Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/NDodsuhyJMf4Ht76bL6V2APv4Hw.roa
File: NDodsuhyJMf4Ht76bL6V2APv4Hw.roa (raw, json)
Hash identifier: UweNpX5LE3BWYHeo2ox/Bl5PjV7Ur0T4AvMQ9/dLC8s=
Subject key identifier: 34:3A:1D:B2:E8:72:24:C7:F8:1E:DE:FA:6C:BE:95:D8:03:EF:E0:7C
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 018CD3D6F15F3E22127B646899AAC6DB5502
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/NDodsuhyJMf4Ht76bL6V2APv4Hw.roa
Signing time: Thu 04 Jan 2024 09:38:48 +0000
ROA not before: Thu 04 Jan 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202448
IP address blocks: 45.137.151.0/24 maxlen: 24
45.137.150.0/24 maxlen: 24
45.137.148.0/24 maxlen: 32
45.137.149.0/24 maxlen: 24
2.56.213.0/24 maxlen: 24
2.56.212.0/24 maxlen: 24
89.43.33.0/24 maxlen: 24
194.26.213.0/24 maxlen: 24
86.107.197.0/24 maxlen: 24
93.114.128.0/24 maxlen: 24
2.56.215.0/24 maxlen: 24
2.56.214.0/24 maxlen: 24
62.3.32.0/24 maxlen: 24
194.32.78.0/24 maxlen: 24
194.32.77.0/24 maxlen: 24
194.32.76.0/24 maxlen: 24
194.32.79.0/24 maxlen: 24
91.250.248.0/24 maxlen: 32
91.250.249.0/24 maxlen: 32
185.234.52.0/24 maxlen: 32
193.201.15.0/24 maxlen: 24
185.96.163.0/24 maxlen: 24
178.157.82.0/24 maxlen: 24
185.170.213.0/24 maxlen: 24
178.157.91.0/24 maxlen: 24
185.170.212.0/24 maxlen: 24
178.157.90.0/24 maxlen: 24
185.170.215.0/24 maxlen: 24
185.170.214.0/24 maxlen: 24
45.153.184.0/24 maxlen: 24
45.153.186.0/24 maxlen: 24
45.153.185.0/24 maxlen: 24
45.153.187.0/24 maxlen: 24
86.106.181.0/24 maxlen: 24
89.38.135.0/24 maxlen: 32
91.227.41.0/24 maxlen: 24
91.227.40.0/24 maxlen: 24
86.105.252.0/24 maxlen: 24
94.176.182.0/24 maxlen: 24
95.169.192.0/24 maxlen: 24
185.243.214.0/24 maxlen: 32
185.243.215.0/24 maxlen: 24
95.169.201.0/24 maxlen: 24
194.99.23.0/24 maxlen: 24
194.99.22.0/24 maxlen: 24
194.99.21.0/24 maxlen: 24
194.99.20.0/24 maxlen: 24
89.38.131.0/24 maxlen: 24
31.14.238.0/24 maxlen: 24
89.38.130.0/24 maxlen: 24
89.38.129.0/24 maxlen: 24
89.38.128.0/24 maxlen: 24
188.212.125.0/24 maxlen: 24
188.212.124.0/24 maxlen: 24
93.114.133.0/24 maxlen: 24
93.115.16.0/24 maxlen: 24
93.115.17.0/24 maxlen: 24
93.115.23.0/24 maxlen: 24
93.115.22.0/24 maxlen: 24
93.115.21.0/24 maxlen: 24
93.115.20.0/24 maxlen: 24
93.115.19.0/24 maxlen: 24
93.115.18.0/24 maxlen: 24
31.222.229.0/24 maxlen: 24
2a05:8280::/32 maxlen: 32
2a09:cd42::/32 maxlen: 32
2a09:cd45::/32 maxlen: 32
2a09:cd43::/32 maxlen: 32
2a0c:b9c1::/32 maxlen: 32
2a09:cd41::/32 maxlen: 32
2a09:cd40::/32 maxlen: 32
2a0c:b9c0::/32 maxlen: 32
