Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/HlltuN_LV82PxRyl5LYYEEAw-T4.roa
File: HlltuN_LV82PxRyl5LYYEEAw-T4.roa (raw, json)
Hash identifier: UW/9puhsMGyNsaOsg0hGpi1gZBna0NcMcyrM/syN3z0=
Subject key identifier: 1E:59:6D:B8:DF:CB:57:CD:8F:C5:1C:A5:E4:B6:18:10:40:30:F9:3E
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 018E17EA66D659A82370EFAB461CBE0735E4
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/HlltuN_LV82PxRyl5LYYEEAw-T4.roa
Signing time: Thu 07 Mar 2024 07:57:01 +0000
ROA not before: Thu 07 Mar 2024 07:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 May 2024 16:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:ea:66:d6:59:a8:23:70:ef:ab:46:1c:be:07:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 7 07:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e596db8dfcb57cd8fc51ca5e4b618104030f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:3d:7e:94:da:82:f3:91:69:bc:94:cf:63:
fd:e6:f1:e8:00:55:5b:c3:45:cc:a6:e3:a6:0e:2d:
8d:4b:59:07:44:ce:5f:99:c1:ac:03:f7:cb:98:45:
fb:d5:dc:ee:cf:e5:d9:34:8a:e6:50:46:b2:5a:86:
4f:94:3f:42:f5:08:3d:ec:d9:fe:7b:fc:11:a1:f3:
86:f2:78:4f:7d:ff:29:1b:25:b3:eb:c5:bf:a3:ab:
4e:fc:b2:8c:a1:8c:a8:af:a9:65:86:e1:ff:ba:10:
df:1d:b5:24:06:e5:88:28:d6:e5:d5:32:ab:4b:3f:
53:c0:0c:a0:95:60:2c:90:48:51:24:70:bb:00:8a:
2b:6f:5e:47:ff:73:f9:7f:1c:86:24:77:d4:28:4b:
3a:7c:26:e8:cc:ad:b4:4e:75:ce:26:7a:3b:b9:9c:
3b:c1:61:78:0d:cf:d7:05:dd:f1:39:95:12:97:4a:
cb:64:98:cd:3c:86:51:d8:3e:d1:53:2b:b3:95:99:
9b:fe:80:b9:d3:38:48:9b:88:9e:f4:f8:15:d7:41:
43:15:78:e4:e5:60:8f:5c:95:a5:9a:0c:a0:a1:6c:
ae:1b:9f:87:7c:39:0a:bd:94:c0:95:74:90:90:60:
de:9c:a8:93:0d:20:8f:35:49:ae:06:bb:99:af:16:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:6D:B8:DF:CB:57:CD:8F:C5:1C:A5:E4:B6:18:10:40:30:F9:3E
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/HlltuN_LV82PxRyl5LYYEEAw-T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/22
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
87.236.16.0/21
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
213.139.208.0/22
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
47:52:5b:e2:f5:51:d7:2d:a7:a1:af:05:78:17:2e:1d:75:5c:
fc:b9:42:fb:58:fa:04:03:d9:e4:01:37:cd:13:6c:36:e6:44:
80:62:ae:8d:df:2f:26:93:21:aa:8a:2e:f4:7a:be:f6:a6:de:
57:9f:01:06:30:11:97:cb:99:b3:4c:e9:d8:12:65:c3:0d:d5:
9c:77:fd:ea:82:a0:f4:77:4a:be:09:35:9a:00:56:d8:d0:b5:
53:d6:5a:aa:77:04:a6:f3:14:e7:85:9c:d0:e5:74:0f:a2:92:
5f:ef:9f:33:10:0b:42:3e:3a:7d:2c:69:5e:cb:b3:b6:18:09:
3e:35:41:a9:86:5c:e1:e2:ff:ad:b6:f8:85:78:12:28:1d:09:
5e:69:cb:4a:96:bb:00:8d:71:ab:3c:36:77:89:80:31:f6:58:
c0:21:2a:ae:bb:61:c9:71:24:24:81:f2:53:60:1d:0f:76:ad:
d2:ad:fa:3d:14:bf:b1:1c:ff:7b:a9:ad:cc:8f:00:db:6e:c3:
52:e3:d0:46:92:89:45:81:47:43:73:21:ac:66:11:50:19:94:
e5:31:e0:ca:4f:36:fa:68:0a:ec:a5:0a:48:c7:11:68:19:22:
d2:3c:13:b2:05:d4:e2:fa:db:d1:77:af:20:f5:70:74:e6:a5:
61:bc:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:14:06 2024 by rpki-client on console-ams.rpki-client.org