Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pgCHFxmayowYG6qG0EghEvu3eHk.roa
File: pgCHFxmayowYG6qG0EghEvu3eHk.roa (raw, json)
Hash identifier: BMH1F3bP1QEOTbosTRKR7sKaHy7fRzy33+iA2efY7PQ=
Subject key identifier: A6:00:87:17:19:9A:CA:8C:18:1B:AA:86:D0:48:21:12:FB:B7:78:79
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0190F8C20AF19630D966AB873EBEC5C62928
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pgCHFxmayowYG6qG0EghEvu3eHk.roa
Signing time: Sun 28 Jul 2024 09:53:04 +0000
ROA not before: Sun 28 Jul 2024 09:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.192.0/20 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.208.0/21 maxlen: 24
37.114.216.0/22 maxlen: 24
37.114.220.0/22 maxlen: 24
37.114.224.0/22 maxlen: 24
37.114.228.0/22 maxlen: 24
37.114.232.0/21 maxlen: 24
37.114.240.0/22 maxlen: 24
37.114.244.0/22 maxlen: 24
37.114.246.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.252.0/24 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
37.221.0.0/18 maxlen: 24
37.235.16.0/20 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/22 maxlen: 24
46.34.188.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.88.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
213.207.193.0/24 maxlen: 24
213.207.194.0/24 maxlen: 24
213.207.201.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jul 2024 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f8:c2:0a:f1:96:30:d9:66:ab:87:3e:be:c5:c6:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jul 28 09:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6008717199aca8c181baa86d0482112fbb77879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:e8:59:49:f6:49:3c:61:2d:d9:0c:9c:b7:
59:a1:7c:59:ae:56:63:6d:29:ec:b5:81:97:e3:1e:
52:88:67:f8:ab:06:6c:b7:f7:d9:d8:cf:e0:53:8a:
30:aa:24:ac:43:3d:25:e2:2a:9b:d5:29:95:19:13:
ee:e7:51:db:b7:8e:d8:ca:89:c4:ce:0c:82:10:79:
2d:20:c2:32:c2:e3:4a:56:13:83:02:1e:23:f0:a7:
1e:de:4a:85:2a:a2:20:b6:e6:22:d1:68:e5:0d:6c:
fb:c9:c4:e6:66:ac:3f:98:88:ab:44:b0:2e:0b:a1:
a0:46:56:42:ae:57:45:2c:75:84:00:cf:fd:fe:d0:
51:2f:18:63:5c:31:23:c5:da:08:01:f7:ae:69:b1:
76:c0:9c:71:c4:61:be:d0:e3:be:6b:a8:b1:25:69:
66:45:9b:f9:d5:3c:25:49:1f:44:48:5e:98:8b:5d:
14:f5:dc:db:e5:18:90:6e:b0:46:31:dd:0d:d1:04:
4f:78:60:8d:fb:fc:27:4b:8c:14:63:fe:4e:b2:13:
5a:4c:e3:fa:25:4b:b5:70:fb:60:b9:e2:93:2d:aa:
03:71:f4:b0:4b:4b:04:b0:12:f9:43:20:41:ba:57:
4c:bd:6b:b5:19:3c:c0:58:5a:63:c6:fc:cb:82:a8:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:87:17:19:9A:CA:8C:18:1B:AA:86:D0:48:21:12:FB:B7:78:79
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pgCHFxmayowYG6qG0EghEvu3eHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.116.0/23
188.75.122.0/23
188.121.128.0/19
188.136.174.0/24
188.136.176.0-188.136.184.255
188.136.186.0-188.136.189.255
188.136.195.0/24
188.136.201.0-188.136.203.255
188.136.208.0/24
188.136.212.0/22
188.136.220.0/22
