Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/3feA53EEfR58RYbDq2DPVjixxAU.roa
File: 3feA53EEfR58RYbDq2DPVjixxAU.roa (raw, json)
Hash identifier: n4Vm4eJbfRet80sDNTfx+Uw5e66BBSoAhPXN7gVEnN0=
Subject key identifier: DD:F7:80:E7:71:04:7D:1E:7C:45:86:C3:AB:60:CF:56:38:B1:C4:05
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0185A4C9CE2659E9A1632A57082BC294377D
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/3feA53EEfR58RYbDq2DPVjixxAU.roa
Signing time: Thu 12 Jan 2023 07:02:47 +0000
ROA not before: Thu 12 Jan 2023 07:02:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41704
IP address blocks: 84.39.250.0/24 maxlen: 24
84.39.252.0/22 maxlen: 22
84.39.253.0/24 maxlen: 24
84.39.252.0/24 maxlen: 24
84.39.248.0/22 maxlen: 22
84.39.249.0/24 maxlen: 24
84.39.248.0/24 maxlen: 24
84.39.251.0/24 maxlen: 24
84.39.255.0/24 maxlen: 24
84.39.254.0/24 maxlen: 24
79.140.16.0/24 maxlen: 24
79.140.16.0/20 maxlen: 20
79.140.17.0/24 maxlen: 24
79.140.16.0/22 maxlen: 22
79.140.22.0/24 maxlen: 24
79.140.19.0/24 maxlen: 24
79.140.24.0/22 maxlen: 22
79.140.20.0/23 maxlen: 23
79.140.23.0/24 maxlen: 24
79.140.20.0/24 maxlen: 24
79.140.21.0/24 maxlen: 24
79.140.20.0/22 maxlen: 22
79.140.18.0/24 maxlen: 24
79.140.28.0/22 maxlen: 22
145.255.16.0/21 maxlen: 21
145.255.16.0/22 maxlen: 22
145.255.20.0/22 maxlen: 22
145.255.21.0/24 maxlen: 24
145.255.23.0/24 maxlen: 24
145.255.22.0/24 maxlen: 24
95.105.120.0/22 maxlen: 22
95.105.119.0/24 maxlen: 24
95.105.124.0/24 maxlen: 24
95.105.125.0/24 maxlen: 24
95.105.124.0/22 maxlen: 22
95.105.126.0/24 maxlen: 24
95.105.127.0/24 maxlen: 24
95.105.96.0/19 maxlen: 19
95.105.96.0/22 maxlen: 22
95.105.104.0/24 maxlen: 24
95.105.102.0/23 maxlen: 23
95.105.105.0/24 maxlen: 24
95.105.104.0/22 maxlen: 22
95.105.100.0/23 maxlen: 23
95.105.100.0/22 maxlen: 22
95.105.112.0/24 maxlen: 24
95.105.112.0/22 maxlen: 22
95.105.106.0/23 maxlen: 23
95.105.108.0/22 maxlen: 22
95.105.115.0/24 maxlen: 24
95.105.113.0/24 maxlen: 24
95.105.118.0/24 maxlen: 24
95.105.116.0/24 maxlen: 24
95.105.117.0/24 maxlen: 24
95.105.116.0/22 maxlen: 22
95.105.114.0/24 maxlen: 24
46.191.240.0/22 maxlen: 22
46.191.244.0/22 maxlen: 22
46.191.240.0/20 maxlen: 20
46.191.252.0/22 maxlen: 22
46.191.250.0/24 maxlen: 24
46.191.249.0/24 maxlen: 24
46.191.248.0/22 maxlen: 22
46.191.251.0/24 maxlen: 24
46.191.248.0/24 maxlen: 24
46.191.186.0/23 maxlen: 23
