Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hewMk3jXtUpwlczw1EbswGMCtfM.roa
File: hewMk3jXtUpwlczw1EbswGMCtfM.roa (raw, json)
Hash identifier: utYPCI16tFXyv84Q9xorQWiPhkpQR7HVvtDcXFCadfo=
Subject key identifier: 85:EC:0C:93:78:D7:B5:4A:70:95:CC:F0:D4:46:EC:C0:63:02:B5:F3
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018ABC47CFBEE2EA7476C73172879741633A
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hewMk3jXtUpwlczw1EbswGMCtfM.roa
Signing time: Fri 22 Sep 2023 09:45:37 +0000
ROA not before: Fri 22 Sep 2023 09:45:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.4.0/24 maxlen: 24
88.202.0.0/24 maxlen: 24
88.202.9.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.137.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.140.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.146.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.132.0/24 maxlen: 24
176.227.128.0/24 maxlen: 24
176.227.130.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.135.0/24 maxlen: 24
176.227.137.0/24 maxlen: 24
176.227.136.0/24 maxlen: 24
176.227.134.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
176.227.142.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
176.227.143.0/24 maxlen: 24
176.227.141.0/24 maxlen: 24
176.227.140.0/24 maxlen: 24
84.254.190.0/24 maxlen: 24
95.210.136.0/24 maxlen: 24
95.210.135.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.144.0/24 maxlen: 24
95.210.145.0/24 maxlen: 24
95.210.141.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.146.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.172.0/24 maxlen: 24
95.210.169.0/24 maxlen: 24
95.210.173.0/24 maxlen: 24
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.197.0/24 maxlen: 24
5.61.199.0/24 maxlen: 24
5.61.198.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.1.0/24 maxlen: 24
95.210.0.0/24 maxlen: 24
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.15.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.13.0/24 maxlen: 24
95.210.79.0/24 maxlen: 24
95.210.82.0/24 maxlen: 24
95.210.81.0/24 maxlen: 24
95.210.83.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.93.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.117.0/24 maxlen: 24
95.210.116.0/24 maxlen: 24
95.210.118.0/24 maxlen: 24
95.210.113.0/24 maxlen: 24
95.210.115.0/24 maxlen: 24
95.210.114.0/24 maxlen: 24
95.210.119.0/24 maxlen: 24
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/24 maxlen: 24
95.210.35.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.43.0/24 maxlen: 24
95.210.40.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.41.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.64.0/24 maxlen: 24
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.67.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.66.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
5.175.64.0/20 maxlen: 20
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
84.254.164.0/23 maxlen: 23
84.254.176.0/21 maxlen: 21
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
213.209.184.0/22 maxlen: 22
95.210.96.0/21 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.116.0/22 maxlen: 22
185.28.64.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.44.0/23 maxlen: 23
185.28.65.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.64.0/20 maxlen: 20
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.123.0/24 maxlen: 24
88.202.122.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/24 maxlen: 24
88.202.51.0/24 maxlen: 24
