Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/C6rxuQBP3GLCTzOyuQVI-5-tSzs.roa
File: C6rxuQBP3GLCTzOyuQVI-5-tSzs.roa (raw, json)
Hash identifier: 30uiSe2kW7CGT3xiTsT1OKB9ces8rmWC8IcRdZfUv3M=
Subject key identifier: 0B:AA:F1:B9:00:4F:DC:62:C2:4F:33:B2:B9:05:48:FB:9F:AD:4B:3B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018C9BDA859108B79BAEEB1183D2B840B1B1
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/C6rxuQBP3GLCTzOyuQVI-5-tSzs.roa
Signing time: Sun 24 Dec 2023 12:43:58 +0000
ROA not before: Sun 24 Dec 2023 12:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
37.235.16.0/20 maxlen: 24
185.30.76.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
185.197.68.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
91.184.64.0/20 maxlen: 24
37.19.80.0/20 maxlen: 24
185.12.62.0/24 maxlen: 24
188.136.220.0/23 maxlen: 24
31.217.208.0/21 maxlen: 24
213.207.192.0/20 maxlen: 24
185.21.76.0/22 maxlen: 24
92.61.184.0/21 maxlen: 24
109.230.64.0/21 maxlen: 24
46.34.168.0/21 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
94.139.160.0/20 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
109.230.80.0/20 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.41.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
92.119.68.0/22 maxlen: 24
86.109.56.0/23 maxlen: 24
185.142.233.0/24 maxlen: 24
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
185.172.0.0/22 maxlen: 24
37.114.192.0/20 maxlen: 24
188.121.128.0/19 maxlen: 24
37.114.192.0/18 maxlen: 24
188.121.146.0/24 maxlen: 24
37.114.216.0/22 maxlen: 24
37.114.220.0/22 maxlen: 24
37.114.224.0/22 maxlen: 24
37.114.228.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
37.114.244.0/22 maxlen: 24
37.114.252.0/24 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
81.91.144.0/20 maxlen: 24
2a0c:100::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:da:85:91:08:b7:9b:ae:eb:11:83:d2:b8:40:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Dec 24 12:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0baaf1b9004fdc62c24f33b2b90548fb9fad4b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:dc:9f:00:87:52:dd:76:0a:b2:b3:09:c5:
ca:ef:f1:74:01:4b:a4:f8:5d:6a:99:6c:44:a3:c1:
7f:07:12:f0:33:6b:ab:3d:4c:05:85:eb:da:3c:c5:
cc:89:3f:f2:cf:5c:e8:9c:de:f5:f6:d8:7f:d4:d7:
38:79:40:f5:49:52:83:87:ed:0d:0c:83:51:63:04:
d6:e3:6e:10:74:a5:9d:0e:42:6a:1a:a0:5d:69:8f:
d5:60:8d:e9:5a:86:59:bc:e3:23:45:8d:3e:53:7a:
70:5b:1d:d6:3c:b8:3f:0f:6b:dd:e9:3a:04:ec:5b:
6b:90:12:a8:db:d8:3c:a6:14:01:0b:66:66:55:5c:
b5:f0:f7:af:14:74:b1:4c:85:3b:da:ac:bb:dc:37:
66:2f:3f:aa:9e:03:23:68:03:8a:25:43:f2:81:06:
41:16:b8:8e:c5:3f:3b:57:0f:98:6e:2d:57:ba:fa:
c6:ee:ac:93:31:d8:88:b2:c3:f2:bf:9c:50:b1:65:
73:af:4f:59:8e:4b:94:37:29:05:f8:10:b6:7b:1a:
ae:52:97:78:80:62:9a:3f:2e:a3:aa:85:9e:af:10:
16:66:1a:a4:5e:b9:8d:e1:cf:e4:c6:da:ac:46:5e:
