Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bYSaxVLGnEaAVveKfpJGCxClNNg.roa
File: bYSaxVLGnEaAVveKfpJGCxClNNg.roa (raw, json)
Hash identifier: zsDUR+myPVBKZApPDnesrEtGeE/jlBfSJGLcIvRVcL0=
Subject key identifier: 6D:84:9A:C5:52:C6:9C:46:80:56:F7:8A:7E:92:46:0B:10:A5:34:D8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CAACAAEF815C2655F4A2CE59A9A34A5E4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bYSaxVLGnEaAVveKfpJGCxClNNg.roa
Signing time: Wed 27 Dec 2023 10:20:58 +0000
ROA not before: Wed 27 Dec 2023 10:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
92.60.35.0/24 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
91.238.239.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.204.108.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
195.182.13.0/24 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
88.135.64.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:ca:ae:f8:15:c2:65:5f:4a:2c:e5:9a:9a:34:a5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 27 10:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d849ac552c69c468056f78a7e92460b10a534d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:76:20:6d:ca:0c:08:6c:56:eb:e0:81:ff:
99:8e:7f:d4:56:3c:f9:99:6e:4f:52:75:18:79:6c:
14:ce:2f:a1:1a:9c:db:5d:73:c9:1a:e6:8e:19:d8:
9d:20:8c:a5:3d:53:f2:dc:90:fb:02:e1:d4:36:19:
f6:20:d1:66:ad:8b:82:08:03:68:30:04:78:b3:30:
d1:a6:b2:be:68:4e:26:82:f6:a9:41:8b:e8:a8:75:
f6:3a:76:27:13:7b:e6:ac:c4:8e:91:86:9c:e5:83:
37:8d:1c:18:9b:a8:aa:7b:b0:51:d3:22:7c:ff:96:
0f:40:e8:04:18:39:ba:4f:1f:13:1c:fc:7e:47:f7:
8d:93:c9:78:56:f4:94:02:54:0d:4d:80:d6:cc:5e:
28:71:96:dd:28:04:23:a0:18:15:a6:0d:61:bb:89:
4b:95:a0:1a:19:96:04:69:2d:df:77:aa:01:98:50:
29:eb:61:5d:a0:be:22:c3:da:cc:b9:4f:20:8e:3f:
24:f6:3d:9b:1d:b0:75:48:62:04:31:c7:8b:10:d0:
1e:8a:59:eb:9f:ad:fd:79:ed:a6:95:7a:8f:b1:88:
70:2b:c4:e5:6e:2d:1f:2f:32:be:a3:3f:cd:70:11:
3f:36:e9:b3:10:b5:c1:b0:84:e8:64:b2:26:4e:1f:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:9A:C5:52:C6:9C:46:80:56:F7:8A:7E:92:46:0B:10:A5:34:D8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bYSaxVLGnEaAVveKfpJGCxClNNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.35.0/24
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
be:bb:50:b5:67:93:89:31:b7:90:d6:ac:8f:00:a3:f5:05:2b:
7d:aa:ae:7f:de:b3:69:91:a2:39:c1:9c:fc:80:62:7e:a3:ff:
4f:48:2f:35:7f:c4:50:c0:7f:54:89:cc:c9:8c:7a:7c:46:d1:
7a:bd:ca:f0:f2:c9:9b:af:d2:f8:03:69:3d:ca:a7:f7:2a:02:
9b:6a:6f:9c:1c:fe:2d:05:10:22:fa:3f:ca:45:06:29:5b:c7:
85:b0:7e:6f:6a:68:4b:64:54:bd:ae:b7:eb:28:12:54:5e:2d:
6a:03:74:bf:31:0a:ae:f8:f2:a2:43:2c:e8:ea:6c:6f:a2:0e:
38:33:00:10:40:3a:2b:46:a6:bb:ec:0f:3f:f5:61:87:e0:2f:
be:dd:13:2f:8a:93:0f:2c:03:97:ac:66:4a:ba:0e:b2:be:11:
b0:3c:04:2a:33:48:e9:4e:07:6a:20:69:10:5f:9e:a3:b1:d9:
85:17:f5:51:fe:22:d1:10:ad:9b:ff:6c:90:ad:61:3e:43:86:
f1:41:34:82:cc:4e:e8:24:2f:4c:c6:1a:1f:7f:eb:ef:d9:fa:
bb:7e:27:74:d7:2b:6d:35:16:32:1b:f6:2d:b1:fd:2e:ec:22:
c1:3a:ef:8e:8e:cb:90:b4:eb:8e:85:b3:65:3d:dc:43:c5:1e:
70:33:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org