Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Fk7X_6n4B39pZyEyxiY_96wZwyw.roa
File: Fk7X_6n4B39pZyEyxiY_96wZwyw.roa (raw, json)
Hash identifier: aRkAfFz5EvOCGQWmwUz+EhJUbmPoMDO7yNE+Vl+S40s=
Subject key identifier: 16:4E:D7:FF:A9:F8:07:7F:69:67:21:32:C6:26:3F:F7:AC:19:C3:2C
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0187F01255E7D37A53A3D5AC2843F40F1852
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Fk7X_6n4B39pZyEyxiY_96wZwyw.roa
Signing time: Sat 06 May 2023 07:59:06 +0000
ROA not before: Sat 06 May 2023 07:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.21.76.0/22 maxlen: 24
217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
86.109.32.0/23 maxlen: 23
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 23
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
86.109.41.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
185.142.233.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
37.114.192.0/20 maxlen: 24
37.114.224.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.124.0/23 maxlen: 23
80.71.122.0/23 maxlen: 23
80.71.127.0/24 maxlen: 24
37.114.244.0/22 maxlen: 24
185.12.62.0/24 maxlen: 24
37.114.252.0/24 maxlen: 24
188.136.220.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 08:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:12:55:e7:d3:7a:53:a3:d5:ac:28:43:f4:0f:18:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: May 6 07:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164ed7ffa9f8077f69672132c6263ff7ac19c32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:43:da:f2:b8:4e:d5:5e:cb:ad:84:d9:00:
08:b0:1a:5b:8f:7c:58:f0:66:f2:65:db:46:8c:b8:
50:d5:0d:b8:8e:4c:37:92:bc:9b:36:7f:cc:2e:b8:
bb:30:cf:92:59:bc:5a:f6:dc:df:61:7a:51:73:a2:
be:69:dd:3a:b0:bb:4b:07:29:a1:65:fb:38:4a:b6:
51:d2:5a:cf:7e:6c:5e:5f:f0:d7:2e:89:60:8e:09:
f0:0f:b1:16:7b:3a:08:db:20:68:b0:4c:3d:3c:9b:
83:1c:c8:16:8e:62:62:f0:d6:a6:0e:cc:84:d1:7a:
63:8c:f2:e9:06:97:23:c1:2f:79:2f:de:38:5d:79:
8a:d1:49:6b:db:d3:ca:e2:ad:e8:0b:01:26:12:59:
b6:b3:dd:14:4e:a4:65:e3:4f:c9:96:ef:63:2c:f5:
bf:98:ff:0f:9e:33:04:e7:3d:f6:22:cd:d2:29:ce:
e5:a3:e5:b9:20:db:54:c3:cf:c1:25:ef:a3:53:a8:
7e:15:08:a7:92:62:57:f5:6f:54:bf:e2:e6:f6:f6:
da:11:0c:b7:0d:9e:15:c2:a8:22:e7:86:ff:48:d9:
ac:83:38:23:57:ac:38:8e:e0:71:c3:45:ba:fa:a3:
c6:2e:2a:62:1d:90:f9:68:2a:04:03:cd:a8:0e:78:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:D7:FF:A9:F8:07:7F:69:67:21:32:C6:26:3F:F7:AC:19:C3:2C
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Fk7X_6n4B39pZyEyxiY_96wZwyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.192.0/20
37.114.224.0/22
37.114.244.0-37.114.255.255