04:b3:31:0d:db:15:25:13:96:6a:fe:fb:5d:f4:74:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:F1:B9:00:4F:DC:62:C2:4F:33:B2:B9:05:48:FB:9F:AD:4B:3B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/C6rxuQBP3GLCTzOyuQVI-5-tSzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.168.0/21
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.121.128.0/19
188.136.220.0/23
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
3e:18:f9:e3:22:f7:d1:5b:b1:db:a5:bc:b1:c3:c5:08:3e:76:
b2:ee:d0:5a:65:3e:e9:a6:ff:9c:2e:e7:70:21:8f:07:77:7a:
00:d9:1d:5a:23:bc:2d:a3:1d:5c:69:40:91:90:1d:37:3a:b1:
4b:c8:d5:80:1f:98:35:59:17:ae:a3:c2:39:05:78:63:ff:85:
29:e7:dc:ff:0e:c5:0c:ec:d0:1e:3b:29:4c:4a:97:46:a6:5c:
1c:61:7d:36:6a:39:b5:34:9a:a6:95:44:68:59:8e:76:77:27:
79:70:a9:b4:bc:b3:36:e9:d9:b3:cf:43:ea:c2:a3:31:db:e6:
f0:f9:74:f7:f8:c2:fa:38:f9:88:41:6c:50:ec:e4:c5:27:8c:
b9:aa:14:96:2d:f4:e6:c3:0e:e9:6e:fa:6d:d2:42:e5:99:e1:
47:80:71:e0:eb:f0:a6:ca:fb:93:51:47:93:fd:5d:c4:df:18:
64:6d:36:6e:cb:aa:29:c2:1b:bf:36:47:f9:66:1f:ca:09:99:
c0:52:01:ea:0a:42:db:cb:1c:5e:4e:b3:02:7a:85:47:2e:cc:
c5:47:d5:92:aa:b6:97:ae:1d:66:a7:88:79:47:f4:89:1e:b9:
dc:4e:56:7d:c2:d3:0d:21:7b:0f:11:7b:48:c2:f5:21:67:79:
cd:96:de:b8
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAYyb2oWRCLebrusRg9K4QLGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMxMjI0MTI0MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmFhZjFiOTAwNGZkYzYyYzI0ZjMzYjJiOTA1NDhmYjlmYWQ0YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKXcnwCHUt12CrKzCcXK7/F0AUuk
+F1qmWxEo8F/BxLwM2urPUwFhevaPMXMiT/yz1zonN719th/1Nc4eUD1SVKDh+0N
DINRYwTW424QdKWdDkJqGqBdaY/VYI3pWoZZvOMjRY0+U3pwWx3WPLg/D2vd6ToE
7FtrkBKo29g8phQBC2ZmVVy18PevFHSxTIU72qy73DdmLz+qngMjaAOKJUPygQZB
FriOxT87Vw+Ybi1XuvrG7qyTMdiIssPyv5xQsWVzr09ZjkuUNykF+BC2exquUpd4
gGKaPy6jqoWerxAWZhqkXrmN4c/kxtqsRl4EszEN2xUlE5Zq/vtd9HS8gwIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFAuq8bkAT9xiwk8zsrkFSPufrUs7MB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvQzZyeHVRQlAzR0xDVHpPeXVRVkktNS10U3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAVAEAgABMIIB
SAMEAx/Z0AMEBCUTUAMEBiVywAMEBiXdAAMEBCXrEAMEAi2AjAMEAi2QfAMEAC4g
BQMEAC4gCQMEAC4gDgMEAy4iqAMEAU6etgMEAE+E1QMEAE+E2QMEAE+E2wMEAFBH
cTAMAwQBUEd6AwQBUEd8AwQAUEd/AwQAUR3zAwQDUR34AwQEUVuQAwQBVm0gAwQA
Vm0pAwQBVm04AwQBV/e0AwQEW7hAAwQDXD24AwQCXHdEAwQEXougAwQDbeZAAwQE
beZQAwQAsN1BAwQAuQw+AwQCuRVMAwQCuR5MAwQCuUY8AwQAuWjkMAwDBAC5jukD
BAK5jugDBAK5rAADBAK5vhQDBAK5xUQDBAC8S1wDBAC8S14DBAG8S2YDBAC8S2sD
BAG8S24DBAG8S3oDBAW8eYADBAG8iNwDBATVz8ADBADZQtADBADZQtMwDQQCAAIw
BwMFAyoMAQAwDQYJKoZIhvcNAQELBQADggEBAD4Y+eMi99FbsdulvLHDxQg+drLu
0FplPumm/5wu53Ahjwd3egDZHVojvC2jHVxpQJGQHTc6sUvI1YAfmDVZF66jwjkF
eGP/hSnn3P8OxQzs0B47KUxKl0amXBxhfTZqObU0mqaVRGhZjnZ3J3lwqbS8szbp
2bPPQ+rCozHb5vD5dPf4wvo4+YhBbFDs5MUnjLmqFJYt9ObDDulu+m3SQuWZ4UeA
ceDr8KbK+5NRR5P9XcTfGGRtNm7LqinCG782R/lmH8oJmcBSAeoKQtvLHF5OswJ6
hUcuzMVH1ZKqtpeuHWaniHlH9IkeudxOVn3C0w0hew8Re0jC9SFnec2W3rg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org