Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/272ounPIM3mtC8zLfrg4WdAVlCo.roa
File: 272ounPIM3mtC8zLfrg4WdAVlCo.roa (raw, json)
Hash identifier: S35zQ15SbVezuXHc2xEwU6J6KCF90jbhzCRZO0/QpMA=
Subject key identifier: DB:BD:A8:BA:73:C8:33:79:AD:0B:CC:CB:7E:B8:38:59:D0:15:94:2A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018FD006F48638F6E6B60FD7247EEC081017
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/272ounPIM3mtC8zLfrg4WdAVlCo.roa
Signing time: Fri 31 May 2024 19:01:07 +0000
ROA not before: Fri 31 May 2024 19:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35346
IP address blocks: 45.67.116.0/24 maxlen: 24
91.242.64.0/18 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
178.175.176.0/22 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
2a07:5540::/29 maxlen: 29
2a07:c040::/29 maxlen: 29
2a09:700::/29 maxlen: 29
2a09:15c0::/29 maxlen: 29
2a09:3ac0::/29 maxlen: 29
2a09:4440::/29 maxlen: 29
2a09:4c40::/29 maxlen: 29
2a09:63c0::/29 maxlen: 29
2a09:7640::/29 maxlen: 29
2a09:7b40::/29 maxlen: 29
2a09:7f00::/29 maxlen: 29
2a09:a480::/29 maxlen: 29
2a09:bdc0::/29 maxlen: 29
2a09:ca40::/29 maxlen: 29
2a09:e400::/29 maxlen: 29
2a09:f6c0::/29 maxlen: 29
2a09:f940::/29 maxlen: 29
2a09:fdc0::/29 maxlen: 29
2a0a:3700::/29 maxlen: 29
2a0a:3780::/29 maxlen: 29
2a0a:6000::/29 maxlen: 29
2a0a:ef00::/29 maxlen: 29
2a0b:280::/29 maxlen: 29
2a0b:5d00::/29 maxlen: 29
2a0c:380::/29 maxlen: 29
2a0c:3600::/32 maxlen: 32
2a0c:3780::/29 maxlen: 29
2a0c:57c0::/29 maxlen: 29
2a0c:ae00::/29 maxlen: 29
2a0d:1a00::/29 maxlen: 29
2a0d:dac0::/29 maxlen: 29
2a0d:fb00::/29 maxlen: 29
2a0e:f80::/29 maxlen: 29
2a0e:2080::/29 maxlen: 29
2a0e:2500::/29 maxlen: 29
2a0e:3380::/29 maxlen: 29
2a0e:3540::/29 maxlen: 29
2a0e:3c40::/29 maxlen: 29
2a0e:7880::/29 maxlen: 29
2a0e:b000::/29 maxlen: 29
2a0e:c3c0::/29 maxlen: 29
2a0e:c700::/29 maxlen: 29
2a0e:c800::/29 maxlen: 29
2a0e:d180::/29 maxlen: 29
2a0e:d880::/29 maxlen: 29
2a0e:e540::/29 maxlen: 29
2a0e:e8c0::/29 maxlen: 29
2a0e:e940::/29 maxlen: 29
2a0e:f540::/29 maxlen: 29
2a0f:740::/29 maxlen: 29
2a0f:1b40::/29 maxlen: 29
2a0f:3900::/29 maxlen: 29
2a0f:4840::/29 maxlen: 29
2a0f:6200::/29 maxlen: 29
2a0f:82c0::/29 maxlen: 29
2a0f:9380::/29 maxlen: 29
2a0f:b200::/29 maxlen: 29
2a0f:da00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 05 Jun 2024 11:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d0:06:f4:86:38:f6:e6:b6:0f:d7:24:7e:ec:08:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 31 19:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbbda8ba73c83379ad0bcccb7eb83859d015942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:6d:9e:c3:6d:79:8d:91:39:5c:b9:fe:2b:
74:83:5d:7d:be:8c:50:d6:56:73:f8:68:e3:19:ab:
