Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/8IfZbLLVRJ-Vy5NcLbvtnoJ7EMA.roa
File: 8IfZbLLVRJ-Vy5NcLbvtnoJ7EMA.roa (raw, json)
Hash identifier: /ASsTEPc0DTy1zqyP0Q3QDeild/ET/5ERugbtnLo4xo=
Subject key identifier: F0:87:D9:6C:B2:D5:44:9F:95:CB:93:5C:2D:BB:ED:9E:82:7B:10:C0
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018CC49230649D7E2BEBACFA68FEA0A695CF
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/8IfZbLLVRJ-Vy5NcLbvtnoJ7EMA.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a07:3900::/48 maxlen: 48
2a07:3906::/32 maxlen: 32
2a0c:a7c0::/48 maxlen: 48
2a07:3905::/32 maxlen: 32
2a07:3900:1::/48 maxlen: 48
2a07:3901::/32 maxlen: 32
2a0c:a7c0:1::/48 maxlen: 48
2a07:3902::/32 maxlen: 32
2a0c:a7c0::/29 maxlen: 29
2a07:3903::/32 maxlen: 32
2a07:3900::/32 maxlen: 32
2a07:3904::/32 maxlen: 32
2a07:3900::/29 maxlen: 29
2a07:3907::/32 maxlen: 32
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 07:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:30:64:9d:7e:2b:eb:ac:fa:68:fe:a0:a6:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f087d96cb2d5449f95cb935c2dbbed9e827b10c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:20:aa:10:21:ff:d5:02:5b:fd:68:55:e2:
2f:9c:55:a3:fa:9f:37:e3:ef:f8:6d:fe:55:44:d1:
d3:03:c7:c6:dc:ea:60:98:41:9a:ee:6c:e5:d9:7a:
18:fb:5a:5c:9f:22:7e:fb:0a:cb:c4:56:aa:11:4d:
30:36:4d:5d:4a:fd:6c:86:07:70:b2:63:2d:49:83:
47:74:b6:10:38:c6:e7:eb:c1:f2:2e:67:7a:27:f4:
ee:0f:46:5f:d8:09:f1:a3:dd:cb:9b:3c:86:4e:09:
90:e4:87:1a:31:0e:b8:88:17:df:38:80:8d:1b:0d:
a3:c3:ba:0a:7f:fe:3b:cc:59:fd:7d:b2:c1:d1:1c:
d6:a1:4b:1b:1f:97:e3:6a:2a:18:fb:23:cb:65:af:
69:97:db:fb:3b:98:d9:16:80:2c:1f:2b:58:0b:1a:
4a:0c:19:3a:30:c3:11:48:95:4f:2e:b2:bc:9b:c4:
a5:f0:46:78:30:6f:99:b2:78:64:a8:75:65:44:ae:
14:61:99:91:bb:7f:b2:bc:53:a6:ee:93:c1:52:b1:
e9:b4:f4:4a:83:84:ed:bc:5b:2c:93:ab:7a:5f:0c:
5c:76:ac:9d:6f:23:cf:0f:af:62:5d:ca:89:dd:2d:
f4:81:48:67:58:ea:6e:df:2c:be:bc:f6:42:05:83:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:D9:6C:B2:D5:44:9F:95:CB:93:5C:2D:BB:ED:9E:82:7B:10:C0
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/8IfZbLLVRJ-Vy5NcLbvtnoJ7EMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:df:4c:cd:31:58:40:54:7a:2d:85:74:49:46:be:bc:50:d6:
41:c5:3a:1c:ee:98:48:a2:88:06:44:0b:d8:64:87:e8:a9:e6:
37:c7:e7:68:fa:02:e9:3c:32:b7:60:97:6a:b3:49:59:90:df:
0f:da:fa:20:6c:c5:cd:a4:07:1f:28:ef:c6:8a:38:b3:64:e3:
db:18:76:e3:3a:4d:24:a5:e9:2f:a1:ca:66:0b:40:fb:82:0f:
55:d9:af:66:d5:37:6a:0b:f4:4a:78:04:04:9c:70:7b:8b:81:
ac:16:e4:31:e1:72:93:9f:dc:f4:b1:7d:2d:f0:7d:39:8f:4a:
4b:59:88:23:8b:f5:92:a9:53:87:de:da:a7:70:3e:19:65:64:
0e:5e:88:31:16:cc:47:f0:15:74:c0:e7:81:59:e1:35:68:80:
ad:41:11:17:5e:72:f2:dd:92:e5:a3:9b:82:98:94:3f:65:bd:
89:e7:7d:69:ee:d0:7d:73:b0:b9:c1:75:19:dd:90:f1:80:c5:
4a:6b:da:7c:4d:59:41:ee:f2:81:cd:4b:cc:17:9d:fe:be:2f:
ac:13:a6:e7:49:9b:59:49:e7:fb:2e:df:d9:97:58:c4:d3:c9:
2c:da:7b:d2:80:e0:e3:b0:36:b6:98:49:d6:6d:d6:a8:19:de:
0c:56:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 10:56:36 2024 by rpki-client on console-fra.rpki-client.org