Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/00rjkjVsNTquXSieieVO6rme8Y0.roa
File: 00rjkjVsNTquXSieieVO6rme8Y0.roa (raw, json)
Hash identifier: FhTENx+cOxGW5KGbeL5pUSV6QR3lIGQQFECnEFBWO/Q=
Subject key identifier: D3:4A:E3:92:35:6C:35:3A:AE:5D:28:9E:89:E5:4E:EA:B9:9E:F1:8D
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 018E89CEF2D4B28C6783A67A12C641E61924
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/00rjkjVsNTquXSieieVO6rme8Y0.roa
Signing time: Fri 29 Mar 2024 10:43:44 +0000
ROA not before: Fri 29 Mar 2024 10:43:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 45.145.200.0/22 maxlen: 22
45.145.200.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
85.208.200.0/22 maxlen: 22
85.208.200.0/24 maxlen: 24
85.208.201.0/24 maxlen: 24
85.208.202.0/24 maxlen: 24
85.208.203.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
89.37.70.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
178.23.8.0/21 maxlen: 24
185.56.156.0/22 maxlen: 24
185.171.232.0/22 maxlen: 22
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.191.104.0/22 maxlen: 22
185.191.104.0/24 maxlen: 24
185.191.105.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
185.215.144.0/22 maxlen: 22
185.215.144.0/24 maxlen: 24
185.215.145.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.219.116.0/22 maxlen: 22
185.219.116.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
185.248.227.0/24 maxlen: 24
185.255.29.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
217.28.64.0/22 maxlen: 22
217.28.64.0/24 maxlen: 24
217.28.65.0/24 maxlen: 24
217.28.66.0/24 maxlen: 24
217.28.67.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
2a05:3680::/29 maxlen: 29
2a0b:7b80::/29 maxlen: 29
2a0f:de80::/29 maxlen: 29
2a13:56c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 May 2024 06:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:ce:f2:d4:b2:8c:67:83:a6:7a:12:c6:41:e6:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Mar 29 10:43:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d34ae392356c353aae5d289e89e54eeab99ef18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:d9:3f:5d:6a:2b:f1:92:1b:2a:21:79:aa:
42:a5:5c:b4:63:89:f8:4c:50:ff:fa:43:ad:d3:45:
73:77:a6:3c:bd:40:81:29:18:1d:9d:af:8f:e5:43:
15:fb:ac:f2:f4:97:6d:c8:bd:ff:46:98:79:3b:3f:
7e:51:88:e5:6b:43:38:46:5e:df:b1:9e:32:3f:f3:
77:74:fa:14:7c:8c:1a:b4:1e:ea:aa:53:fe:13:49:
92:b0:a9:44:95:1d:7a:f1:19:2b:22:7b:f2:df:80:
a3:a8:90:d0:87:b9:af:35:e0:e1:58:33:ca:1e:d0:
34:a2:83:0f:e3:e1:aa:38:89:3b:b3:45:28:97:10:
d6:df:0e:ac:4c:b0:37:0d:33:dd:9b:05:eb:e7:b0:
be:e3:b1:50:00:a0:55:6f:8d:18:2b:38:05:0f:6e:
b4:de:1e:3c:23:fd:af:b7:14:ae:57:fd:c8:95:da:
94:22:c9:79:28:af:1f:84:bd:09:16:ba:fa:e8:af:
4e:31:ae:61:79:d5:f5:36:33:47:ec:da:6b:14:07:
76:37:73:3b:81:c4:d7:cc:b3:fb:80:30:fa:a0:43:
1c:40:dc:60:08:47:0e:9a:e0:d6:e6:52:0a:81:a8:
11:21:bc:b4:11:ab:34:19:80:b3:a8:39:76:8d:c6:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:E3:92:35:6C:35:3A:AE:5D:28:9E:89:E5:4E:EA:B9:9E:F1:8D
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/00rjkjVsNTquXSieieVO6rme8Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.200.0/22
77.242.128.0/20
85.208.200.0/22
89.37.70.0/23
178.23.8.0/21
185.56.156.0/22
185.171.232.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.248.227.0/24
185.255.29.0/24
188.191.56.0/22
217.28.64.0/22
IPv6:
2a02:53e0::/32
2a05:3680::/29
2a0b:7b80::/29
2a0f:de80::/29
2a13:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:e1:2e:ba:de:f5:34:6e:ae:67:74:3d:68:d4:b8:45:f9:c4:
57:91:3c:20:a6:de:32:c2:ec:08:09:6f:40:67:6a:62:56:e2:
b0:77:41:9c:4c:bd:24:5d:6f:86:39:b7:eb:03:af:9a:83:12:
0d:20:40:a2:41:d3:0f:bc:81:2a:46:5b:18:9a:a5:11:d3:da:
d3:bb:eb:d8:51:a2:26:45:bb:14:00:06:4d:c8:14:50:74:7c:
ef:c6:b1:c0:f8:f7:eb:72:86:45:e2:ce:e9:56:ee:cb:c6:fd:
03:fa:12:ed:ec:4d:8d:9d:8b:94:85:44:2e:0c:ac:87:1d:85:
51:32:62:3b:d4:22:73:c4:e6:17:38:0e:0b:5d:25:84:33:3a:
5f:66:04:58:1c:80:68:32:4b:38:96:4e:9d:7f:53:76:a1:f0:
9a:22:a9:b1:03:b2:cb:83:06:47:9d:dd:d3:01:c5:7a:2a:ca:
a7:03:83:e8:ca:97:f6:d8:e6:83:a7:08:3a:66:00:ee:97:04:
de:99:b1:b5:97:f1:cc:e1:04:25:dd:b7:28:17:1b:84:39:73:
d9:51:6f:27:f8:e2:ae:ee:9b:df:c6:23:99:1d:eb:de:24:fb:
dc:f4:62:34:ba:36:60:ec:5c:02:8d:bd:3c:c0:04:fe:a2:0c:
d5:3b:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:57:41 2025 by rpki-client