Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa
File: QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa (raw, json)
Hash identifier: BV90qyTZ2mSXTk5cRtdnXpR9YZCcRQTsmHQnNud7vUk=
Subject key identifier: 40:39:10:63:F5:35:2D:6F:59:15:F2:22:76:4E:A6:2D:82:93:DD:43
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F50482698FC9F2752274EF6E8A8EB4B74
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa
Signing time: Mon 06 May 2024 23:40:56 +0000
ROA not before: Mon 06 May 2024 23:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
89.254.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
212.45.160.0/19 maxlen: 19
212.125.252.0/22 maxlen: 22
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:228:10::/48 maxlen: 48
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 May 2024 14:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:50:48:26:98:fc:9f:27:52:27:4e:f6:e8:a8:eb:4b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 6 23:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40391063f5352d6f5915f222764ea62d8293dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:b0:e1:34:ab:cc:5d:79:66:b9:a6:e0:6d:
e8:f1:58:d1:50:15:d7:fe:c1:d8:ff:fa:5c:60:0e:
73:5e:9e:f4:fd:15:cd:71:04:cb:f0:07:5f:c3:9a:
01:34:11:62:1c:60:9f:b7:22:c4:cb:2c:aa:40:ed:
ea:a0:ef:d5:64:7c:63:34:fd:92:aa:e7:3e:94:08:
a2:75:d5:26:cc:5d:7d:38:18:9b:8c:44:f7:25:c1:
35:1e:f5:35:86:69:38:74:87:d4:c0:0f:cb:a0:97:
e3:69:d0:d7:b1:38:66:36:7b:8b:6e:9c:5f:fc:eb:
bb:8c:b3:a2:59:31:76:9b:9a:b2:18:b6:db:3c:04:
ee:3e:52:3d:8b:50:ff:15:cb:c3:f8:ab:b9:c1:09:
dd:a9:e9:fb:94:de:9d:68:f2:0f:7d:d8:ed:e9:18:
84:c7:d8:5d:b4:f2:8e:f7:4f:41:ff:ca:1d:b7:20:
35:76:cf:c4:59:46:b4:18:24:b5:75:8c:1c:fe:0e:
13:64:84:7e:ce:97:4f:33:f1:c4:fe:29:3c:69:4b:
ac:b6:f4:17:d5:95:f0:2f:38:bd:4c:ef:3e:50:eb:
b2:65:c5:12:12:7e:3c:f9:38:ce:0c:ab:2c:6c:9b:
cf:fa:82:b4:5a:59:04:9a:3e:8e:5e:bb:78:24:69:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:10:63:F5:35:2D:6F:59:15:F2:22:76:4E:A6:2D:82:93:DD:43
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.252.0/24
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
80.232.124.0/24
80.239.0.0/17
82.194.192.0/19
84.208.0.0/13
89.254.64.0/18
109.108.192.0/19
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
212.45.160.0/19
212.125.252.0/22
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
83:4c:60:e5:8e:3a:c5:92:90:d7:ec:f7:fe:64:76:d0:6e:a4:
8c:02:2c:84:0e:ae:b8:a8:97:3b:5c:dc:8f:ce:ec:68:f3:cd:
7c:d5:de:85:f0:4a:a9:1e:d1:83:3f:23:32:f1:fd:3a:e0:e7:
e8:be:f6:a5:61:01:43:49:5e:c2:b2:79:d9:2a:fd:68:4b:2c:
c5:88:57:bd:db:ff:5b:5c:de:eb:38:2a:45:69:a2:8e:bd:b4:
a2:49:b6:5b:fb:cb:82:01:7c:2f:ba:9f:4b:d4:d5:ba:b5:dd:
9c:ff:ad:e5:ee:0f:bf:42:8c:8c:e6:4c:c0:78:43:7f:f7:a5:
db:f6:22:dc:99:ec:75:d4:e7:bc:7f:e4:2c:7c:ab:7b:29:2e:
e3:1a:3b:92:50:7f:6c:1d:c2:00:18:39:3b:b0:c6:5a:c0:25:
3d:0c:f7:c6:5b:92:da:99:e2:57:c4:b8:3a:b2:a0:10:35:0e:
b0:98:44:3d:3d:ee:b8:30:7e:c1:12:73:a6:78:5e:f1:33:d3:
16:e0:eb:8d:17:f7:04:1c:d4:01:60:e9:9e:32:91:93:16:90:
70:6e:99:db:8f:37:ed:fb:60:57:ff:97:92:17:9a:e1:46:f2:
1a:2a:bf:0b:d5:b4:9c:10:79:d6:6f:d4:08:cb:be:9e:df:1f:
89:b9:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org