Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/on73M46IJsmNiGQb-nQH5sfGNGU.roa
File: on73M46IJsmNiGQb-nQH5sfGNGU.roa (raw, json)
Hash identifier: yGFT7T+HIKRoTCo22ag7rDm5c5bvPSMI8ldiCrO3NIU=
Subject key identifier: A2:7E:F7:33:8E:88:26:C9:8D:88:64:1B:FA:74:07:E6:C7:C6:34:65
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0187E7945B3364E0174DFE0CC570EC607ECB
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/on73M46IJsmNiGQb-nQH5sfGNGU.roa
Signing time: Thu 04 May 2023 16:24:32 +0000
ROA not before: Thu 04 May 2023 16:24:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 188.241.246.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
213.166.84.0/22 maxlen: 24
84.247.42.0/23 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 May 2023 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:94:5b:33:64:e0:17:4d:fe:0c:c5:70:ec:60:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: May 4 16:24:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27ef7338e8826c98d88641bfa7407e6c7c63465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:79:ae:c1:00:a2:18:09:97:3c:71:b3:08:
90:05:84:b7:83:3b:83:2a:dc:00:ee:ae:f9:e7:2b:
10:5b:67:14:e1:c0:44:64:01:26:a8:9d:3d:41:82:
d2:c6:2f:bb:be:0f:6f:45:b7:5e:c1:50:39:fe:dd:
ec:55:1a:af:60:87:27:9f:a7:84:20:3d:5c:ab:6e:
ef:16:80:18:57:7a:31:f0:85:5b:77:07:b6:45:24:
d1:11:c8:71:28:64:d5:50:56:9e:7c:e9:09:79:75:
02:c4:e3:4d:56:e2:05:cf:1b:5c:d3:07:87:d9:76:
c7:50:b8:19:15:3d:79:4b:32:1a:65:30:4d:c6:3a:
37:12:f4:bb:b8:79:c0:36:0e:f2:c3:59:da:33:85:
3d:d5:9d:8d:67:32:d3:57:9b:ff:a3:77:a5:b4:6e:
fe:b9:d4:22:7f:7e:2a:07:e2:0b:85:3a:8b:28:63:
79:1d:8d:53:ab:60:45:40:18:9e:12:0b:0e:67:09:
78:80:82:0a:45:1c:6b:b0:13:39:8d:fb:17:57:33:
62:bb:d0:99:e7:62:98:eb:e5:62:1f:88:bc:b9:5b:
c8:5e:73:08:b7:3e:ac:0b:30:74:7f:e7:37:ba:b8:
96:b3:5c:8f:16:64:11:19:14:37:aa:38:8f:46:47:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:F7:33:8E:88:26:C9:8D:88:64:1B:FA:74:07:E6:C7:C6:34:65
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/on73M46IJsmNiGQb-nQH5sfGNGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
63:27:38:8a:da:ba:69:aa:ab:a9:14:f7:51:a9:be:2f:a9:7d:
07:28:d4:ef:a8:a4:fd:ea:d6:b9:92:59:23:29:92:e0:ee:0f:
1b:24:5c:57:9c:ec:96:08:90:2a:58:28:db:41:c3:ea:ad:6a:
59:b8:9e:ec:3e:c4:c4:d0:6b:0a:e0:75:32:88:27:c9:90:d1:
88:56:6f:56:b9:63:27:4a:a5:99:b3:a2:57:8e:52:1d:6d:d0:
53:30:d0:b5:07:aa:ba:86:ba:af:aa:4f:46:ae:ea:fb:4c:78:
59:21:d1:ea:9f:41:3a:40:92:47:fc:73:66:5c:d6:38:d3:f4:
23:54:f7:ab:3d:20:09:60:fb:21:47:3b:6d:58:c3:c7:7a:61:
11:ee:12:65:a6:02:ac:9b:29:86:b0:2b:58:43:5f:2b:77:82:
c6:3b:fa:73:10:f9:e3:a8:e2:82:e2:71:ee:87:5d:f2:2c:41:
23:5a:eb:43:ec:10:93:fb:89:a1:1b:cd:f0:16:f7:61:7b:89:
04:6e:04:9a:a2:fd:64:48:9e:d1:a5:37:22:b1:34:83:1c:df:
d1:8a:ae:a1:e1:ce:06:86:71:42:68:6c:35:20:95:23:46:ca:
42:00:32:60:06:c8:67:53:8f:96:6c:e7:62:88:5b:c3:2a:02:
2e:06:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org