Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hk3VNUTMxZGJsbS72RV_v4camhg.roa
File: hk3VNUTMxZGJsbS72RV_v4camhg.roa (raw, json)
Hash identifier: Hao9GBCIc5FdHSuPf+tETn18uW3PIuc58+VG65XogSE=
Subject key identifier: 86:4D:D5:35:44:CC:C5:91:89:B1:B4:BB:D9:15:7F:BF:87:1A:9A:18
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018BDC6C86469BF579A3FEF521EE575F4E9A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hk3VNUTMxZGJsbS72RV_v4camhg.roa
Signing time: Fri 17 Nov 2023 08:36:21 +0000
ROA not before: Fri 17 Nov 2023 08:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 37.140.222.0/24 maxlen: 24
188.241.248.0/24 maxlen: 24
193.221.210.0/24 maxlen: 24
94.154.126.0/24 maxlen: 24
146.19.110.0/24 maxlen: 24
146.19.132.0/24 maxlen: 24
185.161.123.0/24 maxlen: 24
194.26.200.0/24 maxlen: 24
62.3.57.0/24 maxlen: 24
185.151.145.0/24 maxlen: 24
185.184.216.0/24 maxlen: 24
62.3.5.0/24 maxlen: 24
79.110.228.0/24 maxlen: 24
79.110.230.0/24 maxlen: 24
62.106.91.0/24 maxlen: 24
45.86.37.0/24 maxlen: 24
188.244.126.0/24 maxlen: 24
193.163.192.0/24 maxlen: 24
193.163.195.0/24 maxlen: 24
194.150.76.0/24 maxlen: 24
193.163.193.0/24 maxlen: 24
91.247.172.0/24 maxlen: 24
37.72.136.0/24 maxlen: 24
213.109.149.0/24 maxlen: 24
213.109.156.0/24 maxlen: 24
213.109.159.0/24 maxlen: 24
176.126.119.0/24 maxlen: 24
62.106.74.0/24 maxlen: 24
193.201.14.0/24 maxlen: 24
193.201.12.0/24 maxlen: 24
188.241.159.0/24 maxlen: 24
62.204.60.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
5.180.178.0/24 maxlen: 24
212.24.123.0/24 maxlen: 24
46.253.135.0/24 maxlen: 24
62.122.191.0/24 maxlen: 24
89.38.136.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
193.38.154.0/24 maxlen: 24
212.18.102.0/24 maxlen: 24
212.18.106.0/24 maxlen: 24
217.119.135.0/24 maxlen: 24
185.234.15.0/24 maxlen: 24
213.173.37.0/24 maxlen: 24
91.209.12.0/24 maxlen: 24
176.118.35.0/24 maxlen: 24
91.246.32.0/24 maxlen: 24
91.246.37.0/24 maxlen: 24
193.3.180.0/24 maxlen: 24
91.246.63.0/24 maxlen: 24
193.3.181.0/24 maxlen: 24
91.242.233.0/24 maxlen: 24
193.3.187.0/24 maxlen: 24
176.97.198.0/24 maxlen: 24
176.97.195.0/24 maxlen: 24
185.235.225.0/24 maxlen: 24
176.97.200.0/24 maxlen: 24
185.235.228.0/24 maxlen: 24
176.97.211.0/24 maxlen: 24
185.252.213.0/24 maxlen: 24
62.233.32.0/24 maxlen: 24
62.233.38.0/24 maxlen: 24
91.242.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:6c:86:46:9b:f5:79:a3:fe:f5:21:ee:57:5f:4e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 17 08:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=864dd53544ccc59189b1b4bbd9157fbf871a9a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:50:94:e0:76:5e:e3:6b:3f:ee:0b:ab:f4:f9:
f7:04:1d:d2:8d:72:96:a6:c4:66:ef:b8:f8:d0:58:
a9:29:35:68:19:8a:58:68:0f:42:a0:1a:a4:5f:75:
02:36:d9:55:46:6b:25:f1:ed:5b:ee:0a:cf:a1:07:
