Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KnMvXx0msrDob0OtuFIoo7eRYhM.roa
File: KnMvXx0msrDob0OtuFIoo7eRYhM.roa (raw, json)
Hash identifier: eB6y0Cn+LujnewzfUxtthPGea8ASlKgWWMNP2sCQchU=
Subject key identifier: 2A:73:2F:5F:1D:26:B2:B0:E8:6F:43:AD:B8:52:28:A3:B7:91:62:13
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019082A4381473CD49F28061F90C0F7BE4D1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KnMvXx0msrDob0OtuFIoo7eRYhM.roa
Signing time: Fri 05 Jul 2024 11:25:18 +0000
ROA not before: Fri 05 Jul 2024 11:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/23 maxlen: 24
45.143.55.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/22 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/22 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.184.134.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/23 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 17:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:a4:38:14:73:cd:49:f2:80:61:f9:0c:0f:7b:e4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 5 11:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a732f5f1d26b2b0e86f43adb85228a3b7916213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:4f:52:16:f7:c9:6b:56:71:2a:53:fa:86:
b9:83:79:3a:fb:64:15:6e:fd:2c:e9:11:3a:d5:9e:
ae:6d:49:a8:de:86:cc:25:6b:8f:05:ce:bb:cb:87:
a4:1b:ab:70:b0:f4:d2:78:b6:ed:c9:2c:1e:5c:c9:
a3:41:4f:d3:9b:36:3a:ea:8b:4a:07:ec:1e:b9:91:
71:86:bb:ff:ce:3b:d7:c6:31:4a:2b:fc:fd:65:e6:
5e:a7:e4:f8:9c:ee:f4:f0:de:a4:30:72:2a:48:3d:
f1:9b:39:1f:19:68:2f:6a:5a:78:76:f7:b8:5f:fc:
26:65:e3:6c:76:0e:2a:8a:8e:6f:ba:18:d1:68:bc:
76:0e:bb:c5:76:61:84:dc:5e:9b:2d:ae:c6:ce:6e:
56:a2:07:89:62:b5:23:2a:bf:e6:14:a7:4d:7c:0b:
34:b5:c7:6a:38:8a:7d:55:e9:0b:8c:80:3f:70:97:
86:ac:f0:33:fe:c9:54:53:58:4f:d7:2d:39:90:4c:
0f:3f:4f:1a:ed:da:a7:47:97:ba:65:85:b4:44:7a:
b4:9e:77:42:2b:99:95:11:18:b1:1b:2b:bc:cf:77:
5f:29:c9:33:04:4f:28:44:aa:32:87:d4:55:8c:83:
27:84:15:0e:fc:d4:ee:ec:da:b6:7a:80:f4:ec:79:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:2F:5F:1D:26:B2:B0:E8:6F:43:AD:B8:52:28:A3:B7:91:62:13
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KnMvXx0msrDob0OtuFIoo7eRYhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/23
45.143.55.0/24
45.145.44.0/23
45.145.47.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0-185.184.134.255
185.192.18.0/23
185.205.188.0/24
185.205.190.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0-188.240.74.255
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
2a:ee:aa:a3:d6:89:49:6d:4f:87:a7:70:cf:ea:86:69:2b:88:
49:e5:ce:67:d3:5b:45:bf:b7:77:eb:11:22:06:95:b1:e1:24:
5d:3a:92:ee:cf:45:99:bd:d6:0b:35:9e:76:38:0b:50:e7:35:
1f:6f:d3:73:5f:77:46:77:de:ef:cf:8e:3a:7b:ce:f1:43:62:
60:e1:96:b5:e7:6f:15:81:8f:29:60:88:7b:79:e2:72:6b:f3:
b4:03:33:34:32:dc:52:05:11:a0:55:4a:94:4d:8d:d9:68:74:
94:bf:fa:40:b0:68:b5:f5:e1:b1:07:bc:47:09:0d:3e:b0:52:
fa:e0:ef:81:2a:28:fd:70:23:c3:ec:f3:5c:dc:c2:ea:7f:f2:
dc:9e:41:4a:31:12:dc:5e:ba:61:f0:e6:2f:6a:8a:17:d5:6d:
94:51:9a:89:35:d2:28:88:b4:fc:82:57:f2:c1:db:df:93:a7:
e7:2d:0b:5d:aa:46:59:04:a8:ae:e4:2c:98:a9:2a:28:02:44:
b7:37:4b:42:39:34:8e:91:30:01:bc:4b:48:35:8a:74:03:3f:
44:c4:0d:0b:9e:e5:c8:b4:ff:5e:06:9d:0a:92:ff:95:3d:33:
ee:e6:bc:7d:8a:ce:10:69:82:df:77:5c:bd:9c:70:ba:dd:e7:
c8:4e:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org