Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3fza52liptmxGRyIO1Dx4n1hLTM.roa
File: 3fza52liptmxGRyIO1Dx4n1hLTM.roa (raw, json)
Hash identifier: 5+GJLOnPbOnL6LoGNZY2ZKQxHJFZxcbLCzGiIExru6c=
Subject key identifier: DD:FC:DA:E7:69:62:A6:D9:B1:19:1C:88:3B:50:F1:E2:7D:61:2D:33
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0186B21C8CF228FBCC4A7AC14528885F652D
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3fza52liptmxGRyIO1Dx4n1hLTM.roa
Signing time: Sun 05 Mar 2023 14:11:00 +0000
ROA not before: Sun 05 Mar 2023 14:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.21.76.0/22 maxlen: 24
217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
86.109.32.0/23 maxlen: 23
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 23
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
86.109.41.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
185.142.233.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.124.0/23 maxlen: 23
80.71.122.0/23 maxlen: 23
80.71.127.0/24 maxlen: 24
37.114.244.0/22 maxlen: 24
185.12.62.0/24 maxlen: 24
37.114.252.0/24 maxlen: 24
188.136.220.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 08:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:1c:8c:f2:28:fb:cc:4a:7a:c1:45:28:88:5f:65:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 5 14:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfcdae76962a6d9b1191c883b50f1e27d612d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:77:8b:ea:c3:32:fc:ff:ba:b1:05:45:39:
83:90:bc:a4:1b:59:5e:c4:59:e3:01:a9:74:45:f9:
f3:23:cf:71:89:d6:b1:24:16:e9:26:d9:53:0e:cc:
79:66:32:65:04:b7:67:2b:63:0b:ad:58:1b:44:cf:
61:a5:85:cf:c1:91:e9:6a:5b:57:0c:5a:1e:f8:6c:
df:1f:55:b6:bf:b4:02:54:3a:b7:c5:cc:56:df:ea:
36:d3:9b:4d:8b:41:3a:87:ff:f4:b1:d3:92:15:51:
09:68:4b:a6:bd:ae:d8:26:85:de:46:63:65:4b:69:
84:4b:79:96:be:d3:af:f3:65:03:12:0a:06:9d:76:
39:e9:2a:f3:cb:a9:bd:7f:c1:4a:fb:84:b4:dd:59:
f2:24:65:0e:26:c9:d2:81:f4:d0:40:be:93:f1:e9:
bd:bd:65:74:8d:09:dd:68:65:b6:b3:70:20:9b:d9:
0c:4c:51:24:bb:9c:2d:1a:13:55:7f:cd:54:cc:5d:
c6:3c:3b:5f:02:ab:57:8d:8b:72:70:0f:24:cf:04:
1b:7e:cd:4d:2d:40:69:7a:f3:8a:9e:63:5d:f3:db:
4a:b1:bb:50:73:5b:72:c9:e3:28:c5:08:9b:ed:bc:
fb:0d:39:4f:7b:4c:bf:af:78:fa:a0:f8:cd:05:83:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:DA:E7:69:62:A6:D9:B1:19:1C:88:3B:50:F1:E2:7D:61:2D:33
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3fza52liptmxGRyIO1Dx4n1hLTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.244.0-37.114.255.255
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.190.20.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.136.220.0/23
