Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/HHNWsakJenBlZA5Ag75Ifdeny8s.roa
File: HHNWsakJenBlZA5Ag75Ifdeny8s.roa (raw, json)
Hash identifier: ZxUug6O64ffkRbqE7HHlDgqScxC6v6fkB23JMUvQTaQ=
Subject key identifier: 1C:73:56:B1:A9:09:7A:70:65:64:0E:40:83:BE:48:7D:D7:A7:CB:CB
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 01856DCACA303D3BB2E9812D5596EAFA1DFF
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/HHNWsakJenBlZA5Ag75Ifdeny8s.roa
Signing time: Sun 01 Jan 2023 14:44:44 +0000
ROA not before: Sun 01 Jan 2023 14:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 152.228.128.0/17 maxlen: 17
94.23.0.0/16 maxlen: 16
51.178.0.0/16 maxlen: 16
51.77.0.0/16 maxlen: 16
151.80.0.0/16 maxlen: 16
193.70.0.0/17 maxlen: 17
91.134.0.0/16 maxlen: 16
162.19.128.0/17 maxlen: 17
145.239.0.0/16 maxlen: 16
137.74.0.0/16 maxlen: 16
149.202.0.0/16 maxlen: 16
188.165.0.0/16 maxlen: 16
54.37.0.0/16 maxlen: 16
51.195.0.0/16 maxlen: 16
141.94.0.0/16 maxlen: 16
92.222.0.0/16 maxlen: 16
91.121.0.0/16 maxlen: 16
5.39.0.0/17 maxlen: 17
198.244.128.0/17 maxlen: 17
213.32.0.0/17 maxlen: 17
146.59.0.0/17 maxlen: 17
178.32.0.0/15 maxlen: 15
146.59.0.0/16 maxlen: 16
37.59.0.0/16 maxlen: 16
37.187.0.0/16 maxlen: 16
54.36.0.0/16 maxlen: 16
162.19.0.0/17 maxlen: 17
51.83.0.0/16 maxlen: 16
213.251.128.0/18 maxlen: 18
79.137.0.0/17 maxlen: 17
141.95.128.0/17 maxlen: 17
51.210.0.0/16 maxlen: 16
135.125.128.0/17 maxlen: 17
213.186.32.0/19 maxlen: 19
51.75.0.0/16 maxlen: 16
54.38.0.0/16 maxlen: 16
51.38.0.0/16 maxlen: 16
46.105.198.0/24 maxlen: 24
46.105.199.0/24 maxlen: 24
46.105.200.0/24 maxlen: 24
46.105.201.0/24 maxlen: 24
46.105.202.0/24 maxlen: 24
46.105.203.0/24 maxlen: 24
46.105.204.0/24 maxlen: 24
46.105.206.0/24 maxlen: 24
46.105.207.0/24 maxlen: 24
51.254.0.0/15 maxlen: 15
51.89.0.0/16 maxlen: 16
5.135.0.0/16 maxlen: 16
135.125.0.0/17 maxlen: 17
57.128.0.0/17 maxlen: 17
51.91.0.0/16 maxlen: 16
217.182.0.0/16 maxlen: 16
51.68.0.0/16 maxlen: 16
5.196.0.0/16 maxlen: 16
164.132.0.0/16 maxlen: 16
141.95.0.0/17 maxlen: 17
176.31.0.0/16 maxlen: 16
147.135.128.0/17 maxlen: 17
87.98.128.0/17 maxlen: 17
57.128.128.0/18 maxlen: 18
46.105.0.0/16 maxlen: 16
2001:41d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 24 Oct 2023 13:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ca:30:3d:3b:b2:e9:81:2d:55:96:ea:fa:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Jan 1 14:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c7356b1a9097a7065640e4083be487dd7a7cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:4c:ea:50:fb:5d:e9:72:24:1a:ce:fd:b6:
