Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3EsyM4m8HtxF4x3T6l7OXALS_o.roa
File: X3EsyM4m8HtxF4x3T6l7OXALS_o.roa (raw, json)
Hash identifier: ujhydCHIHlqGR7TjdQVfaGjqj/PJb3JZyCj4xSJTxOo=
Subject key identifier: 5F:71:2C:C8:CE:26:F0:7B:71:17:8C:77:4F:A9:7B:39:70:0B:4B:FA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01867AB48959657DD38ED0031EDECC0E6A60
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3EsyM4m8HtxF4x3T6l7OXALS_o.roa
Signing time: Wed 22 Feb 2023 19:58:17 +0000
ROA not before: Wed 22 Feb 2023 19:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.243.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.213.0/24 maxlen: 24
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:b4:89:59:65:7d:d3:8e:d0:03:1e:de:cc:0e:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 22 19:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f712cc8ce26f07b71178c774fa97b39700b4bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:e5:5f:79:28:b3:d0:52:5c:9e:db:c1:4b:
0f:d9:8c:88:98:d2:3c:c2:6d:aa:de:8e:4a:4c:10:
d6:8b:95:5d:a2:bc:ac:96:ac:f3:2d:6a:64:c7:cf:
ea:2b:a7:04:21:88:c7:fe:5c:42:3c:ce:28:ef:3b:
72:7c:b0:21:87:5c:ad:48:a3:7e:88:02:fb:54:2d:
dc:0e:92:67:30:e8:73:85:30:bb:63:a1:57:0a:70:
55:a6:ed:5e:10:e4:49:ef:86:82:52:24:4a:b3:e1:
2c:c6:ff:f3:7e:4e:35:84:ee:2c:21:e6:41:54:cd:
e6:a4:d7:e9:a7:2e:83:02:55:5c:2b:ef:9d:f6:67:
0a:ba:5c:06:95:e2:7a:9a:46:b2:bd:06:ca:2f:a3:
6e:76:8b:47:11:99:6f:7d:b8:00:01:3a:9d:e3:23:
9b:23:3e:54:9a:51:a0:40:69:b3:85:e1:c9:7b:9a:
d2:17:62:2d:25:e8:6a:bb:20:c8:2d:ec:f1:38:92:
69:bb:e7:b7:e9:3d:3f:c7:c1:c1:00:54:95:88:52:
4d:77:38:87:5a:ef:a1:aa:9b:de:15:c6:1b:7c:09:
b4:4c:d1:5a:40:4f:fc:cf:37:ee:fa:0a:35:a3:ff:
64:7c:0b:5c:78:1e:cc:99:3c:bb:2b:99:35:f4:41:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:2C:C8:CE:26:F0:7B:71:17:8C:77:4F:A9:7B:39:70:0B:4B:FA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3EsyM4m8HtxF4x3T6l7OXALS_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0/24
77.105.10.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.72.0/23
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.213.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
80:46:04:86:00:8d:25:96:ec:79:83:b4:9f:69:a3:aa:90:a9:
2f:1a:0f:33:a4:58:7b:0c:14:f9:cd:7f:0c:5a:30:f5:93:09:
54:9a:cc:0f:cd:7d:61:e1:2f:79:c4:72:c6:4e:ff:cc:c6:64:
17:cb:93:88:6a:db:17:94:2a:c7:5f:68:b0:cb:b4:f8:64:b0:
f3:3e:41:5c:b9:04:24:a4:a3:ca:3c:d7:ad:e8:08:ce:5e:42:
33:aa:89:bb:c8:4e:29:20:33:cb:58:cf:b1:46:b5:21:7a:5a:
0d:4e:61:1a:d1:14:bd:9c:d4:62:f9:c3:1c:39:e3:de:a5:c1:
57:e2:ec:34:bc:c2:b7:08:9e:b9:d2:90:11:a6:7d:79:95:75:
ea:af:94:ed:40:40:8d:00:ea:2f:f0:69:99:40:74:39:fd:76:
5e:5d:26:31:cf:23:db:10:67:34:a5:22:15:44:f0:34:fd:a1:
c2:70:a4:0d:09:cf:b6:bb:8a:7d:50:45:82:5e:04:36:c0:c4:
4f:36:12:4a:e5:72:9f:2e:12:0b:56:66:4f:f2:3a:fd:34:8b:
50:c7:db:ef:71:18:5e:78:e5:a2:9e:54:a7:95:ff:d2:5e:a8:
d8:70:df:b9:3c:bf:a8:3c:10:40:07:e0:93:25:b2:a1:69:02:
23:c0:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org