Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sB3_QaIFu9Pm1mLYM4rKl36s6so.roa
File: sB3_QaIFu9Pm1mLYM4rKl36s6so.roa (raw, json)
Hash identifier: YgW8NqS/0UsGQ3bs4QbY6U1dXYbNhIDxZ0I44IbuqL8=
Subject key identifier: B0:1D:FF:41:A2:05:BB:D3:E6:D6:62:D8:33:8A:CA:97:7E:AC:EA:CA
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E6628FB7DC9AB6FDB737F86C410D38265
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sB3_QaIFu9Pm1mLYM4rKl36s6so.roa
Signing time: Fri 22 Mar 2024 12:35:45 +0000
ROA not before: Fri 22 Mar 2024 12:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34164
IP address blocks: 2.16.49.0/24 maxlen: 24
2.18.25.0/24 maxlen: 24
2.20.48.0/24 maxlen: 24
2.21.236.0/24 maxlen: 24
2.21.237.0/24 maxlen: 24
80.67.81.0/24 maxlen: 24
84.53.176.0/24 maxlen: 24
84.53.186.0/24 maxlen: 24
88.221.54.0/23 maxlen: 23
88.221.56.0/24 maxlen: 24
88.221.91.0/24 maxlen: 24
88.221.108.0/24 maxlen: 24
88.221.146.0/23 maxlen: 23
88.221.199.0/24 maxlen: 24
88.221.212.0/24 maxlen: 24
88.221.219.0/24 maxlen: 24
92.122.120.0/23 maxlen: 23
92.122.152.0/24 maxlen: 24
92.122.191.0/24 maxlen: 24
92.122.204.0/23 maxlen: 23
95.100.38.0/24 maxlen: 24
95.100.89.0/24 maxlen: 24
95.100.90.0/24 maxlen: 24
95.100.91.0/24 maxlen: 24
95.100.92.0/24 maxlen: 24
95.101.12.0/24 maxlen: 24
95.101.37.0/24 maxlen: 24
95.101.52.0/23 maxlen: 23
95.101.112.0/24 maxlen: 24
95.101.116.0/24 maxlen: 24
95.101.121.0/24 maxlen: 24
95.101.138.0/23 maxlen: 23
193.108.152.0/24 maxlen: 24
195.245.126.0/24 maxlen: 24
2a02:26f0:a::/48 maxlen: 48
2a02:26f0:1d::/48 maxlen: 48
2a02:26f0:33::/48 maxlen: 48
2a02:26f0:36::/48 maxlen: 48
2a02:26f0:74::/48 maxlen: 48
2a02:26f0:77::/48 maxlen: 48
2a02:26f0:88::/48 maxlen: 48
2a02:26f0:96::/48 maxlen: 48
2a02:26f0:9c::/48 maxlen: 48
2a02:26f0:9d::/48 maxlen: 48
2a02:26f0:a5::/48 maxlen: 48
2a02:26f0:a6::/48 maxlen: 48
2a02:26f0:a7::/48 maxlen: 48
2a02:26f0:bb::/48 maxlen: 48
2a02:26f0:bc::/48 maxlen: 48
2a02:26f0:bd::/48 maxlen: 48
2a02:26f0:c0::/48 maxlen: 48
2a02:26f0:f9::/48 maxlen: 48
2a02:26f0:106::/48 maxlen: 48
2a02:26f0:107::/48 maxlen: 48
2a02:26f0:110::/48 maxlen: 48
2a02:26f0:124::/48 maxlen: 48
2a02:26f0:125::/48 maxlen: 48
2a02:26f0:126::/48 maxlen: 48
2a02:26f0:1600::/48 maxlen: 48
2a02:26f0:1a00::/48 maxlen: 48
2a02:26f0:1e00::/48 maxlen: 48
2a02:26f0:3600::/48 maxlen: 48
2a02:26f0:4500::/48 maxlen: 48
2a02:26f0:4a00::/48 maxlen: 48
2a02:26f0:4d00::/48 maxlen: 48
2a02:26f0:4e00::/48 maxlen: 48
2a02:26f0:5400::/48 maxlen: 48
