Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3hmkXI1TQtE621Yyr4dp4_FQ-E4.roa
File: 3hmkXI1TQtE621Yyr4dp4_FQ-E4.roa (raw, json)
Hash identifier: sWbVl+H6Fz3vpPO33jriJvc/Ju/pYh5JNPOtdEG702g=
Subject key identifier: DE:19:A4:5C:8D:53:42:D1:3A:DB:56:32:AF:87:69:E3:F1:50:F8:4E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018A6B2495415B97FAA01C1278644A6439A2
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3hmkXI1TQtE621Yyr4dp4_FQ-E4.roa
Signing time: Wed 06 Sep 2023 15:37:54 +0000
ROA not before: Wed 06 Sep 2023 15:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 188.241.246.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
213.166.84.0/22 maxlen: 24
84.247.42.0/23 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
86.104.248.0/22 maxlen: 22
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.22.0/23 maxlen: 24
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.31.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
31.14.254.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
176.223.172.0/23 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.174.0/23 maxlen: 24
89.35.28.0/22 maxlen: 22
89.35.25.0/24 maxlen: 24
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
89.34.96.0/22 maxlen: 22
77.81.102.0/24 maxlen: 24
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 12 Sep 2023 17:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:24:95:41:5b:97:fa:a0:1c:12:78:64:4a:64:39:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 6 15:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de19a45c8d5342d13adb5632af8769e3f150f84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:50:e6:1c:ef:ab:03:6d:9f:d9:ac:a0:bc:
e4:35:b3:e5:9b:b0:af:ed:1b:02:99:03:e4:c0:9b:
6b:3c:52:0f:0b:3a:1d:0f:4d:3d:84:86:c7:6f:22:
4e:3f:ef:a2:44:07:36:fe:8f:5e:95:8e:3a:57:5b:
a6:59:36:44:7d:b1:17:f4:2a:6d:64:d2:d6:c9:e1:
b5:f9:09:66:5b:bb:ca:d3:ee:2f:02:e3:94:58:10:
54:86:4b:06:3e:e5:b3:ab:39:8f:0d:52:d0:e8:da:
2e:6e:0f:8b:7a:17:46:21:e3:b8:4e:fe:73:74:ee:
e8:d5:7a:80:e9:a6:cf:6c:04:a6:f3:0c:c2:dc:ae:
58:3a:78:54:cb:2c:43:1f:4c:4e:39:c9:8b:ff:6d:
3a:39:b3:7b:8e:0b:ed:ea:82:42:dd:d2:ba:e6:ee:
96:ce:a1:ce:fe:b7:30:39:e8:4f:13:0a:f7:0d:65:
4f:5a:2b:96:75:61:40:dd:fc:75:4f:4b:fc:03:df:
99:8e:9b:75:42:03:4c:e5:eb:69:08:1f:15:f6:50:
8a:96:18:62:f5:f5:72:59:69:e6:0e:d4:84:75:73:
09:b4:35:30:f5:c7:2c:25:4c:78:26:03:13:29:45:
21:80:08:85:9d:ae:c4:8f:55:58:34:7f:3a:0e:43:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:A4:5C:8D:53:42:D1:3A:DB:56:32:AF:87:69:E3:F1:50:F8:4E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3hmkXI1TQtE621Yyr4dp4_FQ-E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
5f:8a:e7:23:9e:19:5e:7a:6e:43:82:52:1a:23:e7:37:c0:b4:
02:a3:ac:04:41:2c:8d:b2:da:42:e2:c8:82:7b:eb:5e:63:61:
2d:52:59:f4:42:09:3e:18:3a:d9:a2:82:39:9c:70:ce:1f:4e:
54:4f:cb:89:a9:9d:ad:a4:5f:91:9d:c2:a8:7d:a1:ea:ca:76:
cc:f9:20:5d:56:6a:9d:84:14:88:44:2b:90:45:f3:70:a2:fc:
57:9e:0b:3c:f9:df:40:06:6a:b4:47:82:d8:ea:91:da:05:4f:
2b:55:51:46:63:12:e6:0c:2d:bd:41:72:5c:2a:d6:ea:93:27:
cd:eb:f5:ef:2f:a3:71:93:42:ed:b4:b3:7c:52:6e:b5:9f:b3:
09:75:bd:72:b1:3d:b6:c7:43:0a:8e:d7:eb:7e:27:07:fc:e7:
c7:43:59:e1:b4:1e:d5:60:2b:e5:4f:ef:eb:9a:1c:c2:9f:c2:
55:7d:94:05:fb:f7:eb:a7:63:76:9b:ea:dd:ce:61:06:5f:6d:
42:97:46:58:de:5e:94:32:df:8e:a7:ee:46:86:db:9f:14:11:
f4:91:bd:75:c1:7b:3e:f3:22:e7:d9:87:00:87:94:3b:7d:7f:
8e:cf:5c:7e:c2:18:07:4c:22:78:33:59:ad:07:c5:c0:8d:30:
f6:59:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org