Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bYwO79UFB24T3A-p3JA3j-bsBng.roa
File: bYwO79UFB24T3A-p3JA3j-bsBng.roa (raw, json)
Hash identifier: MX+13Mk0nbvuFqMO6VcUnC3cTJ7trBAkIilQeV338dg=
Subject key identifier: 6D:8C:0E:EF:D5:05:07:6E:13:DC:0F:A9:DC:90:37:8F:E6:EC:06:78
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CC348F72175164280278A9C52740FF347
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bYwO79UFB24T3A-p3JA3j-bsBng.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 185.228.148.0/22 maxlen: 22
37.235.4.0/24 maxlen: 24
37.235.3.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.204.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.207.0/24 maxlen: 24
178.255.152.0/21 maxlen: 32
193.33.114.0/23 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
217.146.0.0/19 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.247.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.65.72.0/21 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
94.16.98.0/24 maxlen: 24
185.2.176.0/22 maxlen: 32
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
194.1.206.0/24 maxlen: 32
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
144.208.216.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.238.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
2a00:11c0:88::/48 maxlen: 48
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0::/32 maxlen: 128
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a01:aea0:dd1::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a01:aea0::/40 maxlen: 40
2a01:aea0::/32 maxlen: 32
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f7:21:75:16:42:80:27:8a:9c:52:74:0f:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d8c0eefd505076e13dc0fa9dc90378fe6ec0678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:68:a1:9b:0b:36:54:af:96:34:90:f1:0c:
0f:be:97:ed:e9:99:8c:e7:e8:9f:df:d7:2e:dc:e9:
ef:44:d5:1c:bd:c6:35:50:ea:3c:1a:f1:23:95:3d:
8f:2a:aa:2e:95:e4:77:72:87:3f:5c:6e:5b:61:52:
c8:fd:8d:d4:f7:03:ed:f1:e7:d5:ea:67:55:d7:6b:
2f:a5:31:48:db:63:f0:58:55:9c:98:b3:4b:35:48:
f5:3e:32:e5:39:43:a6:fb:9f:2e:8c:6b:6d:3b:2d:
71:ec:7d:7b:63:05:fc:03:93:88:9e:0a:e0:99:42:
ae:34:93:c9:91:15:2b:b1:44:a8:0b:8e:4f:b5:26:
a3:d1:9d:d6:1c:66:ed:18:e8:e8:c8:2f:bd:cc:d1:
99:86:14:59:1f:29:9e:41:4a:37:0d:98:a0:2f:b8:
f3:70:4d:44:b7:21:3a:9d:03:f4:25:16:70:ae:44:
05:da:29:ae:47:15:31:5d:a1:b4:9c:68:83:23:24:
cc:10:73:ba:3f:e8:c0:86:71:14:14:d6:6b:4d:35:
7d:d1:66:31:63:df:e9:79:cf:1d:2d:bc:c5:a7:7f:
ac:56:d4:c8:27:3e:38:af:5e:70:14:2a:6c:d1:62:
02:2d:78:0d:1b:a6:e0:e9:cf:d5:9e:a8:22:b0:06:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:0E:EF:D5:05:07:6E:13:DC:0F:A9:DC:90:37:8F:E6:EC:06:78
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bYwO79UFB24T3A-p3JA3j-bsBng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.252.224.0/19
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:ef:6c:9e:6d:f7:e1:96:88:7f:bb:67:8f:81:63:85:5e:96:
83:3d:42:c8:08:00:4e:40:bf:ea:21:de:14:15:c3:7d:40:58:
d6:05:6a:5a:eb:14:26:00:fc:62:a0:a0:08:a6:20:cc:97:04:
51:e0:4c:4e:c6:f2:48:89:a2:b6:52:b2:d5:91:93:84:75:fc:
7e:01:28:07:9c:a3:4d:61:06:6c:72:01:4f:4d:01:9e:9b:a8:
3c:09:2d:f2:ee:7e:18:fc:60:e5:79:91:24:62:0d:f5:19:26:
c2:94:01:ee:6e:9a:79:1c:77:06:83:23:96:ef:81:92:89:47:
9d:7d:9f:46:53:55:32:b5:37:4d:3d:34:60:d3:6b:8d:b0:c2:
f4:82:d8:34:be:e5:38:4b:ff:f9:91:04:9e:26:1d:f1:19:a6:
28:87:5b:4d:e2:57:d1:24:a1:47:4f:b8:41:62:51:a4:6f:64:
c0:14:5e:66:3b:7c:fe:19:2a:05:1c:7c:78:3a:7f:6e:f5:50:
3f:1f:06:63:c4:27:da:84:8c:06:40:9c:86:f5:8f:81:37:34:
59:56:34:8a:54:b4:d2:62:c2:05:f9:9b:d2:0c:b0:6d:08:d3:
0d:8b:0f:b4:a9:c8:e4:a4:e6:d2:07:b6:3e:af:84:e9:b5:4b:
6f:af:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org