Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lk7c1FOcYtbOSGCKsLpsO2SqYuA.roa
File: lk7c1FOcYtbOSGCKsLpsO2SqYuA.roa (raw, json)
Hash identifier: RN8ROLMOQ0FfCJvAPB7k9FcTgB+IRbF6vzu7B44d4jc=
Subject key identifier: 96:4E:DC:D4:53:9C:62:D6:CE:48:60:8A:B0:BA:6C:3B:64:AA:62:E0
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01910DEB3870181313F2FC4CE1245A1CD7F8
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lk7c1FOcYtbOSGCKsLpsO2SqYuA.roa
Signing time: Thu 01 Aug 2024 12:30:04 +0000
ROA not before: Thu 01 Aug 2024 12:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
46.10.0.0/16 maxlen: 24
46.10.166.0/23 maxlen: 24
46.10.193.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
62.73.64.0/18 maxlen: 24
62.176.64.0/19 maxlen: 24
62.176.96.0/19 maxlen: 24
62.176.117.0/24 maxlen: 24
62.176.124.54/32 maxlen: 32
77.78.0.0/18 maxlen: 24
77.85.0.0/16 maxlen: 24
77.85.128.0/19 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
78.154.0.0/19 maxlen: 24
79.100.0.0/16 maxlen: 24
82.137.64.0/18 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
83.148.64.0/18 maxlen: 24
83.228.0.0/17 maxlen: 32
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
84.238.128.0/22 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
87.116.82.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
87.126.134.0/24 maxlen: 24
87.243.80.0/20 maxlen: 24
87.243.96.0/21 maxlen: 24
87.243.104.0/21 maxlen: 24
87.243.112.0/22 maxlen: 22
87.243.116.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.165.0/24 maxlen: 24
87.254.166.0/23 maxlen: 24
87.254.168.0/24 maxlen: 24
87.254.169.0/24 maxlen: 24
87.254.170.0/23 maxlen: 24
87.254.172.0/23 maxlen: 24
87.254.172.0/24 maxlen: 24
87.254.173.0/24 maxlen: 24
88.87.0.0/19 maxlen: 24
90.154.128.0/17 maxlen: 24
93.152.128.0/18 maxlen: 24
93.152.192.0/21 maxlen: 24
93.152.200.0/22 maxlen: 24
93.152.204.0/24 maxlen: 24
93.152.236.0/22 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
94.236.180.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
95.42.0.0/15 maxlen: 24
95.43.0.0/17 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
95.87.192.0/18 maxlen: 24
109.120.192.0/18 maxlen: 24
109.199.128.0/19 maxlen: 24
151.237.140.0/23 maxlen: 24
185.20.156.0/22 maxlen: 24
185.211.200.0/22 maxlen: 24
212.5.128.0/19 maxlen: 24
212.25.32.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
212.50.64.0/19 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.16.32.0/19 maxlen: 24
213.91.128.0/17 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8:2:5::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 16 Oct 2024 13:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:eb:38:70:18:13:13:f2:fc:4c:e1:24:5a:1c:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Aug 1 12:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=964edcd4539c62d6ce48608ab0ba6c3b64aa62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:c6:c4:99:a4:70:f0:d6:f6:30:f5:df:cf:
31:f0:96:6b:9a:1a:fc:0a:b5:bf:a4:8c:b8:54:42:
fd:61:80:ab:06:4f:1e:e6:78:38:c9:c4:e6:0a:c7:
c1:c4:47:29:f9:e5:b7:d1:b6:45:01:e5:04:a7:44:
a6:29:10:0e:82:6f:a0:1e:03:42:8f:a3:7c:4b:93:
6d:8a:81:73:bd:e3:9d:eb:39:fa:b4:27:7c:e7:71:
94:69:2f:b1:69:24:0a:21:da:13:ce:bb:c6:17:b7:
bd:5f:82:bc:ec:bf:e3:ef:7d:a2:96:51:34:89:b5:
a2:8e:98:60:60:42:4f:85:a2:81:29:93:7f:aa:ea:
20:d6:07:6d:b1:14:89:eb:4d:9d:ae:3e:12:4b:bb:
e6:41:97:1b:89:c6:fd:cb:ae:f8:84:2b:28:9d:6d:
dc:cc:7e:bb:ce:d7:ee:53:3b:6e:0f:e1:4d:db:ec:
a1:6a:d0:03:e1:66:10:51:79:f9:db:03:cb:25:3b:
cd:20:81:be:0a:ec:8f:62:64:78:52:e5:e9:56:16:
86:11:e2:58:ce:02:02:80:77:b8:fd:70:c3:d0:60:
3f:26:4d:65:77:d0:d9:1d:12:79:6d:64:53:70:12:
4e:66:69:fa:78:8d:57:cb:67:59:36:8c:d8:e2:ae:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4E:DC:D4:53:9C:62:D6:CE:48:60:8A:B0:BA:6C:3B:64:AA:62:E0
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lk7c1FOcYtbOSGCKsLpsO2SqYuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.78.0.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.82.0/24
87.126.0.0/16
87.243.80.0-87.243.127.255
87.254.160.0/19
88.87.0.0/19
90.154.128.0/17
93.152.128.0-93.152.204.255
93.152.236.0/22
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
109.120.192.0/18
109.199.128.0/19
151.237.140.0/23
185.20.156.0/22
185.211.200.0/22
212.5.128.0/19
212.25.32.0/19
212.39.64.0/19
212.50.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
8c:76:cb:9d:bd:1c:a8:a9:41:d0:39:0e:b7:bb:d5:17:12:d1:
5a:10:b0:d5:26:68:50:96:b0:e8:89:6a:1d:23:98:08:1b:c1:
bf:b0:64:4b:f7:8f:11:b1:9f:2c:bc:1a:90:58:a2:22:43:c0:
28:fd:1d:52:81:dc:c4:27:b1:57:ab:b2:e1:41:7f:20:ab:84:
b2:42:37:ac:82:94:ac:e3:67:32:71:47:96:fa:47:da:39:dd:
a9:86:26:b0:0b:7c:2c:4a:3c:43:d3:5e:39:4d:a1:f5:7a:80:
fa:19:49:33:60:41:10:07:52:65:a3:31:9d:a3:a9:21:31:72:
93:2a:26:1a:e8:df:64:0a:a0:05:50:f1:9f:93:e1:3c:c0:68:
ca:87:0e:9e:4e:0d:30:d7:0d:d1:30:b3:5d:69:84:8f:10:c9:
3a:39:21:24:15:2f:97:74:d5:22:5f:c3:07:cd:25:59:24:a7:
7c:56:3c:c4:50:d1:26:06:c3:37:70:12:19:d4:b7:75:d4:29:
6b:12:10:82:c9:4f:0b:0a:94:f2:b9:2a:1e:8c:ba:bb:88:ab:
74:61:c7:2f:cc:77:b0:34:f8:dd:9a:3c:d6:55:cd:44:8d:c2:
d6:3b:1c:7d:91:1a:e1:0b:ba:c6:54:68:12:19:10:f7:78:c6:
bc:99:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 15:43:23 2024 by rpki-client on console-ams.rpki-client.org