46.191.186.0/24 maxlen: 24
46.191.184.0/21 maxlen: 21
46.191.185.0/24 maxlen: 24
46.191.184.0/23 maxlen: 23
46.191.184.0/24 maxlen: 24
46.191.189.0/24 maxlen: 24
46.191.191.0/24 maxlen: 24
46.191.188.0/23 maxlen: 23
46.191.188.0/24 maxlen: 24
46.191.190.0/23 maxlen: 23
46.191.190.0/24 maxlen: 24
46.191.187.0/24 maxlen: 24
94.41.128.0/20 maxlen: 20
94.41.128.0/22 maxlen: 22
94.41.132.0/22 maxlen: 22
94.41.136.0/22 maxlen: 22
94.41.140.0/22 maxlen: 22
94.41.160.0/19 maxlen: 19
94.41.160.0/22 maxlen: 22
94.41.160.0/21 maxlen: 21
94.41.164.0/22 maxlen: 22
94.41.168.0/22 maxlen: 22
94.41.172.0/22 maxlen: 22
136.169.240.0/22 maxlen: 22
136.169.244.0/22 maxlen: 22
136.169.243.0/24 maxlen: 24
136.169.240.0/20 maxlen: 20
136.169.253.0/24 maxlen: 24
136.169.252.0/22 maxlen: 22
136.169.252.0/24 maxlen: 24
136.169.248.0/22 maxlen: 22
136.169.255.0/24 maxlen: 24
136.169.254.0/24 maxlen: 24
94.41.176.0/22 maxlen: 22
94.41.184.0/22 maxlen: 22
94.41.180.0/22 maxlen: 22
94.41.188.0/22 maxlen: 22
2a02:1c8:7::/48 maxlen: 48
2a02:1c8:700::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:c9:ce:26:59:e9:a1:63:2a:57:08:2b:c2:94:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 12 07:02:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf780e771047d1e7c4586c3ab60cf5638b1c405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:30:79:8c:05:2b:ac:1e:32:ba:7d:e4:8c:
57:f5:bd:57:90:e0:d1:e7:a9:16:e8:b5:86:bf:7f:
6c:b6:d9:24:02:9b:6a:66:13:16:a9:27:b3:44:b6:
db:a1:e0:8b:ff:f7:3d:8f:cf:f4:40:d3:aa:82:6f:
a3:c7:cd:20:0e:91:7d:c1:9d:16:e8:16:3c:fa:09:
b7:0b:19:e9:bf:86:2c:70:c1:26:ab:c4:66:e2:7e:
f9:c6:31:2c:ce:f6:b6:94:44:3d:ed:cd:19:4c:5b:
6a:9e:70:5f:70:10:89:70:0c:ff:72:4a:4c:c8:61:
5f:8f:5b:a3:11:22:02:5a:7d:84:0d:1d:62:f9:34:
61:73:47:66:b8:83:7e:23:21:d7:5c:fc:f0:73:97:
23:a1:75:d3:e3:8d:4d:12:7e:86:ff:4d:bc:18:8f:
0c:0c:8d:61:ad:77:5b:4b:25:5d:51:74:4d:f7:06:
67:db:d7:89:72:1d:ac:03:4e:76:5f:15:68:31:c9:
24:88:fb:47:f8:98:ff:a7:ec:3d:8b:b0:03:44:aa:
08:7c:76:02:d0:1e:74:49:93:ea:73:b3:5f:16:a0:
43:6e:f5:34:32:a4:b4:f4:3c:5d:0c:57:07:21:4d:
a2:e5:2a:f1:f1:49:6d:b6:8d:c6:92:a5:78:84:36:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:80:E7:71:04:7D:1E:7C:45:86:C3:AB:60:CF:56:38:B1:C4:05
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/3feA53EEfR58RYbDq2DPVjixxAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
46.191.240.0/20
79.140.16.0/20