2a02:26f0:5600::/48 maxlen: 48
2a02:26f0:6200::/48 maxlen: 48
2a02:26f0:6300::/48 maxlen: 48
2a02:26f0:7e00::/48 maxlen: 48
2a02:26f0:8200::/48 maxlen: 48
2a02:26f0:8600::/48 maxlen: 48
2a02:26f0:8a00::/48 maxlen: 48
2a02:26f0:8e00::/48 maxlen: 48
2a02:26f0:9600::/48 maxlen: 48
2a02:26f0:9a00::/48 maxlen: 48
2a02:26f0:9e00::/48 maxlen: 48
2a02:26f0:a200::/48 maxlen: 48
2a02:26f0:a800::/48 maxlen: 48
2a02:26f0:af00::/48 maxlen: 48
2a02:26f0:b000::/48 maxlen: 48
2a02:26f0:bb00::/48 maxlen: 48
2a02:26f0:bd00::/48 maxlen: 48
2a02:26f0:bf00::/48 maxlen: 48
2a02:26f0:c100::/48 maxlen: 48
2a02:26f0:c200::/48 maxlen: 48
2a02:26f0:c500::/48 maxlen: 48
2a02:26f0:cd00::/48 maxlen: 48
2a02:26f0:ce00::/48 maxlen: 48
2a02:26f0:cf00::/48 maxlen: 48
2a02:26f0:d500::/48 maxlen: 48
2a02:26f0:d600::/48 maxlen: 48
2a02:26f0:d700::/48 maxlen: 48
2a02:26f0:da00::/48 maxlen: 48
2a02:26f0:dc00::/48 maxlen: 48
2a02:26f0:e400::/48 maxlen: 48
2a02:26f0:ec00::/48 maxlen: 48
2a02:26f0:f400::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Mar 2024 10:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:28:fb:7d:c9:ab:6f:db:73:7f:86:c4:10:d3:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 22 12:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b01dff41a205bbd3e6d662d8338aca977eaceaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:7f:15:66:7b:29:6d:76:e0:89:96:9c:78:
63:83:11:a7:f9:f7:6d:ce:09:a6:62:76:0c:f9:ab:
89:59:11:da:5d:65:8a:09:d9:26:cc:fe:20:41:ff:
dc:b4:37:bc:c0:13:e9:91:14:b9:f8:fa:c3:94:d9:
73:94:b1:fd:fa:e5:89:4a:27:52:c5:23:eb:8c:10:
7e:46:ba:4f:e1:ab:4a:88:c4:f7:5c:84:2e:72:78:
66:63:51:94:a3:c9:9b:aa:f9:d8:2c:16:56:fb:47:
23:60:62:ed:74:8c:20:f6:3f:b2:c5:69:16:fc:e1:
b0:5c:57:4d:c6:3d:ca:ec:fa:c3:7d:cc:c7:2a:09:
ef:41:2a:ce:ef:64:ce:6a:b1:66:35:04:a7:d2:01:
87:b9:8a:d4:8c:f0:f2:07:23:4b:fd:2f:a5:71:10:
43:9e:49:56:1b:5f:71:16:93:f9:1b:76:e9:4b:39:
cd:aa:bd:8c:92:ef:3e:d6:77:97:46:c8:e4:09:69:
95:24:0f:af:ce:ea:58:9e:6d:fb:01:7b:88:03:79:
5b:e1:56:66:73:4e:15:98:4a:3e:6c:16:a7:87:d3:
58:e8:6d:9f:0d:10:7d:b6:2e:00:9a:a4:94:55:3d:
c5:3e:bb:71:93:11:02:84:a6:c2:30:98:fc:ce:ad:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:FF:41:A2:05:BB:D3:E6:D6:62:D8:33:8A:CA:97:7E:AC:EA:CA
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sB3_QaIFu9Pm1mLYM4rKl36s6so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.49.0/24
2.18.25.0/24
2.20.48.0/24
2.21.236.0/23
80.67.81.0/24
84.53.176.0/24
84.53.186.0/24
88.221.54.0-88.221.56.255
88.221.91.0/24
