Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/6o_hb9APnrksVu3H-kdmelCv5Wk.roa
File: 6o_hb9APnrksVu3H-kdmelCv5Wk.roa (raw, json)
Hash identifier: 6sIicUXfkdHPaoG/8Y70u8g+6jisuw1ikC/th/4Xo70=
Subject key identifier: EA:8F:E1:6F:D0:0F:9E:B9:2C:56:ED:C7:FA:47:66:7A:50:AF:E5:69
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018CCA293F990D927F4D3A4419A05B98C406
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/6o_hb9APnrksVu3H-kdmelCv5Wk.roa
Signing time: Tue 02 Jan 2024 12:32:30 +0000
ROA not before: Tue 02 Jan 2024 12:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34758
IP address blocks: 45.13.89.0/24 maxlen: 24
45.13.88.0/24 maxlen: 24
45.13.91.0/24 maxlen: 24
45.13.90.0/24 maxlen: 24
45.13.88.0/22 maxlen: 22
31.6.80.0/24 maxlen: 24
31.6.82.0/24 maxlen: 24
31.6.81.0/24 maxlen: 24
31.6.84.0/24 maxlen: 24
31.6.83.0/24 maxlen: 24
31.6.85.0/24 maxlen: 24
31.6.80.0/20 maxlen: 20
31.6.87.0/24 maxlen: 24
31.6.90.0/24 maxlen: 24
31.6.91.0/24 maxlen: 24
31.6.86.0/24 maxlen: 24
31.6.89.0/24 maxlen: 24
159.255.156.0/22 maxlen: 22
31.6.88.0/24 maxlen: 24
159.255.158.0/24 maxlen: 24
159.255.159.0/24 maxlen: 24
159.255.156.0/24 maxlen: 24
159.255.157.0/24 maxlen: 24
146.255.165.0/24 maxlen: 24
31.6.94.0/24 maxlen: 24
146.255.160.0/21 maxlen: 21
31.6.93.0/24 maxlen: 24
31.6.95.0/24 maxlen: 24
31.6.92.0/24 maxlen: 24
146.255.161.0/24 maxlen: 24
146.255.163.0/24 maxlen: 24
146.255.166.0/24 maxlen: 24
146.255.164.0/24 maxlen: 24
146.255.162.0/24 maxlen: 24
146.255.160.0/24 maxlen: 24
146.255.167.0/24 maxlen: 24
185.126.140.0/22 maxlen: 22
185.126.141.0/24 maxlen: 24
185.126.140.0/24 maxlen: 24
185.126.143.0/24 maxlen: 24
185.126.142.0/24 maxlen: 24
109.234.137.0/24 maxlen: 24
109.234.139.0/24 maxlen: 24
109.234.138.0/24 maxlen: 24
109.234.136.0/24 maxlen: 24
109.234.136.0/21 maxlen: 21
109.234.141.0/24 maxlen: 24
109.234.140.0/24 maxlen: 24
109.234.143.0/24 maxlen: 24
109.234.142.0/24 maxlen: 24
45.93.36.0/22 maxlen: 22
45.93.37.0/24 maxlen: 24
45.93.36.0/24 maxlen: 24
45.93.38.0/24 maxlen: 24
45.93.39.0/24 maxlen: 24
217.72.34.0/24 maxlen: 24
217.72.33.0/24 maxlen: 24
217.72.36.0/24 maxlen: 24
217.72.35.0/24 maxlen: 24
217.72.32.0/24 maxlen: 24
217.72.32.0/21 maxlen: 21
217.72.37.0/24 maxlen: 24
217.72.38.0/24 maxlen: 24
217.72.39.0/24 maxlen: 24
195.225.227.0/24 maxlen: 24
195.225.226.0/24 maxlen: 24
195.225.225.0/24 maxlen: 24
195.225.224.0/24 maxlen: 24
195.225.224.0/22 maxlen: 22
92.246.97.0/24 maxlen: 24
92.246.98.0/24 maxlen: 24
92.246.96.0/24 maxlen: 24
92.246.96.0/21 maxlen: 21
92.246.101.0/24 maxlen: 24
92.246.100.0/24 maxlen: 24
