Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1OVdLxMeCdTGGg1rmHre8OnTEvQ.roa
File: 1OVdLxMeCdTGGg1rmHre8OnTEvQ.roa (raw, json)
Hash identifier: /j+Xan5k6V//8yLSQA2qrHiOytS3rOdkL0+wGc10m08=
Subject key identifier: D4:E5:5D:2F:13:1E:09:D4:C6:1A:0D:6B:98:7A:DE:F0:E9:D3:12:F4
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018CC2DAB9C583503F38F14EF72A0A64AA28
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1OVdLxMeCdTGGg1rmHre8OnTEvQ.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
188.208.109.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.51.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
188.213.252.0/22 maxlen: 22
188.213.248.0/22 maxlen: 22
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
86.104.224.0/23 maxlen: 23
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
86.104.222.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 14:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b9:c5:83:50:3f:38:f1:4e:f7:2a:0a:64:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e55d2f131e09d4c61a0d6b987adef0e9d312f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:48:03:30:71:49:df:81:05:ac:35:5a:4d:
21:66:d0:39:56:5c:e7:93:c5:bd:68:d9:bd:70:92:
d2:75:a0:48:b6:16:c5:e7:be:9b:ca:c8:59:73:05:
fc:7a:b1:4d:56:74:de:0f:c1:53:cf:01:32:62:b7:
28:bd:42:6d:d0:5b:3d:da:3a:2e:b8:2f:0a:f1:ab:
89:1d:96:51:cd:29:d4:64:7c:6d:29:44:16:65:ef:
18:2b:b4:30:09:e9:5a:96:ff:d8:e3:4a:bb:3e:85:
b6:e3:5a:d4:ac:54:08:5c:1d:98:a3:f0:43:74:cf:
ba:e5:ff:eb:ed:76:9a:38:02:b8:a5:53:73:d5:2d:
92:22:7a:27:8d:a9:1e:f1:21:3b:ec:c3:37:19:58:
76:12:3c:50:27:87:57:89:7a:13:84:75:c7:b8:46:
c6:92:7f:4e:ad:e4:7a:31:7c:b9:1c:3a:68:22:24:
6b:8a:9b:96:8e:1f:98:f8:63:98:7b:a8:81:2f:41:
23:bd:ef:55:73:b3:d8:25:ad:d4:79:8f:b8:67:22:
29:31:a8:61:a5:fc:3c:da:a2:98:ce:d0:f4:2c:3f:
4c:a6:3c:8e:be:b6:96:04:c8:0f:04:5f:58:58:9f:
3e:6e:c8:4e:7f:0d:11:2a:78:98:2e:e5:f9:7f:ed:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:5D:2F:13:1E:09:D4:C6:1A:0D:6B:98:7A:DE:F0:E9:D3:12:F4
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1OVdLxMeCdTGGg1rmHre8OnTEvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.109.0/24
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e8:96:83:c2:f1:6a:33:85:a1:90:f4:43:f3:c6:8e:14:83:
c2:58:9e:9a:e7:cb:bb:a8:62:ca:59:b3:9d:32:ee:80:64:22:
fb:0a:fb:36:73:33:3f:03:c9:fb:9e:17:7c:17:4b:08:39:db:
53:17:a1:35:b3:33:e3:48:00:3b:44:af:02:69:17:eb:cb:ab:
72:c7:d6:ff:5b:a3:88:03:74:4f:cd:1b:46:ef:cf:54:ec:81:
89:1b:e0:1a:44:57:46:52:e5:e1:53:17:55:2c:04:54:ca:93:
40:05:00:8f:49:07:e0:36:bb:38:95:43:37:f7:bc:c8:fb:a1:
5d:e8:38:05:6c:34:65:3e:05:0a:5d:a7:3e:02:09:d9:21:a3:
ec:77:dc:c4:86:a9:dd:1e:d9:3e:85:79:79:c9:60:c1:98:7c:
56:09:9b:bb:b4:d2:eb:2f:86:3d:3b:f8:8e:26:bb:8c:e4:0b:
60:59:bd:45:4f:35:fd:c9:81:fb:ff:6a:77:42:ba:be:df:28:
f2:4f:27:28:86:27:8e:41:4f:52:10:26:a9:fe:9a:7a:41:43:
90:bd:b6:2c:b5:c0:70:a1:f3:0d:fe:22:81:ce:4c:74:64:5a:
ae:6e:5b:48:85:b7:d2:d6:f1:6f:ca:7c:98:d3:b1:b7:f5:c9:
be:eb:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 19:25:54 2024 by rpki-client on console-ams.rpki-client.org