Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/I8NUJkib4fy5aR-JaBg6WK0L6rQ.roa
File: I8NUJkib4fy5aR-JaBg6WK0L6rQ.roa (raw, json)
Hash identifier: UFOdiKF2Xp7aoyMwdcC3xqshZwK2eivOVviQ4waY6FE=
Subject key identifier: 23:C3:54:26:48:9B:E1:FC:B9:69:1F:89:68:18:3A:58:AD:0B:EA:B4
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7FF76D04EB9A5B2A970B77A774B8CED7
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/I8NUJkib4fy5aR-JaBg6WK0L6rQ.roa
Signing time: Wed 27 Mar 2024 12:51:45 +0000
ROA not before: Wed 27 Mar 2024 12:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 2.20.224.0/24 maxlen: 24
2.20.225.0/24 maxlen: 24
2.20.226.0/24 maxlen: 24
2.20.227.0/24 maxlen: 24
2.20.228.0/24 maxlen: 24
2.20.229.0/24 maxlen: 24
2.20.230.0/24 maxlen: 24
2.20.231.0/24 maxlen: 24
2.20.232.0/24 maxlen: 24
2.20.233.0/24 maxlen: 24
2.20.234.0/24 maxlen: 24
2.20.235.0/24 maxlen: 24
2.20.236.0/24 maxlen: 24
2.20.237.0/24 maxlen: 24
2.20.238.0/24 maxlen: 24
2.20.239.0/24 maxlen: 24
84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.122.0.0/21 maxlen: 21
92.122.8.0/22 maxlen: 22
92.122.12.0/22 maxlen: 22
92.122.16.0/22 maxlen: 22
92.122.20.0/22 maxlen: 22
92.122.24.0/22 maxlen: 22
92.122.32.0/21 maxlen: 21
92.122.44.0/22 maxlen: 22
92.122.60.0/22 maxlen: 22
92.122.64.0/22 maxlen: 22
92.122.72.0/22 maxlen: 22
92.122.76.0/22 maxlen: 22
92.122.80.0/22 maxlen: 22
92.122.88.0/22 maxlen: 22
92.122.96.0/22 maxlen: 22
92.122.104.0/22 maxlen: 22
92.122.108.0/22 maxlen: 22
92.122.144.0/22 maxlen: 22
92.122.148.0/22 maxlen: 22
92.122.160.0/22 maxlen: 22
92.122.196.0/22 maxlen: 22
92.122.246.0/23 maxlen: 23
92.122.248.0/24 maxlen: 24
92.122.249.0/24 maxlen: 24
92.122.250.0/24 maxlen: 24
92.122.251.0/24 maxlen: 24
92.123.4.0/22 maxlen: 22
92.123.16.0/22 maxlen: 22
92.123.20.0/22 maxlen: 22
92.123.28.0/22 maxlen: 22
92.123.32.0/22 maxlen: 22
92.123.36.0/22 maxlen: 22
92.123.44.0/22 maxlen: 22
92.123.50.0/23 maxlen: 23
92.123.52.0/22 maxlen: 22
92.123.56.0/22 maxlen: 22
92.123.80.0/22 maxlen: 22
92.123.84.0/22 maxlen: 22
92.123.88.0/22 maxlen: 22
92.123.112.0/22 maxlen: 22
92.123.148.0/22 maxlen: 22
92.123.156.0/22 maxlen: 22
92.123.164.0/22 maxlen: 22
92.123.172.0/22 maxlen: 22
92.123.176.0/22 maxlen: 22
92.123.184.0/22 maxlen: 22
92.123.196.0/22 maxlen: 22
92.123.200.0/22 maxlen: 22
92.123.204.0/22 maxlen: 22
92.123.216.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
92.123.252.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
95.101.80.0/22 maxlen: 22
95.101.84.0/22 maxlen: 22
95.101.88.0/22 maxlen: 22
95.101.92.0/22 maxlen: 22
95.101.96.0/22 maxlen: 22
95.101.100.0/22 maxlen: 22
95.101.104.0/22 maxlen: 22
95.101.124.0/22 maxlen: 22
95.101.144.0/22 maxlen: 22
95.101.148.0/22 maxlen: 22
95.101.152.0/22 maxlen: 22
95.101.160.0/22 maxlen: 22
95.101.164.0/22 maxlen: 22
95.101.172.0/22 maxlen: 22
95.101.176.0/22 maxlen: 22
95.101.184.0/22 maxlen: 22
95.101.188.0/22 maxlen: 22
95.101.192.0/22 maxlen: 22
95.101.196.0/22 maxlen: 22
95.101.200.0/22 maxlen: 22
95.101.208.0/20 maxlen: 20
95.101.224.0/22 maxlen: 22
95.101.240.0/20 maxlen: 20