5f:3d:f5:64:7b:97:f9:51:cd:d4:55:8d:54:68:77:
09:d0:c3:00:8d:b8:9e:6b:f6:09:d4:70:42:16:f6:
d0:95:c8:be:ac:85:6a:bd:2c:37:fa:92:7b:ce:29:
63:3c:8f:1a:ee:eb:9d:4d:bc:78:d0:d2:32:92:ac:
3b:c6:06:b5:07:9e:0c:0f:6e:e3:fc:20:1f:ee:33:
21:45:08:2e:33:49:ee:65:3a:03:8b:5a:6a:11:08:
04:d0:b9:05:3e:2a:f3:17:98:08:b7:4f:d8:a2:60:
18:a1:f0:a0:62:7a:de:a7:95:a2:f0:1c:e5:14:d9:
af:34:05:92:66:76:33:45:f2:46:de:56:33:b7:f6:
e8:08:70:d9:86:02:ef:81:59:48:44:26:22:9e:81:
58:79:18:2a:c1:34:e7:31:23:e8:dc:b5:d4:64:88:
cc:bf:f6:c3:fd:f1:4c:af:bc:dd:c4:99:23:33:0e:
59:da:94:c9:a3:ff:e5:10:54:2e:9f:75:3e:7e:5f:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:D5:35:44:CC:C5:91:89:B1:B4:BB:D9:15:7F:BF:87:1A:9A:18
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hk3VNUTMxZGJsbS72RV_v4camhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.178.0/24
37.72.136.0/24
37.140.222.0/24
45.86.37.0/24
46.253.135.0/24
62.3.5.0/24
62.3.57.0/24
62.106.74.0/24
62.106.91.0/24
62.122.191.0/24
62.197.128.0/24
62.204.60.0/24
62.233.32.0/24
62.233.38.0/24
78.142.243.0/24
79.110.228.0/24
79.110.230.0/24
89.38.136.0/24
91.209.12.0/24
91.242.233.0/24
91.242.252.0/24
91.246.32.0/24
91.246.37.0/24
91.246.63.0/24
91.247.172.0/24
94.154.126.0/24
146.19.110.0/24
146.19.132.0/24
176.97.195.0/24
176.97.198.0/24
176.97.200.0/24
176.97.211.0/24
176.118.35.0/24
176.126.119.0/24
185.151.145.0/24
185.161.123.0/24
185.184.216.0/24
185.234.15.0/24
185.235.225.0/24
185.235.228.0/24
185.252.213.0/24
188.241.159.0/24
188.241.248.0/24
188.244.126.0/24
193.3.180.0/23
193.3.187.0/24
193.38.154.0/24
193.163.192.0/23
193.163.195.0/24
193.201.12.0/24
193.201.14.0/24
193.221.210.0/24
194.26.200.0/24
194.150.76.0/24
212.18.102.0/24
212.18.106.0/24
212.24.123.0/24
213.109.149.0/24
213.109.156.0/24
213.109.159.0/24
213.173.37.0/24
217.119.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2c:f0:5e:c1:e9:72:60:65:71:bb:b7:77:2c:ea:7c:98:85:
b2:f1:59:8c:26:9d:57:86:98:4a:f9:1c:12:ef:32:13:22:50:
c1:9e:6b:4c:3d:4c:7f:a0:58:b5:55:a7:9c:99:41:8e:f0:05:
87:2d:51:1c:b4:53:28:c0:ee:77:c3:ca:f4:4d:2c:e6:c8:4f:
51:43:23:57:98:a4:ac:35:8c:a9:59:a2:5c:d5:4b:46:d0:29:
60:db:64:78:ce:b7:e7:77:46:37:97:9f:fa:86:ce:65:1c:be:
6d:d6:d8:03:8d:6c:66:9b:ae:a0:ef:79:6e:18:62:99:56:56:
b3:08:a7:c2:12:6c:33:5b:81:6c:e1:9a:bb:9e:22:bc:6c:f1:
d8:89:05:96:8e:f9:13:f6:1c:3c:a1:cc:f0:dd:2a:17:90:7e:
30:b0:15:96:57:c3:7d:04:2c:6f:b3:2a:2f:47:86:00:21:d1:
80:f2:7d:cc:0c:b9:80:47:e8:16:a4:f0:f8:51:27:30:39:d4:
67:31:8a:cb:cd:b3:67:03:a0:f3:73:30:44:53:9c:15:4f:87:
56:94:69:27:c3:d2:a5:c6:3c:10:62:8a:41:fa:66:c6:a3:38:
ad:88:84:8e:66:62:0a:c2:3f:0a:67:42:97:cb:c4:49:a5:58:
d1:8c:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 10:53:29 2023 by rpki-client on console-ams.rpki-client.org