60:96:f1:d9:ca:b6:1c:07:6a:0b:e9:65:a5:3c:89:
33:8e:92:8e:25:2e:85:55:4f:df:01:b1:ba:ce:58:
47:12:bc:7c:a3:4a:4d:ba:f4:44:3e:f2:a8:b0:04:
d0:56:84:53:bc:07:67:d4:28:3a:86:c0:ef:e7:fd:
27:85:34:39:b7:df:ea:7b:a2:47:e1:c3:4d:2b:c0:
1f:54:95:d3:4d:95:d4:ea:06:cc:04:46:11:d2:fc:
dc:8e:f6:84:a6:a6:fb:ac:7b:3a:37:5e:8c:ff:20:
e7:68:67:fe:6f:72:cc:1f:f6:44:33:32:4e:81:e9:
b6:3c:5f:ea:ab:76:48:4d:0a:39:5d:9d:e1:aa:e4:
3c:ad:42:24:7a:2b:e0:1d:d3:a7:92:31:2b:da:53:
1c:b2:8d:8c:e9:19:0b:4f:cb:6b:8f:e7:c9:b5:55:
86:fa:bf:9d:4e:4e:86:a4:9d:2f:d6:dd:10:5b:0c:
48:e9:b8:f1:41:94:a9:2b:dc:01:0e:e2:cb:72:af:
f0:ec:20:9f:54:48:0b:c5:f1:a1:2e:37:4a:e4:1c:
fb:81:43:5e:ff:5e:67:df:64:49:0c:96:24:21:3b:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:A8:BA:73:C8:33:79:AD:0B:CC:CB:7E:B8:38:59:D0:15:94:2A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/272ounPIM3mtC8zLfrg4WdAVlCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
178.175.176.0/22
194.114.144.0/24
IPv6:
2a07:5540::/29
2a07:c040::/29
2a09:700::/29
2a09:15c0::/29
2a09:3ac0::/29
2a09:4440::/29
2a09:4c40::/29
2a09:63c0::/29
2a09:7640::/29
2a09:7b40::/29
2a09:7f00::/29
2a09:a480::/29
2a09:bdc0::/29
2a09:ca40::/29
2a09:e400::/29
2a09:f6c0::/29
2a09:f940::/29
2a09:fdc0::/29
2a0a:3700::/29
2a0a:3780::/29
2a0a:6000::/29
2a0a:ef00::/29
2a0b:280::/29
2a0b:5d00::/29
2a0c:380::/29
2a0c:3600::/32
2a0c:3780::/29
2a0c:57c0::/29
2a0c:ae00::/29
2a0d:1a00::/29
2a0d:dac0::/29
2a0d:fb00::/29
2a0e:f80::/29
2a0e:2080::/29
2a0e:2500::/29
2a0e:3380::/29
2a0e:3540::/29
2a0e:3c40::/29
2a0e:7880::/29
2a0e:b000::/29
2a0e:c3c0::/29
2a0e:c700::/29
2a0e:c800::/29
2a0e:d180::/29
2a0e:d880::/29
2a0e:e540::/29
2a0e:e8c0::/29
2a0e:e940::/29
2a0e:f540::/29
2a0f:740::/29
2a0f:1b40::/29
2a0f:3900::/29
2a0f:4840::/29
2a0f:6200::/29
2a0f:82c0::/29
2a0f:9380::/29
2a0f:b200::/29
2a0f:da00::/29
Signature Algorithm: sha256WithRSAEncryption
09:b5:50:7a:a4:09:34:29:6a:02:42:7c:fe:6d:6f:dc:93:09:
a0:93:d5:24:ac:8f:1e:ea:c2:ef:dd:e2:4d:38:5b:33:61:ba:
f8:61:4c:55:39:f0:24:ba:2d:27:e1:1c:01:fa:58:5b:d6:bd:
25:9d:64:88:4e:73:0f:26:d0:29:46:5c:ad:af:37:fd:1e:36:
0b:57:c2:f8:87:08:9d:41:7b:57:75:52:dd:bd:70:88:f6:41:
4e:a6:08:0c:dd:08:c6:a1:53:9d:92:7a:72:09:7d:e6:70:59:
dc:f9:00:83:53:4e:9b:62:94:a1:e2:ed:d4:1f:be:3e:a8:7c:
3f:e5:76:d2:0f:04:8f:c2:22:e6:a3:5a:4e:c0:5d:a2:61:cc:
76:b7:a2:8a:6b:fc:7b:b1:b6:7b:3e:76:de:db:29:37:5b:dc:
e8:72:d3:82:1a:fe:36:e9:1e:66:a2:ca:25:9f:d3:af:34:12:
59:e3:4b:4c:9e:36:a2:5c:67:7f:cc:88:6c:0a:29:e0:94:e3:
ed:2d:b6:f2:56:7e:17:02:86:85:7b:2b:b0:59:2d:b9:28:07:
7b:64:54:9e:d4:0f:33:4e:37:d6:7b:a2:99:c7:97:a9:75:a8:
e4:45:fa:5e:d8:a1:69:54:85:f7:93:b0:cb:73:ab:8a:ed:fa:
59:13:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org