Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa
File: SXmewaysqwbeNcOHpP3pdhw0d5U.roa (raw, json)
Hash identifier: O6+SXdjZ+p9ltYEmhIyv2GlrcSJhCXMevYDHop+gm3U=
Subject key identifier: 49:79:9E:C1:AC:AC:AB:06:DE:35:C3:87:A4:FD:E9:76:1C:34:77:95
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185AB0D85E8C312E96FEA9064069EAA66DC
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa
Signing time: Fri 13 Jan 2023 12:14:28 +0000
ROA not before: Fri 13 Jan 2023 12:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
86.104.212.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
86.104.0.0/23 maxlen: 23
86.104.2.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.177.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.27.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:0d:85:e8:c3:12:e9:6f:ea:90:64:06:9e:aa:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 13 12:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49799ec1acacab06de35c387a4fde9761c347795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:39:df:70:a6:2a:c2:47:52:73:fc:da:01:
7a:3f:56:bb:78:6c:cd:d2:77:8b:ce:33:76:2e:1f:
d2:fe:15:b4:37:05:62:ff:29:82:5c:f3:98:e4:eb:
a5:6b:ce:b4:56:e7:84:f4:2a:b2:5b:bd:c1:0b:48:
e8:bb:7c:37:e8:be:50:5f:a5:2e:04:3d:1e:0e:77:
65:49:5a:cf:0b:26:66:73:e6:85:3d:af:4d:28:27:
0d:d8:59:9a:58:5d:a0:21:82:c6:3a:30:59:29:09:
24:8c:87:30:fd:0e:d0:c4:70:e3:e3:0d:7a:47:7c:
9c:68:02:87:ec:6d:e7:7b:56:57:65:09:a1:c6:04:
b8:21:f5:ea:60:38:74:ee:4d:fe:35:b8:1c:5a:b2:
4e:60:9f:1f:9f:3f:75:1e:b3:e7:3c:af:53:d9:20:
8f:be:01:95:fc:16:92:41:55:2b:bf:f3:b3:de:e9:
04:a8:2a:c5:43:a7:4a:ea:e7:96:34:4f:a6:87:80:
d8:56:50:71:ed:74:70:d2:0d:26:9e:03:d9:3e:e3:
2e:84:7f:a7:67:0d:a4:4d:ae:fe:6e:fb:bc:ec:47:
c6:3d:14:83:07:c5:ce:68:f5:35:41:0d:8c:2e:8c:
9b:2e:c5:9e:e7:1e:df:c8:d6:ea:f8:54:15:00:03:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:9E:C1:AC:AC:AB:06:DE:35:C3:87:A4:FD:E9:76:1C:34:77:95
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.177.0-46.102.179.255
77.81.84.0-77.81.86.255
77.81.89.0-77.81.91.255
86.104.0.0-86.104.2.255
86.104.212.0/23
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0-86.106.118.255
86.106.138.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.27.0-89.41.29.255
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0-89.42.154.255
89.45.82.0/24
89.46.47.0/24
91.235.130.0/23
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/23
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.160.0/23
185.80.112.0/22
188.172.176.0/20
188.208.52.0/22
188.208.220.0/22
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.214.95.0/24
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
Signature Algorithm: sha256WithRSAEncryption
90:55:6a:53:b5:f4:61:ed:08:3a:05:0c:6d:d0:0f:3a:74:9b:
b8:d1:9c:89:4c:d6:82:3d:77:c6:3d:90:51:e1:90:61:47:18:
f0:ca:67:57:b7:da:1f:02:03:08:7f:f2:57:32:15:e6:bf:e9:
99:f2:40:7c:b1:84:72:52:01:e0:49:74:d2:b2:95:5c:05:e8:
85:55:3e:bb:cd:7e:2f:04:07:b3:07:c7:18:60:ad:b7:6b:de:
5d:e0:be:30:0e:c7:1f:ba:bb:7a:a4:7e:2c:9f:d5:4b:29:dd:
60:f4:16:5e:00:5d:ee:1f:68:85:a6:e4:cc:e6:bc:4d:05:00:
0e:b3:5a:a7:20:a9:02:c8:67:bd:c2:81:01:b2:ba:51:a4:6a:
53:80:49:15:7c:d9:04:11:84:cd:d9:b7:e7:f7:2c:97:fd:92:
73:32:11:20:65:54:87:66:e9:c0:10:40:be:06:f7:38:08:47:
04:31:fd:1e:dd:e0:1a:97:87:7b:21:b7:fc:08:e8:48:c0:d7:
12:b9:53:99:a3:e7:d5:88:54:0e:69:b8:49:48:23:0d:f6:a7:
59:96:b2:bd:80:e8:c2:9e:f8:c3:45:3f:ef:ac:8b:2d:8c:d7:
22:72:10:1a:a9:35:01:3b:35:1f:f0:cd:ce:2a:53:fa:17:44:
98:4c:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-ams.rpki-client.org