Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/P4pllzpR2JKVv2YlSoOyRFvjJEo.roa
File: P4pllzpR2JKVv2YlSoOyRFvjJEo.roa (raw, json)
Hash identifier: nEouMr5yL9wQdtTiNdeLcfni/DTNffb42ncTqlNbhF4=
Subject key identifier: 3F:8A:65:97:3A:51:D8:92:95:BF:66:25:4A:83:B2:44:5B:E3:24:4A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018A602DBC6340E368909D0F84BA00BCA37E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/P4pllzpR2JKVv2YlSoOyRFvjJEo.roa
Signing time: Mon 04 Sep 2023 12:32:04 +0000
ROA not before: Mon 04 Sep 2023 12:32:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.226.0/23 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
145.236.230.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
145.236.0.0/16 maxlen: 16
217.20.128.0/20 maxlen: 20
80.249.160.0/20 maxlen: 24
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
145.236.90.0/24 maxlen: 24
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c48::/32 maxlen: 32
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 06:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:2d:bc:63:40:e3:68:90:9d:0f:84:ba:00:bc:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Sep 4 12:32:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8a65973a51d89295bf66254a83b2445be3244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:18:ac:2e:ef:59:ed:b0:ef:04:ba:46:10:
64:60:b1:db:17:20:a3:4b:49:45:91:6c:f5:73:db:
a9:a5:81:92:87:a5:e4:23:0d:4b:e5:70:d0:d2:0e:
d0:9a:d9:52:37:4e:4a:9e:da:c0:4f:6c:e7:00:28:
1b:bc:b1:36:77:d1:f4:62:ed:1b:9a:ec:f3:33:01:
bc:ae:df:80:5a:b6:d3:30:28:7a:7f:53:89:ff:39:
04:ec:cc:15:ed:78:08:a1:f9:32:fa:1f:a8:3e:33:
05:ed:00:94:3b:da:7e:45:8e:95:9a:a2:9b:ce:b7:
60:82:e6:ca:7f:aa:21:be:e4:34:de:7d:3d:c4:62:
c6:25:51:0f:5c:f4:ed:49:92:1a:fe:e3:70:3d:71:
5e:29:94:93:5a:ca:ae:c7:2d:a2:21:7b:ea:8a:93:
28:25:65:e9:54:6f:22:a6:c1:e7:b4:e5:60:32:fe:
2d:7d:fa:6e:dd:f1:34:b5:32:c2:fd:a2:a9:0c:f3:
f6:35:c0:43:cf:53:74:9f:fd:e5:43:da:b3:ba:db:
e4:ae:98:af:5a:49:9b:c1:8d:bf:d5:ab:93:9c:b5:
32:9b:65:f3:8b:95:e8:83:4e:4f:c2:dd:a1:c8:c0:
a7:54:c9:35:6b:84:39:8b:72:7a:e8:a3:6a:bc:49:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:65:97:3A:51:D8:92:95:BF:66:25:4A:83:B2:44:5B:E3:24:4A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/P4pllzpR2JKVv2YlSoOyRFvjJEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.160.0/20
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
145.236.0.0/16
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
73:a9:41:5d:37:33:e2:69:3c:1d:a6:2a:cc:3b:2e:55:53:b7:
d5:81:77:eb:86:b9:0b:bb:d5:fe:11:7f:2d:43:6d:75:e1:92:
d3:56:cb:ed:03:20:5d:cf:aa:36:25:7a:ed:43:db:ee:b7:7d:
5e:62:ea:e9:ac:5a:81:e8:7b:9e:6c:4a:ac:f0:b5:77:29:12:
eb:f1:6c:68:91:0f:ff:65:3f:cb:3e:ed:bd:99:df:8d:12:c1:
6e:bf:ae:20:bc:4b:35:a1:f1:bb:19:7c:a5:e6:23:1b:af:6e:
f2:c2:ad:9e:73:dc:ce:3a:b8:50:33:4c:ba:f8:f0:9a:7b:f0:
fc:f6:bf:68:43:27:b7:45:8b:2b:b5:a3:96:5c:b3:89:4a:2f:
53:7b:36:f0:38:4a:7c:16:2f:2b:7e:73:de:28:e0:32:2a:55:
63:04:d3:60:b3:a4:ce:ac:b2:27:53:ff:f8:ce:1e:b9:1e:c6:
0e:05:74:8b:0a:79:a5:04:ae:29:18:0b:2a:d3:99:4c:56:c5:
08:9f:f5:01:70:35:64:12:44:6d:88:ec:8c:19:f5:65:fc:2e:
0f:8b:3d:66:b3:e1:78:99:10:0c:2a:51:79:9e:4e:ce:b1:b9:
be:b4:8a:65:b1:1d:75:67:fc:58:ff:8b:2a:23:27:e8:cf:a5:
0f:d2:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org