Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nbnDScqwUXeg2SW8cRDE9HV0jd8.roa
File: nbnDScqwUXeg2SW8cRDE9HV0jd8.roa (raw, json)
Hash identifier: Z77nEt3X3X2pmb5jiLi1wkMSExzQ6nod79WyonAsQiw=
Subject key identifier: 9D:B9:C3:49:CA:B0:51:77:A0:D9:25:BC:71:10:C4:F4:75:74:8D:DF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186E4D4F70EF372A6E5AE4BCDF949EE1F58
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nbnDScqwUXeg2SW8cRDE9HV0jd8.roa
Signing time: Wed 15 Mar 2023 10:33:27 +0000
ROA not before: Wed 15 Mar 2023 10:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.243.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.149.0/24 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.159.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.213.0/24 maxlen: 24
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
80.74.175.0/24 maxlen: 24
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:d4:f7:0e:f3:72:a6:e5:ae:4b:cd:f9:49:ee:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 15 10:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db9c349cab05177a0d925bc7110c4f475748ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:db:e5:9a:c1:2e:b0:c4:2b:c8:d1:44:47:
0d:bc:8d:69:27:af:38:c4:6c:e0:b1:75:d5:8d:db:
98:a3:66:18:39:30:b3:d0:1c:40:bb:da:ae:36:ca:
ea:2a:21:0f:f2:b8:86:ba:2d:06:5c:c4:a3:ca:b0:
81:eb:8a:ae:a9:17:e2:66:dd:5a:5c:c2:35:44:06:
b0:fe:4c:c6:80:f6:75:5b:ff:2e:41:0b:9e:f0:fd:
ae:e7:f9:fc:ef:69:66:83:ad:14:c7:18:cd:47:7a:
57:1f:cd:1b:11:af:b8:18:cc:47:04:55:1f:23:1f:
f1:05:9f:b2:9c:3a:57:62:90:01:e8:a5:3e:b3:53:
5b:67:e4:35:49:18:82:4d:95:9c:fc:a7:34:08:44:
ff:6b:68:df:4f:83:02:17:4d:30:46:2b:3b:29:82:
f3:91:7b:c0:66:e9:7e:c4:7c:91:63:02:36:be:ea:
81:3b:fa:54:dd:0e:77:33:a0:76:d6:c6:cf:51:2a:
63:32:71:ab:f2:75:d6:54:94:69:62:b6:ac:b4:c2:
ad:df:d6:2a:7d:6a:e1:de:73:c6:48:a8:90:7e:67:
7f:c5:39:cf:dd:1a:71:a4:3a:82:c2:d1:2d:fe:c1:
ec:28:da:f9:f8:73:a4:b8:a9:28:22:91:a9:f0:f4:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:C3:49:CA:B0:51:77:A0:D9:25:BC:71:10:C4:F4:75:74:8D:DF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nbnDScqwUXeg2SW8cRDE9HV0jd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0/24
77.105.10.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.72.0/23
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.213.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
a9:76:46:af:33:47:1f:44:ab:8b:48:d9:61:69:2d:7f:fd:a5:
6c:ec:e4:69:76:44:68:3c:ab:71:2f:85:83:af:1e:7f:fb:9f:
f3:81:16:75:1e:76:d0:9f:65:e6:90:75:ac:7d:53:f7:72:54:
0c:10:cc:2c:0d:86:7d:bb:20:0d:78:cf:55:2e:1b:46:1a:22:
d0:28:a5:e8:22:c6:f4:e9:9f:ce:10:52:32:e3:7c:20:ca:98:
97:b3:ea:eb:23:a8:6b:cf:3b:f3:81:2c:c6:37:80:de:00:09:
ad:e7:44:f4:16:5a:14:29:6f:3a:85:7d:5d:15:ee:66:33:1f:
0f:06:10:0e:ba:7e:35:bb:92:8e:6c:4b:31:82:1f:cf:ac:ec:
ea:00:6a:27:57:41:ca:f8:85:c9:99:1f:fb:6f:b3:34:63:34:
9f:52:99:59:0c:ae:15:26:e6:fb:3a:2a:68:5a:8a:5e:13:d4:
a0:12:75:4e:a7:e9:fa:20:c6:25:93:b3:c5:64:14:6e:61:d0:
b2:00:2b:31:67:35:c4:4d:10:5f:34:51:eb:7b:e0:e4:75:e5:
75:35:dc:85:0c:a8:01:b9:fb:c2:f2:f1:19:27:30:8f:fb:12:
43:18:ab:72:ce:d9:34:fa:be:34:2c:b5:5a:f6:dc:3a:7f:06:
c6:ac:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org