B:7A:DC:C2:54:71:46:58:C3:14:9A:93:02:59:C7:8B:51:74
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Pw8betzCVHFGWMMUmpMCWceLUXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
31.216.60.0/24
31.222.237.0/24
31.222.246.0/24
37.140.255.0/24
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.138.159.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.4.0/24
62.3.23.0/24
62.106.69.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.212.0/24
84.246.81.0/24
89.107.12.0/24
89.248.68.0/24
91.242.237.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/24
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.61.0/24
146.19.64.0/24
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.126.0/24
176.100.47.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0/24
193.163.18.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/24
194.104.238.0/24
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.31.0/24
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:7a:75:0f:8e:3d:b3:2c:be:27:cd:43:3d:6b:93:2d:f9:
a1:56:71:9d:a9:b6:8a:50:06:dc:a4:9e:7d:34:0d:d2:bf:93:
ec:3a:98:87:b3:09:e6:21:bd:0a:63:b5:1e:3a:f8:dc:20:bb:
d3:4b:27:97:c8:b1:e9:3f:d1:e2:e1:f5:b9:93:dc:5c:69:67:
8b:73:75:23:dc:1d:21:54:29:be:a8:5d:7b:c7:09:af:43:18:
a2:92:08:61:f1:ea:a6:d9:f9:66:94:a3:9b:d9:d1:65:da:a6:
d7:ac:0b:75:29:a5:1e:49:f9:14:d1:32:d5:93:7f:d4:cb:8d:
8d:f9:7f:c1:ae:a6:f9:90:3f:e3:56:e5:01:51:28:75:82:74:
f0:34:e5:09:2f:29:71:7a:02:ed:1c:24:2e:bc:c8:66:28:42:
86:eb:58:7a:41:5b:1b:d9:01:3b:c7:e0:ef:57:1c:e0:a3:f3:
18:d5:0d:65:1d:57:a4:7b:eb:fa:33:53:ef:9b:35:97:b5:49:
79:3b:6f:8a:da:1f:de:7f:b9:3a:2d:69:60:62:24:b4:38:c9:
0f:ad:ae:dd:7d:5f:ec:cc:d2:2c:b4:99:4d:7b:14:52:ae:33:
b3:06:a2:44:b7:90:d2:dd:bd:70:73:39:2a:21:23:d3:3d:d6:
0f:35:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 19:56:36 2024 by rpki-client on console-fra.rpki-client.org