Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nh39Yqmn6lpLjCOz-KLCmbqRxYE.roa
File: nh39Yqmn6lpLjCOz-KLCmbqRxYE.roa (raw, json)
Hash identifier: LgyMdRUN0SECrUKDV/iv0mwGsHPC3bM2tCW/MLlN5Xw=
Subject key identifier: 9E:1D:FD:62:A9:A7:EA:5A:4B:8C:23:B3:F8:A2:C2:99:BA:91:C5:81
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185ABEEBFAC6B1A1AA43DCB180365EE396B
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nh39Yqmn6lpLjCOz-KLCmbqRxYE.roa
Signing time: Fri 13 Jan 2023 16:20:28 +0000
ROA not before: Fri 13 Jan 2023 16:20:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
86.104.212.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
86.104.0.0/23 maxlen: 23
86.104.2.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.177.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.27.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:ee:bf:ac:6b:1a:1a:a4:3d:cb:18:03:65:ee:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 13 16:20:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e1dfd62a9a7ea5a4b8c23b3f8a2c299ba91c581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:55:62:71:fc:8d:54:a3:96:88:38:cc:d2:
5c:b5:e3:2b:3f:d9:c6:8f:bc:ca:e2:83:af:15:9c:
60:cf:54:8d:fc:60:8a:c0:8f:d1:86:7e:f7:bf:a4:
23:fa:54:a4:cc:d6:d2:2b:f3:a8:64:04:82:3a:f9:
14:17:2a:05:96:58:25:c4:1a:9e:13:f7:7c:26:0c:
ef:7b:9a:2f:6f:80:9f:76:57:99:fb:b7:72:78:f7:
47:62:31:77:29:ad:58:3d:84:e4:1d:d2:da:64:a2:
9f:2a:ff:3e:ba:87:89:44:62:4b:35:fa:94:82:a7:
3c:2e:8a:d6:12:2a:09:2f:18:d8:ec:5b:10:4e:3c:
79:b5:49:05:b7:0a:8c:c9:13:e3:3c:89:d4:bf:04:
0f:e7:0c:0c:14:0f:db:c5:f3:99:0b:ce:ab:22:09:
65:a9:84:76:d1:70:3c:67:5b:59:79:08:18:58:f5:
bd:77:96:0a:3f:e2:ef:13:9d:a8:bb:d2:a2:8b:f4:
5d:82:cd:cd:cc:dc:8d:fe:4c:68:91:92:d0:9c:2e:
02:11:49:de:9e:8d:85:eb:38:b6:64:2c:99:d8:56:
a7:d1:71:b2:14:da:04:27:5c:83:d8:c1:4a:4b:c6:
dc:27:da:c6:ba:57:77:f8:30:ba:3e:e3:00:5f:02:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:FD:62:A9:A7:EA:5A:4B:8C:23:B3:F8:A2:C2:99:BA:91:C5:81
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nh39Yqmn6lpLjCOz-KLCmbqRxYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.177.0-46.102.179.255
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0-77.81.91.255
86.104.0.0-86.104.2.255
86.104.212.0/23
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0-86.106.118.255
86.106.138.0/23
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.27.0-89.41.29.255
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0-89.42.154.255
89.45.82.0/24
89.46.47.0/24
91.235.130.0/23
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/23
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.160.0/23
185.80.112.0/22
188.172.176.0/20
188.208.52.0/22
188.208.220.0/22
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.214.95.0/24
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
79:80:c5:ae:88:3f:23:8d:60:24:91:b3:76:a6:20:b1:02:90:
6d:7d:e0:84:fe:48:91:81:12:d5:a4:fa:aa:6a:ed:c5:eb:15:
ad:40:89:e8:2b:b9:38:10:22:f0:f5:b9:6f:a8:64:11:0e:1a:
94:99:23:ba:5c:99:60:00:68:35:1c:69:ce:a0:c2:0e:cd:9a:
c1:a3:4b:d1:04:5d:0d:be:b9:ab:21:3a:54:bb:43:89:04:7e:
33:c7:e0:3d:6c:7c:8b:e1:23:2c:7a:dc:c4:cb:7e:0a:70:a7:
d7:cd:f1:ed:35:5e:69:f4:ea:a4:4e:89:48:16:69:3a:4a:4d:
b2:0a:48:36:16:1f:21:02:42:52:24:d5:41:b0:65:91:ef:24:
b2:03:98:75:0d:55:d0:6f:95:47:cc:f1:62:37:08:f5:c7:26:
ae:d4:ae:16:df:bb:fd:2c:bb:bb:db:cb:9f:5e:48:ff:4c:80:
f3:f8:e2:cf:b8:27:eb:04:6a:2a:07:de:a3:bc:9e:b5:bf:b8:
6c:70:28:5a:28:24:82:27:2a:90:23:2d:32:44:79:54:e7:71:
64:ac:83:3c:70:74:a9:67:ed:ea:1f:88:be:31:c8:cd:ff:01:
fd:63:60:ca:19:d8:ed:20:f8:06:95:8c:8c:28:a6:23:5a:7d:
35:e0:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-fra.rpki-client.org