Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/auwOXRhVHzkIFKlPnj6XXAR0OvM.roa
File: auwOXRhVHzkIFKlPnj6XXAR0OvM.roa (raw, json)
Hash identifier: Wt+fOblbULqZzQ9ZP5ul+j1Bbxiy5f/hyz0FbIHthFQ=
Subject key identifier: 6A:EC:0E:5D:18:55:1F:39:08:14:A9:4F:9E:3E:97:5C:04:74:3A:F3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C8BE1C56A7BA15D22842C7B9894EB5171
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/auwOXRhVHzkIFKlPnj6XXAR0OvM.roa
Signing time: Thu 21 Dec 2023 10:17:58 +0000
ROA not before: Thu 21 Dec 2023 10:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
92.60.35.0/24 maxlen: 24
45.137.160.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
185.107.152.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
91.238.239.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.204.108.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
195.182.13.0/24 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.43.0/24 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:e1:c5:6a:7b:a1:5d:22:84:2c:7b:98:94:eb:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 21 10:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aec0e5d18551f390814a94f9e3e975c04743af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:57:f1:df:4b:d3:a5:98:1e:f8:63:0a:fb:
e9:27:3e:a1:18:c3:09:f8:52:1c:26:35:a7:72:9c:
06:0e:d9:0d:69:de:8a:8b:03:8a:2a:92:da:05:d7:
5c:0b:f3:00:d6:3a:7c:70:20:5b:8a:06:fe:45:d7:
63:f1:5b:0d:1f:9e:fc:00:02:3a:55:2c:31:31:f1:
bd:a1:96:c7:ab:b2:1e:9c:ff:cf:eb:b0:e0:57:95:
f5:0e:44:93:f6:13:e3:64:1f:83:20:91:b8:d6:42:
81:15:e9:03:06:ed:69:e6:05:af:13:03:82:9a:77:
dd:13:e4:1c:66:94:fb:0b:44:0f:1c:25:05:dd:62:
99:c9:0a:e3:a6:7f:6d:90:02:bf:20:3e:1d:2b:39:
c8:ae:24:62:72:83:d1:18:72:5a:52:13:85:1d:c6:
f1:32:fe:2f:a3:5e:43:30:60:a4:85:8a:2c:d0:94:
e2:eb:e6:ef:b2:1d:81:75:b8:60:da:e1:d6:fa:15:
ed:06:b6:57:52:5f:fd:e0:ef:06:24:66:c5:42:9f:
0e:c6:c9:3a:aa:3c:b6:77:d0:96:8d:d3:36:06:3e:
53:f1:42:3a:7d:99:6d:98:31:67:37:7a:70:06:50:
ba:e6:21:eb:94:fd:21:8d:92:37:f0:0b:e3:96:a3:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EC:0E:5D:18:55:1F:39:08:14:A9:4F:9E:3E:97:5C:04:74:3A:F3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/auwOXRhVHzkIFKlPnj6XXAR0OvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.35.0/24
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:be:54:c4:74:98:6e:8b:fd:3d:c6:e9:22:77:d6:d8:41:ac:
bd:1e:f2:16:79:7e:85:c1:7f:40:99:06:be:8b:37:3b:55:01:
c8:74:f2:a4:d7:a6:89:2d:b8:7c:48:5a:4c:8c:cc:75:d8:4d:
dc:62:75:72:29:20:b9:2f:d1:45:18:b4:92:73:a3:de:9f:69:
6c:24:f0:f7:82:b6:d8:87:2c:42:50:c9:43:02:e7:35:49:c3:
8a:6f:07:96:2f:2b:b4:0e:0f:1c:c0:cf:f2:9f:9c:e9:bf:91:
f6:7e:b4:cd:11:9d:97:35:86:b5:b2:f6:36:2d:df:34:e9:fd:
63:c1:98:26:5e:43:95:23:ad:24:13:a7:20:2a:60:07:28:6d:
3c:40:b3:9e:04:09:7a:65:5c:75:26:b8:2d:9b:eb:a2:de:51:
42:06:02:b0:39:7e:e5:3b:e9:1d:b5:7a:76:cf:a2:5d:ae:f6:
5c:17:46:35:a0:3d:50:d3:56:ba:65:9a:ac:e0:ca:4b:51:45:
ef:29:c7:e0:d0:b2:ba:c3:01:e3:f0:89:4d:9e:f6:bb:c9:5e:
a4:33:05:38:b3:c7:04:21:cd:0d:48:be:12:59:f4:5a:b6:a1:
9e:8b:24:da:23:66:7f:a8:56:ac:b2:51:0e:d8:1e:b8:00:f0:
ab:ea:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org