Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iz_Km8c2bD87_7BkOYxxzdxc1KU.roa
File: iz_Km8c2bD87_7BkOYxxzdxc1KU.roa (raw, json)
Hash identifier: NXOYOzF39XNQrqsNKYhBdUTwZzi17+D6CHtyCWoAxlM=
Subject key identifier: 8B:3F:CA:9B:C7:36:6C:3F:3B:FF:B0:64:39:8C:71:CD:DC:5C:D4:A5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01888719253015AF51D58069E47517CFD4F9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iz_Km8c2bD87_7BkOYxxzdxc1KU.roa
Signing time: Sun 04 Jun 2023 15:49:12 +0000
ROA not before: Sun 04 Jun 2023 15:49:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.220.248.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.210.232.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.221.20.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 16:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:87:19:25:30:15:af:51:d5:80:69:e4:75:17:cf:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 4 15:49:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3fca9bc7366c3f3bffb064398c71cddc5cd4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:cb:e0:84:43:56:67:5c:fc:42:31:91:e3:
76:d7:ea:2f:9a:ab:a8:f4:a1:c2:24:a1:ce:ce:d6:
78:4d:25:8f:8e:4d:17:56:a5:86:39:9a:91:13:21:
d6:9e:e2:77:e4:e9:b4:57:3f:7e:f4:a5:cd:4b:e7:
96:c7:07:3f:d5:f8:87:64:2e:6d:ed:59:cf:ee:b9:
96:f7:2a:bd:bc:35:dc:30:04:6d:ef:13:d5:52:f2:
63:e2:8d:e3:59:34:36:e4:10:dd:46:86:49:6d:01:
9d:b7:b9:38:c4:5f:07:59:84:aa:ab:60:e5:61:2b:
b7:db:b0:a4:44:5b:53:c9:59:76:f7:89:cf:d5:9e:
9a:0d:56:a2:57:ed:ea:42:a9:8d:67:17:32:cc:4b:
2f:e5:d9:d3:d3:5c:61:c9:49:92:19:69:cb:14:d4:
75:1a:3f:18:5d:69:83:82:19:de:b7:9c:c9:64:b0:
26:71:98:8c:90:8d:fa:8c:f4:c4:1f:3d:ef:a9:0a:
c3:c2:f7:7a:c5:14:29:32:4e:4a:22:77:0a:43:c7:
39:60:ba:a2:8e:36:87:39:68:ca:cd:5d:28:d9:f4:
f8:97:6d:31:ac:e5:d2:a7:4c:57:ea:ec:c1:0a:f3:
99:70:7e:27:60:ba:c4:ff:fa:79:1e:3d:d0:4c:e5:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:CA:9B:C7:36:6C:3F:3B:FF:B0:64:39:8C:71:CD:DC:5C:D4:A5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iz_Km8c2bD87_7BkOYxxzdxc1KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:a7:2e:f2:77:06:cf:96:6a:d0:64:75:4e:9b:55:ac:bd:68:
08:ab:d8:30:7c:43:33:2d:f7:d3:bc:1b:48:a3:3d:df:73:06:
7d:36:f3:54:68:b5:98:df:de:05:37:3c:48:ad:10:b7:57:6b:
9a:3e:21:7f:ae:32:b6:76:e3:5c:a7:dd:3b:b8:fa:65:92:5d:
19:d7:1c:82:a4:33:4b:92:53:8e:f5:f1:9a:5e:aa:d2:2d:5b:
62:e0:18:e7:94:66:f4:60:ef:4b:e7:01:72:00:a1:34:0a:fa:
e0:b4:ba:e2:6e:25:87:83:36:ff:94:e7:ba:ac:e6:8e:67:b6:
3e:27:60:b2:94:f7:86:9f:04:4d:32:c8:fe:e7:eb:46:3d:fe:
e6:fb:67:c5:6f:84:e5:99:c7:91:c8:c0:82:9d:0e:ef:b8:22:
90:28:23:c9:c6:76:c2:3d:01:5c:b1:78:32:f3:c9:37:82:c1:
ba:3d:ff:e6:72:f6:4e:36:02:3e:ec:79:f2:23:0d:e3:39:fc:
08:30:d6:bc:fb:d4:31:9d:54:25:b4:1e:c9:72:fc:82:96:a8:
ea:68:d8:18:50:79:6e:a7:ad:54:a1:5f:8f:bf:0d:ee:3e:2a:
0c:ab:26:7f:7e:b3:a0:2e:b1:6a:7e:52:a1:ff:76:6a:b9:88:
f4:32:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org