Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yKHQT8xBYPzw639jBhbKBu_a8RI.roa
File: yKHQT8xBYPzw639jBhbKBu_a8RI.roa (raw, json)
Hash identifier: cnCNW7zAqgATlj812P7fbnxRHgBSA7r2Usi7qck0KFY=
Subject key identifier: C8:A1:D0:4F:CC:41:60:FC:F0:EB:7F:63:06:16:CA:06:EF:DA:F1:12
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01904A70F36A2AA003E6937F8B835C9BD250
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yKHQT8xBYPzw639jBhbKBu_a8RI.roa
Signing time: Mon 24 Jun 2024 13:30:34 +0000
ROA not before: Mon 24 Jun 2024 13:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 23
193.247.166.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 22 Nov 2024 10:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:70:f3:6a:2a:a0:03:e6:93:7f:8b:83:5c:9b:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jun 24 13:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a1d04fcc4160fcf0eb7f630616ca06efdaf112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:67:d7:bc:ba:71:96:95:5d:21:1a:d4:5e:
95:24:01:06:90:d9:cf:2a:ae:c5:41:20:1e:d7:29:
e2:c8:50:37:90:82:75:b5:7e:b2:9b:b0:f1:fd:08:
26:a6:7e:0e:ce:4c:0b:51:3f:07:ab:1c:30:80:aa:
9c:e2:02:64:c5:ce:c1:59:34:f4:1f:de:12:c5:4c:
89:6c:9c:1e:8f:2d:fa:cf:57:01:57:35:52:2c:41:
bb:3c:ac:e7:60:92:11:cc:07:71:57:5b:49:a0:f7:
4c:0e:c5:fe:8b:77:85:6f:3a:4b:94:76:1e:64:25:
97:5c:f3:3a:a6:1e:02:39:1d:e6:c4:06:ff:a0:1a:
f5:3a:ed:56:7d:3e:59:40:05:ca:99:3a:d9:0d:c0:
69:90:7a:7d:8c:e7:f3:16:90:60:9b:bd:78:55:66:
d7:51:60:6f:af:27:7a:bd:50:6a:e1:b0:6d:42:3b:
dc:bb:e3:c8:89:4a:2b:90:b0:bf:b9:75:05:c0:51:
f0:01:22:02:be:be:a1:c2:93:1b:75:54:e7:22:d2:
d4:78:f7:b6:75:56:3b:e4:70:7b:28:ab:c2:18:35:
c1:51:bf:4a:2e:35:10:fb:5d:76:fb:a6:05:2a:00:
f2:be:30:83:e7:a0:0c:39:e3:f5:e2:46:57:6c:4f:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:D0:4F:CC:41:60:FC:F0:EB:7F:63:06:16:CA:06:EF:DA:F1:12
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yKHQT8xBYPzw639jBhbKBu_a8RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c2:95:b9:4f:ec:a6:c1:2d:47:e7:79:22:75:d4:ab:2f:88:
df:28:a3:09:26:be:a1:19:1c:a7:f8:2f:d1:37:3a:e2:f7:fe:
d7:00:db:c7:e8:b8:66:ed:e8:98:f9:df:ca:4f:20:28:78:f2:
96:aa:49:55:6e:ab:1f:08:4f:cf:fa:49:b4:43:82:c9:f1:c0:
14:5d:71:9b:55:57:25:36:96:a7:4f:ab:ca:68:be:a4:13:c8:
45:52:d7:ec:3b:33:ca:85:57:fe:58:6d:45:1e:8e:df:c2:a1:
ac:98:74:d6:2e:98:e7:48:a3:f8:82:8d:07:a1:d2:91:93:9a:
ef:a6:82:16:c0:46:6c:bf:90:0c:37:32:df:89:c4:61:80:52:
cb:cf:8b:21:c7:ae:72:fc:0b:86:71:8f:e0:e3:5f:56:60:73:
0c:8a:e9:d5:f5:eb:14:35:61:ce:ba:be:c3:0c:11:9a:ee:d9:
fa:47:35:15:df:57:f9:a7:49:af:fe:d9:95:4b:b1:44:38:d3:
91:04:f8:19:5c:6b:40:70:d3:a9:a9:bd:db:66:28:9c:b4:03:
04:c1:63:3d:2a:29:c3:f7:64:ce:8e:cf:80:d3:a6:12:21:19:
12:8c:3b:60:e5:eb:5e:d3:08:24:d1:93:a0:b0:17:ed:4d:ca:
11:7f:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:31:28 2025 by rpki-client