Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/kDsXkoI-RWaJwVzH3xAJ4q_mVD8.roa
File: kDsXkoI-RWaJwVzH3xAJ4q_mVD8.roa (raw, json)
Hash identifier: l+3r3wk8bC/GlSmeBgMkwO5KxceLhg/MMjHVGnu/JUY=
Subject key identifier: 90:3B:17:92:82:3E:45:66:89:C1:5C:C7:DF:10:09:E2:AF:E6:54:3F
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018E14FAC136F2C59C96FB07C82D1D6F8D05
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/kDsXkoI-RWaJwVzH3xAJ4q_mVD8.roa
Signing time: Wed 06 Mar 2024 18:16:01 +0000
ROA not before: Wed 06 Mar 2024 18:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 5.8.248.0/24 maxlen: 24
45.81.224.0/22 maxlen: 22
45.82.68.0/22 maxlen: 22
45.82.176.0/22 maxlen: 22
45.87.0.0/22 maxlen: 22
45.136.84.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
46.18.107.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
77.220.212.0/22 maxlen: 22
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
81.31.197.0/24 maxlen: 24
91.201.25.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
91.209.226.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
94.124.78.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
185.23.108.0/24 maxlen: 24
185.51.121.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
185.93.6.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
185.201.252.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.229.251.0/24 maxlen: 24
185.232.164.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.237.165.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.216.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
185.244.219.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.206.0/24 maxlen: 24
185.250.207.0/24 maxlen: 24
185.251.25.0/24 maxlen: 24
185.253.7.0/24 maxlen: 24
193.3.168.0/24 maxlen: 24
193.22.21.0/24 maxlen: 24
193.56.8.0/24 maxlen: 24
193.163.7.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
193.169.105.0/24 maxlen: 24
194.15.46.0/24 maxlen: 24
194.29.53.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
212.8.246.0/24 maxlen: 24
212.23.221.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.86.114.0/24 maxlen: 24
212.86.115.0/24 maxlen: 24
212.162.152.0/22 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 08 Mar 2024 09:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:fa:c1:36:f2:c5:9c:96:fb:07:c8:2d:1d:6f:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Mar 6 18:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903b1792823e456689c15cc7df1009e2afe6543f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:f1:23:70:57:28:ac:c2:a1:0e:e7:ea:b2:
e8:c6:96:9b:96:e7:f3:24:d9:18:20:cd:58:81:28:
53:bf:ad:61:aa:16:d3:1b:4e:df:5d:6f:e0:73:9d:
f0:d2:9b:71:06:16:65:76:07:ba:d6:b3:65:43:f5:
0c:14:3f:44:1f:64:2f:85:76:b9:8c:a3:1b:cd:ac:
5b:42:5c:0b:d3:7b:7a:58:38:97:0f:92:09:ee:92:
cc:17:d2:52:c8:05:36:75:76:cd:71:49:eb:c5:ac:
fe:b9:f7:b2:85:1c:fe:26:0c:4e:88:15:81:7d:7d:
52:d0:8d:b5:00:94:5e:b7:22:71:d8:79:d4:12:57:
f9:48:28:d0:86:75:0e:c6:ee:24:40:b4:27:81:9f:
1f:6d:39:74:44:b8:80:cd:b7:e4:ff:f4:86:97:e3:
28:b4:c9:4a:c7:a9:f2:8a:e2:a1:92:9e:d4:eb:d7:
ad:8a:27:4b:f2:85:7a:70:53:b0:7d:94:85:a3:dc:
5b:42:51:5b:43:fa:69:0c:12:60:03:a7:80:89:8a:
ea:3d:75:5e:db:d8:92:9a:71:8d:3e:83:79:ed:16:
22:46:54:a6:91:10:7d:79:83:98:2f:ac:43:06:da:
8a:c6:5b:32:d3:62:06:f1:f1:a4:35:62:75:19:4b:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:17:92:82:3E:45:66:89:C1:5C:C7:DF:10:09:E2:AF:E6:54:3F
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/kDsXkoI-RWaJwVzH3xAJ4q_mVD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.248.0/24
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.136.84.0/22
45.137.64.0/22
46.18.107.0/24
46.21.250.0/24
77.220.212.0/22
81.31.197.0/24
91.201.25.0/24
91.208.127.0/24
91.209.226.0/24
91.228.56.0/24
94.124.78.0/24
109.107.157.0/24
178.159.38.0/23
178.159.42.0/23
185.23.108.0/24
185.51.121.0/24
185.51.246.0/23
185.93.6.0/24
185.107.237.0/24
185.201.252.0/24
185.204.109.0/24
185.229.251.0/24
185.232.164.0/24
185.235.128.0/22
185.237.165.0/24
185.241.52.0/22
185.241.61.0/24
185.244.216.0/22
185.250.204.0/22
185.251.25.0/24
185.253.7.0/24
193.3.168.0/24
193.22.21.0/24
193.56.8.0/24
193.163.7.0/24
193.163.113.0/24
193.169.105.0/24
194.15.46.0/24
194.29.53.0/24
194.62.105.0/24
212.8.244.0/24
212.8.246.0/24
212.23.221.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.86.114.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
18:87:bb:0c:c8:03:c7:f6:1a:f0:66:0e:d1:24:3e:08:35:7b:
56:1a:63:3e:dc:ef:8c:31:2c:4f:82:95:c3:91:97:4c:a8:5c:
d8:1e:c6:bc:1a:b6:2f:90:a7:88:95:56:c2:b9:86:5a:0e:8e:
7c:d1:7f:05:61:49:92:e9:ad:e3:b1:9e:f7:33:68:f4:5f:77:
a4:f6:f9:f2:ca:eb:47:ad:56:b7:3d:d5:66:5a:12:11:99:e1:
08:54:6f:96:9e:bd:0b:0c:76:5b:81:b2:d1:e3:4f:2b:92:a1:
4d:b5:54:1a:44:b1:cf:08:86:a7:9f:fa:90:93:54:3f:d3:e7:
28:cd:39:f9:ae:f0:99:2f:36:5f:1e:9d:e7:57:be:5f:c9:c8:
be:09:6e:c4:72:dd:27:0f:e5:21:44:38:3b:ef:51:8f:8e:9e:
6b:73:c8:f5:3f:0c:13:6e:0a:98:88:81:c2:69:1d:3b:0d:2e:
2a:3e:55:e1:aa:69:92:43:a9:5a:bd:2c:37:5e:42:fb:b6:dd:
b2:bd:d1:c5:d9:0b:0a:8f:61:7a:82:7c:89:ad:de:22:d8:9d:
99:d3:29:0d:ef:7f:46:3a:72:72:fb:ae:fa:ce:90:8b:3c:41:
f4:46:5f:a8:c6:e7:75:52:b9:f1:a5:de:28:23:e7:49:aa:c6:
ba:a8:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:57 2025 by rpki-client