Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_rmaOi8aZ_3DCqH9N74B4kEO9RI.roa
File: _rmaOi8aZ_3DCqH9N74B4kEO9RI.roa (raw, json)
Hash identifier: OlXQGrGc9LdNJCuI+ioO8T3FDvyppXFp1rGFMS5CzhE=
Subject key identifier: FE:B9:9A:3A:2F:1A:67:FD:C3:0A:A1:FD:37:BE:01:E2:41:0E:F5:12
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0188475EA51C05F30E34EA494303D43F985A
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_rmaOi8aZ_3DCqH9N74B4kEO9RI.roa
Signing time: Tue 23 May 2023 06:49:24 +0000
ROA not before: Tue 23 May 2023 06:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
212.70.3.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
119.12.192.0/20 maxlen: 32
212.70.8.0/21 maxlen: 32
92.255.80.0/22 maxlen: 32
89.46.242.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
86.104.76.0/22 maxlen: 32
89.40.81.0/24 maxlen: 32
180.235.176.0/20 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
91.92.216.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
91.92.218.0/24 maxlen: 32
94.177.14.0/23 maxlen: 32
93.113.52.0/23 maxlen: 24
188.240.214.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
188.241.0.0/23 maxlen: 32
92.255.0.0/24 maxlen: 32
85.217.190.0/23 maxlen: 32
193.56.24.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
176.223.104.0/22 maxlen: 32
94.139.48.0/21 maxlen: 32
94.139.56.0/22 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
94.139.60.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
176.223.68.0/22 maxlen: 32
188.240.48.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
176.223.182.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
119.13.224.0/20 maxlen: 32
93.114.236.0/22 maxlen: 32
93.114.136.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
2.57.76.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
89.223.22.0/23 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Sep 2023 18:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:5e:a5:1c:05:f3:0e:34:ea:49:43:03:d4:3f:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: May 23 06:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb99a3a2f1a67fdc30aa1fd37be01e2410ef512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:7f:91:6b:af:66:ba:6e:95:21:68:fd:45:
da:18:02:99:8a:67:98:11:c0:f3:27:20:05:38:c1:
91:4f:69:33:46:e2:30:6c:d9:06:98:6f:ca:60:25:
24:3b:bc:9f:3e:97:0e:83:51:8c:69:db:4b:55:2d:
56:d6:b1:c4:4d:fa:5f:88:c8:24:05:07:3b:7f:27:
fd:22:65:11:46:59:b0:59:63:59:07:7d:92:38:ba:
32:58:6a:25:a0:55:12:a2:ae:7d:2e:cf:5f:ce:99:
78:d9:ba:09:d0:3d:ab:bd:44:c7:26:31:77:99:8d:
e6:c8:a3:51:bc:41:2f:8e:55:78:25:70:22:b8:e1:
5d:e8:6b:02:5b:c5:ec:12:2e:4d:69:5c:5b:2a:92:
76:5b:b2:5f:f9:9b:49:77:ac:e0:7a:77:4a:60:fd:
4b:fe:ed:60:87:be:91:e2:d2:d7:51:01:b3:35:d9:
07:35:87:ed:47:0a:a3:81:bc:88:9f:3c:23:64:d2:
c5:de:d6:5d:32:16:be:5d:87:c9:44:87:1b:ea:bf:
ac:c8:93:46:13:0f:1a:dd:c9:ca:34:2b:d3:aa:7b:
49:11:e4:fa:de:e6:f6:c3:12:bc:7d:28:0f:74:ab:
0f:67:85:60:56:8b:06:a5:aa:92:54:08:fa:93:89:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:9A:3A:2F:1A:67:FD:C3:0A:A1:FD:37:BE:01:E2:41:0E:F5:12
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_rmaOi8aZ_3DCqH9N74B4kEO9RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.48.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
119.13.224.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.3.0/24
212.70.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:cd:7d:5a:0c:45:97:a8:a0:8e:b3:b4:4e:44:f3:fa:93:a6:
64:a2:d5:30:40:7c:76:66:94:b4:b0:7d:f3:3e:2f:bc:4c:a5:
1d:38:38:e3:9e:ac:8a:33:57:96:c5:ad:a7:bf:c3:10:92:26:
11:d8:f2:4f:da:db:e8:0a:0d:a5:e3:f8:da:e5:85:af:f4:3e:
79:c3:1f:f0:91:b2:b2:8d:da:9b:ab:52:de:d4:1e:8a:a2:03:
b2:3d:8a:78:70:f6:48:85:9b:19:b5:87:30:d6:9e:af:af:32:
0b:4b:d8:ab:59:99:02:d5:9e:a8:6a:66:67:1e:f3:db:6f:f1:
6c:f4:ce:32:df:09:eb:19:94:dc:96:c8:6d:84:63:ee:42:38:
6f:dd:6f:8d:7e:f0:5f:08:9c:c3:23:6d:02:08:cb:f9:77:09:
70:0d:92:f4:5a:d9:96:ca:5d:d0:10:c8:a0:15:38:3e:5c:fc:
7e:b2:ef:0c:e0:4d:a9:61:d6:94:0e:41:6e:68:ae:ec:f9:fa:
a1:c4:da:f7:e2:e2:9d:14:38:65:4e:1a:29:e1:46:9f:44:3c:
bf:26:39:4c:71:95:e0:e4:9f:b8:53:39:0d:63:ab:ec:5a:f5:
35:b6:f5:49:32:7e:ea:33:b9:25:b6:f6:13:64:d9:a2:99:a3:
0b:7d:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org