2a09:cd46::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jan 2024 19:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:d6:f1:5f:3e:22:12:7b:64:68:99:aa:c6:db:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Jan 4 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=343a1db2e87224c7f81edefa6cbe95d803efe07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:66:5c:3b:5d:13:5d:d8:ce:fa:06:36:ff:
91:d4:cd:e8:48:ba:7e:94:85:b6:e9:0d:68:ca:51:
ff:8b:b8:29:41:50:30:dc:20:2c:ab:71:77:00:b5:
c8:26:f4:6e:0b:f9:87:f1:37:e5:c8:45:6d:f7:ac:
c0:e3:51:2d:bd:84:54:ce:ef:10:54:6e:c1:77:0a:
5d:ea:55:e8:f2:36:1c:b4:d9:3a:4f:1b:37:dc:a1:
09:a3:72:b5:38:f5:47:db:fd:de:34:42:57:5d:f1:
57:02:e7:95:f2:a3:54:77:8b:76:7b:a1:82:9e:cb:
e0:4e:00:0e:a6:67:a8:89:14:e5:ae:dc:db:91:55:
0e:41:0b:b2:cb:b1:75:c4:06:48:78:d9:ca:6e:8f:
6d:7f:b4:fa:4d:c6:a2:07:9b:51:d2:b8:45:d6:ca:
01:f0:03:6a:11:31:b0:4c:46:24:8a:b4:72:c7:20:
7c:98:3b:98:03:de:2b:a1:a2:3e:99:60:a5:1d:d9:
99:ae:e0:b0:23:cc:7a:2a:2b:95:15:ab:17:66:24:
7b:7c:d2:97:d2:3f:e6:df:c9:ce:51:0e:aa:ad:e0:
a2:ac:4f:9d:9a:a8:00:f5:e1:58:2f:ed:5b:9a:2d:
54:4c:a9:af:13:9d:97:68:ce:bc:00:c3:5b:b8:e7:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:1D:B2:E8:72:24:C7:F8:1E:DE:FA:6C:BE:95:D8:03:EF:E0:7C
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/NDodsuhyJMf4Ht76bL6V2APv4Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.212.0/22
31.14.238.0/24
31.222.229.0/24
45.137.148.0/22
45.153.184.0/22
62.3.32.0/24
86.105.252.0/24
86.106.181.0/24
86.107.197.0/24
89.38.128.0/22
89.38.135.0/24
89.43.33.0/24
91.227.40.0/23
91.250.248.0/23
93.114.128.0/24
93.114.133.0/24
93.115.16.0/21
94.176.182.0/24
95.169.192.0/24
95.169.201.0/24
178.157.82.0/24
178.157.90.0/23
185.96.163.0/24
185.170.212.0/22
185.234.52.0/24
185.243.214.0/23
188.212.124.0/23
193.201.15.0/24
194.26.213.0/24
194.32.76.0/22
194.99.20.0/22
IPv6:
2a05:8280::/32
2a09:cd40::/30
2a09:cd45::-2a09:cd46:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:b9c0::/31
Signature Algorithm: sha256WithRSAEncryption
77:f9:21:72:a5:43:66:25:80:03:9d:84:07:a8:cc:b5:4f:a8:
29:5f:16:13:77:25:c0:61:ac:9b:34:07:9a:be:0f:26:1e:b6:
0b:2c:53:a3:9b:e9:bb:a1:a9:84:b2:40:71:0c:89:4d:15:53:
1c:e4:90:11:95:3f:40:06:ce:96:80:c9:5d:f8:31:34:01:5b:
18:43:ed:7c:b5:01:4c:00:83:2e:cc:87:97:89:5c:a1:a6:6a:
b6:e0:05:0f:89:9d:b8:6b:5e:7d:8a:fd:6f:6e:f5:6d:a9:93:
d2:90:a8:ba:f6:64:99:62:08:68:2c:22:8b:6f:60:fa:d1:4d:
2f:37:a5:aa:cd:69:de:d6:60:8b:49:9a:d0:bb:6a:4b:60:d6:
98:79:f5:3a:ab:16:00:78:c4:64:03:e0:c5:81:e2:c8:02:7d:
10:df:00:00:dd:1f:14:c5:cf:7e:9a:75:6c:cb:71:70:a4:97:
cd:ed:af:b7:11:06:4a:1a:ab:e6:6c:58:86:28:d3:ca:3b:ef:
17:96:30:73:d6:ec:c5:6f:a9:72:f7:46:bb:7a:65:94:05:f9:
ee:c8:98:8d:f3:da:8b:e2:58:75:cc:b3:4d:d6:2c:12:42:7a:
c1:9c:c0:a7:57:4b:31:0d:63:23:c1:b6:31:35:95:31:78:88:
7d:1b:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 23:38:12 2024 by rpki-client on console-fra.rpki-client.org