217.66.208.0/24
217.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
01:83:6e:06:ab:58:e3:c8:4b:d7:7f:3c:4b:73:d9:b6:c6:44:
c8:7c:45:5d:9a:77:06:6c:9c:f5:a0:a2:18:ba:68:bd:3a:d6:
f8:5a:9f:46:79:9e:37:62:3d:ed:65:38:d7:fe:f5:9b:96:cf:
f8:b6:bf:2f:00:7e:31:0b:aa:ed:5c:2e:05:44:fe:e5:5b:76:
2a:9a:ac:33:8c:5d:79:89:53:e8:ec:17:62:57:57:20:0c:95:
29:5b:2a:89:d7:64:47:b0:63:38:2f:1a:47:ec:10:da:e8:f0:
e7:5c:5f:01:58:a5:35:ae:d8:cc:27:53:40:a2:d3:82:1d:92:
60:50:43:1f:a7:8a:9a:1a:e8:9d:c6:6b:37:cc:54:9c:34:e7:
e8:6f:7e:e4:8d:fe:2d:e4:27:1a:fb:ae:d3:ff:41:42:99:52:
be:f0:db:30:ae:fc:3d:68:f7:f9:e7:7d:c4:87:12:6b:06:f8:
04:4c:34:f3:0f:72:e7:54:e9:e9:83:05:27:34:c8:a5:35:7b:
21:10:d4:83:d8:b0:0d:8f:3d:72:38:28:4c:d5:1b:ac:0b:5f:
5c:94:60:94:46:1d:65:88:95:4b:50:5f:00:cc:77:b6:c0:5f:
11:ee:6e:cd:61:c6:46:51:78:a8:7f:d6:1f:e2:8c:1a:51:ab:
58:86:40:84
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAYayHIzyKPvMSnrBRSiIX2UtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMwMzA1MTQxMTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGZjZGFlNzY5NjJhNmQ5YjExOTFjODgzYjUwZjFlMjdkNjEyZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQZ3i+rDMvz/urEFRTmDkLykG1le
xFnjAal0RfnzI89xidaxJBbpJtlTDsx5ZjJlBLdnK2MLrVgbRM9hpYXPwZHpaltX
DFoe+GzfH1W2v7QCVDq3xcxW3+o205tNi0E6h//0sdOSFVEJaEumva7YJoXeRmNl
S2mES3mWvtOv82UDEgoGnXY56Srzy6m9f8FK+4S03VnyJGUOJsnSgfTQQL6T8em9
vWV0jQndaGW2s3Agm9kMTFEku5wtGhNVf81UzF3GPDtfAqtXjYtycA8kzwQbfs1N
LUBpevOKnmNd89tKsbtQc1tyyeMoxQib7bz7DTlPe0y/r3j6oPjNBYPY7QIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFN382udpYqbZsRkciDtQ8eJ9YS0zMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvM2Z6YTUybGlwdG14R1J5SU8xRHg0bjFoTFRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH6BggrBgEFBQcBBwEB/wSB6jCB5zCB5AQCAAEwgd0wCwME
AiVy9AMDACVyAwQALiAFAwQALiAJAwQALiAOAwQBTp62AwQAT4TVAwQAT4TZAwQA
T4TbAwQAUEdxMAwDBAFQR3oDBAFQR3wDBABQR38DBABRHfMDBANRHfgDBAFWbSAD
BABWbSkDBAFWbTgDBAFX97QDBACw3UEDBAC5DD4DBAK5FUwDBAK5RjwDBAC5aOQw
DAMEALmO6QMEArmO6AMEArm+FAMEALxLXAMEALxLXgMEAbxLZgMEALxLawMEAbxL
bgMEAbxLegMEAbyI3AMEANlC0AMEANlC0zANBgkqhkiG9w0BAQsFAAOCAQEAAYNu
BqtY48hL1388S3PZtsZEyHxFXZp3Bmyc9aCiGLpovTrW+FqfRnmeN2I97WU41/71
m5bP+La/LwB+MQuq7VwuBUT+5Vt2KpqsM4xdeYlT6OwXYldXIAyVKVsqiddkR7Bj
OC8aR+wQ2ujw51xfAVilNa7YzCdTQKLTgh2SYFBDH6eKmhroncZrN8xUnDTn6G9+
5I3+LeQnGvuu0/9BQplSvvDbMK78PWj3+ed9xIcSawb4BEw08w9y51Tp6YMFJzTI
pTV7IRDUg9iwDY89cjgoTNUbrAtfXJRglEYdZYiVS1BfAMx3tsBfEe5uzWHGRlF4
qH/WH+KMGlGrWIZAhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org