88.221.108.0/24
88.221.146.0/23
88.221.199.0/24
88.221.212.0/24
88.221.219.0/24
92.122.120.0/23
92.122.152.0/24
92.122.191.0/24
92.122.204.0/23
95.100.38.0/24
95.100.89.0-95.100.92.255
95.101.12.0/24
95.101.37.0/24
95.101.52.0/23
95.101.112.0/24
95.101.116.0/24
95.101.121.0/24
95.101.138.0/23
193.108.152.0/24
195.245.126.0/24
IPv6:
2a02:26f0:a::/48
2a02:26f0:1d::/48
2a02:26f0:33::/48
2a02:26f0:36::/48
2a02:26f0:74::/48
2a02:26f0:77::/48
2a02:26f0:88::/48
2a02:26f0:96::/48
2a02:26f0:9c::/47
2a02:26f0:a5::-2a02:26f0:a7:ffff:ffff:ffff:ffff:ffff
2a02:26f0:bb::-2a02:26f0:bd:ffff:ffff:ffff:ffff:ffff
2a02:26f0:c0::/48
2a02:26f0:f9::/48
2a02:26f0:106::/47
2a02:26f0:110::/48
2a02:26f0:124::-2a02:26f0:126:ffff:ffff:ffff:ffff:ffff
2a02:26f0:1600::/48
2a02:26f0:1a00::/48
2a02:26f0:1e00::/48
2a02:26f0:3600::/48
2a02:26f0:4500::/48
2a02:26f0:4a00::/48
2a02:26f0:4d00::/48
2a02:26f0:4e00::/48
2a02:26f0:5400::/48
2a02:26f0:5600::/48
2a02:26f0:6200::/48
2a02:26f0:6300::/48
2a02:26f0:7e00::/48
2a02:26f0:8200::/48
2a02:26f0:8600::/48
2a02:26f0:8a00::/48
2a02:26f0:8e00::/48
2a02:26f0:9600::/48
2a02:26f0:9a00::/48
2a02:26f0:9e00::/48
2a02:26f0:a200::/48
2a02:26f0:a800::/48
2a02:26f0:af00::/48
2a02:26f0:b000::/48
2a02:26f0:bb00::/48
2a02:26f0:bd00::/48
2a02:26f0:bf00::/48
2a02:26f0:c100::/48
2a02:26f0:c200::/48
2a02:26f0:c500::/48
2a02:26f0:cd00::/48
2a02:26f0:ce00::/48
2a02:26f0:cf00::/48
2a02:26f0:d500::/48
2a02:26f0:d600::/48
2a02:26f0:d700::/48
2a02:26f0:da00::/48
2a02:26f0:dc00::/48
2a02:26f0:e400::/48
2a02:26f0:ec00::/48
2a02:26f0:f400::/48
Signature Algorithm: sha256WithRSAEncryption
07:2d:5d:b9:d0:02:85:fd:a4:6f:4f:04:ec:f3:7e:63:1f:1f:
e3:38:83:75:67:41:a0:2c:7e:c6:04:41:a4:c5:da:31:9b:fb:
cd:4e:10:2c:37:17:00:20:8e:33:4f:9c:05:8c:a9:ed:34:9c:
f0:75:fd:28:7f:25:b0:87:88:32:4b:84:0d:f7:17:c7:a4:ff:
81:78:00:86:8f:da:da:eb:2c:18:e6:9f:0e:06:fc:b2:bb:6c:
b9:a1:5f:eb:fe:94:12:ab:57:85:2d:89:e3:48:7b:ef:be:08:
1b:f7:d6:ba:45:26:93:76:71:aa:4c:55:f0:df:c5:94:3e:2a:
d1:f6:5d:f2:6a:c6:2e:ea:b4:87:17:d0:ae:9a:eb:4e:8a:fc:
97:73:b5:60:d4:83:ad:b9:6d:0e:c2:bf:dd:f8:4a:94:e1:95:
ea:d7:64:15:2b:c1:2d:a5:37:e1:0c:77:32:55:da:2f:e8:7d:
91:40:de:3b:67:9a:f4:99:8c:2a:30:5f:83:51:d3:b2:c7:e0:
5e:77:29:d7:b0:54:be:aa:73:e1:31:f3:59:5f:5b:a8:8f:1e:
a1:a5:72:e2:6c:ec:33:70:ef:88:0a:48:40:3a:0b:01:9a:8e:
46:2e:ea:4f:66:47:ac:d3:66:9a:68:69:c0:80:a7:f3:b8:20:
d5:dc:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 14:31:42 2024 by rpki-client on console-ams.rpki-client.org