Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iVGtAJwDg3VSVrCEydgUqPXUhsI.roa
File: iVGtAJwDg3VSVrCEydgUqPXUhsI.roa (raw, json)
Hash identifier: 8dDOFmiF6cobWJaUqK3xLHiI+iuaLoWwG/R2A/RrvWA=
Subject key identifier: 89:51:AD:00:9C:03:83:75:52:56:B0:84:C9:D8:14:A8:F5:D4:86:C2
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 018ECC849DC4CAD9F6FF03300EA5F055085B
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iVGtAJwDg3VSVrCEydgUqPXUhsI.roa
Signing time: Thu 11 Apr 2024 09:37:06 +0000
ROA not before: Thu 11 Apr 2024 09:37:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 20
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 21
78.138.104.0/22 maxlen: 22
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 23
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 18
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 22
92.42.104.0/21 maxlen: 21
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 21
92.204.160.0/19 maxlen: 19
92.204.192.0/23 maxlen: 23
92.204.196.0/22 maxlen: 22
92.204.200.0/21 maxlen: 21
92.204.240.0/20 maxlen: 20
92.205.112.0/20 maxlen: 20
92.205.152.0/22 maxlen: 22
146.0.224.0/19 maxlen: 19
185.19.216.0/22 maxlen: 22
185.136.156.0/22 maxlen: 22
185.136.160.0/22 maxlen: 22
185.136.164.0/22 maxlen: 22
185.136.168.0/22 maxlen: 22
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 22
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 29
2a01:7a7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:84:9d:c4:ca:d9:f6:ff:03:30:0e:a5:f0:55:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Apr 11 09:37:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8951ad009c0383755256b084c9d814a8f5d486c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:f6:85:50:e5:1c:25:33:ad:29:dd:55:a6:
85:8b:c1:de:b5:04:2f:c8:1b:5d:b1:59:b7:8e:86:
eb:b5:95:ab:c2:2a:71:6d:60:71:48:8e:91:45:a6:
cb:88:57:2d:ad:8b:b0:e5:83:5e:8c:c4:1a:1e:23:
76:d9:29:23:1d:93:5e:37:d7:fe:16:72:ee:03:59:
3f:62:dc:1a:be:5b:01:ab:78:3a:df:04:b5:e2:32:
97:39:08:5b:e4:b6:70:c0:37:a1:64:ad:40:42:aa:
cd:16:c1:0b:16:1f:6f:6b:7d:c9:ed:a7:1f:5f:08:
5e:d1:66:aa:0c:38:7b:85:76:6f:ac:2d:50:5b:e5:
ea:f6:2d:8b:95:cb:fe:e8:51:db:94:ee:72:fc:60:
ec:a2:76:9d:5f:41:cf:3d:92:1a:0c:55:6f:79:cc:
64:6d:ee:5c:3f:9b:39:ac:4c:7b:d6:28:6a:5b:08:
d4:e7:57:62:4b:63:9c:0b:27:1e:a1:e3:d5:25:cd:
b0:4d:ad:6b:88:71:e9:a4:b8:53:a2:4d:93:bb:e6:
26:97:a5:ed:62:ba:39:94:4d:3d:fe:d7:a0:a7:28:
fe:df:b3:06:3f:10:50:36:0a:89:c6:ea:f9:74:9c:
00:86:47:5d:ec:fd:64:1c:70:30:df:52:c7:b0:cb:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:AD:00:9C:03:83:75:52:56:B0:84:C9:D8:14:A8:F5:D4:86:C2
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iVGtAJwDg3VSVrCEydgUqPXUhsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0/23
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/21
92.204.160.0-92.204.193.255
92.204.196.0-92.204.207.255
92.204.240.0/20
92.205.112.0/20
92.205.152.0/22
146.0.224.0/19
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
84:64:74:ba:2c:18:75:f1:3a:61:3a:7a:a6:f1:fd:a4:7b:bb:
06:c2:be:3e:83:b4:d7:af:0d:05:28:5c:a3:60:32:41:a0:9d:
01:73:6a:cc:95:ca:68:3c:47:91:02:62:42:a5:a8:2c:52:a3:
ef:9d:ee:45:0e:f1:11:8a:2c:3d:6f:54:26:5b:e1:74:21:64:
c7:a3:99:b6:42:ef:57:38:98:3d:f3:a8:90:c5:03:7c:e6:d1:
45:e3:c7:ce:6a:9b:19:c0:3b:1d:1c:41:03:c4:a0:30:de:05:
ca:ba:b0:44:ab:cd:fa:31:86:6a:e0:9e:d4:34:6a:6a:55:a2:
75:bc:2f:ae:69:6d:5b:41:ff:b2:ec:f7:a0:d7:b5:3a:79:10:
e6:27:27:13:7c:18:81:1c:33:7d:df:bd:f6:bb:fb:3c:ca:bc:
38:d1:37:d2:f1:2d:ae:dd:10:c7:d6:45:0f:0f:a1:fa:0c:2b:
e2:0f:9b:ff:42:95:6c:bf:29:77:7b:d3:f9:f1:46:ae:24:b1:
e3:02:f6:db:78:54:8c:82:c5:3a:cb:b1:8b:77:17:e2:c7:30:
cf:ce:36:d7:ea:c4:2c:cb:f6:40:18:53:58:fa:ec:c7:54:79:
56:0e:f1:1b:96:1f:4c:bd:0d:81:9a:74:1b:6d:07:c2:47:d8:
5a:a4:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:16 2024 by rpki-client on console-ams.rpki-client.org