Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vdY2aDIdJGKCpE1WoPuQE0pu8y4.roa
File: vdY2aDIdJGKCpE1WoPuQE0pu8y4.roa (raw, json)
Hash identifier: SU4AEl9V9vaFZPGtU49EWL/KhRNy7QZ489wI1tOA//Q=
Subject key identifier: BD:D6:36:68:32:1D:24:62:82:A4:4D:56:A0:FB:90:13:4A:6E:F3:2E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63CC6653AEB31CD0D743BC7CA9153
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vdY2aDIdJGKCpE1WoPuQE0pu8y4.roa
Signing time: Mon 02 Jan 2023 09:00:46 +0000
ROA not before: Mon 02 Jan 2023 09:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.220.248.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.210.232.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.221.20.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.209.72.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 15:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:3c:c6:65:3a:eb:31:cd:0d:74:3b:c7:ca:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdd63668321d246282a44d56a0fb90134a6ef32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:53:cf:f6:0c:7b:c3:9f:c1:72:07:f6:83:
0f:92:e2:8b:5f:74:1a:7c:36:4b:09:cd:28:cf:94:
73:f2:8c:76:91:e0:9c:c3:ca:e2:b1:25:09:4f:1c:
82:84:a2:94:71:0e:d1:c9:ff:85:3c:8b:a0:51:4b:
ee:60:b2:e5:ae:9c:24:09:8d:01:3e:91:49:dd:88:
5f:fe:00:0b:3e:56:18:34:99:69:8d:59:a7:47:92:
fc:87:61:cc:9d:2f:12:51:29:ca:0d:3a:34:0e:6f:
79:2e:8b:65:3b:d0:bb:c4:bb:e3:bf:ee:7d:12:8f:
c4:56:6f:89:6f:ce:8a:45:31:6b:95:59:2d:7f:20:
f1:ca:41:a4:ac:e8:f8:a3:05:69:c9:98:a2:8c:8b:
6b:2d:cb:de:0d:be:96:89:f7:8a:18:9b:1c:13:b2:
b5:33:eb:b6:8e:0b:93:40:7b:15:1c:7f:c8:9c:ee:
36:48:95:67:07:82:cd:05:74:4a:3e:e6:50:75:3f:
b2:80:99:97:be:1c:28:8f:02:d0:88:49:b3:13:d4:
3b:16:85:d0:8b:f6:17:81:37:ae:20:97:b4:36:59:
4c:d9:a5:17:e3:57:6f:9f:47:31:69:fa:a2:ad:b7:
59:c9:84:e1:64:48:aa:58:71:c0:54:d0:21:92:84:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:36:68:32:1D:24:62:82:A4:4D:56:A0:FB:90:13:4A:6E:F3:2E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vdY2aDIdJGKCpE1WoPuQE0pu8y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
19:e5:81:28:2e:13:1f:a1:cf:57:c5:89:58:e0:bc:6f:b0:b6:
96:b0:6b:c3:c7:ba:f6:49:5d:b0:db:04:2d:fa:19:5f:00:e8:
57:8d:46:f6:6a:f9:8c:bb:cf:a4:56:a4:fa:29:a5:a4:c7:5e:
89:31:21:53:a1:10:dd:c5:d9:70:f7:56:66:42:0c:c4:55:a2:
65:b7:e5:09:37:2f:ed:e6:a1:d3:57:51:83:fb:fb:ed:52:a5:
e5:f2:6b:d2:54:c7:fa:56:fc:f5:5f:17:1b:a5:16:c0:27:89:
de:ae:fe:3c:ff:d8:15:3e:37:83:59:93:1a:e4:57:a7:1a:fe:
0b:e5:60:39:6a:44:4e:c2:df:e2:bb:3b:3e:88:50:88:5b:ac:
82:ac:e8:f2:2e:d8:22:56:87:e9:a6:51:02:0e:d0:ee:a2:f3:
a9:31:e8:d2:22:df:86:ce:db:e0:7a:af:cd:d5:96:ba:70:2a:
08:fc:82:01:2c:59:44:d5:ae:6b:46:c1:30:8c:c6:5c:c2:3d:
54:22:8c:2c:52:10:db:ba:fd:16:6f:42:22:2b:9f:2c:a0:d6:
e9:6b:eb:99:f9:99:eb:13:ef:4b:e2:7e:70:39:70:7c:45:07:
b4:be:06:54:d9:39:7e:c5:59:10:58:18:87:31:14:ae:b5:bd:
f7:c4:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org