Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/px-cBRsOW6prJjqQdq4K5YNXTdk.roa
File: px-cBRsOW6prJjqQdq4K5YNXTdk.roa (raw, json)
Hash identifier: Sf29z3pNgCSoF8+2tBxTzEWUz4ipAkLbKDsPxD0tsTM=
Subject key identifier: A7:1F:9C:05:1B:0E:5B:AA:6B:26:3A:90:76:AE:0A:E5:83:57:4D:D9
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 018658278E3E99A4AD77DD01CC1CF609A73F
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/px-cBRsOW6prJjqQdq4K5YNXTdk.roa
Signing time: Thu 16 Feb 2023 02:57:12 +0000
ROA not before: Thu 16 Feb 2023 02:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41798
IP address blocks: 37.208.43.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.40.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.204.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.240.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
2.57.96.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
91.246.80.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.96.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.0.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.168.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.224.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.240.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
2a00:ab40:7401::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Mar 2023 04:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:27:8e:3e:99:a4:ad:77:dd:01:cc:1c:f6:09:a7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Feb 16 02:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71f9c051b0e5baa6b263a9076ae0ae583574dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:94:58:67:d6:c9:bb:35:cf:c5:41:d1:a8:
aa:21:0b:04:02:1c:65:44:78:49:e2:a6:1d:bc:a7:
86:cd:77:a8:85:bd:76:51:cc:ad:e1:63:65:f9:48:
5e:b9:ed:18:cd:3b:f5:ac:b8:09:89:24:3f:a8:0b:
66:f7:85:dc:9d:0d:b3:0b:ef:0d:fe:93:46:35:03:
59:a2:fc:1f:8c:56:6d:69:29:4e:d7:09:48:d5:a6:
95:b7:68:aa:14:15:5e:d9:68:d0:a3:c4:c2:76:d6:
e7:a2:5c:29:31:58:0f:1c:72:cd:ce:58:9d:dc:11:
cd:7f:3c:02:57:39:e4:d8:f6:b2:42:c1:d9:63:b9:
6c:25:b1:00:a5:19:12:14:14:c1:49:4b:85:b1:47:
61:53:7e:1d:4d:30:0f:d6:fc:58:a1:5d:01:d0:73:
60:f5:56:f1:c5:82:fd:7c:d9:71:0a:46:b0:78:2a:
d8:2f:4f:1b:e6:cb:c7:d5:38:73:9e:dc:33:af:77:
1b:5a:86:f3:b1:d3:1c:9a:6a:66:f3:a0:7c:76:ca:
cc:bb:2d:14:65:ff:08:c8:30:3d:d3:38:0e:87:8a:
8f:94:00:94:63:b9:d6:2e:a3:65:ca:0d:77:54:68:
af:6c:f5:4c:37:f7:25:ce:e3:84:8a:69:71:1d:41:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:9C:05:1B:0E:5B:AA:6B:26:3A:90:76:AE:0A:E5:83:57:4D:D9
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/px-cBRsOW6prJjqQdq4K5YNXTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
87.255.202.0-87.255.212.255
87.255.214.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
64:12:b4:36:eb:ed:0f:5c:20:01:2b:92:72:b3:b1:5d:89:b4:
42:e5:ba:21:80:81:89:ab:4f:3b:2e:ab:7e:42:ac:26:bb:f5:
92:2a:fa:92:82:45:91:e5:51:50:c2:81:c9:57:c7:bf:c2:dd:
16:f1:dd:eb:50:63:b4:04:a5:2d:bf:34:ae:2a:6a:d0:de:f4:
2b:2b:0b:09:5a:7b:52:36:9b:c5:c1:33:5b:46:69:51:c8:ad:
6f:29:b1:77:d9:72:92:99:05:51:d8:ae:1f:df:96:d2:c3:d7:
ba:03:f9:b9:44:11:21:0a:02:53:00:03:23:7a:03:3f:bd:b6:
d0:82:ae:9e:29:5d:5a:8c:ce:7b:93:f5:84:38:7e:18:e1:84:
f7:1f:fc:f6:d7:1e:e7:6e:97:18:70:2e:1d:8a:ec:32:b0:5e:
40:85:52:3b:41:a4:b3:28:42:ae:f6:b1:8e:af:d1:27:b2:74:
22:ba:44:80:b8:a8:a9:3c:19:23:fa:76:96:82:32:6a:5b:8b:
2c:e4:d2:67:08:f0:8a:b2:72:7a:a0:d7:56:05:0b:f4:8a:fa:
44:69:94:27:4e:bf:9c:9c:32:a1:ad:ca:b9:a8:09:e8:d9:b8:
18:2b:f9:74:11:e9:39:e7:a7:28:53:2d:f5:b0:16:65:77:c2:
ed:0b:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:38 2024 by rpki-client on console-fra.rpki-client.org