Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3zhcvQGozjPHAZtsGoC0jiWof7s.roa
File: 3zhcvQGozjPHAZtsGoC0jiWof7s.roa (raw, json)
Hash identifier: 4fI+QgzwQWwAvIIoOemzLoglktCCpNdyvr98hocTKfY=
Subject key identifier: DF:38:5C:BD:01:A8:CE:33:C7:01:9B:6C:1A:80:B4:8E:25:A8:7F:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A1DE373E61DAC41FBE8CC0FB3196F5C34
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3zhcvQGozjPHAZtsGoC0jiWof7s.roa
Signing time: Tue 22 Aug 2023 15:36:00 +0000
ROA not before: Tue 22 Aug 2023 15:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
91.238.239.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.204.108.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
195.182.13.0/24 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:e3:73:e6:1d:ac:41:fb:e8:cc:0f:b3:19:6f:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 22 15:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df385cbd01a8ce33c7019b6c1a80b48e25a87fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:6c:51:fa:b3:ac:98:d8:11:b9:b2:09:4f:
5e:05:48:54:8d:86:ef:cb:b0:2d:00:80:2d:b5:63:
da:0c:44:b7:87:88:85:87:f2:3b:b7:85:dc:66:0b:
66:44:68:f8:88:67:b5:63:58:d6:4d:aa:06:eb:bb:
f1:bf:68:cc:4f:12:17:c8:17:d7:d0:dc:f5:fb:99:
b5:6b:6c:19:93:50:8e:9c:d6:4e:f6:b8:17:49:87:
94:06:10:4f:3b:96:34:21:36:56:22:17:ea:24:63:
f2:7b:23:bd:99:8b:11:87:2c:19:b1:29:7a:60:8b:
2b:94:f8:6d:2c:6b:c1:f3:dc:80:d5:85:ef:67:86:
ff:d4:5a:e6:ad:81:6c:f4:c3:35:e6:92:ed:3e:d6:
59:58:ca:a2:ff:12:0b:04:7b:22:6c:27:76:37:28:
f6:73:f0:c4:cb:b7:85:b5:f0:3a:ad:46:b3:d7:94:
ba:5c:95:50:cb:cc:86:5f:90:de:8d:70:0e:3b:e5:
0e:16:de:49:30:65:53:c9:bd:78:46:1f:de:5a:8d:
7d:1b:ce:a8:dd:e9:98:2f:a1:53:74:af:c6:ed:cf:
e1:8e:b9:02:3b:2c:42:3f:eb:c5:c4:6e:71:fb:8d:
a7:06:62:2d:92:23:54:8b:70:16:72:e1:61:18:f2:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:5C:BD:01:A8:CE:33:C7:01:9B:6C:1A:80:B4:8E:25:A8:7F:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3zhcvQGozjPHAZtsGoC0jiWof7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
80:32:82:e7:37:39:53:d5:8e:eb:35:d1:f1:99:ad:6b:87:dc:
50:b2:49:27:de:c6:8d:60:4d:40:76:5a:5c:ab:5f:e8:82:e2:
7e:1e:5d:f3:52:3f:e3:b6:73:3f:71:dc:dc:ac:d2:ce:74:2b:
de:01:9a:2f:55:2d:74:e1:2d:cb:41:14:25:51:26:e4:32:35:
26:6e:95:8e:c2:cc:92:b9:20:17:cb:bb:83:48:13:1c:ff:bc:
fe:9b:a6:9e:35:87:b0:54:62:82:b7:84:7d:7d:02:f5:80:63:
0c:9b:15:71:02:83:39:d5:16:ce:a7:ec:91:df:ab:2e:7f:5f:
6f:ff:e6:3d:ae:7c:62:df:d6:c3:21:7a:04:c0:54:16:1c:df:
ed:f6:a1:9c:84:9b:8a:4b:a4:83:ec:6f:69:96:7d:82:b7:99:
96:3a:b3:fe:36:71:9d:62:aa:4b:79:2d:db:41:66:3f:44:42:
42:b3:eb:33:5d:8a:38:c8:e6:0b:0a:0d:b5:03:b3:fb:3c:59:
83:cd:37:1c:b2:4f:82:a9:28:88:ab:66:b5:e2:94:34:09:12:
a6:49:51:b5:94:db:0e:20:f2:53:29:2d:92:d4:6f:66:fb:d0:
8d:37:0f:d2:19:f2:1a:f8:aa:dd:88:7f:b3:36:3c:83:58:ba:
87:1d:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org