Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OC3mW3fADT-qyJ2VKqsAbdMO0LM.roa
File: OC3mW3fADT-qyJ2VKqsAbdMO0LM.roa (raw, json)
Hash identifier: BXlGYDAbuUH0xw6KjoOxiaVt9RNAzOZGzEIu0CJTd4o=
Subject key identifier: 38:2D:E6:5B:77:C0:0D:3F:AA:C8:9D:95:2A:AB:00:6D:D3:0E:D0:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA34B002ED2E153FF21EFA8D7E45A5895
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OC3mW3fADT-qyJ2VKqsAbdMO0LM.roa
Signing time: Wed 03 Apr 2024 09:29:45 +0000
ROA not before: Wed 03 Apr 2024 09:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.137.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
45.43.142.0/24 maxlen: 24
45.43.143.0/24 maxlen: 24
45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
45.43.172.0/22 maxlen: 22
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.10.0/24 maxlen: 24
104.233.11.0/24 maxlen: 24
104.233.22.0/24 maxlen: 24
104.233.23.0/24 maxlen: 24
104.233.27.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.29.0/24 maxlen: 24
104.233.30.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/24 maxlen: 24
104.233.33.0/24 maxlen: 24
104.233.34.0/24 maxlen: 24
104.233.35.0/24 maxlen: 24
104.233.36.0/24 maxlen: 24
104.233.37.0/24 maxlen: 24
104.233.38.0/24 maxlen: 24
104.233.39.0/24 maxlen: 24
104.233.40.0/24 maxlen: 24
104.233.41.0/24 maxlen: 24
104.233.42.0/24 maxlen: 24
104.233.43.0/24 maxlen: 24
104.233.44.0/24 maxlen: 24
104.233.45.0/24 maxlen: 24
104.233.46.0/24 maxlen: 24
104.233.47.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.57.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
104.239.72.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.87.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.103.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
216.173.77.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 14:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:4b:00:2e:d2:e1:53:ff:21:ef:a8:d7:e4:5a:58:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 3 09:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=382de65b77c00d3faac89d952aab006dd30ed0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:40:91:ed:fa:e4:7f:f3:d2:ae:fb:0b:5d:
15:72:43:41:9d:2a:18:62:59:99:fd:4c:95:e8:b5:
2e:9b:af:19:56:72:13:49:11:86:a9:13:77:49:e0:
bf:3e:07:9f:a7:c7:a0:60:b6:ab:bb:dc:92:0d:65:
38:f3:6e:2b:da:f3:1d:50:5a:7f:1b:44:d8:50:51:
ee:e3:7f:25:79:2c:59:78:56:b3:ac:3c:80:a6:a0:
0f:41:d5:2e:87:1a:18:92:85:eb:6f:1d:b8:88:10:
8f:1f:40:6b:8b:f7:fe:d2:f7:bd:4f:6f:d5:64:66:
c5:11:eb:70:f4:7c:84:2f:0b:67:19:71:a3:ec:b7:
4a:a6:8d:f6:e8:aa:fa:3c:2a:34:0c:a0:8f:7f:d3:
d4:62:b1:be:b1:0d:8b:dc:84:18:c3:25:9a:41:80:
4a:26:e7:32:39:bd:53:17:cb:7a:6c:6d:ef:33:bb:
e4:67:f9:83:f6:ac:cb:88:5c:09:21:64:dc:d8:f4:
15:87:af:ae:d6:d4:78:c7:eb:5d:67:af:62:0c:94:
f5:92:40:fd:2c:8c:53:2e:c1:10:a0:b8:7a:1b:29:
8d:91:90:17:29:6d:33:e3:f9:4f:04:b8:b8:20:81:
8f:65:7e:e2:36:06:af:61:d9:d7:cc:c5:b7:97:7f:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:E6:5B:77:C0:0D:3F:AA:C8:9D:95:2A:AB:00:6D:D3:0E:D0:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OC3mW3fADT-qyJ2VKqsAbdMO0LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0-45.43.146.255
45.43.148.0-45.43.152.255
45.43.154.0-45.43.162.255
45.43.172.0/22
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/22
104.233.22.0/23
104.233.27.0-104.233.47.255
104.233.56.0/22
104.238.6.0/24
104.238.11.0-104.238.13.255
104.238.15.0-104.238.18.255
104.238.21.0-104.238.25.255
104.238.28.0/24
104.238.30.0/24
104.239.8.0/23
104.239.12.0/24
104.239.14.0/23
104.239.29.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.54.0-104.239.67.255
104.239.72.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.87.0/24
104.239.89.0/24
104.239.99.0-104.239.100.255
104.239.102.0/23
104.239.109.0-104.239.110.255
104.239.127.0/24
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.64.0/22
216.173.77.0/24
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
26:5b:88:72:b1:dd:66:db:5f:44:6a:aa:7b:a9:d0:48:f3:94:
04:18:f3:80:e8:c4:58:19:22:e7:a9:be:00:c9:44:fe:ce:c9:
d0:75:5c:2c:a9:78:be:6d:47:b9:1b:2c:62:72:85:28:00:02:
91:94:d1:f5:7b:0a:54:ea:7e:58:52:88:b2:58:f9:9d:6f:53:
c1:2b:75:d7:af:15:ed:9f:fc:5b:44:3f:4b:14:c3:7a:e2:56:
07:62:f1:b2:c4:54:ec:9f:56:e9:9a:b1:9a:f3:8b:67:12:d4:
7f:f7:63:a7:7f:f1:4c:35:c2:c5:a3:1f:69:eb:d1:d3:27:a3:
97:f7:1a:2b:c8:1f:7d:cb:23:e8:3f:9d:a1:88:38:6b:cf:79:
e8:d1:d1:e7:0f:78:d7:a0:e9:56:0a:35:de:d5:fa:da:83:ae:
36:0d:53:1a:66:92:e7:5a:5a:80:d2:77:75:ce:03:c4:09:82:
3b:cb:a1:b4:17:43:59:02:11:76:0f:f3:5a:0d:94:c0:c9:c7:
68:c9:13:35:e9:e3:5f:14:da:fb:24:ee:3b:f4:8b:01:56:28:
40:c1:38:99:73:e6:9a:2a:37:40:e1:fa:02:bf:f6:b2:76:6c:
eb:cf:08:5b:a5:65:6c:7e:52:2c:ea:16:73:1c:3f:d1:64:90:
72:51:0f:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:04 2024 by rpki-client on console-ams.rpki-client.org