92.246.103.0/24 maxlen: 24
92.246.102.0/24 maxlen: 24
92.246.99.0/24 maxlen: 24
92.246.112.0/24 maxlen: 24
92.246.112.0/20 maxlen: 20
92.246.115.0/24 maxlen: 24
92.246.114.0/24 maxlen: 24
92.246.117.0/24 maxlen: 24
92.246.116.0/24 maxlen: 24
92.246.113.0/24 maxlen: 24
92.246.118.0/24 maxlen: 24
92.246.125.0/24 maxlen: 24
92.246.122.0/24 maxlen: 24
92.246.121.0/24 maxlen: 24
92.246.124.0/24 maxlen: 24
92.246.123.0/24 maxlen: 24
92.246.120.0/24 maxlen: 24
92.246.119.0/24 maxlen: 24
92.246.127.0/24 maxlen: 24
92.246.126.0/24 maxlen: 24
185.171.39.0/24 maxlen: 24
193.238.139.0/24 maxlen: 24
193.238.138.0/24 maxlen: 24
193.238.136.0/24 maxlen: 24
193.238.137.0/24 maxlen: 24
193.238.136.0/22 maxlen: 22
185.171.38.0/24 maxlen: 24
185.171.37.0/24 maxlen: 24
185.171.36.0/24 maxlen: 24
185.171.36.0/22 maxlen: 22
185.158.30.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.158.30.0/23 maxlen: 23
185.23.85.0/24 maxlen: 24
185.23.84.0/24 maxlen: 24
185.23.84.0/22 maxlen: 22
185.23.87.0/24 maxlen: 24
185.23.86.0/24 maxlen: 24
185.103.81.0/24 maxlen: 24
185.103.83.0/24 maxlen: 24
185.103.82.0/24 maxlen: 24
185.103.80.0/24 maxlen: 24
185.103.80.0/22 maxlen: 22
2a04:2080::/29 maxlen: 48
2a06:c2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Mar 2024 13:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:3f:99:0d:92:7f:4d:3a:44:19:a0:5b:98:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jan 2 12:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea8fe16fd00f9eb92c56edc7fa47667a50afe569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ff:7a:65:4c:ff:c6:d8:ce:eb:e2:51:6c:79:
1a:a3:64:b8:b2:a2:d4:be:71:31:b9:6e:da:9a:ff:
ee:94:c8:6e:30:0b:82:09:9f:a9:44:84:5e:a5:06:
f8:18:3e:8b:9c:68:19:cb:89:e3:34:19:e4:7f:dc:
2b:95:59:02:d4:52:5d:c7:a3:e9:3a:ae:2c:10:e6:
4f:6b:19:e1:6f:47:fd:8f:f0:78:7d:d3:1b:00:e8:
df:a1:ca:23:4d:42:05:58:06:a5:c0:ab:94:b5:3a:
8e:49:61:3c:a4:7d:8f:c8:bc:15:c9:0e:cc:e3:d1:
2a:5c:7f:df:94:e9:9d:5e:13:f8:7f:8e:7b:5a:ec:
63:af:bd:bc:57:70:c5:08:46:24:2e:bc:e3:32:21:
fe:4b:8a:a7:b3:d8:76:1e:d5:e4:67:10:5d:52:d2:
47:5f:88:b2:2d:6e:3f:a4:50:fe:cb:91:ab:1d:71:
05:8e:a2:67:34:30:eb:1d:43:7a:38:cd:6a:da:77:
e4:ac:43:08:7a:5d:ae:64:43:f4:0e:4e:6c:93:43:
ea:00:c5:4e:3e:6d:44:35:d5:1c:7a:d6:3c:20:0b:
d9:c5:32:eb:9f:c1:dd:ac:7e:06:d9:ac:62:6a:b1:
f5:76:65:f3:69:4e:9e:3d:3f:52:fb:50:76:90:ab:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:E1:6F:D0:0F:9E:B9:2C:56:ED:C7:FA:47:66:7A:50:AF:E5:69
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/6o_hb9APnrksVu3H-kdmelCv5Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.80.0/20
45.13.88.0/22
45.93.36.0/22
