Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/ReTYtfCcS7hgnq8pOWyKuTL6uPE.roa
File: ReTYtfCcS7hgnq8pOWyKuTL6uPE.roa (raw, json)
Hash identifier: +7x87XT4ExnQ/mpwuUt3tF2hLp1JRXdESa3lrskxNC4=
Subject key identifier: 45:E4:D8:B5:F0:9C:4B:B8:60:9E:AF:29:39:6C:8A:B9:32:FA:B8:F1
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 018571FA13F39EF700E1B83C9B4F3E67577A
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/ReTYtfCcS7hgnq8pOWyKuTL6uPE.roa
Signing time: Mon 02 Jan 2023 10:14:52 +0000
ROA not before: Mon 02 Jan 2023 10:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34977
IP address blocks: 89.39.152.0/21 maxlen: 21
89.39.156.0/24 maxlen: 24
89.39.158.0/23 maxlen: 23
89.39.16.0/21 maxlen: 21
89.39.22.0/24 maxlen: 24
89.39.24.0/21 maxlen: 21
89.39.25.0/24 maxlen: 24
89.39.26.0/24 maxlen: 24
89.39.27.0/24 maxlen: 24
89.39.31.0/24 maxlen: 24
89.39.28.0/24 maxlen: 24
89.39.29.0/24 maxlen: 24
86.106.64.0/21 maxlen: 21
89.32.118.0/24 maxlen: 24
89.32.112.0/21 maxlen: 21
89.38.16.0/24 maxlen: 24
89.38.17.0/24 maxlen: 24
89.38.16.0/21 maxlen: 21
89.38.23.0/24 maxlen: 24
89.38.20.0/24 maxlen: 24
89.38.21.0/24 maxlen: 24
89.38.22.0/24 maxlen: 24
89.38.18.0/24 maxlen: 24
89.38.19.0/24 maxlen: 24
86.106.0.0/21 maxlen: 21
46.37.69.0/24 maxlen: 24
46.37.70.0/23 maxlen: 23
46.37.76.0/23 maxlen: 23
89.37.74.0/24 maxlen: 24
212.225.236.0/24 maxlen: 24
212.225.240.0/23 maxlen: 23
46.37.78.0/23 maxlen: 23
89.37.72.0/24 maxlen: 24
212.225.234.0/24 maxlen: 24
89.37.73.0/24 maxlen: 24
89.37.72.0/21 maxlen: 21
46.37.84.0/24 maxlen: 24
212.225.246.0/24 maxlen: 24
46.37.81.0/24 maxlen: 24
46.37.80.0/24 maxlen: 24
212.225.250.0/24 maxlen: 24
212.225.252.0/24 maxlen: 24
212.225.248.0/24 maxlen: 24
212.225.255.0/24 maxlen: 24
46.37.94.0/24 maxlen: 24
46.37.92.0/23 maxlen: 23
212.225.176.0/24 maxlen: 24
212.225.174.0/23 maxlen: 23
212.225.178.0/23 maxlen: 23
212.225.182.0/23 maxlen: 23
212.225.184.0/24 maxlen: 24
212.225.185.0/24 maxlen: 24
212.225.180.0/23 maxlen: 23
212.225.186.0/24 maxlen: 24
212.225.190.0/24 maxlen: 24
212.225.191.0/24 maxlen: 24
212.225.187.0/24 maxlen: 24
212.225.188.0/24 maxlen: 24
212.225.189.0/24 maxlen: 24
212.225.196.0/24 maxlen: 24
212.225.197.0/24 maxlen: 24
212.225.198.0/24 maxlen: 24
212.225.199.0/24 maxlen: 24
212.225.200.0/22 maxlen: 22
212.225.204.0/24 maxlen: 24
212.225.208.0/23 maxlen: 23
212.225.218.0/24 maxlen: 24
212.225.219.0/24 maxlen: 24
212.225.216.0/23 maxlen: 23
212.225.215.0/24 maxlen: 24
46.37.64.0/19 maxlen: 19
212.225.222.0/24 maxlen: 24
212.225.220.0/24 maxlen: 24
212.225.221.0/24 maxlen: 24
88.212.188.0/24 maxlen: 24
88.212.190.0/24 maxlen: 24
91.151.97.0/24 maxlen: 24
91.151.96.0/24 maxlen: 24
91.151.96.0/20 maxlen: 20
212.225.128.0/17 maxlen: 17
212.225.132.0/24 maxlen: 24
91.151.105.0/24 maxlen: 24
212.225.130.0/23 maxlen: 23
91.151.99.0/24 maxlen: 24
212.225.128.0/23 maxlen: 23
212.225.138.0/23 maxlen: 23
91.151.111.0/24 maxlen: 24
212.225.134.0/23 maxlen: 23
91.151.108.0/24 maxlen: 24
91.151.109.0/24 maxlen: 24
212.225.137.0/24 maxlen: 24
91.151.110.0/24 maxlen: 24
212.225.133.0/24 maxlen: 24
212.225.144.0/24 maxlen: 24
212.225.142.0/23 maxlen: 23
212.225.145.0/24 maxlen: 24
212.225.152.0/24 maxlen: 24
212.225.148.0/22 maxlen: 22
212.225.146.0/24 maxlen: 24
212.225.156.0/22 maxlen: 22
212.225.163.0/24 maxlen: 24
212.225.164.0/22 maxlen: 22
212.225.162.0/24 maxlen: 24
212.225.168.0/22 maxlen: 22
212.225.172.0/23 maxlen: 23
