Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag6YnnbOiQyUfBVkloRyBn2I42o.roa
File: Ag6YnnbOiQyUfBVkloRyBn2I42o.roa (raw, json)
Hash identifier: c09R8sRyfGPC6aCNzsbHfxoUypaEtBy5Oz4uSegTGpc=
Subject key identifier: 02:0E:98:9E:76:CE:89:0C:94:7C:15:64:96:84:72:06:7D:88:E3:6A
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01857FC7D94DFF3AF5CFF1102EF9D21CA8D5
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag6YnnbOiQyUfBVkloRyBn2I42o.roa
Signing time: Thu 05 Jan 2023 02:34:41 +0000
ROA not before: Thu 05 Jan 2023 02:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 188.241.246.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
213.166.84.0/22 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.31.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.35.25.0/24 maxlen: 24
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Apr 2023 19:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7f:c7:d9:4d:ff:3a:f5:cf:f1:10:2e:f9:d2:1c:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 5 02:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020e989e76ce890c947c1564968472067d88e36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:ae:a0:94:72:87:ff:62:e7:37:fe:7f:3a:
97:cb:50:34:da:91:75:42:9e:9c:6a:ce:ac:d2:f0:
f5:a1:4b:81:62:91:71:50:a5:05:ec:70:b0:37:2c:
e3:74:53:4c:16:51:87:72:be:17:17:3b:ba:0e:10:
15:84:70:8e:0c:ac:9f:3a:10:59:a3:ca:30:a2:d6:
ad:20:2d:4e:54:b9:f2:6e:77:cd:66:fc:14:26:ae:
29:a8:21:8b:8a:a4:cb:46:99:87:b6:10:a9:8a:d6:
8b:92:ec:2e:bd:aa:b9:63:89:7b:db:cf:7b:43:35:
e2:58:f8:a1:a1:cb:3c:76:f3:9a:b9:8c:b1:a9:2c:
b3:c6:7a:fe:d8:dc:02:6e:0c:01:0e:b0:71:25:23:
15:5e:2c:71:9f:ae:ff:dc:df:2b:a4:51:b7:2d:86:
2f:07:0f:70:a6:72:f7:a9:a5:91:fa:1c:b5:30:33:
cd:ec:bf:4a:33:78:08:aa:54:ef:eb:d5:9a:65:93:
d3:1f:66:0e:11:32:30:81:46:6c:ca:16:f2:7d:71:
07:72:06:86:83:f4:48:62:34:d4:b2:a4:a8:ec:c7:
97:75:ab:8a:ec:7a:77:df:aa:a7:14:3f:d7:cb:19:
97:c6:cd:66:e4:d5:10:00:7f:52:a0:66:d7:e2:01:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:98:9E:76:CE:89:0C:94:7C:15:64:96:84:72:06:7D:88:E3:6A
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag6YnnbOiQyUfBVkloRyBn2I42o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
85.204.70.0/24
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
15:01:65:87:e0:ab:73:c0:ce:7a:04:8f:90:d3:c5:d6:b2:4d:
26:0c:03:dc:8d:7b:89:bc:27:a4:63:88:c2:3c:f4:65:53:83:
a3:52:50:0a:b0:7e:d2:81:c7:75:b8:d8:80:88:9d:b4:16:43:
d6:bc:08:c7:74:4c:2a:11:7c:d3:14:42:9b:a5:10:43:5f:f2:
36:1a:22:60:28:53:3c:52:16:22:48:a8:c4:d2:57:06:73:44:
25:97:ea:11:e5:05:ba:5b:26:71:54:b2:90:bf:11:ec:6e:fd:
49:95:47:a8:07:e9:a6:b0:13:4d:b4:72:0c:2e:fa:13:11:9e:
6f:78:cf:8b:16:51:19:19:08:3d:0c:e3:39:1c:06:44:4d:bd:
7c:15:2b:d7:71:4c:b2:cf:75:3e:23:8e:01:e9:af:ce:1a:60:
44:6e:d8:53:d9:38:d1:34:99:5b:35:9a:81:f4:c0:22:27:f1:
80:63:dc:7b:01:4e:49:1d:f2:06:64:7a:80:92:c1:16:f9:8d:
f1:43:82:e3:b4:05:b9:be:2c:91:33:1b:d3:db:13:69:2e:44:
1b:c1:fe:62:b9:e4:fe:d9:94:47:5c:03:a2:1c:da:9f:73:63:
bc:1d:32:cb:60:49:92:f5:03:76:98:00:43:6e:33:2d:dd:9d:
a1:e2:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org