Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/jfWyWH0eCes5bfhkSFeVjlRbVX4.roa
File: jfWyWH0eCes5bfhkSFeVjlRbVX4.roa (raw, json)
Hash identifier: kgk6C7gtFCS3Uu9qXf/Axqp8f6ZqaYtxiMk0zVKxWok=
Subject key identifier: 8D:F5:B2:58:7D:1E:09:EB:39:6D:F8:64:48:57:95:8E:54:5B:55:7E
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F4AC81223B2E409D23B6212243E9A8FA1
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/jfWyWH0eCes5bfhkSFeVjlRbVX4.roa
Signing time: Sun 05 May 2024 22:02:56 +0000
ROA not before: Sun 05 May 2024 22:02:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a02:228::/29 maxlen: 29
2a02:228:10::/48 maxlen: 48
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 May 2024 00:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:c8:12:23:b2:e4:09:d2:3b:62:12:24:3e:9a:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 5 22:02:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df5b2587d1e09eb396df8644857958e545b557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:91:13:76:d4:a3:dc:e0:d5:64:21:34:ef:
38:c1:0f:3f:9a:35:66:2c:70:c9:4c:2a:27:65:89:
b1:94:89:1f:f9:da:25:c3:f7:27:55:e6:44:34:c1:
83:3b:1f:ab:f2:32:d6:27:61:8e:2e:6a:e5:0a:0e:
26:e3:08:aa:1e:26:2a:9e:72:15:d4:f3:14:98:8a:
f1:56:aa:b7:e9:47:c8:4f:7e:af:8f:35:e4:60:74:
ac:ae:fa:e1:57:0f:9d:3f:e6:96:97:dc:bf:6e:40:
78:a7:de:fc:97:fe:ff:3e:76:d9:86:40:10:af:d8:
20:4d:06:26:6e:87:cf:3a:67:4d:4a:7c:63:39:08:
59:d3:d9:36:d3:d1:5e:52:4e:aa:8f:fc:da:e9:4b:
5a:8d:5f:19:d2:5e:c6:9a:0b:02:e5:7f:7a:9e:a0:
2e:46:91:fb:93:70:5d:6c:31:89:4a:b7:1b:37:90:
12:6d:c4:09:af:c8:ad:0b:47:3f:d5:90:da:be:aa:
f9:d8:57:e4:2c:a8:40:ad:62:27:4a:4f:4e:c9:48:
bf:09:d9:31:fb:15:bf:1b:c3:c6:db:ea:13:66:63:
9b:37:d3:e1:25:8d:96:92:85:61:ed:19:54:0c:7f:
a1:da:91:41:44:78:e1:de:93:39:63:cf:0f:70:8c:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:B2:58:7D:1E:09:EB:39:6D:F8:64:48:57:95:8E:54:5B:55:7E
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/jfWyWH0eCes5bfhkSFeVjlRbVX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.125.192.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:be:3f:b2:37:9a:7f:58:fb:eb:68:56:4e:7c:2e:94:a3:fd:
2b:48:78:8e:e5:79:5e:be:ef:4e:f4:a6:5e:5e:a2:bd:21:6b:
84:5e:36:bf:26:2a:8b:c7:f1:17:5a:0e:0a:9d:7c:2e:59:4f:
48:5f:52:ab:ba:71:2a:82:05:ef:f9:61:52:f6:4b:dd:77:91:
a7:a9:66:78:95:6f:c0:70:11:a5:9f:77:cb:00:e5:05:1d:c0:
f8:76:cd:89:91:ef:94:48:c3:78:3b:81:f0:a1:e7:54:fd:1b:
0d:fc:90:92:d0:07:81:fc:83:dd:db:76:db:17:78:ca:3b:69:
4d:16:cb:85:3d:48:ed:ff:1b:45:39:04:cf:55:44:af:4e:fe:
b3:2c:07:c2:19:ce:e9:74:8e:03:a8:7f:c9:ae:f0:fc:c2:4c:
2e:a1:95:73:5d:81:ee:da:27:f8:e7:c7:e7:2c:7e:1e:71:c9:
2e:0e:e6:e5:af:2e:e5:59:11:2c:66:bc:5d:3e:1e:ef:c8:aa:
ce:82:71:c7:86:13:cc:42:65:03:41:57:86:f4:ad:75:d4:48:
02:6a:8c:24:db:0b:c3:7e:c3:c9:63:85:e2:cd:b0:a9:c1:51:
02:27:e5:9f:23:ee:37:16:3f:12:84:1d:1b:9c:f4:09:8a:c8:
96:70:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org