Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AED8X-MQjlWkYrB3IpDvvGtp-l8.roa
File: AED8X-MQjlWkYrB3IpDvvGtp-l8.roa (raw, json)
Hash identifier: oz+EScszWE6gUuqlmSZOYXYXAorc4mb5FmRb1yl+IMY=
Subject key identifier: 00:40:FC:5F:E3:10:8E:55:A4:62:B0:77:22:90:EF:BC:6B:69:FA:5F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018748C889774F0585ECECC36DB5B25C0D51
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AED8X-MQjlWkYrB3IpDvvGtp-l8.roa
Signing time: Mon 03 Apr 2023 20:21:54 +0000
ROA not before: Mon 03 Apr 2023 20:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.243.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.149.0/24 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.159.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.213.0/24 maxlen: 24
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
178.253.232.0/23 maxlen: 24
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
80.74.175.0/24 maxlen: 24
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:c8:89:77:4f:05:85:ec:ec:c3:6d:b5:b2:5c:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 3 20:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0040fc5fe3108e55a462b0772290efbc6b69fa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:56:a8:9d:2a:7d:d3:b8:98:a4:62:21:5e:
43:08:20:29:3a:76:df:5b:b5:95:f1:46:6d:11:63:
a1:6f:1d:b9:58:56:90:8d:5c:5e:e8:f6:5b:05:83:
1c:53:ae:ac:6f:b4:b6:17:6a:54:64:6d:3a:e2:a4:
48:cf:16:8c:26:3a:60:e3:8d:4d:01:de:48:b5:c7:
56:98:21:10:e1:38:d6:8e:53:06:a0:1e:7c:fd:e2:
6d:7c:7f:f0:b3:41:d3:18:e4:45:3c:b0:5c:18:b3:
d1:34:b4:b7:d6:f0:76:84:af:6a:a2:8f:35:6e:5c:
36:a9:de:52:4b:7c:5c:b2:87:db:4e:ef:a0:8d:df:
50:ae:bc:ee:e3:78:10:93:e8:8a:b8:58:9f:b6:e2:
c9:f8:82:da:37:20:6c:74:81:b1:c6:e6:7c:1b:c4:
8d:ef:2d:f2:ce:c9:19:26:9f:9d:57:0f:2c:58:45:
95:5d:3c:15:40:eb:bc:e1:ba:3a:7a:54:bc:dc:9f:
ba:b3:5f:a3:70:25:12:33:00:75:37:21:8e:62:bd:
c0:26:5b:b4:d7:51:d8:27:dc:ca:fa:2b:6d:36:0f:
c9:80:26:04:be:03:97:a9:be:d4:94:e6:e0:97:47:
b3:54:12:27:04:46:83:34:0a:00:1f:8f:87:5f:35:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:FC:5F:E3:10:8E:55:A4:62:B0:77:22:90:EF:BC:6B:69:FA:5F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AED8X-MQjlWkYrB3IpDvvGtp-l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0/24
77.105.10.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.72.0/23
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.190.0/23
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.213.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
96:d4:c8:6d:d6:30:91:70:4e:ab:24:0a:69:f6:3a:74:27:0a:
09:71:1a:f5:97:ae:15:87:44:b8:5f:05:05:b9:88:c4:28:76:
c8:73:d5:b1:69:0b:05:25:50:3d:08:07:92:00:04:63:a9:60:
59:76:82:b4:36:b1:78:15:ba:16:09:44:c8:3d:a3:56:07:fe:
b2:2f:7c:9d:a6:23:3a:f6:4d:88:32:d6:3b:24:4f:cd:cb:53:
97:74:83:e8:15:1b:63:07:68:70:9c:30:93:16:79:bd:5a:bd:
c2:62:75:ac:4f:44:72:97:b0:c8:12:cb:04:47:2b:81:f2:6d:
63:66:4e:00:68:a0:63:5a:8a:f1:d0:ce:37:c0:e7:68:ee:0a:
a6:13:c3:57:3c:ee:13:1c:50:dc:a7:09:d0:de:a2:d2:e2:0c:
9a:08:26:38:66:62:f3:f6:9a:5e:1d:a2:0a:12:b2:c5:11:72:
83:5d:cc:73:f1:e5:d2:c0:96:db:49:ca:4d:55:cf:52:ea:df:
98:95:53:b6:b1:75:c2:50:32:e0:3a:34:e9:da:20:a4:18:99:
d6:62:6a:22:c3:f4:e5:e5:ba:89:96:08:a1:b6:7d:32:5d:70:
8e:70:40:13:e9:b1:c4:61:44:63:d0:ae:29:2b:46:67:58:f8:
40:1f:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org