89.35.136.0/21 maxlen: 21
89.35.137.0/24 maxlen: 24
89.35.138.0/23 maxlen: 23
89.35.142.0/23 maxlen: 23
89.35.140.0/23 maxlen: 23
89.36.4.0/23 maxlen: 23
89.36.2.0/23 maxlen: 23
89.36.0.0/23 maxlen: 23
89.36.6.0/24 maxlen: 24
89.36.7.0/24 maxlen: 24
37.61.144.0/20 maxlen: 20
37.61.144.0/23 maxlen: 23
37.61.146.0/23 maxlen: 23
37.61.159.0/24 maxlen: 24
37.61.155.0/24 maxlen: 24
195.82.101.0/24 maxlen: 24
195.82.100.0/22 maxlen: 22
195.82.102.0/24 maxlen: 24
195.82.100.0/24 maxlen: 24
195.82.112.0/21 maxlen: 21
195.82.113.0/24 maxlen: 24
195.82.126.0/23 maxlen: 23
195.82.126.0/24 maxlen: 24
171.33.232.0/21 maxlen: 21
185.13.203.0/24 maxlen: 24
185.13.200.0/22 maxlen: 22
93.114.144.0/24 maxlen: 24
93.114.144.0/20 maxlen: 20
93.114.146.0/24 maxlen: 24
93.114.147.0/24 maxlen: 24
93.114.148.0/24 maxlen: 24
93.114.149.0/24 maxlen: 24
93.114.157.0/24 maxlen: 24
93.114.158.0/24 maxlen: 24
93.114.153.0/24 maxlen: 24
93.114.154.0/24 maxlen: 24
93.114.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:13:f3:9e:f7:00:e1:b8:3c:9b:4f:3e:67:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 2 10:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e4d8b5f09c4bb8609eaf29396c8ab932fab8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:07:38:2e:51:97:45:14:7a:7f:9d:ef:c1:
4d:c6:4b:51:59:9e:80:e3:fd:dd:ec:43:65:6c:12:
ea:24:bd:9b:8a:6a:ea:6f:bd:5c:2c:d5:08:8f:97:
98:20:93:4f:71:21:72:e6:e0:d0:9c:54:bd:d1:06:
20:4a:ab:71:2c:55:e3:08:85:30:ec:5a:af:f2:1c:
15:8f:67:cc:17:72:1f:d1:ab:4f:1c:3b:4b:0e:48:
63:e5:b9:e3:e4:cf:2a:e8:b8:02:26:42:05:6a:32:
a3:91:c6:f9:f6:db:a6:a2:04:74:18:92:39:b1:3d:
99:39:96:e1:c8:49:5f:00:ec:ac:24:eb:d8:d7:c2:
bd:62:f7:a1:31:f0:62:de:84:2f:41:1c:29:8d:d5:
4e:cb:24:49:44:d6:b9:de:02:c6:27:85:85:28:2f:
fc:30:a8:d9:8d:d3:01:da:c2:83:91:89:70:4f:d4:
9e:33:d8:e1:ad:3f:eb:cb:14:3c:9d:7d:b2:af:9e:
82:ea:3d:e0:0b:53:7b:da:24:46:d6:0e:98:ea:de:
2b:ce:c2:dd:49:1a:97:70:6a:bf:10:f5:98:b7:f8:
f6:17:f3:2b:1d:99:3a:d4:c0:c5:e6:d2:44:9c:b4:
0c:1a:82:4d:a0:0a:18:64:73:27:eb:25:14:20:66:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:D8:B5:F0:9C:4B:B8:60:9E:AF:29:39:6C:8A:B9:32:FA:B8:F1
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/ReTYtfCcS7hgnq8pOWyKuTL6uPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.144.0/20
46.37.64.0/19
86.106.0.0/21
86.106.64.0/21
88.212.188.0/24
88.212.190.0/24
89.32.112.0/21
89.35.136.0/21
89.36.0.0/21
89.37.72.0/21
89.38.16.0/21
89.39.16.0/20
89.39.152.0/21
91.151.96.0/20
93.114.144.0/20
171.33.232.0/21
185.13.200.0/22
195.82.100.0/22
195.82.112.0/21
195.82.126.0/23
212.225.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:4c:b3:b9:0b:a7:b9:81:92:7d:e2:cf:a7:15:a6:31:85:19:
ac:4c:cd:e2:31:3d:54:9f:e9:f0:51:d4:b3:83:04:54:cb:7c:
70:2e:f5:4f:c8:06:28:57:ec:12:c6:fb:67:d0:c8:00:43:9b:
a4:7a:fa:68:4b:89:de:85:a0:cc:54:8f:ed:fd:9d:56:d7:9f:
b7:1b:7a:42:9b:af:63:9e:f9:68:39:cd:01:c5:4c:09:c2:fb:
9f:b8:61:d8:42:22:e1:16:f6:ec:51:6e:f4:ee:90:24:5b:c4:
9b:59:18:65:aa:ee:1b:81:a4:b2:02:74:61:aa:3a:79:4a:48:
09:fc:6d:5c:88:77:30:51:bc:37:5a:00:41:6e:ef:04:12:95:
cd:f7:07:b8:cc:96:93:d2:92:4c:8b:9b:56:98:b0:60:4f:80:
94:b4:33:f4:67:3f:9f:4b:d2:37:3b:e0:c7:b5:2f:da:13:74:
e4:2c:04:7f:7e:03:ac:50:0c:3a:97:a2:ca:32:dd:ad:56:e7:
cb:b5:e6:75:ce:9c:a0:64:72:42:da:4f:ab:04:e6:6b:62:f6:
79:37:84:7b:d5:7b:8c:45:7d:51:68:f1:df:22:c8:10:59:12:
bc:48:66:d0:cb:7a:23:dd:5b:aa:ab:b2:e4:56:5c:01:42:fc:
41:bf:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org