Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nDtkPuamvaB94KrYCZSkyXQO9HM.roa
File: nDtkPuamvaB94KrYCZSkyXQO9HM.roa (raw, json)
Hash identifier: RHIKljJ9QjIMeztdaQeYgdh5SR3PorSJv0E3KOyl2F4=
Subject key identifier: 9C:3B:64:3E:E6:A6:BD:A0:7D:E0:AA:D8:09:94:A4:C9:74:0E:F4:73
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018E2C851AD2A16F38E89CE43E5B3CE27BFA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nDtkPuamvaB94KrYCZSkyXQO9HM.roa
Signing time: Mon 11 Mar 2024 07:58:24 +0000
ROA not before: Mon 11 Mar 2024 07:58:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/22 maxlen: 24
45.143.52.0/23 maxlen: 24
45.143.55.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/22 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/22 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.184.134.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.205.190.0/23 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/23 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:85:1a:d2:a1:6f:38:e8:9c:e4:3e:5b:3c:e2:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 11 07:58:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c3b643ee6a6bda07de0aad80994a4c9740ef473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:ea:8b:23:78:b9:0b:3c:0c:e2:c3:1d:81:
3c:e8:45:0e:67:66:0f:87:ac:70:a9:1e:8d:cd:9b:
57:f2:64:9d:77:26:77:04:20:c3:e9:50:9f:22:36:
70:3f:d5:02:56:4b:b0:0e:6d:3a:ef:7f:6b:2f:03:
7a:6f:11:a2:ea:bd:63:06:27:2d:86:ed:4a:b2:c5:
80:00:f9:ad:2b:a0:d9:a4:3b:84:15:ce:ad:fb:fa:
f1:00:ac:63:0a:2c:cd:a1:dd:f3:b7:25:f9:21:b2:
d7:bf:0f:67:9b:32:9c:9b:20:6b:f4:fe:eb:e3:d0:
5b:a3:b4:bd:46:cf:66:54:96:db:ae:fd:99:d0:3b:
08:a9:70:d4:2f:1f:88:e1:f4:cf:0e:79:3b:6c:2f:
4e:b0:b6:c3:0a:0e:c4:20:20:90:b4:b5:41:0d:5d:
da:0c:9c:ca:af:67:b7:3b:99:81:26:37:d6:01:e2:
c2:28:47:eb:13:31:64:7c:f7:92:71:ea:ca:a7:de:
0f:ad:a4:f4:9f:96:4a:95:19:7b:34:64:e2:0f:91:
2e:ad:74:50:31:19:08:13:5b:b4:0c:61:bd:5b:9b:
af:34:e6:61:dc:da:ce:e1:ef:e0:6e:18:75:e5:cb:
b8:39:fa:d3:ba:9f:68:86:6b:3c:a4:6f:1e:b8:cc:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:64:3E:E6:A6:BD:A0:7D:E0:AA:D8:09:94:A4:C9:74:0E:F4:73
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nDtkPuamvaB94KrYCZSkyXQO9HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/22
45.143.52.0/23
45.143.55.0/24
45.145.44.0/23
45.145.47.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0-185.184.134.255
185.192.18.0/23
185.205.188.0/24
185.205.190.0/23
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0-188.240.74.255
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
3c:4d:0f:a1:a9:44:60:26:61:44:c5:1c:36:e3:95:92:2a:02:
51:b9:ae:88:d4:b7:23:16:5e:b4:da:64:53:c1:a2:e0:d8:65:
39:32:d7:15:82:e3:bf:c5:69:b8:00:31:19:73:70:5d:88:17:
a2:a0:09:27:3f:bc:21:bf:19:df:47:5c:7e:51:51:ba:dc:f1:
29:c4:32:7a:da:7b:40:09:ef:6d:22:96:46:9b:b3:88:5a:94:
dc:82:67:28:79:d7:4b:ff:73:99:6d:55:1f:30:bb:83:d6:95:
03:7e:41:26:02:f9:20:7e:b6:a4:c4:7a:9f:33:a9:1b:be:6d:
2a:06:fb:5f:74:2a:db:0e:37:37:26:16:4e:63:d9:3b:89:06:
3b:36:f8:51:b2:60:24:5e:6b:d7:e9:6a:fa:5a:aa:54:13:b3:
ea:25:ab:06:67:69:bf:60:7b:25:1e:6b:9c:50:8b:af:29:fa:
4d:94:40:a0:59:62:75:76:e0:7f:d6:e4:10:f7:4d:12:c9:1a:
f3:c3:0f:ee:e1:a7:ce:f6:d5:e8:3d:b8:55:96:8a:16:3e:00:
bf:b8:55:a0:5e:a0:6e:bf:79:2a:3c:98:b5:68:2d:c9:70:57:
cd:19:92:15:69:eb:2a:99:ea:79:48:06:66:09:13:15:65:a1:
2d:d3:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:48 2024 by rpki-client on console-fra.rpki-client.org