Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/F58Ov_bVHQ5rF6_Ek1DWaVFg8KA.roa
File: F58Ov_bVHQ5rF6_Ek1DWaVFg8KA.roa (raw, json)
Hash identifier: Tr1cZvJDBgN1d2ti37StUNyOXAbI+ugDk16hL/xcn3M=
Subject key identifier: 17:9F:0E:BF:F6:D5:1D:0E:6B:17:AF:C4:93:50:D6:69:51:60:F0:A0
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 018CC6B926172CB4CA132141CA650BAD2E55
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/F58Ov_bVHQ5rF6_Ek1DWaVFg8KA.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.194.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.196.0/23 maxlen: 23
178.254.196.0/24 maxlen: 24
178.254.195.0/24 maxlen: 24
178.254.194.0/23 maxlen: 23
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.215.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 08:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:17:2c:b4:ca:13:21:41:ca:65:0b:ad:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179f0ebff6d51d0e6b17afc49350d6695160f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:5e:27:e4:48:00:66:73:fa:38:ee:09:79:
32:01:67:fe:ac:d8:ca:94:96:bb:76:cb:f0:92:05:
c1:02:99:f2:b0:a6:18:ff:d3:4b:2a:29:d4:ed:e2:
11:ea:24:fc:7b:3a:75:e8:4c:53:80:8f:2b:81:44:
45:2f:3a:95:1b:84:39:05:a5:65:b2:bd:00:c1:15:
49:c2:00:3b:fe:18:d4:8e:a3:78:03:3c:4e:0f:02:
48:88:3b:3a:c0:9a:f3:6b:40:c6:79:ec:65:2f:5e:
22:df:b9:6e:8b:53:6b:a5:02:c6:9e:9e:0f:05:f2:
83:dd:aa:50:5b:44:18:c9:2e:ab:c6:9a:87:0e:53:
f0:0d:39:65:df:79:f6:a0:22:cf:24:9e:d0:c7:ff:
7b:28:c2:06:47:cc:be:16:04:63:bb:03:db:fa:43:
de:33:dd:44:7a:dc:de:59:a1:39:ac:a6:ec:2b:78:
58:0a:b9:1a:50:ae:d8:30:2f:4d:cd:72:02:97:e7:
a4:0d:e3:53:a8:80:e2:5a:96:a5:42:2d:09:11:76:
49:e4:35:9d:9b:04:5a:79:29:77:88:c4:5a:34:d4:
ca:57:46:31:46:98:01:30:cd:f9:24:b3:25:75:f7:
c4:9a:3f:9f:3e:b7:bc:95:4f:47:08:bd:64:31:f2:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:0E:BF:F6:D5:1D:0E:6B:17:AF:C4:93:50:D6:69:51:60:F0:A0
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/F58Ov_bVHQ5rF6_Ek1DWaVFg8KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/18
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
73:81:bb:a8:c1:39:84:37:a3:b1:13:4e:a7:75:f2:3f:32:de:
c0:a4:06:16:e5:a8:0b:54:81:6c:3f:c9:80:3b:58:36:25:7d:
f1:54:d4:6c:45:80:63:e4:34:64:27:50:62:e0:78:7c:03:67:
b5:b8:e5:e3:d6:b6:1a:1b:b5:6e:4b:92:f7:6a:6e:7a:99:2a:
bf:25:c7:14:3a:d8:08:c6:23:8d:56:ae:ab:ed:c8:60:47:3c:
96:ec:fa:32:08:93:96:fa:21:a3:1c:f5:b6:b2:ef:3b:0e:8e:
3a:b9:a7:a8:c7:e5:ec:78:29:a9:74:de:db:5b:f7:d7:42:f4:
93:29:55:7f:b5:4c:3d:8c:50:33:93:ff:6c:05:59:57:ef:e5:
0a:39:42:f2:98:68:cc:50:ca:c9:cf:ca:4d:8d:34:05:91:84:
af:49:0d:a3:e4:a0:71:3c:75:b5:62:ef:92:37:df:7b:8f:bc:
fb:93:3c:77:fc:9f:93:86:a3:e1:e6:93:e7:a0:a7:8f:d7:9d:
bd:cb:13:de:40:1b:d5:d7:fc:4b:5f:99:9b:b7:61:08:0b:15:
94:c8:aa:a3:36:69:d8:6b:4d:f6:61:2b:fb:82:39:0b:d0:11:
68:ae:46:89:82:52:5f:ec:f0:95:c0:b6:11:08:7c:ac:2c:ec:
a5:a9:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:53 2025 by rpki-client