Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/1JuT4J75AmOHEZtqeEHh4L3TbSM.roa
File: 1JuT4J75AmOHEZtqeEHh4L3TbSM.roa (raw, json)
Hash identifier: sef/hzrD8BNYnH/xy4KtD8zb6rrpjUNXFP6mhk2sCyc=
Subject key identifier: D4:9B:93:E0:9E:F9:02:63:87:11:9B:6A:78:41:E1:E0:BD:D3:6D:23
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 018CC3B6F5B60E932C7468909C7B9B3F7A65
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/1JuT4J75AmOHEZtqeEHh4L3TbSM.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201838
IP address blocks: 45.144.56.0/22 maxlen: 24
89.36.112.0/20 maxlen: 20
188.215.16.0/23 maxlen: 23
45.12.172.0/22 maxlen: 24
45.248.144.0/22 maxlen: 24
213.32.248.0/22 maxlen: 24
95.214.228.0/22 maxlen: 22
45.93.172.0/22 maxlen: 22
45.144.160.0/22 maxlen: 24
79.171.156.0/22 maxlen: 22
79.171.154.0/23 maxlen: 23
79.171.153.0/24 maxlen: 24
45.148.12.0/22 maxlen: 22
45.94.60.0/22 maxlen: 22
103.205.24.0/22 maxlen: 24
45.117.136.0/22 maxlen: 22
45.90.172.0/22 maxlen: 22
188.215.74.0/23 maxlen: 23
185.238.220.0/22 maxlen: 22
89.45.176.0/20 maxlen: 20
185.230.248.0/22 maxlen: 24
93.113.26.0/23 maxlen: 23
45.133.88.0/22 maxlen: 24
45.89.156.0/22 maxlen: 22
45.89.84.0/22 maxlen: 22
192.166.212.0/22 maxlen: 24
192.166.208.0/22 maxlen: 22
193.42.52.0/22 maxlen: 24
45.86.8.0/22 maxlen: 24
62.133.48.0/22 maxlen: 22
45.150.144.0/22 maxlen: 22
94.177.138.0/23 maxlen: 23
147.12.128.0/17 maxlen: 17
193.164.20.0/22 maxlen: 22
185.241.164.0/22 maxlen: 22
95.214.184.0/22 maxlen: 22
80.76.56.0/22 maxlen: 22
62.197.132.0/22 maxlen: 24
171.22.104.0/22 maxlen: 22
185.59.124.0/22 maxlen: 22
185.103.72.0/22 maxlen: 24
188.241.106.0/23 maxlen: 23
45.153.220.0/22 maxlen: 24
103.7.204.0/22 maxlen: 22
45.149.72.0/22 maxlen: 24
77.75.60.0/22 maxlen: 24
45.132.136.0/21 maxlen: 24
45.146.8.0/22 maxlen: 22
194.4.156.0/22 maxlen: 24
185.115.144.0/22 maxlen: 24
45.159.88.0/22 maxlen: 22
46.102.171.0/24 maxlen: 24
46.102.170.0/24 maxlen: 24
46.102.170.0/23 maxlen: 23
185.240.196.0/22 maxlen: 22
94.176.208.0/23 maxlen: 23
45.149.220.0/22 maxlen: 22
45.95.248.0/22 maxlen: 22
45.159.152.0/22 maxlen: 24
212.132.192.0/18 maxlen: 18
45.146.60.0/22 maxlen: 24
185.237.60.0/22 maxlen: 22
94.247.86.0/23 maxlen: 23
188.212.122.0/23 maxlen: 23
185.229.104.0/22 maxlen: 24
45.94.176.0/22 maxlen: 22
185.71.36.0/22 maxlen: 22
45.148.56.0/22 maxlen: 22
185.245.236.0/22 maxlen: 24
89.43.208.0/21 maxlen: 24
45.128.32.0/22 maxlen: 22
185.121.228.0/22 maxlen: 24
178.239.200.0/22 maxlen: 24
45.148.252.0/22 maxlen: 24
45.152.4.0/22 maxlen: 24
45.141.236.0/22 maxlen: 22
185.236.60.0/22 maxlen: 24
45.81.72.0/22 maxlen: 22
45.91.112.0/22 maxlen: 22
185.111.172.0/22 maxlen: 22
45.128.136.0/22 maxlen: 22
178.239.192.0/22 maxlen: 24
2a03:3820::/32 maxlen: 32
2a02:6b60::/29 maxlen: 29
2a02:6b60::/28 maxlen: 28
Validation: Failed, certificate revoked on Thu 06 Jun 2024 10:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f5:b6:0e:93:2c:74:68:90:9c:7b:9b:3f:7a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d49b93e09ef9026387119b6a7841e1e0bdd36d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:ac:d5:51:ad:2f:fc:fa:6a:99:a0:a7:76:
