Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4ksY6tYOrEiVBiUD6D3quvfOBTE.roa
File: 4ksY6tYOrEiVBiUD6D3quvfOBTE.roa (raw, json)
Hash identifier: 4wIzACspAAz2UPVzeWgiIZW8HNJG1n8lci+rpItDKIY=
Subject key identifier: E2:4B:18:EA:D6:0E:AC:48:95:06:25:03:E8:3D:EA:BA:F7:CE:05:31
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D78CB243F3670AED97A923E8CC4F57651
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4ksY6tYOrEiVBiUD6D3quvfOBTE.roa
Signing time: Mon 05 Feb 2024 10:23:15 +0000
ROA not before: Mon 05 Feb 2024 10:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
5.56.72.0/24 maxlen: 24
5.56.73.0/24 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
46.55.0.0/18 maxlen: 18
46.55.64.0/18 maxlen: 18
46.55.111.0/24 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 20
86.106.213.0/24 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.114.128.0/18 maxlen: 18
92.114.144.0/20 maxlen: 20
92.114.160.0/20 maxlen: 20
92.114.176.0/20 maxlen: 20
92.114.192.0/18 maxlen: 18
92.114.192.0/20 maxlen: 20
92.115.0.0/16 maxlen: 24
92.115.0.0/18 maxlen: 18
92.115.64.0/18 maxlen: 18
92.115.128.0/18 maxlen: 18
92.115.192.0/18 maxlen: 18
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.116.0.0/18 maxlen: 18
93.116.64.0/18 maxlen: 18
93.116.128.0/18 maxlen: 18
93.116.192.0/18 maxlen: 24
93.117.48.0/20 maxlen: 20
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
109.185.0.0/18 maxlen: 18
109.185.64.0/18 maxlen: 18
109.185.128.0/18 maxlen: 24
109.185.192.0/18 maxlen: 18
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
188.237.0.0/18 maxlen: 18
188.237.24.0/22 maxlen: 24
188.237.64.0/18 maxlen: 18
188.237.128.0/18 maxlen: 18
188.237.168.0/24 maxlen: 24
188.237.192.0/18 maxlen: 18
212.0.192.0/19 maxlen: 32
212.0.192.0/22 maxlen: 22
212.0.193.0/24 maxlen: 24
212.0.195.0/24 maxlen: 24
212.0.196.0/24 maxlen: 24
212.0.198.0/24 maxlen: 24
212.0.199.0/24 maxlen: 24
212.0.200.0/21 maxlen: 24
212.0.203.0/24 maxlen: 24
212.0.208.0/20 maxlen: 24
212.0.210.0/24 maxlen: 24
212.0.215.0/24 maxlen: 24
212.0.219.0/24 maxlen: 24
2a02:a30::/32 maxlen: 32
2a02:a30:172::/48 maxlen: 48
2a02:a30:1600::/48 maxlen: 48
2a02:a30:6330:103::/64 maxlen: 64
2a02:a30:f090::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Feb 2024 09:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:cb:24:3f:36:70:ae:d9:7a:92:3e:8c:c4:f5:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 5 10:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24b18ead60eac4895062503e83deabaf7ce0531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:41:d2:42:fd:73:66:ed:a2:60:91:9d:df:
13:f7:25:57:0f:78:60:ce:40:a5:9e:90:a4:cd:6c:
45:43:8f:00:a7:d3:06:8e:de:a7:65:1d:83:8f:cd:
f1:30:80:f3:72:31:28:89:c0:43:d7:12:93:d7:9d:
40:4c:c5:9a:17:da:25:66:d1:65:c1:a8:e3:22:a2:
17:54:19:e3:eb:2b:ce:ad:6c:c7:1e:97:84:d9:0b:
2d:b1:dd:38:ca:71:3c:d7:cd:01:b5:a4:85:88:07:
99:a1:22:93:67:23:5a:cf:9a:df:60:6b:ed:1b:05:
55:1c:d6:bb:80:fb:bd:da:e4:3d:ed:be:c7:b0:19:
27:bb:d9:5c:e5:24:78:a6:b7:45:e0:c2:71:36:c0:
67:7d:11:4e:f0:8c:02:6d:30:fa:5e:ef:eb:ed:da:
95:04:3c:21:63:4c:bd:41:99:8e:af:1d:20:3e:89:
21:86:08:ac:e2:42:8f:cc:ee:17:2e:ff:78:78:53:
9b:e5:d6:a4:96:ed:65:52:55:72:64:69:6d:66:b7:
3d:11:2b:ba:ab:15:74:4d:45:52:21:f9:46:74:18:
15:56:0c:0e:69:2b:79:cf:7c:79:35:26:77:88:cf:
81:2a:54:f7:4d:80:cc:7a:c4:e6:e9:f0:48:e2:bd:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:18:EA:D6:0E:AC:48:95:06:25:03:E8:3D:EA:BA:F7:CE:05:31
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4ksY6tYOrEiVBiUD6D3quvfOBTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/32
Signature Algorithm: sha256WithRSAEncryption
0a:10:dc:aa:f5:50:53:32:45:03:8e:64:95:e1:8a:6b:bf:44:
2b:2b:26:fe:46:47:6f:8d:1d:68:7b:64:ed:ce:73:a7:5f:2a:
be:12:0c:2e:be:06:72:a4:98:7d:0b:3a:3c:2f:d9:ce:b4:a9:
67:9a:fb:72:62:76:31:5f:9b:69:90:2b:89:09:20:95:3c:ad:
52:2f:d7:70:d0:d9:41:41:ce:a4:38:fb:48:e0:97:ee:55:b2:
d8:1a:81:0f:6f:82:8d:b5:10:10:d1:d9:99:8d:1f:5b:58:a4:
d4:58:0e:ca:d6:66:1e:b3:0b:91:95:e6:dd:ec:b6:23:c7:7e:
7d:13:22:e6:d9:3b:ba:99:fd:1e:03:1c:4e:2f:db:a0:15:4c:
b2:6f:68:2c:83:6b:e6:d8:1e:b6:72:ad:8a:96:24:c1:b0:e0:
77:29:83:27:11:e9:ce:43:37:1a:ed:75:3a:c0:c2:e5:dc:40:
c8:e9:3f:6a:10:e3:a1:91:28:56:db:49:f1:77:01:83:f8:8e:
40:64:41:c3:dd:01:4a:a7:63:aa:88:8f:bf:a4:fc:ea:1a:62:
32:f0:11:e3:b8:14:78:6d:77:44:58:47:b9:d3:4f:2d:cc:ae:
7d:1b:f8:51:89:34:3d:a6:c0:e8:e7:0f:0a:53:bc:b3:32:b1:
21:11:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 12:22:10 2024 by rpki-client on console-fra.rpki-client.org