Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/kmfpYiAzKjBeleS3vnUmStHyLQc.roa
File: kmfpYiAzKjBeleS3vnUmStHyLQc.roa (raw, json)
Hash identifier: 2knUqSJpT1fqMns1D32AH5VTsvkOIYNvZ2ZzPpldKss=
Subject key identifier: 92:67:E9:62:20:33:2A:30:5E:95:E4:B7:BE:75:26:4A:D1:F2:2D:07
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 018730B03E66E32EFF54C9FD8BF83F778E61
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/kmfpYiAzKjBeleS3vnUmStHyLQc.roa
Signing time: Thu 30 Mar 2023 04:04:29 +0000
ROA not before: Thu 30 Mar 2023 04:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41798
IP address blocks: 37.208.43.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.40.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.204.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.240.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
2.57.96.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
91.246.80.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.96.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.0.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.168.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.224.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.240.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:b0:3e:66:e3:2e:ff:54:c9:fd:8b:f8:3f:77:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Mar 30 04:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9267e96220332a305e95e4b7be75264ad1f22d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:2e:5b:1d:39:07:55:72:43:5d:1e:c4:93:
b8:3d:d8:20:0c:95:63:bc:4c:0f:85:19:bd:b4:96:
96:70:1a:45:08:84:77:18:94:cd:4f:29:c2:cf:8f:
00:e3:d8:6b:a2:3b:ae:38:13:47:20:07:e5:5d:33:
75:b3:f9:17:37:bf:dc:f9:19:09:df:a6:16:91:59:
5b:14:f6:9a:67:58:4b:68:95:84:b0:93:6b:94:4b:
8f:3c:28:25:d0:21:0f:53:59:da:14:d9:c1:7d:43:
87:62:42:4e:8d:95:99:4f:23:68:14:03:66:b6:19:
57:93:f2:ec:d3:48:d2:62:62:52:e8:cf:f7:0e:e6:
fa:48:57:fd:67:55:03:3b:ae:66:c5:7b:e9:5c:7a:
5b:74:2c:73:45:a4:50:be:c3:d7:2d:c6:80:c7:b1:
7e:4e:e8:32:3e:2f:48:45:96:15:b2:00:3e:f7:af:
70:7d:58:d6:d6:4f:03:6f:af:1c:3e:31:35:90:66:
de:2f:ef:0d:77:5f:3a:2d:bb:fc:04:a9:06:4c:22:
9f:c9:57:b2:c3:2e:0a:47:41:d7:0f:d1:7f:1e:fb:
43:71:94:5c:f0:d7:23:ca:f1:97:01:aa:16:d3:e7:
ca:e4:b5:61:d7:77:eb:40:1b:55:db:4a:68:e5:87:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:E9:62:20:33:2A:30:5E:95:E4:B7:BE:75:26:4A:D1:F2:2D:07
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/kmfpYiAzKjBeleS3vnUmStHyLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
87.255.202.0-87.255.212.255
87.255.214.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d0:0f:11:67:e8:76:85:97:5f:2d:75:20:53:4d:58:35:ce:
41:e9:1b:0e:b4:60:cc:02:b8:cb:65:98:a0:c5:8f:f8:54:fe:
6e:cf:11:99:c2:29:fd:4c:1d:5b:65:77:fb:3b:ec:ea:dc:8b:
52:37:e7:c6:1e:4b:a2:66:84:a2:c9:88:b6:a3:9a:8b:ae:b9:
7f:da:87:02:5b:ec:de:af:97:f4:57:60:72:84:51:50:67:5c:
60:70:6b:57:7a:1c:93:aa:49:81:48:54:a1:cc:70:84:a0:e6:
83:88:6d:8e:64:bb:40:eb:3f:19:7f:e2:85:c8:cb:cd:69:5b:
ae:1a:bd:06:a2:48:97:0a:42:e8:33:3d:bd:14:67:db:9b:2e:
d1:da:6c:40:4b:e2:65:f3:a7:90:f8:df:b6:6e:30:64:13:bd:
0d:b8:2a:ce:60:cf:c5:de:33:8b:50:f3:e0:c0:60:cc:6a:d9:
65:7f:ab:17:96:8f:ff:6f:67:fc:04:ac:b4:b1:53:6f:bc:e1:
f6:61:d4:e8:73:29:07:0e:37:a0:9a:03:b6:23:36:d1:f0:cb:
31:e9:06:96:df:e7:7a:38:11:11:24:01:b7:05:2c:81:57:36:
c5:81:a0:da:8a:54:89:a4:90:40:75:46:a5:82:bc:b0:13:74:
94:68:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:01 2024 by rpki-client on console-fra.rpki-client.org