Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkWJMIzYozEyta0jarz1W2vQz8g.roa
File: DkWJMIzYozEyta0jarz1W2vQz8g.roa (raw, json)
Hash identifier: Pp53BMHc0AjAuFPUfh+ioBOWcOw7ttJ4sUWGQ/wPpEA=
Subject key identifier: 0E:45:89:30:8C:D8:A3:31:32:B5:AD:23:6A:BC:F5:5B:6B:D0:CF:C8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188D3D2BBBD9BCDEFE2A3ADE291C02620A9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkWJMIzYozEyta0jarz1W2vQz8g.roa
Signing time: Mon 19 Jun 2023 13:23:02 +0000
ROA not before: Mon 19 Jun 2023 13:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 20:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:d2:bb:bd:9b:cd:ef:e2:a3:ad:e2:91:c0:26:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 19 13:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4589308cd8a33132b5ad236abcf55b6bd0cfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:b4:c4:a2:91:69:0a:cc:f9:15:5e:5f:96:
4f:82:7a:2d:67:c6:66:eb:d4:b6:18:9e:ea:af:36:
6b:17:70:27:6c:00:d4:da:e4:e8:7b:b2:0a:66:b0:
b3:42:ea:ce:9e:b6:e7:5e:38:ff:bf:91:10:95:78:
8f:d5:d4:0d:e9:98:37:c6:cd:70:7b:b8:e9:f8:79:
53:66:6f:23:86:ed:e7:74:c5:c0:90:56:7b:d7:79:
1b:cd:bf:4d:32:ad:d3:58:22:ff:11:d3:6a:ff:76:
ff:b6:2e:88:14:d5:b4:ed:04:1e:16:d7:d8:c0:49:
1a:4b:49:55:63:a9:d6:1c:78:30:fd:66:05:50:ae:
b2:de:f8:69:d4:69:c6:bf:42:4e:54:e9:b6:7c:85:
15:de:35:08:28:68:8c:d4:f2:1e:da:43:a6:c9:de:
9e:00:bd:cf:f0:b4:70:74:15:4a:a4:b6:61:35:8b:
02:75:69:9d:4f:60:14:5b:4c:60:77:99:c6:ff:59:
cc:2b:02:27:87:a6:9e:2f:53:8b:c7:9d:2a:3a:87:
9e:7f:10:cc:22:2e:4e:ff:cf:50:fe:76:13:e9:47:
18:d1:a9:bf:6a:b1:16:d7:99:80:df:06:d4:7d:83:
c2:ed:7a:9c:4b:24:83:5f:91:c7:8a:ea:ec:06:6f:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:89:30:8C:D8:A3:31:32:B5:AD:23:6A:BC:F5:5B:6B:D0:CF:C8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkWJMIzYozEyta0jarz1W2vQz8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
33:93:c0:6d:fd:94:2d:11:b8:4a:97:b7:5f:68:e0:3e:9a:c7:
5e:a9:2c:3f:f2:10:34:72:18:b4:29:e2:e6:1d:90:a1:e0:b5:
cd:30:ba:71:09:86:83:9a:07:fc:5a:43:ee:30:a4:b2:bf:b5:
97:81:a6:d3:e3:ed:41:06:32:4c:89:85:dc:ef:e5:41:9e:aa:
79:b0:e0:0d:18:b1:e9:8a:a0:71:12:00:1d:f2:0e:44:90:0a:
15:eb:d5:d2:f4:d9:f0:7c:2e:e7:48:5a:ba:30:a8:f0:2b:2b:
5e:45:2f:00:bb:00:12:8c:76:e2:99:9e:2f:a7:7d:fe:e3:fe:
c7:2d:46:92:ff:a1:c1:5d:ba:1b:56:e4:8e:0f:11:bf:17:e7:
4b:b3:e6:69:84:d2:86:ee:5f:05:3a:35:12:30:0e:5b:21:99:
ea:07:f5:29:5d:20:05:82:d6:6c:85:45:65:f5:18:b4:62:ce:
59:44:d3:26:5b:86:71:ae:4c:bd:58:c2:eb:0d:32:ea:ec:2e:
f3:bd:73:d7:e5:c2:68:e4:64:2d:18:82:59:5b:78:ba:01:67:
d5:b1:9e:67:36:53:9e:29:27:55:6d:07:63:62:2f:86:ba:1c:
c0:ed:e9:4e:8a:f5:25:fc:be:4b:e4:cb:ae:32:cd:e4:f1:b4:
22:eb:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org