Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GWQ5L46CXMqziP8m84imoo5TeCo.roa
File: GWQ5L46CXMqziP8m84imoo5TeCo.roa (raw, json)
Hash identifier: PAV21Qt3yBHW3qnPOCDyO1rmNnW8fUh3w1J4CZbTtyE=
Subject key identifier: 19:64:39:2F:8E:82:5C:CA:B3:88:FF:26:F3:88:A6:A2:8E:53:78:2A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018F05AD9478C94D2219809C94F62096D106
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GWQ5L46CXMqziP8m84imoo5TeCo.roa
Signing time: Mon 22 Apr 2024 12:00:12 +0000
ROA not before: Mon 22 Apr 2024 12:00:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
46.10.0.0/16 maxlen: 24
46.10.166.0/23 maxlen: 24
46.10.193.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
62.73.64.0/18 maxlen: 24
62.176.64.0/19 maxlen: 24
62.176.96.0/19 maxlen: 24
62.176.117.0/24 maxlen: 24
62.176.124.54/32 maxlen: 32
77.85.0.0/16 maxlen: 24
77.85.128.0/19 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
78.154.0.0/19 maxlen: 24
79.100.0.0/16 maxlen: 24
82.137.64.0/18 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
83.148.64.0/18 maxlen: 24
83.228.0.0/17 maxlen: 32
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
84.238.128.0/22 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
87.116.66.160/32 maxlen: 32
87.116.82.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
87.126.134.0/24 maxlen: 24
87.243.80.0/20 maxlen: 24
87.243.96.0/21 maxlen: 24
87.243.104.0/21 maxlen: 24
87.243.112.0/22 maxlen: 22
87.243.116.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.165.0/24 maxlen: 24
87.254.166.0/23 maxlen: 24
87.254.168.0/24 maxlen: 24
87.254.169.0/24 maxlen: 24
87.254.170.0/23 maxlen: 24
87.254.172.0/23 maxlen: 24
87.254.172.0/24 maxlen: 24
87.254.173.0/24 maxlen: 24
88.87.0.0/19 maxlen: 24
90.154.128.0/17 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
94.236.180.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
95.42.0.0/15 maxlen: 24
95.43.0.0/17 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
95.87.192.0/18 maxlen: 24
109.199.128.0/19 maxlen: 24
151.237.140.0/23 maxlen: 24
185.20.156.0/22 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
212.50.64.0/19 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.16.32.0/19 maxlen: 24
213.91.128.0/17 maxlen: 24
213.91.154.0/24 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8:2:5::/64 maxlen: 64
Validation: Failed, certificate revoked on Tue 14 May 2024 11:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:ad:94:78:c9:4d:22:19:80:9c:94:f6:20:96:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Apr 22 12:00:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1964392f8e825ccab388ff26f388a6a28e53782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:18:da:a9:af:ef:a5:cb:87:d6:01:4d:5e:
fd:fa:e9:15:ed:82:79:00:53:d6:2e:3d:df:36:14:
58:e8:5b:58:da:d3:24:80:48:b6:38:ea:7a:d6:a8:
76:f8:95:31:d1:bd:a5:05:d2:6a:7a:41:ae:44:1b:
78:96:fd:d7:16:3f:f0:52:3b:97:79:84:19:94:cb:
ba:9a:c1:fc:72:b6:7b:fc:1a:4c:99:14:9a:e2:0f:
4a:a8:c4:c2:51:97:90:4b:30:8d:f2:7d:5c:50:91:
5e:9d:49:43:7a:ec:b3:3a:9c:80:e3:da:82:8a:a9:
70:3d:1f:d1:9b:3b:57:fa:28:f4:58:e0:aa:45:c9:
8f:ab:83:2d:ef:2a:f3:d8:da:49:c8:a1:dd:45:d9:
2d:20:fb:62:8e:93:6f:9d:8b:d8:10:04:99:36:62:
3d:5f:ff:62:99:a2:d1:8b:f4:54:fe:14:4a:91:e1:
04:e1:75:2b:de:9b:a7:13:47:03:1d:58:48:2d:bc:
92:a4:56:10:89:e5:b8:3d:6e:78:dd:e7:68:3e:88:
7e:d5:a4:ac:7e:37:7b:46:9b:11:57:80:c1:a9:d9:
04:08:26:83:4b:bc:56:89:13:ba:d5:96:bc:b8:82:
96:cc:4b:a6:57:19:02:b4:3a:97:ad:d6:a1:31:4c:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:39:2F:8E:82:5C:CA:B3:88:FF:26:F3:88:A6:A2:8E:53:78:2A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GWQ5L46CXMqziP8m84imoo5TeCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.66.160/32
87.116.82.0/24
87.126.0.0/16
87.243.80.0-87.243.127.255
87.254.160.0/19
88.87.0.0/19
90.154.128.0/17
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
109.199.128.0/19
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.50.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
6e:5c:c7:3b:a8:0b:93:9e:63:83:f6:86:8f:70:34:0c:04:0f:
41:54:91:7f:ce:5c:4e:bc:2d:39:20:41:60:b2:68:d1:05:b0:
a4:7e:1e:6c:8e:e6:f5:67:ca:50:cc:49:eb:d4:be:24:bb:30:
50:28:d7:77:5a:86:22:1b:8b:57:35:b8:c9:51:31:01:07:28:
42:79:1b:fc:80:1b:8f:16:cb:ad:79:4d:50:da:ef:2f:25:86:
3f:9a:d1:5a:35:82:eb:0b:b7:4d:a8:3b:94:f9:03:3b:56:68:
3d:ee:90:05:95:7a:18:c7:a8:08:35:20:f9:5a:c3:c2:f3:1d:
41:3d:2a:06:1d:da:3b:10:c1:3c:94:77:49:16:b6:d3:d2:95:
06:a7:2e:65:f5:c7:7d:06:82:d4:81:be:79:c6:60:83:ed:c8:
67:c8:e9:a0:0f:c2:8d:6e:e6:f7:5b:aa:8b:6d:5e:d1:c1:e8:
54:5f:55:95:a7:45:46:2d:fc:c1:e6:bb:79:30:6a:b4:a5:77:
7e:ef:84:9d:49:8a:c7:30:ea:ae:01:32:61:83:a1:c8:bb:e0:
a7:1c:e9:71:b6:94:79:0d:19:08:62:e2:36:f3:24:c7:c5:da:
ea:b7:ec:35:47:e3:ec:f4:c2:c1:e1:3d:54:1c:d9:db:7e:e6:
54:2e:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 15:20:44 2024 by rpki-client on console-ams.rpki-client.org