Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zmRoyJkoJ8UYB1FjHwM-YNy7pdQ.roa
File: zmRoyJkoJ8UYB1FjHwM-YNy7pdQ.roa (raw, json)
Hash identifier: MtpWU/VaZuQjan/oD4tmrgsYTEKxD5V4gfM4n4GKjzY=
Subject key identifier: CE:64:68:C8:99:28:27:C5:18:07:51:63:1F:03:3E:60:DC:BB:A5:D4
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01887E8C1F3DA1AE9A8F0B59B0135D169401
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zmRoyJkoJ8UYB1FjHwM-YNy7pdQ.roa
Signing time: Fri 02 Jun 2023 23:58:12 +0000
ROA not before: Fri 02 Jun 2023 23:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 188.241.246.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
213.166.84.0/22 maxlen: 24
84.247.42.0/23 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.22.0/23 maxlen: 24
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.31.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
176.223.172.0/23 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.174.0/23 maxlen: 24
89.35.28.0/22 maxlen: 22
89.35.25.0/24 maxlen: 24
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 22 Jun 2023 14:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:8c:1f:3d:a1:ae:9a:8f:0b:59:b0:13:5d:16:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jun 2 23:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6468c8992827c5180751631f033e60dcbba5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:cd:bb:b0:9e:aa:bc:60:e6:2a:4f:2c:f3:
1b:d3:b6:20:02:05:f5:53:36:fb:ba:de:3d:2d:2e:
3d:9a:7a:99:0c:f4:73:c8:dc:8c:34:3f:ba:0e:e9:
10:dc:f3:8a:b0:eb:e0:e5:60:52:63:de:29:b3:18:
f4:46:2f:c2:2b:3b:6a:cc:b6:27:b5:23:0e:06:05:
00:f0:32:af:64:12:0b:19:4a:e7:65:f9:a0:b5:13:
93:c3:da:d7:e6:de:c5:a2:cd:e5:49:44:b8:7c:7d:
27:23:fe:8e:cb:e5:ac:d8:06:8e:c3:7e:82:cc:20:
79:dc:5b:11:d5:8a:9e:9f:d0:71:0a:d8:d3:66:4c:
b1:82:19:fd:9d:61:b3:49:2b:8b:bf:d1:40:8f:7f:
66:89:86:ab:d4:ea:26:75:68:6a:2d:08:b4:8f:51:
3b:0d:73:b0:17:22:ef:be:d9:4c:b1:3a:02:2c:68:
b6:5b:dc:d2:2a:65:b9:a5:ed:0c:7f:ee:21:f8:33:
51:99:98:e2:41:b0:14:36:6d:ee:3c:71:92:6e:ca:
32:80:a9:fc:8b:25:c1:73:3b:67:54:bc:84:a4:ac:
6f:c1:c9:1b:84:ef:4a:7f:54:72:44:9f:31:70:a2:
73:0b:56:f8:99:c3:ba:2e:6b:5a:3a:83:f1:d7:2e:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:68:C8:99:28:27:C5:18:07:51:63:1F:03:3E:60:DC:BB:A5:D4
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zmRoyJkoJ8UYB1FjHwM-YNy7pdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
62:74:c8:71:30:5d:58:49:cb:23:51:21:84:c7:d1:a8:cd:e2:
e3:18:e9:46:d1:1a:c4:64:31:b9:58:3b:d1:51:0a:a1:d8:01:
cd:39:25:40:58:9b:f1:c2:b4:24:2e:a3:e1:8d:00:79:cc:81:
5d:7d:5e:54:2b:56:e8:0d:f1:8c:81:d8:6e:c4:30:f4:62:eb:
3e:50:0b:d0:6c:58:48:86:39:bd:9a:15:82:ba:64:83:8b:e9:
f6:84:e2:ca:08:a2:8f:99:e0:43:df:e2:df:79:11:52:a4:a6:
68:3f:98:aa:84:81:ec:8e:81:58:86:a4:e9:c5:50:5a:86:2b:
7d:7c:1d:37:ab:68:5a:78:28:34:e7:f1:c5:4c:27:84:79:63:
33:9b:75:32:e5:4a:d3:12:94:7b:38:f2:e3:70:6f:b8:fc:60:
cc:6f:ad:72:7e:fb:ab:5e:d7:1e:55:0e:51:41:9a:bf:7c:6c:
83:47:23:07:fc:d8:4c:41:74:2f:56:e8:f5:96:d1:d5:bf:69:
9b:db:26:68:2b:15:3b:0f:6e:6a:ff:10:ab:d8:73:f7:85:5c:
e9:29:d1:f6:1f:77:1b:49:a1:01:ce:a5:e0:b4:2f:9c:09:50:
de:d1:21:6d:d2:f3:2d:b4:a7:69:75:24:0c:6b:41:b6:86:77:
7b:53:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org