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.190.20.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.136.220.0/23
217.66.208.0/24
217.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5d:8a:77:96:a0:ad:00:a0:5b:1c:b9:a2:0e:4f:b7:82:d9:
39:4d:79:5b:8c:53:aa:4b:0f:10:41:15:0d:91:22:53:fe:28:
c1:25:36:b7:1b:ea:56:46:f2:32:75:4b:08:a5:03:23:a9:09:
f9:77:e7:8d:81:e2:e1:27:7c:96:b5:37:51:2d:47:9a:f2:d1:
ed:fd:81:71:62:8b:b0:6a:18:b1:25:d4:30:a9:d6:5a:7e:0c:
f5:1e:a6:f9:7b:ac:8d:f5:4d:5a:e3:b0:bb:58:19:47:da:15:
2b:aa:a8:3e:00:a6:ef:f5:2f:a0:a0:97:95:45:43:8f:11:0b:
fc:e5:bd:4e:67:e3:aa:51:d5:e8:07:d1:72:a8:5b:be:7f:81:
33:a0:41:6a:54:0f:d1:a0:3e:73:5f:00:18:11:5b:00:ea:32:
cf:8d:36:a5:66:56:0e:da:68:37:08:79:a7:0b:d7:97:a1:24:
34:8e:f4:b7:76:2c:a4:39:2d:91:64:2a:f7:a3:51:ab:0e:8f:
a3:a9:8c:72:b4:c3:07:56:ab:78:55:d8:47:38:79:70:12:8e:
5d:fe:f5:c9:b5:02:8e:73:6f:46:4c:c8:03:49:1f:80:c8:1e:
04:cd:0e:9e:99:b0:d2:ce:88:49:64:fa:14:21:7c:05:5a:13:
56:30:0b:f2
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAYfwElXn03pTo9WsKEP0DxhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMwNTA2MDc1OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRlZDdmZmE5ZjgwNzdmNjk2NzIxMzJjNjI2M2ZmN2FjMTljMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXBD2vK4TtVey62E2QAIsBpbj3xY
8GbyZdtGjLhQ1Q24jkw3krybNn/MLri7MM+SWbxa9tzfYXpRc6K+ad06sLtLBymh
Zfs4SrZR0lrPfmxeX/DXLolgjgnwD7EWezoI2yBosEw9PJuDHMgWjmJi8NamDsyE
0XpjjPLpBpcjwS95L944XXmK0Ulr29PK4q3oCwEmElm2s90UTqRl40/Jlu9jLPW/
mP8PnjME5z32Is3SKc7lo+W5INtUw8/BJe+jU6h+FQinkmJX9W9Uv+Lm9vbaEQy3
DZ4Vwqgi54b/SNmsgzgjV6w4juBxw0W6+qPGLipiHZD5aCoEA82oDnjyAQIDAQAB
o4IC8jCCAu4wHQYDVR0OBBYEFBZO1/+p+Ad/aWchMsYmP/esGcMsMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvRms3WF82bjRCMzlwWnlFeXhpWV85Nndad3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBgYIKwYBBQUHAQcBAf8EgfYwgfMwgfAEAgABMIHpAwQE
JXLAAwQCJXLgMAsDBAIlcvQDAwAlcgMEAC4gBQMEAC4gCQMEAC4gDgMEAU6etgME
AE+E1QMEAE+E2QMEAE+E2wMEAFBHcTAMAwQBUEd6AwQBUEd8AwQAUEd/AwQAUR3z
AwQDUR34AwQBVm0gAwQAVm0pAwQBVm04AwQBV/e0AwQAsN1BAwQAuQw+AwQCuRVM
AwQCuUY8AwQAuWjkMAwDBAC5jukDBAK5jugDBAK5vhQDBAC8S1wDBAC8S14DBAG8
S2YDBAC8S2sDBAG8S24DBAG8S3oDBAG8iNwDBADZQtADBADZQtMwDQYJKoZIhvcN
AQELBQADggEBABRdineWoK0AoFscuaIOT7eC2TlNeVuMU6pLDxBBFQ2RIlP+KMEl
Nrcb6lZG8jJ1SwilAyOpCfl3542B4uEnfJa1N1EtR5ry0e39gXFii7BqGLEl1DCp
1lp+DPUepvl7rI31TVrjsLtYGUfaFSuqqD4Apu/1L6Cgl5VFQ48RC/zlvU5n46pR
1egH0XKoW75/gTOgQWpUD9GgPnNfABgRWwDqMs+NNqVmVg7aaDcIeacL15ehJDSO
9Ld2LKQ5LZFkKvejUasOj6OpjHK0wwdWq3hV2Ec4eXASjl3+9cm1Ao5zb0ZMyANJ
H4DIHgTNDp6ZsNLOiElk+hQhfAVaE1YwC/I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org