84.39.248.0/21
94.41.128.0/20
94.41.160.0/19
95.105.96.0/19
136.169.240.0/20
145.255.16.0/21
IPv6:
2a02:1c8:7::/48
2a02:1c8:700::/40
Signature Algorithm: sha256WithRSAEncryption
70:69:78:da:af:89:81:36:52:4e:1e:ee:88:f9:b6:0f:ec:25:
f7:fc:7b:5a:29:d7:4b:1d:e8:8b:15:4f:fb:3b:c5:27:88:00:
be:00:df:d3:92:f6:22:fb:18:ba:84:f5:8e:6d:4c:8c:c4:5b:
45:de:52:be:de:07:03:1d:29:5c:49:ed:ed:7f:5a:05:a5:e3:
07:3f:c8:5d:89:3d:cf:17:43:15:f4:eb:6a:85:66:d0:0c:65:
69:f9:c2:15:13:d0:8d:10:40:7c:0f:0c:6c:1d:b4:bd:05:f6:
1a:7c:7d:b2:93:7a:51:88:55:d5:23:3e:66:e2:84:c3:23:91:
66:e0:b6:ee:c5:59:3c:48:d5:90:62:6c:14:5c:74:7f:ef:cd:
88:b6:c5:b6:fb:84:93:68:dc:53:42:22:7a:c1:94:3b:32:02:
00:9f:ae:60:7e:78:d6:24:10:3c:8e:c5:7e:d2:0b:bb:ce:9f:
a5:73:75:06:4e:6b:87:25:ec:2c:45:5e:02:6f:0b:63:a4:d1:
5e:65:7f:b5:f7:77:cf:8c:53:7d:a3:2a:44:73:89:a9:75:fb:
ba:7a:63:8b:b8:39:5c:2a:8d:b1:b4:4f:c5:9a:27:cd:ff:24:
97:bf:4a:67:c6:40:bb:17:87:a9:6a:81:a6:df:9e:f3:37:b8:
7a:7e:31:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYWkyc4mWemhYypXCCvClDd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjMwMTEyMDcwMjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGY3ODBlNzcxMDQ3ZDFlN2M0NTg2YzNhYjYwY2Y1NjM4YjFjNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiMweYwFK6weMrp95IxX9b1XkODR
56kW6LWGv39sttkkAptqZhMWqSezRLbboeCL//c9j8/0QNOqgm+jx80gDpF9wZ0W
6BY8+gm3Cxnpv4YscMEmq8Rm4n75xjEszva2lEQ97c0ZTFtqnnBfcBCJcAz/ckpM
yGFfj1ujESICWn2EDR1i+TRhc0dmuIN+IyHXXPzwc5cjoXXT441NEn6G/028GI8M
DI1hrXdbSyVdUXRN9wZn29eJch2sA052XxVoMckkiPtH+Jj/p+w9i7ADRKoIfHYC
0B50SZPqc7NfFqBDbvU0MqS09DxdDFcHIU2i5Srx8Ultto3GkqV4hDbVRwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFN33gOdxBH0efEWGw6tgz1Y4scQFMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvM2ZlQTUzRUVmUjU4UlliRHEyRFBWaml4eEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzA8BAIAATA2AwQDLr+4AwQE
Lr/wAwQET4wQAwQDVCf4AwQEXimAAwQFXimgAwQFX2lgAwQEiKnwAwQDkf8QMBcE
AgACMBEDBwAqAgHIAAcDBgAqAgHIBzANBgkqhkiG9w0BAQsFAAOCAQEAcGl42q+J
gTZSTh7uiPm2D+wl9/x7WinXSx3oixVP+zvFJ4gAvgDf05L2IvsYuoT1jm1MjMRb
Rd5Svt4HAx0pXEnt7X9aBaXjBz/IXYk9zxdDFfTraoVm0AxlafnCFRPQjRBAfA8M
bB20vQX2Gnx9spN6UYhV1SM+ZuKEwyORZuC27sVZPEjVkGJsFFx0f+/NiLbFtvuE
k2jcU0IiesGUOzICAJ+uYH541iQQPI7FftILu86fpXN1Bk5rhyXsLEVeAm8LY6TR
XmV/tfd3z4xTfaMqRHOJqXX7unpji7g5XCqNsbRPxZonzf8kl79KZ8ZAuxeHqWqB
pt+e8ze4en4xrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org