Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/M6bwOPtis04H2S2_1FVbZcGiMMA.roa
File: M6bwOPtis04H2S2_1FVbZcGiMMA.roa (raw, json)
Hash identifier: 2TU0pccrfPWGmc74szl4oQcrjNvyduWAsz+phr8AEsA=
Subject key identifier: 33:A6:F0:38:FB:62:B3:4E:07:D9:2D:BF:D4:55:5B:65:C1:A2:30:C0
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0191939D912BE3E787664A43D24100EEF686
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/M6bwOPtis04H2S2_1FVbZcGiMMA.roa
Signing time: Tue 27 Aug 2024 11:34:22 +0000
ROA not before: Tue 27 Aug 2024 11:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 28 Aug 2024 15:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:9d:91:2b:e3:e7:87:66:4a:43:d2:41:00:ee:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 27 11:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33a6f038fb62b34e07d92dbfd4555b65c1a230c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:84:25:7b:02:af:2a:08:d1:28:4c:15:23:
d1:1a:22:f3:e0:80:83:1a:fe:18:4f:1a:a1:de:01:
49:d2:d2:78:d5:ef:bb:1c:9d:67:e8:0c:bb:3c:1c:
4e:5a:46:a1:7e:41:18:bc:3d:39:de:85:fe:d1:ef:
c7:ba:4a:0b:dc:4a:4c:58:c0:b9:d4:72:11:72:4b:
d9:65:be:53:58:c7:15:f1:46:73:03:ed:9c:51:ad:
30:74:67:e6:ec:6f:31:61:9e:24:e4:28:a2:89:93:
4d:28:cb:20:8a:ba:9f:6c:3c:5d:20:00:a0:df:40:
19:58:24:a2:14:81:e1:fe:25:7a:44:6c:f8:db:ba:
dd:d1:3f:7e:ba:36:a2:dd:d1:36:99:66:44:0e:6e:
43:60:8a:b1:59:0f:53:7d:fc:bd:85:8c:cb:4d:58:
c1:34:34:44:d5:7a:7f:a6:ea:50:06:25:64:cb:8c:
83:a5:87:06:63:58:67:ba:58:2c:76:95:52:d4:8d:
8e:46:88:40:b6:8f:b8:bd:bb:96:39:2b:a1:2b:4b:
a3:65:ea:07:d3:78:ec:6f:90:1d:8b:15:69:a0:51:
d9:00:aa:d1:50:29:c2:a3:c6:2f:0f:e8:77:11:d5:
5d:cd:dc:f8:ed:8f:be:ce:51:07:f6:6b:70:1e:b1:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:F0:38:FB:62:B3:4E:07:D9:2D:BF:D4:55:5B:65:C1:A2:30:C0
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/M6bwOPtis04H2S2_1FVbZcGiMMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::/30
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
7f:3a:c7:93:14:10:e5:09:01:72:c1:e4:21:c7:2d:9b:67:ad:
01:a5:98:17:df:48:da:e6:69:12:fd:f9:92:4f:a5:72:cb:92:
61:e2:20:94:94:ec:f4:ab:bb:33:1c:cc:21:f0:39:e2:0d:37:
c3:5e:f0:5b:d7:44:93:fa:ae:64:a2:44:cf:48:fb:80:5c:7f:
a5:0a:4d:53:ff:67:6f:36:32:08:32:dc:fd:37:d5:d4:09:a6:
11:4e:0f:64:42:d0:84:60:62:e2:20:aa:4f:7b:63:7f:d5:fa:
07:c8:2f:86:11:0b:97:fe:cc:b1:5b:0e:c0:51:9b:d1:17:a9:
e3:33:19:09:26:8b:2e:f4:70:3c:cc:79:07:3f:e1:5b:b3:36:
bc:6f:28:d7:09:36:db:3f:63:df:29:08:f9:4a:22:8b:f4:88:
9e:04:7b:74:99:f9:8c:0c:a3:ac:04:96:5e:c9:3e:22:f4:61:
d6:11:59:09:5c:17:6c:15:2f:f3:59:ec:be:9a:87:84:28:9f:
89:de:2b:4e:24:84:33:c7:d0:00:97:ab:3f:15:eb:38:9c:0a:
f8:a2:28:0e:5f:77:e0:c0:c7:c5:37:10:3a:c6:74:74:fa:ab:
8b:e4:74:bf:50:3d:08:07:d4:b2:e1:43:54:f3:fe:37:2a:e2:
20:2c:f0:02
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgISAZGTnZEr4+eHZkpD0kEA7vaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjQwODI3MTEzNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2E2ZjAzOGZiNjJiMzRlMDdkOTJkYmZkNDU1NWI2NWMxYTIzMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBqEJXsCryoI0ShMFSPRGiLz4ICD
Gv4YTxqh3gFJ0tJ41e+7HJ1n6Ay7PBxOWkahfkEYvD053oX+0e/HukoL3EpMWMC5
1HIRckvZZb5TWMcV8UZzA+2cUa0wdGfm7G8xYZ4k5CiiiZNNKMsgirqfbDxdIACg
30AZWCSiFIHh/iV6RGz427rd0T9+ujai3dE2mWZEDm5DYIqxWQ9Tffy9hYzLTVjB
NDRE1Xp/pupQBiVky4yDpYcGY1hnulgsdpVS1I2ORohAto+4vbuWOSuhK0ujZeoH
03jsb5AdixVpoFHZAKrRUCnCo8YvD+h3EdVdzdz47Y++zlEH9mtwHrFkNwIDAQAB
o4IDCTCCAwUwHQYDVR0OBBYEFDOm8Dj7YrNOB9ktv9RVW2XBojDAMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvTTZid09QdGlzMDRIMlMyXzFGVmJaY0dpTU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHQYIKwYBBQUHAQcBAf8EggEMMIIBCDCBxQQCAAEwgb4D
BAIl3XwDBAItQ+QDBAIteLADBAA+AwwDBAJKd8AwDAMEAlBczAMEAFBczgMEAlZo
SAMEAVnd4AMEAluEhAMEAFvCoTAMAwQAW+HZAwQCW+HYAwQCZyO8AwQCZ2oAAwQC
Z3FEAwQCZ+dIAwQCsHhAAwQCsHhIAwQCueo4AwQCuepAAwQCuevwAwQCuezoAwQC
ufJUAwQCufqUAwQAwcvKAwQCwjacAwQBwvZyAwQCwyroAwQAw5VXAwQE1Z9AMD4E
AgACMDgDBQMqCXxAAwUAKhE4BQMFASoRPAIDBQIqFC2AAwUAKhQugAMFACoUL4AD
BQAqFDCAAwUAKhQ4gDANBgkqhkiG9w0BAQsFAAOCAQEAfzrHkxQQ5QkBcsHkIcct
m2etAaWYF99I2uZpEv35kk+lcsuSYeIglJTs9Ku7MxzMIfA54g03w17wW9dEk/qu
ZKJEz0j7gFx/pQpNU/9nbzYyCDLc/TfV1AmmEU4PZELQhGBi4iCqT3tjf9X6B8gv
hhELl/7MsVsOwFGb0Rep4zMZCSaLLvRwPMx5Bz/hW7M2vG8o1wk22z9j3ykI+Uoi
i/SIngR7dJn5jAyjrASWXsk+IvRh1hFZCVwXbBUv81nsvpqHhCifid4rTiSEM8fQ
AJerPxXrOJwK+KIoDl934MDHxTcQOsZ0dPqri+R0v1A9CAfUsuFDVPP+NyriICzw
Ag==
-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:09 2024 by rpki-client on console-ams.rpki-client.org