Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8SA1W3ECzgReVC_oR92rCzL7t7c.roa
File: 8SA1W3ECzgReVC_oR92rCzL7t7c.roa (raw, json)
Hash identifier: McjFGXOolSaJZeuSz3EPslWtZED7GRN0TYh5LJSg7TY=
Subject key identifier: F1:20:35:5B:71:02:CE:04:5E:54:2F:E8:47:DD:AB:0B:32:FB:B7:B7
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 0185967DD43D3D08148FCAA0CAA15247AD82
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8SA1W3ECzgReVC_oR92rCzL7t7c.roa
Signing time: Mon 09 Jan 2023 12:25:06 +0000
ROA not before: Mon 09 Jan 2023 12:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.226.0/23 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
145.236.230.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
145.236.0.0/16 maxlen: 16
217.20.128.0/20 maxlen: 20
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
145.236.90.0/24 maxlen: 24
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c48::/32 maxlen: 32
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 12:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:7d:d4:3d:3d:08:14:8f:ca:a0:ca:a1:52:47:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 9 12:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f120355b7102ce045e542fe847ddab0b32fbb7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:11:27:90:14:fc:cc:31:1e:ad:40:fa:51:
b5:f3:02:2e:61:f7:4b:71:b2:b8:f1:f5:ff:16:3f:
77:b1:98:30:5e:99:eb:7a:0c:69:85:3e:90:ad:bd:
10:74:84:a8:31:79:76:65:da:e3:b0:18:38:13:c4:
c0:ed:fb:d6:c4:1c:ec:8c:fa:42:27:31:8e:cd:60:
a2:fa:df:1a:5e:56:8e:d3:76:54:1d:4f:5d:a0:75:
5d:97:df:47:5a:fa:29:27:37:10:eb:66:d4:80:a1:
b4:cc:e8:aa:28:f2:c5:27:66:91:3b:01:1e:87:04:
ca:15:35:d8:04:80:02:f7:db:81:34:10:c8:5d:11:
f4:3a:20:dc:5c:27:56:ef:84:bc:29:99:1c:0e:14:
b8:77:47:0b:ca:d8:b9:1f:50:71:b1:3c:56:b8:65:
8c:3c:54:97:14:e1:56:f3:58:ee:c8:f8:8d:02:2c:
36:7c:41:8c:44:99:23:30:08:2e:e5:03:18:2f:4a:
41:e5:be:0f:61:e0:fa:93:38:0e:4e:62:1a:a3:e9:
1c:83:93:84:7a:be:7b:72:31:e7:d7:c6:e3:ee:8f:
9a:12:32:c1:de:bb:38:ba:67:eb:28:30:1b:a4:83:
9e:b1:f6:30:2d:09:c7:51:14:69:27:cb:bc:6f:4e:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:35:5B:71:02:CE:04:5E:54:2F:E8:47:DD:AB:0B:32:FB:B7:B7
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8SA1W3ECzgReVC_oR92rCzL7t7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.164.0/24
80.249.167.0-80.249.168.255
80.249.170.0-80.249.174.255
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
145.236.0.0/16
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
84:2c:78:84:ad:55:29:3a:19:fd:b2:46:23:8c:78:98:80:16:
04:6d:be:b8:38:fd:73:86:63:22:62:b6:78:bc:f5:b8:a1:82:
e4:b3:23:a0:af:73:29:69:58:37:b0:14:e1:18:33:ef:19:e1:
d7:bb:1d:4e:8d:01:9a:90:29:74:8a:3b:bb:7f:2e:e8:df:34:
6a:58:d5:bf:37:d1:3d:79:04:0b:5b:64:4d:a7:41:77:0e:64:
e3:a0:54:51:59:6f:ae:04:62:0c:b0:6f:95:87:bd:56:55:ae:
1a:fb:11:2e:e1:12:5b:96:06:3f:26:2b:0e:c4:35:f5:09:ee:
5b:a7:ee:ca:aa:41:18:79:3e:3b:a6:d1:b4:c5:bf:7f:01:f4:
4a:4e:32:d4:46:4b:aa:05:5a:fa:ff:84:b1:e5:21:1a:75:f7:
b6:f2:7c:81:e5:30:2e:f1:77:b5:f6:48:40:dd:9f:f3:23:ad:
ed:e4:29:d9:a1:52:20:63:b6:f1:cf:de:4c:83:e2:2a:08:35:
55:4b:96:6b:fe:14:be:fd:09:ae:11:77:ba:bd:3d:2a:7e:99:
08:70:47:9d:9f:0d:58:cb:41:78:0d:40:74:47:28:c1:05:95:
18:55:65:e9:79:4b:ce:3e:1f:06:83:5e:e3:e1:b9:65:34:8d:
aa:49:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org