Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YDlL2KKp_N7MBfWCKNshQATmqnA.roa
File: YDlL2KKp_N7MBfWCKNshQATmqnA.roa (raw, json)
Hash identifier: 2oqrPBRFme9t6nvxy4501CxUC8mKPahovdcb9ssxCIQ=
Subject key identifier: 60:39:4B:D8:A2:A9:FC:DE:CC:05:F5:82:28:DB:21:40:04:E6:AA:70
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E09E75BFA19D65AEBFB0B8C3A046475EC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YDlL2KKp_N7MBfWCKNshQATmqnA.roa
Signing time: Mon 04 Mar 2024 14:39:01 +0000
ROA not before: Mon 04 Mar 2024 14:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9125
IP address blocks: 46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.110.0/24 maxlen: 24
46.16.111.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.0.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.15.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.16.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.32.0/22 maxlen: 22
77.105.36.0/23 maxlen: 23
77.105.38.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.45.0/24 maxlen: 24
77.105.46.0/23 maxlen: 23
77.105.48.0/20 maxlen: 20
79.175.64.0/18 maxlen: 18
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.64.0/23 maxlen: 24
79.175.68.0/22 maxlen: 24
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.86.0/24 maxlen: 24
79.175.88.0/22 maxlen: 24
79.175.92.0/23 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.97.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.100.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.121.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.125.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
80.74.160.0/20 maxlen: 20
80.74.175.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
93.186.79.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
109.121.8.0/22 maxlen: 22
109.121.12.0/22 maxlen: 22
109.121.16.0/20 maxlen: 20
109.121.30.0/24 maxlen: 24
109.121.32.0/21 maxlen: 21
109.121.40.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.46.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.56.0/22 maxlen: 22
109.121.56.0/24 maxlen: 24
109.121.61.0/24 maxlen: 24
109.121.62.0/24 maxlen: 24
109.121.63.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.4.0/22 maxlen: 24
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.193.0/24 maxlen: 24
178.253.200.0/22 maxlen: 22
178.253.204.0/23 maxlen: 23
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.233.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
178.253.239.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
178.253.250.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
188.215.228.0/24 maxlen: 24
188.255.129.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
188.255.135.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.139.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.149.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.159.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.172.0/24 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.176.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.180.0/22 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.188.0/23 maxlen: 24
188.255.191.0/24 maxlen: 24
188.255.194.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.204.0/24 maxlen: 24
188.255.205.0/24 maxlen: 24
188.255.206.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
188.255.211.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.215.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.222.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.225.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.228.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
188.255.230.0/23 maxlen: 24
188.255.232.0/22 maxlen: 22
188.255.233.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
188.255.242.0/24 maxlen: 24
188.255.243.0/24 maxlen: 24
188.255.249.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
194.28.129.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
212.69.15.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:e7:5b:fa:19:d6:5a:eb:fb:0b:8c:3a:04:64:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 4 14:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60394bd8a2a9fcdecc05f58228db214004e6aa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:30:30:6b:99:5f:c0:4b:65:cd:2b:bc:3d:
e7:1a:34:1c:4e:6e:b9:a7:20:65:50:0b:a8:80:e5:
57:b4:ac:cb:04:72:c0:44:40:d1:07:f8:9b:07:78:
1e:43:1b:ed:de:1e:ac:d0:48:3f:fb:60:d4:a3:9b:
5c:da:20:c8:7d:a1:63:34:d0:35:50:0d:70:c2:09:
ea:85:8a:f0:40:72:13:d1:dd:7c:1d:3f:c8:de:4b:
c5:df:30:0e:70:c2:a1:e9:c1:7c:de:12:44:32:74:
d4:01:76:35:37:1a:8a:d8:47:dc:1c:3c:64:65:2f:
e9:0d:a5:96:4e:d4:6d:1a:a7:39:2c:ea:c5:0e:c7:
da:33:e7:10:bd:85:8e:8a:d5:61:94:12:94:c8:e6:
c8:03:5f:a1:26:8b:cf:a7:df:c7:88:08:09:0b:19:
2f:61:f9:e4:79:ee:03:5d:2e:28:b4:23:32:e7:cb:
3b:d9:09:d6:2c:66:dd:53:4b:5a:62:41:a0:ed:05:
7e:23:49:6d:d4:ce:e9:c9:b4:15:09:ea:6f:4e:cc:
07:e5:b4:6b:4e:de:dd:2c:98:bc:c8:fa:65:6a:3b:
db:9e:13:fa:eb:ff:a6:47:b9:ac:7d:c0:fd:4e:e6:
74:a9:2b:c7:a1:e8:e7:d3:a2:0e:c1:44:89:11:ee:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:4B:D8:A2:A9:FC:DE:CC:05:F5:82:28:DB:21:40:04:E6:AA:70
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YDlL2KKp_N7MBfWCKNshQATmqnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0/24
77.105.10.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.72.0/23
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.191.255
178.219.0.0/21
178.219.10.0/24
178.219.12.0/23
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.213.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.231.255
178.253.233.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.255.255
188.215.228.0/24
188.255.129.0/24
188.255.133.0-188.255.139.255
188.255.141.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.186.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0/24
188.255.203.0-188.255.206.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0-188.255.216.255
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
a4:85:7d:9d:5e:58:12:68:f7:06:87:50:04:e1:7b:c0:78:ea:
15:7a:3f:88:8e:d1:41:bb:50:62:7e:3e:09:d5:83:bc:c8:cc:
74:12:cc:75:be:67:9c:56:8d:12:f1:89:5d:88:d0:f1:d4:21:
a6:d5:52:05:e4:59:18:9c:74:1c:30:b6:04:68:f3:07:12:10:
c4:d9:5c:02:29:3b:42:a1:5c:7b:5c:17:f7:18:51:65:6d:95:
72:ee:71:cc:44:43:aa:e0:46:4d:24:6a:a6:07:e0:0b:2c:0c:
e4:1f:ac:47:ba:a4:e1:64:bf:8a:29:b4:57:a4:0a:c2:48:a7:
48:cc:97:86:1c:6f:1b:5e:5d:35:0d:e1:7e:53:cb:c8:b6:7d:
1e:bc:93:ce:a2:52:56:9b:2b:92:ad:28:c1:1b:25:e7:f0:14:
26:1e:b8:29:e3:08:b2:d6:a9:9a:fa:98:78:c3:9a:9d:b4:04:
87:46:82:8f:ec:c2:20:a3:45:1a:2c:ae:c4:76:2a:25:a5:65:
82:e5:35:cc:ba:e0:94:55:74:50:a1:d6:84:c4:65:dd:1e:6c:
47:9b:fe:4e:a6:a3:da:6d:4a:91:f1:6d:85:9c:ec:f9:dd:a9:
92:77:5f:f6:93:d3:47:11:3b:33:85:98:b1:3e:0f:27:11:89:
0a:b7:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 14:23:34 2024 by rpki-client on console-fra.rpki-client.org