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Mar 2024 12:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:f7:6d:04:eb:9a:5b:2a:97:0b:77:a7:74:b8:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 27 12:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23c35426489be1fcb9691f8968183a58ad0beab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:f2:e4:4b:14:d8:2d:5b:e5:65:f7:68:8f:
88:1d:e9:b3:6c:24:30:ae:6a:8d:dd:c6:b4:b8:f1:
69:a6:27:9c:de:a5:19:61:e5:51:4a:01:19:a2:5d:
8d:4a:70:1e:d2:c7:c6:89:94:54:dd:dd:bf:e2:ab:
c5:ad:18:17:60:55:10:39:4f:93:37:f1:91:9a:68:
fe:65:f3:19:0f:6f:39:da:2b:41:d9:ee:89:18:2c:
73:a1:37:52:57:62:67:0a:11:0a:30:50:3c:06:ee:
87:32:46:eb:37:93:8e:8e:c5:d7:1c:be:ec:b2:11:
24:5e:61:9c:25:c5:21:b6:3b:ba:14:83:18:ba:e1:
13:c0:93:2c:fd:0d:6a:df:fb:f1:15:e1:c3:c8:75:
06:e3:0d:04:d6:8f:1a:e7:93:4c:47:d4:c1:37:b8:
5c:b8:5c:78:16:80:49:04:8e:69:1a:34:9c:01:29:
2a:21:61:16:07:d2:3b:20:4c:d2:10:ab:1a:d9:0e:
f9:db:cb:29:5a:82:55:ce:b8:21:d7:c8:bc:6f:6e:
1a:32:63:38:bd:4c:ff:8d:7c:80:c3:b6:c1:67:bd:
40:98:ee:57:ee:22:41:ae:40:fa:8f:c8:3a:05:56:
1b:3d:25:5d:ec:55:d3:e5:29:3e:08:39:1a:7c:e4:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:54:26:48:9B:E1:FC:B9:69:1F:89:68:18:3A:58:AD:0B:EA:B4
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/I8NUJkib4fy5aR-JaBg6WK0L6rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.20.224.0/20
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.122.0.0-92.122.27.255
92.122.32.0/21
92.122.44.0/22
92.122.60.0-92.122.67.255
92.122.72.0-92.122.83.255
92.122.88.0/22
92.122.96.0/22
92.122.104.0/21
92.122.144.0/21
92.122.160.0/22
92.122.196.0/22
92.122.246.0-92.122.251.255
92.123.4.0/22
92.123.16.0/21
92.123.28.0-92.123.39.255
92.123.44.0/22
92.123.50.0-92.123.59.255
92.123.80.0-92.123.91.255
92.123.112.0/22
92.123.148.0/22
92.123.156.0/22
92.123.164.0/22
92.123.172.0-92.123.179.255
92.123.184.0/22
92.123.196.0-92.123.207.255
92.123.216.0/22
92.123.240.0/22
92.123.252.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
95.101.80.0-95.101.107.255
95.101.124.0/22
95.101.144.0-95.101.155.255
95.101.160.0/21
95.101.172.0-95.101.179.255
95.101.184.0-95.101.203.255
95.101.208.0-95.101.227.255
95.101.240.0/20
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:76:2d:bd:a3:ff:69:6b:8d:db:be:52:6a:f7:3c:d2:b6:be:
52:7d:14:19:c3:78:40:c1:51:f5:65:9c:b9:91:da:d5:51:43:
b9:77:17:c6:c7:40:83:a1:7e:24:d1:2e:77:06:7f:4e:15:68:
e2:71:09:18:ef:72:6d:4e:2e:32:df:67:cf:a3:77:39:d3:e0:
76:08:23:42:de:e6:7e:d2:9d:dc:0b:b3:b2:26:ea:79:43:21:
50:15:54:59:7d:48:ba:80:7d:ee:02:13:25:6d:58:81:65:86:
e1:1b:7a:a0:55:a7:da:47:dc:b8:a6:33:75:14:1d:a3:9f:06:
dd:16:cf:ea:2e:7e:eb:fe:84:a5:e9:c9:73:ec:0a:2f:d2:1a:
39:6c:80:6c:18:a4:e5:82:d9:73:45:24:24:cf:fd:7e:5f:74:
27:ca:c9:92:97:81:59:6a:92:41:ea:b3:98:98:d8:75:0d:0b:
cf:65:e5:b9:b5:43:43:be:bb:a7:56:c1:8b:56:84:c5:56:48:
43:8a:66:63:be:31:33:43:e0:64:14:08:34:ff:68:c0:6f:cb:
f3:21:82:6d:f3:65:75:74:26:cf:34:ea:fb:84:62:21:4a:c6:
66:d2:f5:d4:46:3f:f6:89:34:e7:94:a1:2b:dd:e2:59:5c:39:
e1:b8:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:32 2024 by rpki-client on console-fra.rpki-client.org