Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1-EiRCJnhkNusl84kKDpwUvz-F_8.roa
File: 1-EiRCJnhkNusl84kKDpwUvz-F_8.roa (raw, json)
Hash identifier: 6M9mago6S5ew5jNmxDJZHA2HuwrdQOei1Fd7moLQc1I=
Subject key identifier: F8:48:91:08:99:E1:90:DB:AC:97:CE:24:28:3A:70:52:FC:FE:17:FF
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 0191FB87876787D42F0BF02EC6641B322EEC
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1-EiRCJnhkNusl84kKDpwUvz-F_8.roa
Signing time: Mon 16 Sep 2024 15:50:48 +0000
ROA not before: Mon 16 Sep 2024 15:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 24
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 24
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.68.0/24 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 24
92.204.160.0/19 maxlen: 24
92.204.192.0/23 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.196.0/22 maxlen: 24
92.204.200.0/21 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
92.205.152.0/24 maxlen: 24
92.205.153.0/24 maxlen: 24
92.205.154.0/24 maxlen: 24
134.119.176.0/20 maxlen: 24
134.119.192.0/19 maxlen: 24
146.0.224.0/19 maxlen: 24
151.106.0.0/19 maxlen: 24
151.106.48.0/20 maxlen: 24
185.19.216.0/22 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.164.0/22 maxlen: 24
185.136.168.0/22 maxlen: 24
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 24
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 32
2a01:7a0::/32 maxlen: 32
2a01:7a7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Sep 2024 09:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:87:87:67:87:d4:2f:0b:f0:2e:c6:64:1b:32:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 16 15:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f848910899e190dbac97ce24283a7052fcfe17ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:ee:f7:5a:99:f7:bf:19:d2:6b:cf:91:45:
78:e9:12:37:71:2d:3e:4f:b2:bc:65:8a:88:17:fd:
b6:55:87:9f:f6:cc:ea:9b:f5:0f:3e:1e:56:9a:80:
00:cd:cc:a4:c7:b6:30:e3:1a:3b:a7:81:40:f2:ac:
fa:19:86:2b:f0:61:1a:c2:f5:9d:c3:31:60:13:96:
20:69:7b:0f:83:f4:e2:d9:2b:f0:16:a0:7e:5f:2e:
b8:d5:cb:4e:e3:ac:4b:6f:e7:2d:76:e1:fb:15:64:
cc:27:46:1c:05:7a:28:98:a3:1e:a6:3c:03:25:9e:
3c:0b:fa:46:7a:50:c1:80:bb:93:87:1b:c4:96:06:
34:96:5b:71:9b:ed:fc:cc:ea:c4:ac:f0:bb:e8:bc:
2d:7a:da:c2:c6:79:a8:dd:6d:61:93:44:19:50:71:
5c:8b:0a:13:1a:74:68:13:1f:b0:23:69:e7:0b:c5:
a9:8c:60:bf:1c:79:fc:e0:fe:c2:b4:3d:6c:9b:d6:
10:5e:4e:ca:52:d1:0b:f6:3e:e6:8d:6f:4e:f6:69:
ca:c4:e6:30:28:c9:fb:a4:57:b5:59:ac:fd:2a:28:
3e:3d:c7:18:59:08:68:de:d9:f1:75:64:a2:2c:e1:
1c:96:d6:30:11:9c:58:89:13:db:4c:8e:78:a5:4a:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:91:08:99:E1:90:DB:AC:97:CE:24:28:3A:70:52:FC:FE:17:FF
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1-EiRCJnhkNusl84kKDpwUvz-F_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/21
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
05:de:41:af:50:09:53:84:26:bc:d5:8c:bb:a7:5a:6e:7e:14:
0c:2c:43:9b:f4:99:55:a3:b5:81:46:e4:0d:74:04:fe:ad:af:
08:81:70:93:5a:0e:31:c8:28:d0:bc:5b:d7:e1:cc:0a:06:70:
c9:6a:d2:a0:c8:05:89:ba:4b:7e:fe:47:d0:0f:2e:4b:b0:f2:
a9:8a:e7:26:22:f7:e4:ca:83:59:9c:6b:87:1e:b7:ea:33:46:
13:c4:10:56:d4:92:2c:d4:55:6c:b3:da:b0:9d:68:1d:79:96:
b3:13:d4:ad:3a:b3:ef:3a:67:ec:e8:14:29:65:2d:7e:9f:13:
60:4e:58:a4:81:1f:0b:d3:73:19:ce:b6:d1:32:99:7a:20:e6:
c2:35:dd:9b:86:be:d6:d7:f2:32:cd:13:18:e8:b0:d7:cc:03:
51:ed:40:6c:3b:05:ee:de:f4:d1:59:27:c3:aa:75:d6:2a:ad:
0b:a5:0d:f9:5c:14:07:7a:38:b0:33:ff:d4:a8:02:e0:98:ec:
4b:bb:70:b7:07:c8:80:12:55:7d:80:cb:1a:61:59:a8:b8:b1:
0e:27:29:2e:d3:84:c5:10:be:84:05:fe:b4:f2:4e:b8:34:3e:
4a:5c:f4:3b:b8:63:04:00:5d:fa:55:51:70:53:63:5a:4a:2d:
7a:80:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 14:26:46 2024 by rpki-client on console-ams.rpki-client.org