Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4Lqra64D75OZ7VF5ofK3e22u_w.roa
File: k4Lqra64D75OZ7VF5ofK3e22u_w.roa (raw, json)
Hash identifier: fMZcIoE3MVadTbXQgpQNpGP6s02wzFL99gKPSQ48bV0=
Subject key identifier: 93:82:EA:AD:AE:B8:0F:BE:4E:67:B5:45:E6:87:CA:DD:ED:B6:BB:FC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01888727CCEDC0CBA27CE04AFA8BF27709EE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4Lqra64D75OZ7VF5ofK3e22u_w.roa
Signing time: Sun 04 Jun 2023 16:05:12 +0000
ROA not before: Sun 04 Jun 2023 16:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.220.248.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.221.20.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:87:27:cc:ed:c0:cb:a2:7c:e0:4a:fa:8b:f2:77:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 4 16:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9382eaadaeb80fbe4e67b545e687caddedb6bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:89:d6:6f:ef:f9:49:4d:20:df:ff:59:a0:
91:30:bf:f2:11:05:d5:fb:e5:4a:fb:15:8f:75:69:
83:46:93:c1:6c:ea:0b:19:f0:5f:2e:82:94:67:85:
12:0e:66:55:b8:74:d8:a3:00:ff:d4:d6:35:e8:ec:
b0:1e:cd:80:31:d4:62:89:2e:87:5c:18:1f:6b:82:
4a:76:1f:9a:c6:05:28:70:6d:4d:09:80:f9:7e:0a:
21:e8:47:2a:04:df:70:be:57:80:5b:86:00:99:76:
6e:15:dd:bd:f6:bd:3e:01:0d:87:5d:67:88:b6:30:
75:21:a9:67:d3:82:6e:11:05:ac:53:b8:6d:72:45:
8a:14:bd:42:20:c5:8f:21:b8:11:ac:22:df:a2:b7:
01:0d:46:29:08:ce:d4:33:2c:c6:cf:da:73:44:8e:
ee:7b:74:db:73:ef:e5:8e:78:83:26:12:d0:a8:11:
b6:81:62:9e:a4:4b:74:a9:32:81:9d:7b:49:bb:a7:
10:b3:2a:17:e2:a3:0f:6c:99:61:e4:c8:96:e4:28:
39:95:3f:60:a9:ed:0b:34:bf:40:cc:f4:63:ff:09:
a8:11:6b:6b:b7:a4:eb:3a:41:bb:3e:7e:71:f5:6b:
b5:ff:47:f7:0f:ff:6f:5b:37:bd:df:a8:f7:02:01:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:EA:AD:AE:B8:0F:BE:4E:67:B5:45:E6:87:CA:DD:ED:B6:BB:FC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4Lqra64D75OZ7VF5ofK3e22u_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
87:75:2b:92:f6:1e:81:ae:91:bf:64:e4:d0:fb:88:d7:0d:74:
32:bd:3b:b1:ca:6a:b9:91:f5:21:b6:cf:ca:f0:6c:8e:4b:bc:
aa:2e:43:5e:44:42:ae:ff:09:68:a1:85:d7:e6:65:f7:f0:a8:
93:c4:79:f3:e7:3e:1d:5e:ac:5d:3f:08:b5:be:c2:a8:b4:c0:
74:a0:98:ae:87:73:5b:4a:19:a1:0e:48:98:a0:70:d1:6c:bb:
79:62:b7:3c:35:de:18:5a:e1:a8:90:3a:3c:70:a7:a5:08:4d:
19:73:5d:5c:89:c8:12:76:23:4f:d1:d0:23:4f:16:51:69:9f:
7c:57:82:52:6a:30:70:e9:77:7d:2e:c5:7c:cf:ec:ab:7e:55:
a2:fd:8b:0e:fb:73:a8:07:b5:57:53:6e:9e:b1:38:09:9d:07:
0a:00:20:87:86:95:12:35:34:b5:a7:fd:4d:e5:b3:6b:ad:db:
89:53:f5:d2:b7:e2:80:a4:31:3e:2c:3e:7e:4f:da:94:3b:e2:
23:30:b0:89:7d:46:a9:75:b4:1e:af:11:7f:bb:26:eb:39:18:
d1:fd:15:dc:da:51:82:9a:ad:69:60:f3:06:b5:4d:6d:b2:4b:
ac:89:ba:2e:bb:11:c7:46:e4:f7:93:10:e9:a7:9a:bc:3c:fb:
e6:61:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org