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
3d:a1:75:b2:27:82:77:58:0d:a9:f3:21:54:cf:c3:66:72:aa:
93:4f:fe:e4:d1:62:ff:6f:d3:9d:2c:90:c4:59:ff:92:7f:0c:
18:4c:6a:5e:2f:30:7b:43:96:1f:af:bb:7d:1f:82:08:00:a5:
49:c3:85:03:76:b8:e5:2e:c4:7a:4b:6c:87:48:32:ea:7d:43:
29:39:35:ef:b0:a8:41:4f:11:a7:71:5c:17:29:b2:39:ca:2d:
a1:18:e9:73:cf:23:bc:60:cd:d6:d9:a1:5c:50:20:ad:9e:b8:
89:8f:b6:9d:ee:97:eb:ce:c4:f7:fc:5d:0a:ab:df:05:3f:d4:
a6:a8:eb:22:67:5e:a0:a8:6d:14:7d:08:02:af:b3:f5:ac:36:
a6:d5:58:83:a8:fd:26:91:30:dc:91:81:e7:bd:2e:a8:44:f7:
7a:c2:c7:3d:1c:99:eb:dc:e4:d5:8c:d6:a7:d5:59:1a:e4:f7:
99:3e:0c:ca:8a:45:0d:97:ca:15:8a:d7:ab:cb:97:65:07:2d:
5f:20:52:cb:6e:ef:d7:dd:a0:80:3e:3c:4e:69:1e:82:b7:1b:
d2:38:ff:a4:20:c4:49:f4:16:77:3a:1a:04:d0:ed:8c:88:24:
24:23:fe:f8:59:52:10:e7:3a:9b:ad:45:c9:52:0b:92:34:83:
9e:12:b1:2c
-----BEGIN CERTIFICATE-----
MIIG9DCCBdygAwIBAgISAZD4wgrxljDZZquHPr7FxikoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjQwNzI4MDk1MzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjAwODcxNzE5OWFjYThjMTgxYmFhODZkMDQ4MjExMmZiYjc3ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5HoWUn2STxhLdkMnLdZoXxZrlZj
bSnstYGX4x5SiGf4qwZst/fZ2M/gU4owqiSsQz0l4iqb1SmVGRPu51Hbt47YyonE
zgyCEHktIMIywuNKVhODAh4j8Kce3kqFKqIgtuYi0WjlDWz7ycTmZqw/mIirRLAu
C6GgRlZCrldFLHWEAM/9/tBRLxhjXDEjxdoIAfeuabF2wJxxxGG+0OO+a6ixJWlm
RZv51TwlSR9ESF6Yi10U9dzb5RiQbrBGMd0N0QRPeGCN+/wnS4wUY/5OshNaTOP6
JUu1cPtgueKTLaoDcfSwS0sEsBL5QyBBuldMvWu1GTzAWFpjxvzLgqgTRQIDAQAB
o4IEADCCA/wwHQYDVR0OBBYEFKYAhxcZmsqMGBuqhtBIIRL7t3h5MB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvcGdDSEZ4bWF5b3dZRzZxRzBFZ2hFdnUzZUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFAYIKwYBBQUHAQcBAf8EggIDMIIB/zCCAewEAgABMIIB
5AMEAx/Z0AMEBCUTUAMEBiVywAMEBiXdAAMEBCXrEAMEAi2AjAMEAi2QfAMEAC4g
BQMEAC4gCQMEAC4gDjAMAwQCLiKkAwQELiKgMAwDBAEuIrIDBAYuIoADBAFOnrYD
BAJPhMgDBABPhNUwDAMEAE+E2QMEAU+E3AMEAFBHcTAMAwQBUEd6AwQBUEd8AwQA
UEd/AwQAUR3zAwQDUR34AwQEUVuQAwQBVm0gAwQCVm0kAwQAVm0pAwQBVm0uAwQC
Vm04AwQBVm0+AwQBV/e0AwQEW7hAAwQDXD24AwQCXHdEAwQEXougAwQDbeZAAwQE
beZQAwQAsN1BAwQAuQw+AwQCuRVMAwQCuR5MAwQCuSjwAwQCuS28AwQCuUY8AwQB
uVKkAwQAuWjkAwQCuYWYMAwDBAC5jukDBAK5jugDBAK5rAADBAK5vhQDBAK5xUQD
BAG50JYDBAC8S1wDBAC8S14DBAG8S2YDBAC8S2sDBAG8S24DBAG8S3QDBAG8S3oD
BAW8eYADBAC8iK4wDAMEBLyIsAMEALyIuDAMAwQBvIi6AwQBvIi8AwQAvIjDMAwD
BAC8iMkDBAK8iMgDBAC8iNADBAK8iNQDBAK8iNwDBALVwxADBATVz8ADBADZQtAD
BADZQtMwDQQCAAIwBwMFAyoMAQAwDQYJKoZIhvcNAQELBQADggEBAD2hdbIngndY
DanzIVTPw2ZyqpNP/uTRYv9v050skMRZ/5J/DBhMal4vMHtDlh+vu30fgggApUnD
hQN2uOUuxHpLbIdIMup9Qyk5Ne+wqEFPEadxXBcpsjnKLaEY6XPPI7xgzdbZoVxQ
IK2euImPtp3ul+vOxPf8XQqr3wU/1Kao6yJnXqCobRR9CAKvs/WsNqbVWIOo/SaR
MNyRgee9LqhE93rCxz0cmevc5NWM1qfVWRrk95k+DMqKRQ2XyhWK16vLl2UHLV8g
Ustu79fdoIA+PE5pHoK3G9I4/6QgxEn0Fnc6GgTQ7YyIJCQj/vhZUhDnOputRclS
C5I0g54SsSw=
-----END CERTIFICATE-----
Generated at Sun Jul 28 14:05:03 2024 by rpki-client on console-fra.rpki-client.org