Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/J2EtGwLW-hOOxNzjP09ci1GHYks.roa
File: J2EtGwLW-hOOxNzjP09ci1GHYks.roa (raw, json)
Hash identifier: R/MZU28RtBFPWfESRuV8saPf309VKLhzy6w9bs4p3Ic=
Subject key identifier: 27:61:2D:1B:02:D6:FA:13:8E:C4:DC:E3:3F:4F:5C:8B:51:87:62:4B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01882511B4A036F5A03C8F9A78805C0A9675
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/J2EtGwLW-hOOxNzjP09ci1GHYks.roa
Signing time: Tue 16 May 2023 14:58:17 +0000
ROA not before: Tue 16 May 2023 14:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
188.208.109.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.51.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
188.213.252.0/22 maxlen: 22
188.213.248.0/22 maxlen: 22
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
188.214.94.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
86.104.224.0/23 maxlen: 23
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
86.104.222.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
86.104.0.0/23 maxlen: 23
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 15:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:11:b4:a0:36:f5:a0:3c:8f:9a:78:80:5c:0a:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 16 14:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27612d1b02d6fa138ec4dce33f4f5c8b5187624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:88:2b:b7:e6:d4:5d:b6:c3:2f:d6:ce:ff:
b0:7b:2e:0f:dc:7b:f1:7b:8f:5b:94:b8:7f:b3:61:
ac:ed:9b:5d:6d:21:05:41:a5:6f:14:90:c7:41:ea:
e8:a3:dd:b9:7a:3b:d4:a0:17:c6:cd:aa:43:e0:3d:
6a:e7:66:65:3d:9d:0e:65:81:3a:33:2e:b4:ff:bf:
aa:07:1c:1d:b2:84:00:20:c0:42:c7:29:72:ce:e3:
ce:a4:cd:cf:5e:6b:c4:dd:25:07:3f:84:4f:09:30:
63:19:21:41:4f:6f:73:5f:7a:2c:05:74:f1:f1:b9:
29:4e:da:cd:ab:8e:a8:f9:0e:1f:26:9c:c2:9a:77:
45:26:21:5f:3b:f2:5c:21:a9:21:ab:28:a8:7c:00:
0a:6f:88:a3:f8:d5:7a:ce:39:86:21:d4:ce:51:e1:
e7:6d:ef:5b:64:0b:78:3a:7d:91:0f:4d:f7:ad:f8:
df:76:eb:71:f4:33:12:5f:75:a8:6d:23:4d:5c:fa:
73:83:06:ea:9f:42:f6:ae:64:75:be:5b:da:59:89:
39:ce:ec:e2:2d:b8:3b:23:bb:dd:d8:0a:5a:ce:15:
a1:b5:58:ca:b5:42:69:b2:b1:7e:3b:2f:c4:61:31:
38:50:3d:09:c7:3b:75:54:fa:be:b6:e5:ce:85:5f:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:2D:1B:02:D6:FA:13:8E:C4:DC:E3:3F:4F:5C:8B:51:87:62:4B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/J2EtGwLW-hOOxNzjP09ci1GHYks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.178.0/23
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0-77.81.91.255
86.104.0.0/23
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.109.0/24
188.208.220.0/22
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.94.0/23
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
76:0c:c3:9e:64:75:b7:34:8c:c8:f6:3d:c8:08:c2:7d:2b:67:
f9:02:c1:c9:55:5d:7a:ce:01:aa:7d:ec:8f:7d:fb:37:35:fd:
a4:91:23:ce:0f:c7:30:9a:2d:0a:ed:a3:76:4d:75:99:15:c5:
15:7f:22:61:46:f0:c5:71:aa:85:c7:09:98:15:c8:02:ee:de:
27:17:7d:b6:c8:95:76:d9:74:6d:a8:ee:58:52:32:e7:77:7c:
6f:50:5e:2d:d1:7c:b2:ca:cf:0a:d2:47:89:06:53:1f:6b:22:
d9:87:d9:c7:1c:20:68:7d:2d:d5:5f:fc:30:e4:4a:a3:7d:f6:
05:1a:3f:7a:9b:85:cf:99:f8:2c:e3:0b:92:7c:d6:19:32:01:
2a:2b:50:7a:a4:26:34:e1:50:b7:ba:68:fb:99:26:0d:c1:d3:
95:da:50:e3:ab:28:dd:ce:19:2c:95:63:21:9b:ea:52:5c:0e:
e5:fc:7e:53:73:3b:04:27:70:c5:75:88:e3:b1:ee:24:2d:76:
ae:fb:f9:f6:73:46:7c:1f:6a:f7:fe:f5:c2:a2:d2:b7:01:c2:
01:77:92:93:25:2b:b0:c2:e5:f5:d6:17:ca:a1:49:37:a1:2c:
b1:85:9d:ba:5b:99:03:cf:82:e4:c4:94:77:ce:64:93:b0:28:
4b:79:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org