Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/SvtmES5nZssmGMxedY9YElZF1WU.roa
File: SvtmES5nZssmGMxedY9YElZF1WU.roa (raw, json)
Hash identifier: XpmjY7ltDSx1q7v3VnwaniHwWwgjIkbuneJS5xNl0Hg=
Subject key identifier: 4A:FB:66:11:2E:67:66:CB:26:18:CC:5E:75:8F:58:12:56:45:D5:65
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018C1AAFDBA44D55979508BC1DB7159F40F8
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/SvtmES5nZssmGMxedY9YElZF1WU.roa
Signing time: Wed 29 Nov 2023 10:46:21 +0000
ROA not before: Wed 29 Nov 2023 10:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.228.148.0/22 maxlen: 22
37.235.4.0/24 maxlen: 24
37.235.3.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.204.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.207.0/24 maxlen: 24
178.255.152.0/21 maxlen: 32
193.33.114.0/23 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
217.146.0.0/19 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.247.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.65.72.0/21 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
94.16.98.0/24 maxlen: 24
185.2.176.0/22 maxlen: 32
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
194.1.206.0/24 maxlen: 32
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
144.208.216.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.238.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
2a00:11c0:88::/48 maxlen: 48
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0::/32 maxlen: 128
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a01:aea0:dd1::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a01:aea0::/40 maxlen: 40
2a01:aea0::/32 maxlen: 32
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:af:db:a4:4d:55:97:95:08:bc:1d:b7:15:9f:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Nov 29 10:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afb66112e6766cb2618cc5e758f58125645d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:c4:c5:f6:2c:8e:a3:3b:d7:21:4f:8c:70:
db:17:f4:5b:32:84:17:c4:d9:d6:c9:8c:71:18:18:
e1:8e:1d:99:ea:b7:92:03:19:13:90:75:3e:a8:ba:
3c:8f:b3:87:cc:0d:27:79:7d:d3:77:3f:3b:79:32:
7a:c1:b4:93:15:a4:8c:1d:f8:f3:d6:49:a0:ed:50:
6f:61:e5:2d:c1:13:be:9a:ed:e1:0c:e8:72:94:3f:
64:c9:69:8c:65:94:84:54:4e:24:37:16:5d:a0:bd:
e0:0f:32:66:ec:66:2f:41:77:16:8c:2d:18:30:6f:
98:f0:b7:bb:87:2c:63:c1:b6:14:fd:92:d3:44:78:
ff:7f:13:c9:7b:8a:2b:5d:92:84:2d:67:87:73:7b:
26:4c:db:5b:0d:08:67:ce:80:45:5b:6e:d1:79:a2:
67:79:ad:c4:a7:7b:d7:81:f3:a9:f4:21:3a:e6:d7:
15:56:fc:48:8c:ef:a9:2a:b2:3d:f5:bf:12:62:94:
72:e5:d1:53:e7:54:9c:18:20:eb:98:0e:4a:8e:fe:
a2:d6:fe:dd:a2:f7:6e:68:1c:28:ba:59:c7:f3:cd:
90:1a:48:78:7d:c5:4e:33:d5:df:a0:d2:29:e3:22:
7e:b4:4e:18:9e:3a:37:b9:9e:fd:16:30:df:d1:33:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:66:11:2E:67:66:CB:26:18:CC:5E:75:8F:58:12:56:45:D5:65
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/SvtmES5nZssmGMxedY9YElZF1WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.252.224.0/19
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
dc:78:a2:1d:b3:36:a2:b5:8c:65:48:53:43:6f:67:06:64:37:
5a:9e:76:30:70:35:fd:0e:ba:f1:54:b2:96:c8:75:55:80:84:
b6:ca:41:4a:ac:1f:77:4a:b5:53:6d:1f:0b:1f:81:ce:2c:fa:
34:42:94:e7:43:fb:12:c5:12:19:55:2a:df:38:ea:47:0c:60:
2f:e2:bc:ba:b6:2c:1a:34:84:83:1c:4e:84:a2:dc:1b:23:b4:
1a:5d:9f:4f:17:16:fd:73:c7:cd:93:de:a1:37:44:d1:f1:3b:
3c:88:45:6a:72:d1:5f:49:1e:e4:f0:2d:99:55:54:18:e3:c5:
94:14:15:1f:1a:18:19:de:f7:a5:86:10:93:32:a6:60:3e:c4:
98:ad:19:64:86:08:0b:d1:1c:a8:da:ce:76:01:9d:c0:d2:04:
13:5f:11:a6:e2:92:16:a1:c5:1f:7d:29:17:cd:0c:e7:ed:d4:
62:30:d7:8e:67:ba:9a:92:80:91:e1:67:88:60:5d:3c:29:41:
fa:2c:b5:62:b6:06:3e:d2:c3:b9:07:75:87:cf:2e:68:a2:37:
09:26:e1:4d:da:49:d7:42:e0:f5:d9:88:b5:db:01:1e:d5:0a:
72:26:47:19:3e:3c:ac:f8:56:f9:70:46:8b:99:2d:7e:ee:7e:
0e:7b:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org