Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa
File: b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa (raw, json)
Hash identifier: M1bNoCXEnlqpwH7F1PDHiDBcvPrR9h7Siq6n7gYINvo=
Subject key identifier: 6F:A0:C9:27:71:67:8B:F5:37:E2:D8:06:2F:3B:2F:97:48:99:DD:76
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018BA92975D30ED1A83926448EDBEA633924
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa
Signing time: Tue 07 Nov 2023 09:42:28 +0000
ROA not before: Tue 07 Nov 2023 09:42:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.228.148.0/22 maxlen: 22
37.235.4.0/24 maxlen: 24
37.235.3.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.207.0/24 maxlen: 24
178.255.152.0/21 maxlen: 32
193.33.114.0/23 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
217.146.0.0/19 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.247.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.65.72.0/21 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
94.16.98.0/24 maxlen: 24
185.2.176.0/22 maxlen: 32
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
194.1.206.0/24 maxlen: 32
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
144.208.216.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0::/32 maxlen: 128
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a01:aea0:dd1::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a01:aea0::/40 maxlen: 40
2a01:aea0::/32 maxlen: 32
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:29:75:d3:0e:d1:a8:39:26:44:8e:db:ea:63:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Nov 7 09:42:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa0c92771678bf537e2d8062f3b2f974899dd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:d3:83:73:1c:2c:ce:b5:53:47:8f:73:40:
c9:bb:9f:6c:e2:cc:ac:37:0a:60:b6:b1:e9:33:1a:
dc:cd:20:db:7a:9b:35:2e:42:58:2e:8f:80:38:2a:
80:83:d9:a3:78:d0:94:d4:d4:b6:be:ca:21:e7:59:
0a:06:ef:8c:af:42:5b:0a:41:6b:31:19:4d:73:5e:
c0:47:23:f1:05:64:27:c0:d9:4a:95:dd:2a:11:8b:
20:9c:e6:e6:99:6d:fb:1f:22:99:25:49:ff:32:39:
60:72:93:2c:82:93:5a:74:fa:29:07:13:5c:dc:23:
a2:ff:1a:ec:d6:0b:7e:53:6b:54:81:e1:1e:44:f3:
af:fa:2f:9f:69:8a:ca:ab:fd:3c:db:f9:2b:0e:15:
1a:c3:82:ae:ab:0b:d9:7b:40:15:49:a3:f6:7d:ff:
bd:2d:58:0d:1d:cc:c6:dc:04:a3:18:32:7c:b6:5c:
56:ae:53:9d:c2:6d:78:b1:2d:f5:b7:ab:9f:5d:5d:
b2:0f:c0:1b:19:db:ee:fd:fd:62:aa:ee:c4:25:fb:
e0:8d:68:35:dd:75:52:b3:91:c6:bb:fc:3a:ab:c6:
05:d2:4b:5d:c6:82:78:31:84:63:f9:57:28:4f:46:
33:c1:77:43:c8:e0:0c:1a:88:d6:fe:6b:c6:5a:76:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:C9:27:71:67:8B:F5:37:E2:D8:06:2F:3B:2F:97:48:99:DD:76
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.252.224.0/19
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
d8:77:77:f0:0b:41:bb:d8:50:07:2c:73:ff:cd:9a:11:51:fd:
8e:9a:81:58:91:33:46:3a:09:89:a7:44:ab:9f:0b:79:86:ac:
f1:b5:91:d5:22:89:b8:55:75:5f:67:84:08:86:ab:16:ad:9b:
11:ff:09:f0:85:6a:21:4c:e7:a9:f6:6d:f8:be:0f:7d:68:89:
de:4a:71:16:04:63:75:9f:7a:3b:94:79:a2:8a:4b:39:b5:59:
20:78:4c:f9:24:d3:c0:dc:65:b7:88:3f:c6:5a:88:61:78:e1:
f6:50:44:09:38:7b:ce:be:17:50:1f:4d:ca:6a:d9:49:6a:b4:
21:fe:c3:eb:77:e9:33:1d:df:39:d0:1c:39:43:26:46:70:3d:
01:72:25:6b:80:dd:99:9f:f3:e9:d3:d6:d9:4a:0b:03:31:66:
0f:84:f7:e5:49:14:9a:6d:d6:56:b2:0e:07:59:22:c7:f6:87:
52:43:e4:8e:31:ec:99:d8:25:61:72:52:b8:5b:de:92:69:af:
f6:9d:af:ac:da:df:6c:77:a6:fd:cf:5a:aa:12:32:56:9f:80:
b1:f4:41:15:81:ec:22:3c:68:9d:29:33:14:b2:91:7c:e5:ff:
10:43:d1:fa:9b:82:42:89:ba:cd:b1:5a:82:3f:34:aa:50:b5:
f0:89:ed:fc
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYupKXXTDtGoOSZEjtvqYzkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjMxMTA3MDk0MjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmEwYzkyNzcxNjc4YmY1MzdlMmQ4MDYyZjNiMmY5NzQ4OTlkZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBLTg3McLM61U0ePc0DJu59s4sys
NwpgtrHpMxrczSDbeps1LkJYLo+AOCqAg9mjeNCU1NS2vsoh51kKBu+Mr0JbCkFr
MRlNc17ARyPxBWQnwNlKld0qEYsgnObmmW37HyKZJUn/MjlgcpMsgpNadPopBxNc
3COi/xrs1gt+U2tUgeEeRPOv+i+faYrKq/082/krDhUaw4KuqwvZe0AVSaP2ff+9
LVgNHczG3ASjGDJ8tlxWrlOdwm14sS31t6ufXV2yD8AbGdvu/f1iqu7EJfvgjWg1
3XVSs5HGu/w6q8YF0ktdxoJ4MYRj+VcoT0YzwXdDyOAMGojW/mvGWnYszwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFG+gySdxZ4v1N+LYBi87L5dImd12MB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvYjZESkozRm5pX1UzNHRnR0x6c3ZsMGlaM1hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBnQQCAAEwgZYwDAME
ACXrAwMEASXrBAMEBSX84DAMAwQALYQ9AwQGLYQAAwQAXhBiMAwDBABeEH0DBABe
EH4DBAaQ0MADBAGwezYDBAOy/5gDBAK5ArADBAG5MugDBAC5MusDBAC5Uc4DBAC5
UdEDBAK5dGADBAK55JQDBAO8QUgDBAa8rMADBAHBIXIDBADCAc4DBAXV46ADBAXZ
kgAwFAQCAAIwDgMFACoAEcADBQAqAa6gMA0GCSqGSIb3DQEBCwUAA4IBAQDYd3fw
C0G72FAHLHP/zZoRUf2OmoFYkTNGOgmJp0Srnwt5hqzxtZHVIom4VXVfZ4QIhqsW
rZsR/wnwhWohTOep9m34vg99aIneSnEWBGN1n3o7lHmiiks5tVkgeEz5JNPA3GW3
iD/GWohheOH2UEQJOHvOvhdQH03KatlJarQh/sPrd+kzHd850Bw5QyZGcD0BciVr
gN2Zn/Pp09bZSgsDMWYPhPflSRSabdZWsg4HWSLH9odSQ+SOMeyZ2CVhclK4W96S
aa/2na+s2t9sd6b9z1qqEjJWn4Cx9EEVgewiPGidKTMUspF85f8QQ9H6m4JCibrN
sVqCPzSqULXwie38
-----END CERTIFICATE-----
Generated at Mon Nov 20 08:46:23 2023 by rpki-client on console-fra.rpki-client.org