92.246.96.0/21
92.246.112.0/20
109.234.136.0/21
146.255.160.0/21
159.255.156.0/22
185.23.84.0/22
185.103.80.0/22
185.126.140.0/22
185.158.30.0/23
185.171.36.0/22
193.238.136.0/22
195.225.224.0/22
217.72.32.0/21
IPv6:
2a04:2080::/29
2a06:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:99:2d:e0:07:fa:eb:e9:43:12:e3:9d:59:ad:7c:de:5c:0d:
e3:91:5d:36:2d:44:ea:0b:82:c9:1c:1d:2d:42:1d:1b:62:cc:
a8:24:33:8d:a9:fe:42:63:7c:5c:64:60:ee:eb:f5:d1:f1:34:
ed:46:e5:64:18:fa:d7:aa:7b:84:58:dd:15:27:3c:39:7a:5e:
e7:3c:85:3f:e6:a4:49:1b:89:cc:d3:e9:df:6a:f3:5e:a8:d0:
fc:03:ea:12:9f:52:de:fb:a4:c3:f2:db:dc:a8:95:9b:5b:a9:
6b:9e:ed:c1:1e:ad:42:12:04:9f:ff:d1:d6:1b:52:13:f2:70:
5a:99:38:53:0d:70:c2:af:7b:cb:05:6f:cf:d1:70:28:37:c1:
20:31:03:f8:b2:65:3b:ed:76:13:3a:28:b3:2d:9b:8f:ce:c8:
53:47:f4:79:d4:e9:9f:4e:b1:1a:ff:36:b1:1d:51:34:c9:19:
0a:b1:35:a2:24:e9:57:4c:03:99:e4:5e:f5:4d:fa:8f:0d:00:
76:d3:fc:9d:0b:50:1c:6f:c5:90:37:3b:6f:45:96:bd:ba:0f:
e3:ef:0c:e5:ad:73:d5:81:c1:9b:33:2c:ae:46:56:5d:2e:9a:
62:ec:4b:d5:1a:85:69:51:c1:e2:3d:ac:69:5d:66:99:1c:01:
64:9e:64:76
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYzKKT+ZDZJ/TTpEGaBbmMQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh
OTA5YmQwHhcNMjQwMTAyMTIzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThmZTE2ZmQwMGY5ZWI5MmM1NmVkYzdmYTQ3NjY3YTUwYWZlNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP96ZUz/xtjO6+JRbHkao2S4sqLU
vnExuW7amv/ulMhuMAuCCZ+pRIRepQb4GD6LnGgZy4njNBnkf9wrlVkC1FJdx6Pp
Oq4sEOZPaxnhb0f9j/B4fdMbAOjfocojTUIFWAalwKuUtTqOSWE8pH2PyLwVyQ7M
49EqXH/flOmdXhP4f457Wuxjr728V3DFCEYkLrzjMiH+S4qns9h2HtXkZxBdUtJH
X4iyLW4/pFD+y5GrHXEFjqJnNDDrHUN6OM1q2nfkrEMIel2uZEP0Dk5sk0PqAMVO
Pm1ENdUcetY8IAvZxTLrn8HdrH4G2axiarH1dmXzaU6ePT9S+1B2kKsdjQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFOqP4W/QD565LFbtx/pHZnpQr+VpMB8GA1UdIwQY
MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvNm9faGI5QVBucmtzVnUzSC1rZG1lbEN2NVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADBAQfBlAD
BAItDVgDBAItXSQDBANc9mADBARc9nADBANt6ogDBAOS/6ADBAKf/5wDBAK5F1QD
BAK5Z1ADBAK5fowDBAG5nh4DBAK5qyQDBALB7ogDBALD4eADBAPZSCAwFAQCAAIw
DgMFAyoEIIADBQMqBsLAMA0GCSqGSIb3DQEBCwUAA4IBAQCLmS3gB/rr6UMS451Z
rXzeXA3jkV02LUTqC4LJHB0tQh0bYsyoJDONqf5CY3xcZGDu6/XR8TTtRuVkGPrX
qnuEWN0VJzw5el7nPIU/5qRJG4nM0+nfavNeqND8A+oSn1Le+6TD8tvcqJWbW6lr
nu3BHq1CEgSf/9HWG1IT8nBamThTDXDCr3vLBW/P0XAoN8EgMQP4smU77XYTOiiz
LZuPzshTR/R51OmfTrEa/zaxHVE0yRkKsTWiJOlXTAOZ5F71TfqPDQB20/ydC1Ac
b8WQNztvRZa9ug/j7wzlrXPVgcGbMyyuRlZdLppi7EvVGoVpUcHiPaxpXWaZHAFk
nmR2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:40 2024 by rpki-client on console-ams.rpki-client.org