Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8Zu3BnHRHaOwChPLxO-Tw8PSq8s.roa
File: 8Zu3BnHRHaOwChPLxO-Tw8PSq8s.roa (raw, json)
Hash identifier: RfuZWBvOhta28L6zmodilHyW+/1LI/JTfOBWRstAjhk=
Subject key identifier: F1:9B:B7:06:71:D1:1D:A3:B0:0A:13:CB:C4:EF:93:C3:C3:D2:AB:CB
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01856F020871D505CBF099DA167E84F26192
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8Zu3BnHRHaOwChPLxO-Tw8PSq8s.roa
Signing time: Sun 01 Jan 2023 20:24:42 +0000
ROA not before: Sun 01 Jan 2023 20:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48503
IP address blocks: 185.234.60.0/22 maxlen: 22
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
85.193.120.0/21 maxlen: 21
185.234.24.0/22 maxlen: 22
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.244.0/24 maxlen: 24
81.91.180.0/22 maxlen: 22
185.212.247.0/24 maxlen: 24
81.91.184.0/22 maxlen: 22
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
93.157.176.0/23 maxlen: 23
81.211.150.0/24 maxlen: 24
93.157.178.0/23 maxlen: 23
93.157.181.0/24 maxlen: 24
93.157.180.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
79.137.170.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
81.211.202.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
79.137.178.0/23 maxlen: 23
81.211.207.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.69.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.77.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
193.41.130.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
185.250.30.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.0.0/22 maxlen: 22
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.51.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 10:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:08:71:d5:05:cb:f0:99:da:16:7e:84:f2:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jan 1 20:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f19bb70671d11da3b00a13cbc4ef93c3c3d2abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:44:28:ae:40:59:40:1f:23:6d:08:42:eb:
d5:bb:07:20:3d:e2:b8:7e:72:03:d8:ec:b0:14:cf:
9d:11:11:03:b2:7a:b3:dc:70:c3:07:44:fe:77:24:
8f:63:8f:2f:c0:fe:23:92:d1:fe:29:56:85:90:b7:
6b:bf:09:8a:6b:b6:75:f5:b9:65:b8:dd:29:d1:bb:
d5:5b:18:4f:54:d6:d6:da:79:66:18:11:bc:55:d4:
3f:85:3f:06:d9:3e:eb:ef:30:2c:34:87:18:e4:43:
23:9f:bc:bd:f0:a9:79:0a:cc:6f:2c:bb:ce:a3:4e:
20:42:cc:7b:60:8d:7b:f7:a3:90:a1:ee:a4:43:fd:
21:ec:8f:6c:30:8a:f9:6e:3b:93:46:ab:5b:ff:0c:
a6:32:db:72:b5:79:ab:d6:c4:59:fa:f8:6d:19:df:
d9:aa:64:34:c4:49:e5:a3:6d:a4:fc:8a:e6:c6:01:
26:2c:c3:6d:5f:14:00:a8:50:a8:19:c0:d7:12:36:
43:48:2d:76:30:28:21:33:1e:44:07:de:9b:d3:35:
b3:42:fd:ca:63:b3:51:20:b7:6e:0f:2e:bb:59:fa:
d8:85:28:6a:55:c7:61:01:ba:c9:f1:ac:2d:65:4a:
c6:93:3a:b3:20:b6:41:fd:d8:14:f3:67:24:66:7e:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:B7:06:71:D1:1D:A3:B0:0A:13:CB:C4:EF:93:C3:C3:D2:AB:CB
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8Zu3BnHRHaOwChPLxO-Tw8PSq8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.187.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.207.0/24
81.211.250.0/23
85.193.96.0/19
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
Signature Algorithm: sha256WithRSAEncryption
87:46:e8:d5:f8:cf:22:06:3e:bd:c4:72:df:44:02:fa:94:76:
f1:07:66:76:60:96:43:68:b0:23:6a:3b:c2:f1:6e:a9:fe:9a:
4f:55:d6:3e:8e:18:f2:3a:15:56:67:e5:b6:8d:4f:05:79:fb:
04:1a:87:f2:87:98:48:f3:f0:21:4c:82:0b:71:2a:72:4e:79:
e3:b2:56:52:4d:67:3a:ce:ef:1a:a3:f0:04:5d:ea:d5:f1:f8:
f5:c1:3b:e2:ce:8f:8c:b9:0b:20:e1:75:39:59:c9:27:ed:86:
51:67:49:a8:56:ce:f5:d2:96:f6:09:90:61:88:b1:53:01:1f:
70:f4:87:d6:97:17:b4:2e:d7:93:2b:f8:46:58:90:64:e9:25:
59:2c:69:f5:29:cc:93:48:bf:28:18:e4:78:f2:a9:ad:50:a8:
5e:b2:4f:e3:b4:e7:0f:b0:bd:f6:76:e4:f5:af:09:67:2e:04:
4c:c4:12:82:18:94:f0:63:71:6d:f1:38:3b:00:a2:e1:97:3c:
31:68:15:71:62:f2:32:66:20:2f:fc:99:5c:58:94:9f:87:68:
f8:5f:f2:05:08:bf:7a:4a:66:e1:8c:ba:f8:fa:f5:81:0d:75:
45:2c:50:96:ec:19:a6:a0:7e:db:65:c5:46:67:67:1a:e7:f6:
ca:2b:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:08 2024 by rpki-client on console-ams.rpki-client.org