Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Dxx-orLAOUUGM2rBQIgbc_tMxX0.roa
File: Dxx-orLAOUUGM2rBQIgbc_tMxX0.roa (raw, json)
Hash identifier: 1uCzSkdRWyoRWHheZWJ3fhgWYB0vvJzK7bif34IgHUs=
Subject key identifier: 0F:1C:7E:A2:B2:C0:39:45:06:33:6A:C1:40:88:1B:73:FB:4C:C5:7D
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0185B9669F0C3BEB86D981BEB8C0098D2754
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Dxx-orLAOUUGM2rBQIgbc_tMxX0.roa
Signing time: Mon 16 Jan 2023 07:06:28 +0000
ROA not before: Mon 16 Jan 2023 07:06:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 188.161.24.0/23 maxlen: 23
103.215.4.0/22 maxlen: 22
188.161.30.0/23 maxlen: 23
43.255.108.0/22 maxlen: 22
188.161.40.0/21 maxlen: 21
188.161.48.0/21 maxlen: 21
188.161.56.0/21 maxlen: 21
213.6.64.0/18 maxlen: 18
182.161.60.0/22 maxlen: 22
213.6.0.0/18 maxlen: 18
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.220.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.220.0/22 maxlen: 22
185.19.221.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.177.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.112.0/22 maxlen: 22
188.161.106.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.116.0/22 maxlen: 22
213.6.128.0/18 maxlen: 18
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.156.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.68.0/23 maxlen: 23
158.140.64.0/18 maxlen: 24
158.140.80.0/22 maxlen: 22
158.140.84.0/22 maxlen: 22
103.248.37.0/24 maxlen: 24
103.248.36.0/22 maxlen: 22
193.227.236.0/23 maxlen: 23
103.248.36.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
158.140.88.0/22 maxlen: 22
103.248.39.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
45.113.108.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
158.140.92.0/22 maxlen: 22
158.140.96.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
103.199.176.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.84.0/22 maxlen: 22
103.37.85.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.136.0/21 maxlen: 21
45.117.42.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.40.0/22 maxlen: 22
45.117.43.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
85.184.240.0/22 maxlen: 22
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/22 maxlen: 22
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.162.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
45.117.4.0/22 maxlen: 22
195.123.112.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
83.244.22.0/23 maxlen: 23
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
188.161.184.0/22 maxlen: 22
213.6.192.0/18 maxlen: 18
45.134.202.0/24 maxlen: 24
45.134.202.0/23 maxlen: 23
45.134.203.0/24 maxlen: 24
188.161.200.0/21 maxlen: 21
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.104.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 09:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:66:9f:0c:3b:eb:86:d9:81:be:b8:c0:09:8d:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 16 07:06:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f1c7ea2b2c0394506336ac140881b73fb4cc57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:4d:03:45:7e:31:4f:66:d6:fa:29:6e:aa:
5d:6b:48:c4:56:3f:69:3f:01:9e:1d:b6:31:fb:bf:
72:a4:66:cf:a8:d3:a5:f3:b8:33:43:d7:8d:b1:52:
97:62:45:04:08:4d:aa:07:23:a4:1f:b8:db:ca:93:
d4:b7:c8:dd:59:63:b7:5d:3b:33:5c:2d:95:08:00:
2d:6b:29:9e:fa:be:f1:a4:58:cb:07:31:31:9f:ee:
a6:10:c4:be:44:fe:97:c2:0f:5d:74:b5:f6:0d:bc:
27:99:ef:ca:ff:01:bf:36:69:96:1a:8d:df:26:a5:
6a:d7:15:d5:bf:06:82:7d:95:1d:c7:01:cc:f9:eb:
e7:8d:2e:3d:fe:39:64:a0:87:47:b5:51:5b:c1:b0:
d0:1e:3e:4c:bb:04:a3:fb:6d:44:f9:ae:0a:bc:d1:
85:d5:28:7a:8e:76:27:15:0d:43:36:b2:48:7f:73:
18:fc:95:e6:b3:57:04:97:35:d8:56:15:70:39:60:
60:9e:f2:e0:38:49:16:d9:84:1a:b1:ff:02:db:0a:
be:de:66:e5:49:f3:c4:aa:22:ef:ee:93:e9:d9:e9:
90:e5:5a:28:1f:d1:a8:d3:44:40:ef:57:10:2c:44:
b0:38:fd:da:6d:7c:04:0b:64:76:20:17:be:7f:8d:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1C:7E:A2:B2:C0:39:45:06:33:6A:C1:40:88:1B:73:FB:4C:C5:7D
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Dxx-orLAOUUGM2rBQIgbc_tMxX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.4.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
85.184.240.0/22
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.199.176.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:80:fb:8b:39:f6:fa:b4:cc:e8:e3:67:8c:32:a3:be:00:2f:
55:19:e3:15:a3:bf:38:27:cd:df:2b:81:0f:7d:e4:20:75:6a:
70:28:e0:eb:a8:34:84:6f:47:10:ea:0c:dd:fd:8d:d2:28:4a:
17:17:2a:73:4a:dd:9d:1c:9d:d1:2e:0b:6f:66:c6:bf:81:a7:
3d:61:6e:0a:c6:81:a6:cc:88:32:bb:7a:88:e6:28:16:a7:ed:
03:51:76:e2:b3:b5:25:35:64:5a:70:c1:dd:e4:d7:82:ab:e5:
da:42:6d:cd:bb:0c:14:04:dc:2c:bc:c1:a1:f4:94:97:ba:7e:
31:6e:67:da:80:f7:96:06:ea:49:65:d3:86:52:c2:81:26:b7:
da:d3:85:bd:c1:78:fb:18:58:47:c5:c9:80:eb:53:fa:7d:bf:
00:d8:0d:c3:c6:8a:92:6c:7c:7c:90:db:e5:8c:11:ca:bf:72:
fa:44:2c:64:42:52:81:b1:bd:a4:f7:24:7d:35:c6:7b:78:32:
b9:a7:da:63:ee:1d:61:43:f0:e3:b3:6f:45:27:79:5e:cb:e7:
05:b3:9b:d2:09:8e:27:c9:84:6c:1d:83:11:93:0c:bd:ea:99:
42:2b:8e:f0:9b:ae:4b:f3:2b:88:b2:1e:54:7d:df:3a:e5:e5:
53:97:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:20 2024 by rpki-client on console-fra.rpki-client.org