Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TjDJ05C7etl9pQWHaiRvRH6alFI.roa
File: TjDJ05C7etl9pQWHaiRvRH6alFI.roa (raw, json)
Hash identifier: lIi8ErDDHE9H589/JcvamerzUoNdpLHzk8vD49HElA8=
Subject key identifier: 4E:30:C9:D3:90:BB:7A:D9:7D:A5:05:87:6A:24:6F:44:7E:9A:94:52
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA876A53B8D1AE812E881C75807F36399
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TjDJ05C7etl9pQWHaiRvRH6alFI.roa
Signing time: Thu 04 Apr 2024 09:35:31 +0000
ROA not before: Thu 04 Apr 2024 09:35:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.137.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
45.43.142.0/24 maxlen: 24
45.43.143.0/24 maxlen: 24
45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.147.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.10.0/24 maxlen: 24
104.233.11.0/24 maxlen: 24
104.233.22.0/24 maxlen: 24
104.233.23.0/24 maxlen: 24
104.233.27.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.29.0/24 maxlen: 24
104.233.30.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/24 maxlen: 24
104.233.33.0/24 maxlen: 24
104.233.34.0/24 maxlen: 24
104.233.35.0/24 maxlen: 24
104.233.36.0/24 maxlen: 24
104.233.37.0/24 maxlen: 24
104.233.38.0/24 maxlen: 24
104.233.39.0/24 maxlen: 24
104.233.40.0/24 maxlen: 24
104.233.41.0/24 maxlen: 24
104.233.42.0/24 maxlen: 24
104.233.43.0/24 maxlen: 24
104.233.44.0/24 maxlen: 24
104.233.45.0/24 maxlen: 24
104.233.46.0/24 maxlen: 24
104.233.47.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.57.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
104.239.72.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.87.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.103.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
216.173.77.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:76:a5:3b:8d:1a:e8:12:e8:81:c7:58:07:f3:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 09:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e30c9d390bb7ad97da505876a246f447e9a9452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:3a:76:91:35:70:1e:ff:dd:9f:c7:5d:c3:
77:b4:05:26:9b:9f:bb:06:77:b0:05:b2:ea:28:30:
58:2e:e0:82:ea:00:0a:35:b3:15:aa:f0:c8:ee:c2:
4e:41:c4:58:0d:ac:aa:60:31:f6:e7:aa:a9:76:0d:
4b:70:dc:52:0a:5b:39:1c:82:e1:0f:84:a4:8b:77:
9e:6a:80:1b:de:1a:4d:dc:3e:7a:d9:26:d6:7a:8b:
fc:07:d7:bc:4f:49:ad:b6:a6:48:ea:c9:50:4f:59:
09:69:75:e2:62:32:59:75:b5:60:a1:ad:82:8d:6b:
d5:3a:77:47:42:d0:3f:ee:66:f3:29:c1:24:2d:67:
1f:bf:7a:40:99:84:85:2b:7f:11:bc:1b:be:45:8d:
c0:6a:8a:b5:14:52:83:7f:11:45:c1:7a:41:e5:d6:
48:38:5d:87:a1:11:27:e2:8f:02:e3:55:2c:08:a3:
81:36:d4:2d:23:47:be:c2:2f:8b:c6:0e:5b:a8:30:
eb:7d:aa:e6:5d:a9:09:d0:af:e2:26:d1:ef:01:f8:
34:e5:81:ad:08:79:a7:b9:68:21:fc:24:d9:de:ef:
1e:27:3e:84:f9:00:2f:83:d4:24:2f:c2:93:56:e8:
bf:b9:64:dc:37:b7:c2:c1:63:e9:d8:96:be:72:02:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:C9:D3:90:BB:7A:D9:7D:A5:05:87:6A:24:6F:44:7E:9A:94:52
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TjDJ05C7etl9pQWHaiRvRH6alFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0-45.43.152.255
45.43.154.0-45.43.162.255
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/22
104.233.22.0/23
104.233.27.0-104.233.47.255
104.233.56.0/22
104.238.6.0/24
104.238.11.0-104.238.13.255
104.238.15.0-104.238.18.255
104.238.21.0-104.238.25.255
104.238.28.0/24
104.238.30.0/24
104.239.8.0/23
104.239.12.0/24
104.239.14.0/23
104.239.29.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.54.0-104.239.67.255
104.239.72.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.87.0/24
104.239.89.0/24
104.239.99.0-104.239.100.255
104.239.102.0/23
104.239.109.0-104.239.110.255
104.239.127.0/24
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.64.0/22
216.173.77.0/24
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
41:7b:20:b3:5f:69:ad:3d:ad:2f:29:01:5c:30:88:ae:f4:ab:
f1:01:26:95:78:f9:f1:26:26:25:b6:21:58:7f:ee:ac:bf:e2:
8e:b1:97:78:05:19:ba:bb:38:d6:43:ef:ec:5e:17:be:20:03:
36:3f:6e:56:67:53:f2:1f:58:75:0d:6d:45:a7:58:e5:5c:c5:
3e:f4:d5:41:50:73:e5:ce:4b:92:4a:d6:e5:80:f7:a7:83:93:
0f:71:fd:be:19:a7:ac:bf:53:6b:c4:ab:1c:ef:96:18:b4:d2:
21:31:e2:a7:d0:07:73:5c:7d:92:b5:bb:ff:d4:df:9a:17:41:
2f:94:0b:40:2f:ff:94:c2:84:78:4e:50:60:5d:5e:75:bf:63:
93:d9:19:87:29:14:fd:4b:57:f9:04:55:2a:24:03:cb:53:a4:
dd:c0:ba:51:e7:91:64:41:50:00:3c:3a:03:f6:68:21:b0:79:
56:ba:fb:3d:81:94:f1:8f:d3:1b:4f:2b:eb:ea:99:f6:3e:44:
d0:17:7f:c3:94:26:e0:d1:1f:d7:d2:4e:c8:50:36:98:81:7e:
47:85:63:8b:f7:c8:1c:3d:46:eb:3d:38:26:b7:46:9c:37:07:
32:9d:25:20:62:51:7b:61:3d:61:44:06:95:be:b1:32:ad:e6:
80:f2:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:03 2024 by rpki-client on console-fra.rpki-client.org