c6:a0:10:89:1c:b3:ef:95:31:ce:b1:d8:2c:c7:73:
41:a6:d9:16:36:a5:a8:77:7e:53:2f:80:be:d0:ae:
c3:64:7d:e3:d1:1f:09:20:0a:19:f2:bf:14:2b:69:
8c:49:05:5d:ae:ad:ea:ae:18:93:72:0f:25:1d:4a:
8e:7b:a4:70:3c:6b:c6:68:55:5c:90:fb:c8:29:c0:
e0:9f:4d:25:f6:b6:e9:7b:a9:64:83:e3:1f:cd:83:
9b:5c:ab:c6:9e:14:3c:c0:8f:35:cc:78:e9:10:cb:
59:da:52:15:51:d6:8c:7c:76:97:fb:a8:6a:6f:97:
b5:42:85:37:57:c0:65:f3:e0:10:5a:ed:81:14:b3:
73:f5:a1:bf:0c:9d:e1:86:9f:47:3d:c8:bb:c9:7c:
1a:35:49:04:6f:db:94:80:45:fd:d0:d8:59:79:ca:
58:ba:a1:a3:6c:da:98:8b:a2:44:f6:e4:35:50:33:
50:e0:c7:a3:14:91:3a:91:80:b3:8a:ab:9b:ce:c8:
8b:2d:b6:78:ee:81:94:5c:1d:f3:a3:63:84:f0:8e:
16:69:01:34:df:87:cb:ab:0f:38:21:4f:ee:d3:61:
12:a7:ea:5d:05:d1:99:02:51:ce:c5:25:99:25:06:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9B:93:E0:9E:F9:02:63:87:11:9B:6A:78:41:E1:E0:BD:D3:6D:23
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/1JuT4J75AmOHEZtqeEHh4L3TbSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.172.0/22
45.81.72.0/22
45.86.8.0/22
45.89.84.0/22
45.89.156.0/22
45.90.172.0/22
45.91.112.0/22
45.93.172.0/22
45.94.60.0/22
45.94.176.0/22
45.95.248.0/22
45.117.136.0/22
45.128.32.0/22
45.128.136.0/22
45.132.136.0/21
45.133.88.0/22
45.141.236.0/22
45.144.56.0/22
45.144.160.0/22
45.146.8.0/22
45.146.60.0/22
45.148.12.0/22
45.148.56.0/22
45.148.252.0/22
45.149.72.0/22
45.149.220.0/22
45.150.144.0/22
45.152.4.0/22
45.153.220.0/22
45.159.88.0/22
45.159.152.0/22
45.248.144.0/22
46.102.170.0/23
62.133.48.0/22
62.197.132.0/22
77.75.60.0/22
79.171.153.0-79.171.159.255
80.76.56.0/22
89.36.112.0/20
89.43.208.0/21
89.45.176.0/20
93.113.26.0/23
94.176.208.0/23
94.177.138.0/23
94.247.86.0/23
95.214.184.0/22
95.214.228.0/22
103.7.204.0/22
103.205.24.0/22
147.12.128.0/17
171.22.104.0/22
178.239.192.0/22
178.239.200.0/22
185.59.124.0/22
185.71.36.0/22
185.103.72.0/22
185.111.172.0/22
185.115.144.0/22
185.121.228.0/22
185.229.104.0/22
185.230.248.0/22
185.236.60.0/22
185.237.60.0/22
185.238.220.0/22
185.240.196.0/22
185.241.164.0/22
185.245.236.0/22
188.212.122.0/23
188.215.16.0/23
188.215.74.0/23
188.241.106.0/23
192.166.208.0/21
193.42.52.0/22
193.164.20.0/22
194.4.156.0/22
212.132.192.0/18
213.32.248.0/22
IPv6:
2a02:6b60::/28
2a03:3820::/32
Signature Algorithm: sha256WithRSAEncryption
71:7f:ef:ca:a4:de:91:d2:65:c4:fd:4b:8d:3c:2c:9c:15:46:
93:53:13:56:7a:32:a7:7d:c0:82:26:e7:74:d6:71:4b:2b:d4:
fa:bd:d4:f5:09:2f:10:dc:b0:c3:b4:4a:f6:02:ca:c5:a4:92:
3d:19:e8:3c:8f:c6:cc:d6:84:21:66:5b:4c:f2:48:a5:c9:40:
33:c9:ff:6e:fb:cc:3d:34:93:81:d9:d5:56:4d:40:92:ad:bb:
28:bd:5c:36:82:b8:ab:e7:90:6b:13:fc:ae:14:85:a2:a3:97:
6c:f0:ed:24:90:1a:51:88:b4:cf:3b:14:9f:3a:a5:3c:48:7c:
43:a3:28:7f:67:f0:5a:9e:7c:1f:b9:a2:aa:d0:2f:bc:a2:92:
b8:4a:b5:e5:a4:c7:eb:ef:5c:88:a4:b9:6c:b3:28:36:ff:01:
05:9b:24:28:04:5d:d3:09:9c:17:66:9a:99:00:54:bf:94:4d:
f1:00:bf:f6:85:50:b5:c1:23:f9:0f:29:88:19:1f:06:17:9c:
b0:07:21:0e:03:b4:c8:7f:5f:8f:bb:86:a3:8b:60:d9:20:c2:
fc:5f:62:46:ac:3c:28:1b:14:7a:3a:ea:54:ca:fc:fd:15:ed:
e5:cd:b2:82:79:da:5d:e0:26:69:c5:2e:e7:01:60:0a:4c:71:
06:2a:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:53 2024 by rpki-client on console-ams.rpki-client.org