Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0ZCCem5Vr-qafBVV_jX3DB311KY.roa
File: 0ZCCem5Vr-qafBVV_jX3DB311KY.roa (raw, json)
Hash identifier: cDNAsCrr8eR3hZHZyykxrR3RGa3pZUivz7HsikV29/c=
Subject key identifier: D1:90:82:7A:6E:55:AF:EA:9A:7C:15:55:FE:35:F7:0C:1D:F5:D4:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018FB88EE2D13B6B2D8DDA806C7A13F2407C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0ZCCem5Vr-qafBVV_jX3DB311KY.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/23 maxlen: 24
45.143.55.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/22 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/22 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.184.134.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.205.190.0/23 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/23 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 11:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e2:d1:3b:6b:2d:8d:da:80:6c:7a:13:f2:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d190827a6e55afea9a7c1555fe35f70c1df5d4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:77:bd:a3:1a:04:88:ba:06:97:a4:43:e1:
71:57:f5:85:9f:e1:9d:eb:1a:91:e6:0c:2e:34:19:
6a:fa:8c:bc:25:ed:ed:91:d0:ba:10:be:81:a3:eb:
ef:ef:e9:2b:1c:7f:f8:5b:f7:c3:a8:ef:4f:00:c6:
82:cf:f5:8c:4c:b8:6a:c4:8b:84:23:7b:b7:03:c1:
67:80:91:da:a4:54:d2:c3:f9:8c:e9:a6:52:75:2e:
03:01:9e:7d:3f:bf:71:94:f4:67:ca:e5:85:56:d3:
59:e8:c8:43:27:e5:61:cb:3b:60:f7:e0:48:c9:f2:
9f:86:ca:f1:02:10:ce:55:68:d1:3c:5c:cb:75:ed:
9c:7f:a6:0f:48:89:e0:6b:08:08:45:b0:9c:bb:08:
aa:ec:9d:d4:94:11:50:27:d7:51:74:3e:bc:13:fa:
e8:78:28:9d:af:f4:43:25:3c:5e:e6:b2:a0:d1:c1:
df:76:3f:59:bc:33:da:1f:4d:fc:ca:ab:84:1c:35:
cb:1c:30:d9:cc:4a:7f:75:9d:46:85:f1:04:41:7c:
f7:5a:20:fd:0f:6a:35:61:94:91:b3:1a:57:fa:41:
aa:43:36:89:e4:19:af:bf:eb:ae:b8:5a:38:c9:8d:
9b:a4:0d:3f:49:bc:68:3f:02:fa:ef:66:bd:be:47:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:82:7A:6E:55:AF:EA:9A:7C:15:55:FE:35:F7:0C:1D:F5:D4:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0ZCCem5Vr-qafBVV_jX3DB311KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/23
45.143.55.0/24
45.145.44.0/23
45.145.47.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0-185.184.134.255
185.192.18.0/23
185.205.188.0/24
185.205.190.0/23
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0-188.240.74.255
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
19:6b:4b:13:9e:a8:fe:35:58:b5:69:8b:d3:0a:3a:44:55:25:
0b:15:0c:a1:01:52:08:e8:c3:19:72:54:c9:3f:4a:de:33:64:
4c:8b:89:d3:98:d6:87:62:b1:de:be:f2:04:77:1c:0b:01:c1:
9b:67:58:0e:94:06:ac:8a:af:2b:9c:e0:33:17:f6:1c:6b:4e:
e2:3f:de:10:a8:aa:12:6e:38:ee:7c:15:a5:9b:bd:94:55:d7:
49:5e:56:18:37:c2:1e:0e:94:27:2c:3c:d7:c1:52:c6:51:81:
bc:db:ac:cc:ca:4e:eb:b5:35:07:74:ab:f0:85:12:6f:80:b6:
61:95:e2:a7:5e:57:1a:78:21:50:57:77:13:6d:29:3f:5e:8e:
a5:ac:60:a0:d3:b5:8e:b7:b9:ee:b9:bf:5e:6c:0d:2f:86:55:
2b:f9:9f:20:ed:0b:12:34:0b:85:7f:cf:b4:fe:b2:50:b9:71:
8c:54:ab:ed:55:de:ae:e1:6a:08:9c:53:3a:d9:2c:d0:01:7e:
be:6f:26:c7:63:7c:96:3d:c2:67:ae:63:29:bc:6c:1e:84:d6:
7b:9b:ec:91:90:08:41:b6:22:1e:9f:c9:e4:27:f9:ce:ed:fd:
00:59:ae:84:d2:49:64:82:f2:a2:28:1d:bb:56:95:ad:8b:c7:
f6:35:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 13:08:45 2024 by rpki-client on console-fra.rpki-client.org