Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa
File: nF4jC918QfY9DPXfFiKeP8_Q0rY.roa (raw, json)
Hash identifier: munCePX547jOs4pzjRQgp09j1RzIbsStzRJ1MnBCxQg=
Subject key identifier: 9C:5E:23:0B:DD:7C:41:F6:3D:0C:F5:DF:16:22:9E:3F:CF:D0:D2:B6
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185A55EFF30FD7698ED586C897F272B618F
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa
Signing time: Thu 12 Jan 2023 09:45:44 +0000
ROA not before: Thu 12 Jan 2023 09:45:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
86.104.212.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
86.104.0.0/23 maxlen: 23
86.104.2.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.177.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.27.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Jan 2023 12:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:5e:ff:30:fd:76:98:ed:58:6c:89:7f:27:2b:61:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 12 09:45:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5e230bdd7c41f63d0cf5df16229e3fcfd0d2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:17:59:81:95:4a:12:d7:8c:ac:45:fe:a1:
22:48:85:e2:ac:7d:75:8f:06:ff:ce:06:5e:0a:b2:
43:c5:1f:2f:d2:92:17:8f:2a:bb:83:7e:18:2b:4e:
b0:39:20:52:76:33:4c:04:cc:1b:57:fb:76:64:9c:
36:3e:98:cf:3a:84:47:c3:67:ac:ea:d8:8c:54:e4:
fe:e8:4b:98:a4:c4:96:20:3b:3b:13:f8:83:8e:d0:
ca:10:12:34:24:88:5f:dc:dc:1d:bf:09:f5:90:f8:
70:b9:54:61:41:04:5c:9c:3b:9e:39:95:10:8d:93:
2c:99:b6:dc:5a:5a:71:33:eb:ad:9d:be:67:bf:ca:
89:88:51:c7:6f:b5:31:81:0f:c0:11:8c:cb:d6:37:
c5:bb:47:12:e9:5e:ca:c1:8a:67:78:18:a7:e0:9b:
0e:3b:cf:7e:8b:ab:e3:47:b4:a3:64:e3:37:78:f2:
5c:13:5c:be:a0:2b:dc:e1:10:d8:1d:72:5a:e6:09:
67:f1:37:07:cb:e7:11:86:2a:34:67:0e:23:57:f2:
88:79:68:fc:1f:db:5a:03:34:84:23:5c:4e:dc:b6:
08:05:c6:6c:51:73:07:49:5f:14:ee:e4:75:a8:71:
89:fa:a6:48:ce:0c:98:77:38:6f:0d:51:7a:d1:d9:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5E:23:0B:DD:7C:41:F6:3D:0C:F5:DF:16:22:9E:3F:CF:D0:D2:B6
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.177.0-46.102.179.255
77.81.84.0/23
77.81.89.0-77.81.91.255
86.104.0.0-86.104.2.255
86.104.212.0/23
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0-86.106.118.255
86.106.138.0/23
86.107.193.0-86.107.195.255
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.96.0/24
89.37.129.0-89.37.134.255
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.27.0-89.41.29.255
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0-89.42.154.255
89.45.82.0/24
91.235.130.0/23
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/23
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.160.0/23
185.80.112.0/22
188.172.176.0/20
188.208.52.0/22
188.208.220.0/22
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.214.95.0/24
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:ba:71:66:4a:a2:c4:05:4e:da:3e:de:10:41:d6:d9:7c:0c:
31:7c:0d:39:48:48:ca:c8:58:09:dd:2f:51:7a:14:89:52:b4:
67:16:42:91:8f:24:1c:29:43:47:38:13:b4:ff:bf:1a:3e:a1:
6f:48:cb:83:79:a7:6f:0d:24:ca:65:15:4e:44:5b:de:79:c2:
dd:a8:0f:4e:8e:a9:0f:7f:b8:d8:9e:17:76:1b:a9:bf:be:19:
32:f0:0b:be:51:2d:f1:c2:be:1a:83:69:e6:e8:26:b1:84:03:
a9:51:c5:9f:c8:92:56:f0:b6:1d:6d:02:a7:62:03:a6:f7:36:
b9:99:de:d6:1a:eb:b4:d2:ba:2b:e4:5d:c0:b7:f9:3b:a7:0a:
2a:8e:73:5a:eb:37:67:db:4a:aa:ab:96:b5:60:dd:bd:35:2c:
40:cb:42:30:bb:99:b9:27:46:45:89:70:c8:67:f7:e0:32:38:
69:ec:3a:c8:17:09:bd:ea:ea:85:52:09:2b:43:63:db:6e:07:
57:f7:b5:9f:75:16:11:b5:d7:16:ec:95:e3:3d:e6:23:9c:9c:
f9:95:11:c7:eb:bc:18:db:27:d9:b9:a8:4d:ea:b9:04:89:3e:
ac:74:9c:19:36:9c:94:ee:c7:a3:a1:2c:a1:7e:3c:0c:a6:80:
18:f8:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org