Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/yj6z-mLsr2Mm_bAAxOrImPKeTTY.roa
File: yj6z-mLsr2Mm_bAAxOrImPKeTTY.roa (raw, json)
Hash identifier: ykqTYQQFwIs/JQGwc+WGN30AA8BWBffsdex+NDC/Gi0=
Subject key identifier: CA:3E:B3:FA:62:EC:AF:63:26:FD:B0:00:C4:EA:C8:98:F2:9E:4D:36
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 018D5B0C271A90DB27969D4DC02083AF6C53
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/yj6z-mLsr2Mm_bAAxOrImPKeTTY.roa
Signing time: Tue 30 Jan 2024 15:45:39 +0000
ROA not before: Tue 30 Jan 2024 15:45:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 20
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 21
78.138.104.0/22 maxlen: 22
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 23
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 18
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 22
92.42.104.0/21 maxlen: 21
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 21
92.204.160.0/19 maxlen: 19
92.204.200.0/21 maxlen: 21
92.204.240.0/20 maxlen: 20
92.205.112.0/20 maxlen: 20
92.205.152.0/22 maxlen: 22
146.0.224.0/19 maxlen: 19
185.19.216.0/22 maxlen: 22
185.136.156.0/22 maxlen: 22
185.136.160.0/22 maxlen: 22
185.136.164.0/22 maxlen: 22
185.136.168.0/22 maxlen: 22
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 22
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 29
2a01:7a7::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 11:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:0c:27:1a:90:db:27:96:9d:4d:c0:20:83:af:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jan 30 15:45:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3eb3fa62ecaf6326fdb000c4eac898f29e4d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:21:3f:e9:73:f3:76:17:cd:09:2f:7a:f7:
86:c2:df:ff:37:0c:3b:c1:01:34:92:22:23:60:f5:
a4:37:8c:a3:24:71:c8:e8:63:c3:23:a8:41:01:42:
4c:f8:26:33:f5:36:00:36:71:15:a2:2b:52:05:fe:
6f:ec:18:c6:96:48:25:ef:e2:c7:08:31:a0:ab:72:
54:a8:15:44:f2:63:6f:cb:8d:26:74:19:89:8f:cc:
ef:dd:48:f0:7b:42:9a:25:4c:a3:88:17:73:53:0d:
25:d3:c8:73:ee:16:79:27:89:15:61:94:ee:1f:a7:
a6:60:13:ad:26:84:dc:e5:3a:53:84:96:67:a2:23:
99:aa:bb:12:50:c0:39:a2:28:b5:a8:b9:c8:58:7a:
3c:b6:69:55:53:41:68:d7:2e:b9:65:30:36:5d:f8:
e5:ca:6a:7c:f2:20:43:3f:05:56:5e:75:4a:0a:80:
85:8e:74:85:1b:0b:cd:82:55:51:d5:c8:1b:3d:10:
91:1c:45:02:53:71:89:b7:bc:a8:ee:58:2f:20:7d:
d0:09:96:ae:79:bf:fb:de:6f:c7:5d:59:57:88:e0:
0e:4d:29:3c:e3:58:e5:93:f2:d1:07:eb:b4:f7:4e:
e1:47:97:da:17:26:0c:7a:2a:2a:de:89:fc:3d:5b:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:B3:FA:62:EC:AF:63:26:FD:B0:00:C4:EA:C8:98:F2:9E:4D:36
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/yj6z-mLsr2Mm_bAAxOrImPKeTTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0/24
62.75.203.0/24
62.75.207.0/24
62.75.214.0-62.75.223.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.7.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.82.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.8.0/21
85.25.27.0/24
85.25.40.0-85.25.63.255
85.25.66.0/23
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0/23
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/21
92.204.160.0/19
92.204.200.0/21
92.204.240.0/20
92.205.112.0/20
92.205.152.0/22
146.0.224.0/19
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0/23
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
84:6b:fa:a6:73:ff:5d:25:4e:c9:ed:c4:e4:78:99:cc:0e:44:
d6:46:b3:34:72:dc:a5:e4:da:fc:e0:97:a0:e7:e5:0d:44:3d:
f3:b6:64:38:2e:ed:c1:92:d3:47:d6:91:60:8f:f0:5c:bb:c9:
cc:04:9a:7a:8d:07:86:51:e0:63:e9:d0:4f:38:da:17:46:71:
78:42:20:3c:1a:9e:bf:d9:6a:d6:7f:10:ea:ba:a3:62:b2:87:
cd:88:a4:d0:aa:87:bb:1b:22:6e:5f:1b:2f:58:33:b3:b7:5c:
46:c2:dd:da:af:27:58:d1:38:8e:d2:5a:8f:a7:04:9c:61:b9:
80:f9:8c:04:28:58:45:2f:f7:45:5d:00:61:74:3b:58:25:a4:
cc:15:3e:25:96:db:a6:d0:d1:81:4a:c7:c7:e0:fa:af:bf:fe:
6d:9b:46:17:b1:93:27:d8:42:65:79:48:a5:33:b4:b8:33:e4:
32:90:8c:52:8c:f3:59:1d:ca:e5:8e:3f:aa:21:04:79:f0:45:
2d:28:fa:9d:f9:85:b0:e5:fc:8d:99:ac:e3:a1:10:77:58:55:
74:8e:f6:0e:b2:4b:f2:9e:f8:99:d2:e4:25:64:34:45:f8:b3:
a5:61:b2:49:4c:cf:7e:5f:57:9c:1f:2c:14:4d:29:df:48:5f:
5e:1e:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org