e9:b4:f0:52:2f:04:11:6e:bb:4a:a1:d2:d7:81:5b:
37:e9:d3:24:dd:11:00:ed:b8:d9:be:b4:86:b8:20:
c0:d2:56:77:36:26:12:8a:ce:f0:2c:8e:ea:e6:cf:
90:d7:ac:63:e5:89:86:be:22:7f:b1:75:fd:7c:2e:
93:c1:38:44:7d:fc:8a:a4:e0:df:00:45:87:72:2e:
34:df:c1:8e:d2:09:ec:19:80:cc:19:f9:bc:04:93:
a0:28:9d:c5:66:f6:88:1e:e0:96:f9:00:39:5c:83:
cd:53:03:a4:90:24:ee:96:e5:b5:1f:54:75:ea:3d:
38:d0:d6:e7:5e:e2:91:f8:db:e6:fd:45:38:01:90:
3f:01:7b:fd:75:7b:bd:68:f1:ac:5c:e4:04:6c:68:
53:0c:ba:20:84:13:4c:fd:5c:10:6f:54:97:94:18:
60:c9:ea:54:6e:1b:0f:b0:f6:0b:46:5a:4c:c4:5a:
3d:71:4f:a9:0d:33:6f:20:02:dd:7d:ce:a9:78:af:
9e:e8:a9:56:f1:5d:2f:8d:1c:d8:f1:4a:cf:be:98:
8e:41:a7:39:89:63:47:e2:57:14:8f:fd:d3:5b:87:
ec:16:ad:44:ea:b4:09:74:a6:8c:7a:41:be:82:90:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:56:B1:A9:09:7A:70:65:64:0E:40:83:BE:48:7D:D7:A7:CB:CB
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/HHNWsakJenBlZA5Ag75Ifdeny8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.0.0/17
5.135.0.0/16
5.196.0.0/16
37.59.0.0/16
37.187.0.0/16
46.105.0.0/16
51.38.0.0/16
51.68.0.0/16
51.75.0.0/16
51.77.0.0/16
51.83.0.0/16
51.89.0.0/16
51.91.0.0/16
51.178.0.0/16
51.195.0.0/16
51.210.0.0/16
51.254.0.0/15
54.36.0.0-54.38.255.255
57.128.0.0-57.128.191.255
79.137.0.0/17
87.98.128.0/17
91.121.0.0/16
91.134.0.0/16
92.222.0.0/16
94.23.0.0/16
135.125.0.0/16
137.74.0.0/16
141.94.0.0/15
145.239.0.0/16
146.59.0.0/16
147.135.128.0/17
149.202.0.0/16
151.80.0.0/16
152.228.128.0/17
162.19.0.0/16
164.132.0.0/16
176.31.0.0/16
178.32.0.0/15
188.165.0.0/16
193.70.0.0/17
198.244.128.0/17
213.32.0.0/17
213.186.32.0/19
213.251.128.0/18
217.182.0.0/16
IPv6:
2001:41d0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:7a:45:85:7f:7a:dc:96:34:43:0d:7c:3b:5d:c8:26:af:02:
92:98:53:a9:de:b6:e7:c2:db:6f:ab:ed:7a:c2:1b:cc:22:de:
c3:53:05:44:93:bc:52:55:c7:92:91:f1:1a:e9:e7:a0:2e:0b:
15:9f:c4:39:34:5e:be:ee:40:d9:20:2b:93:f7:a3:a7:8e:3e:
56:ed:2d:49:d1:75:e4:47:b1:22:fb:cc:80:46:d9:66:f4:8d:
42:c9:87:1d:59:3a:40:de:a2:6c:23:cd:ca:00:02:49:83:47:
43:73:a0:03:d3:7b:9b:d5:54:08:25:36:8e:5a:a9:2a:05:ff:
6c:d1:95:8e:fe:1d:b7:f6:05:59:a7:12:04:c5:0d:fa:21:33:
eb:0d:22:34:17:4f:32:5f:18:3f:77:7b:0f:be:9d:8a:a0:09:
d9:4d:58:0c:80:75:34:a8:b0:af:85:e7:d5:8e:f8:dd:b3:93:
df:b5:49:b2:9a:a8:6a:f5:d6:b0:fd:ef:5d:c5:39:de:ae:cf:
be:d3:32:72:9f:d7:bd:66:dd:56:09:e4:c6:18:bc:23:e4:4c:
ce:b5:5d:34:25:a0:d9:53:24:2e:69:61:03:10:fe:2d:6c:b7:
ad:4a:ba:28:c0:7c:27:51:34:2a:41:0b:fc:7d:e6:56:15:89:
ab:39:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org