Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B9fTq9dqNHh7jEZhMjggF61XJQs.roa
File: B9fTq9dqNHh7jEZhMjggF61XJQs.roa (raw, json)
Hash identifier: P2o6GyWQ1M7qFILqHnrSoxdi6E82FwIj/TPjpqSxlNE=
Subject key identifier: 07:D7:D3:AB:D7:6A:34:78:7B:8C:46:61:32:38:20:17:AD:57:25:0B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010E78677BD2A1C90FD2C5A67B27F8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B9fTq9dqNHh7jEZhMjggF61XJQs.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 37.46.148.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
89.39.164.0/23 maxlen: 24
89.39.162.0/23 maxlen: 24
193.19.107.0/24 maxlen: 24
45.12.180.0/22 maxlen: 24
89.46.115.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.85.0/24 maxlen: 24
45.134.136.0/22 maxlen: 24
185.228.224.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
93.114.132.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
93.113.38.0/23 maxlen: 24
188.213.241.0/24 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
95.214.156.0/22 maxlen: 24
89.32.190.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
188.240.72.0/22 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
84.247.24.0/22 maxlen: 24
86.105.168.0/24 maxlen: 24
89.45.8.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
45.11.8.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
84.247.52.0/23 maxlen: 24
86.105.221.0/24 maxlen: 24
185.205.188.0/22 maxlen: 24
45.145.44.0/22 maxlen: 24
193.84.133.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
86.104.134.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.194.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
185.239.240.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
45.10.184.0/22 maxlen: 24
94.103.248.0/22 maxlen: 24
193.218.33.0/24 maxlen: 24
185.184.132.0/22 maxlen: 24
185.211.116.0/22 maxlen: 24
45.9.92.0/22 maxlen: 24
188.212.4.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
45.9.184.0/22 maxlen: 24
93.117.136.0/24 maxlen: 24
5.183.224.0/22 maxlen: 24
185.244.136.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
81.21.236.0/22 maxlen: 24
45.143.52.0/22 maxlen: 24
89.35.114.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
85.204.117.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
89.34.216.0/23 maxlen: 24
94.176.4.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
89.34.179.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
45.13.180.0/22 maxlen: 24
89.40.180.0/24 maxlen: 24
188.215.249.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
77.81.3.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
89.34.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 09:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0e:78:67:7b:d2:a1:c9:0f:d2:c5:a6:7b:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07d7d3abd76a34787b8c466132382017ad57250b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:be:7d:8f:25:26:30:01:e3:ef:00:d7:8b:
8d:e7:55:ab:cd:79:e4:c8:b1:6e:59:9c:3c:dc:64:
93:2b:e4:28:dc:ea:e8:d9:01:b8:11:31:2f:5b:56:
fc:c4:0f:a5:14:e4:08:4c:84:22:82:10:e8:0d:67:
f2:87:24:63:99:be:fc:b2:d2:40:ab:bf:9b:de:4a:
ec:83:b6:57:1e:19:31:85:5b:9f:c8:a8:b6:dd:12:
6b:f8:91:c4:cf:c6:cc:90:b2:ff:34:b0:70:82:c0:
14:70:57:6b:48:b3:8b:af:a7:fb:3c:ac:51:63:04:
d5:bc:19:a9:28:a6:ad:e3:99:63:59:56:00:23:1a:
bc:cc:f6:f7:67:15:c8:be:39:ca:96:dd:af:56:83:
2d:c2:83:f6:83:5e:b9:46:80:e0:44:b3:5a:eb:f2:
47:20:f8:88:73:0c:56:ba:55:78:a7:30:6f:9f:c8:
5d:c9:b2:81:c8:e2:6f:89:77:33:5d:ee:73:60:ec:
d8:5d:7e:0c:0e:e6:ed:e0:63:f1:81:64:01:63:0d:
f4:02:30:6f:1d:da:86:49:38:5a:a1:0c:b1:ed:be:
02:82:3a:56:1d:3d:ab:fd:ab:e7:39:e3:ab:49:73:
b8:0a:70:3d:cc:76:32:1f:a3:ca:bb:ae:c9:19:4a:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:D3:AB:D7:6A:34:78:7B:8C:46:61:32:38:20:17:AD:57:25:0B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/B9fTq9dqNHh7jEZhMjggF61XJQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.134.128.0/24
45.134.130.0/24
45.134.136.0/22
45.143.52.0/22
45.145.44.0/22
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.184.132.0/22
185.192.18.0/23
185.205.188.0/22
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/22
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
45:ee:5d:6e:4a:a3:b8:8b:69:83:bb:2a:b8:83:ba:25:08:18:
e7:81:96:ad:ca:39:86:f5:0f:39:92:78:d0:74:24:1f:54:a7:
46:f6:56:54:e1:65:38:b7:e3:37:2e:f0:ae:1f:60:a5:15:c3:
f2:bd:e1:6b:9f:f9:bb:28:67:0d:6b:2f:72:ee:6a:d6:9f:14:
d0:27:18:6e:82:a8:8e:07:3b:b3:83:30:6c:32:e8:6b:0d:8a:
01:41:0a:71:aa:a4:0a:7a:5a:ba:b2:04:a5:7f:14:fe:3b:e6:
06:1c:19:1b:24:8b:90:08:9f:4f:6c:50:e7:55:ae:34:07:3f:
0b:f3:da:9a:78:47:4a:ea:ed:4f:2b:49:b0:1c:b6:0a:4b:27:
6a:12:8d:4e:51:11:74:8a:13:23:3d:63:3f:cc:3c:e1:48:80:
0b:a6:7e:23:8e:51:47:2a:89:d8:d8:97:94:88:b4:fa:53:c7:
61:da:cc:57:d3:65:82:30:3a:6a:21:cf:2a:67:18:32:d6:fc:
cc:30:7e:41:f1:bb:a3:5e:e6:7b:33:21:c7:59:a4:b4:b2:c3:
d3:cf:02:bc:25:a9:55:4e:cc:8c:38:09:fd:c5:a5:10:40:36:
12:4d:db:10:b4:f7:51:e7:69:b4:df:0f:94:55:09:57:29:0a:
dd:ea:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:09 2024 by rpki-client on console-ams.rpki-client.org