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
5.175.68.0/24 maxlen: 24
5.175.71.0/24 maxlen: 24
5.175.70.0/24 maxlen: 24
5.175.67.0/24 maxlen: 24
5.175.69.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.66.0/24 maxlen: 24
5.175.65.0/24 maxlen: 24
5.175.74.0/24 maxlen: 24
5.175.78.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
88.202.61.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
5.175.75.0/24 maxlen: 24
5.175.73.0/24 maxlen: 24
5.175.72.0/24 maxlen: 24
88.202.62.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
5.175.79.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.172.0/22 maxlen: 24
2a00:ca0:201e::/48 maxlen: 48
2a00:ca0:2008::/48 maxlen: 48
2a00:ca0:2005::/48 maxlen: 48
2a00:ca0:2002::/48 maxlen: 48
2a00:ca0:2003::/48 maxlen: 48
2a00:ca0:2000::/48 maxlen: 48
2a00:ca0:2012::/48 maxlen: 48
2a00:ca0:200c::/48 maxlen: 48
2a00:ca0:200f::/48 maxlen: 48
2a00:ca0:2006::/48 maxlen: 48
2a00:ca0:200a::/48 maxlen: 48
2a00:ca0:2004::/48 maxlen: 48
2a00:ca0:2001::/48 maxlen: 48
2a00:ca0:2016::/48 maxlen: 48
2a00:ca0::/32 maxlen: 32
2a00:ca0:2013::/48 maxlen: 48
2a00:ca0:2017::/48 maxlen: 48
2a00:ca0:200e::/48 maxlen: 48
2a00:ca0:201d::/48 maxlen: 48
2a00:ca0:201a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Sep 2023 16:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:47:cf:be:e2:ea:74:76:c7:31:72:87:97:41:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Sep 22 09:45:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85ec0c9378d7b54a7095ccf0d446ecc06302b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:2c:21:d1:31:fc:40:b4:80:6f:80:ca:ee:
26:6d:78:b9:b0:3e:f6:93:be:37:18:75:fc:dd:d9:
df:0e:cc:b0:6a:2b:af:9f:f2:94:09:9f:26:55:86:
eb:4f:65:97:b2:9d:9c:25:ce:b4:ca:13:64:fd:a8:
b8:5a:bf:dc:62:e5:2b:d7:83:7e:04:da:56:c6:48:
a5:ad:8d:e8:a3:ed:7e:3b:f1:15:8c:fe:6d:ac:63:
cf:b1:42:9f:5e:27:72:5d:0a:a4:ab:69:14:3b:7b:
4a:af:1b:58:f2:f2:8b:2a:f1:03:5c:8c:c1:74:5b:
3c:0b:aa:22:33:6b:44:e6:79:4e:e5:75:e4:b5:57:
15:94:cb:98:58:97:bd:75:e7:30:9e:ed:66:b9:12:
49:11:31:95:42:c0:32:cc:c3:64:cf:e3:b2:03:41:
03:01:76:c1:63:25:59:78:aa:67:bf:99:7d:bb:12:
3c:fb:bc:fd:56:c5:ea:01:f6:bd:09:12:65:f0:a3:
2c:56:52:78:49:4b:65:78:75:6d:fe:27:83:41:d4:
22:81:27:3d:00:b5:78:7b:62:74:77:65:1f:30:7e:
89:7a:61:72:fa:97:be:70:50:fe:58:94:6f:12:88:
43:42:b4:e4:de:5d:8d:a5:ed:a3:64:b8:5e:c6:d4:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:0C:93:78:D7:B5:4A:70:95:CC:F0:D4:46:EC:C0:63:02:B5:F3
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hewMk3jXtUpwlczw1EbswGMCtfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
185.28.64.0/23
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
68:50:47:f9:67:5e:ac:6c:1d:47:78:59:39:b5:94:55:72:8e:
30:b4:28:c2:1a:91:38:c9:93:58:fe:39:1e:77:8d:cf:29:b8:
15:bd:df:cf:c6:7b:bb:10:de:5b:b2:01:68:18:69:0f:01:2c:
02:fb:c7:3a:52:f8:c4:ef:ec:13:c0:51:cd:ba:0c:14:c3:65:
df:34:51:9e:cd:d6:19:fe:7a:3d:84:18:f9:28:76:e5:69:dd:
2f:08:9b:cf:61:84:7d:11:c6:57:b4:83:51:55:aa:5e:9d:09:
b3:fa:2d:65:3c:fc:9b:69:a9:78:d9:71:f4:61:bc:3c:49:6b:
93:fc:58:0b:ad:68:20:e8:e3:00:6b:92:aa:7f:8a:9f:4e:ec:
69:64:58:d1:eb:60:43:fa:3b:96:8f:72:4a:64:3c:7a:42:02:
04:9f:91:d2:a0:f6:e5:eb:a4:91:b7:f8:f5:39:fe:bc:bb:84:
c0:9d:14:62:98:d7:a2:65:20:46:f5:6c:05:58:48:b7:a1:d6:
64:34:18:93:c4:ed:4d:b4:e3:4d:4f:b0:7c:8f:c2:f8:d2:56:
06:1d:72:6b:e7:b2:0a:64:f0:7a:f5:cc:e6:5b:ea:57:3f:5b:
50:bd:b7:af:24:61:81:78:7a:66:b9:84:d9:57:c1:9e:b4:e9:
b8:2f:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org