Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-4yuoBlXRKd12JENAUCR_K1enZM.roa
File: 1-4yuoBlXRKd12JENAUCR_K1enZM.roa (raw, json)
Hash identifier: xeGszViti2L5cF99+ELIhy6PbhiUJD/eF9ByRJma0Fs=
Subject key identifier: FB:8C:AE:A0:19:57:44:A7:75:D8:91:0D:01:40:91:FC:AD:5E:9D:93
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019175E75F03F3D9731C0742F943F0339BEA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-4yuoBlXRKd12JENAUCR_K1enZM.roa
Signing time: Wed 21 Aug 2024 17:06:22 +0000
ROA not before: Wed 21 Aug 2024 17:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 17:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:e7:5f:03:f3:d9:73:1c:07:42:f9:43:f0:33:9b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 21 17:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb8caea0195744a775d8910d014091fcad5e9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:be:81:08:ec:72:cb:1c:7a:67:57:77:aa:
1a:6d:10:0a:b5:f7:e7:e4:93:1e:03:b0:69:b6:50:
a5:6a:67:e9:fc:ec:2a:fc:f1:73:af:9e:65:82:7a:
45:e0:4b:08:98:a8:c7:8b:5e:1f:4c:25:8a:0f:3c:
53:6c:3f:f3:ca:0e:3f:81:6b:c6:ce:55:73:c5:0a:
07:ca:65:04:f1:c8:6c:be:c7:c5:36:39:28:19:7d:
fe:52:52:f8:14:02:7a:e0:9b:e5:9d:a5:c6:25:13:
74:59:77:b3:03:42:dc:d1:21:7e:8c:f5:03:dc:8b:
73:10:55:4b:f0:d0:d8:e3:75:4d:55:8c:e0:d5:f5:
fb:38:56:06:eb:4b:1e:af:7c:66:6a:71:ce:fe:28:
b7:31:0b:24:28:aa:4a:7f:b8:d0:08:73:da:fc:fe:
78:af:a8:8e:cd:00:58:37:7e:92:2c:17:f6:41:7f:
6c:97:cf:3d:1f:6c:5e:bd:93:44:2a:b7:9c:99:42:
4f:29:67:1b:88:b6:e8:9e:5b:3a:26:d3:e4:a8:07:
ac:10:a9:92:4c:0f:ea:ff:6d:80:0b:ac:27:a3:72:
d0:5d:05:5e:c6:2e:59:d0:61:cb:d3:10:5b:01:ed:
0b:23:f1:f5:e2:92:26:10:b7:8a:ab:ca:2d:2f:07:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:AE:A0:19:57:44:A7:75:D8:91:0D:01:40:91:FC:AD:5E:9D:93
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-4yuoBlXRKd12JENAUCR_K1enZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/24
45.143.55.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/24
84.247.27.0/24
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/24
94.103.251.0/24
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/23
185.192.18.0/23
185.205.188.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/24
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
3b:85:2a:01:52:28:f1:59:0e:f8:37:4d:2e:00:28:05:3d:e7:
ef:5a:94:e8:cf:45:e4:58:76:ea:03:eb:a2:db:4a:b6:1f:3d:
09:aa:dd:cc:32:6a:13:3f:f9:88:e6:24:d5:1a:a0:76:e5:2a:
e3:e2:c7:02:3a:47:c3:4c:1d:78:0a:8d:9c:aa:83:d1:1d:bd:
27:2b:a6:f7:6c:09:ac:2b:1e:e6:18:71:68:58:a8:a9:44:da:
20:93:35:4b:ac:27:39:eb:0c:09:36:8f:4a:cf:f2:24:7e:a1:
60:79:3d:12:66:75:11:ab:e7:eb:04:54:fb:b4:bb:f2:72:79:
4e:b7:a4:03:1d:44:ca:95:af:28:8b:71:37:ea:8e:11:ae:04:
59:f3:0a:d5:59:e9:d0:01:3c:de:e7:08:ad:5a:ae:3e:2c:83:
04:96:8f:87:79:e7:ce:6e:f9:3d:37:ab:60:51:b8:7a:e0:1e:
23:29:5d:59:61:ce:77:77:c7:1e:1b:90:20:72:0a:65:6d:7f:
8a:a3:a0:de:8a:82:a7:68:d4:4d:7b:c5:b0:c5:e2:bd:d3:3b:
8f:98:1a:b3:34:83:ba:96:27:b9:38:fb:31:bf:8b:9f:0b:4d:
a0:02:f1:e8:bd:92:04:c9:14:06:cb:0d:8e:1a:57:77:35:71:
ea:be:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:40 2024 by rpki-client on console-ams.rpki-client.org