Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_JZBUIplwJLDVeys9CR5aLfdyqw.roa
File: _JZBUIplwJLDVeys9CR5aLfdyqw.roa (raw, json)
Hash identifier: h98vjTZogwL3yRMf1zVeMaU2nUHg+lAfQzfRmOyejNo=
Subject key identifier: FC:96:41:50:8A:65:C0:92:C3:55:EC:AC:F4:24:79:68:B7:DD:CA:AC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E9ECEED86A54AC6DA49D09684E8D2FE6B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_JZBUIplwJLDVeys9CR5aLfdyqw.roa
Signing time: Tue 02 Apr 2024 12:35:45 +0000
ROA not before: Tue 02 Apr 2024 12:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.137.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
45.43.142.0/24 maxlen: 24
45.43.143.0/24 maxlen: 24
45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.153.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
45.43.172.0/22 maxlen: 22
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.10.0/24 maxlen: 24
104.233.11.0/24 maxlen: 24
104.233.22.0/24 maxlen: 24
104.233.23.0/24 maxlen: 24
104.233.27.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.29.0/24 maxlen: 24
104.233.30.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/24 maxlen: 24
104.233.33.0/24 maxlen: 24
104.233.34.0/24 maxlen: 24
104.233.35.0/24 maxlen: 24
104.233.36.0/24 maxlen: 24
104.233.37.0/24 maxlen: 24
104.233.38.0/24 maxlen: 24
104.233.39.0/24 maxlen: 24
104.233.40.0/24 maxlen: 24
104.233.41.0/24 maxlen: 24
104.233.42.0/24 maxlen: 24
104.233.43.0/24 maxlen: 24
104.233.44.0/24 maxlen: 24
104.233.45.0/24 maxlen: 24
104.233.46.0/24 maxlen: 24
104.233.47.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.57.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
104.239.72.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.87.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.103.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.40.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
216.173.77.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 09:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:ce:ed:86:a5:4a:c6:da:49:d0:96:84:e8:d2:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 2 12:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9641508a65c092c355ecacf4247968b7ddcaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:c5:2d:93:f2:80:1d:af:d9:b5:26:1f:1a:
06:f5:1d:7a:af:1e:e6:8c:ef:53:2b:90:57:eb:f1:
ab:59:6a:b9:80:3a:54:7e:37:41:af:64:22:ac:d7:
6e:f4:36:db:8b:88:10:d8:29:6e:1c:0f:35:b9:53:
49:de:48:5b:11:a4:e4:92:b2:b4:65:68:3f:0c:1c:
a0:51:c8:1c:72:0b:ed:fa:91:ca:76:a2:37:33:79:
79:21:6f:97:ac:0f:9e:91:7e:55:16:6a:30:5e:76:
5c:59:6c:0d:50:1b:a4:77:87:d2:08:c7:55:f6:c5:
f4:b3:c8:37:79:27:c7:10:2c:5b:22:32:a6:a9:b8:
8f:64:ce:16:fe:db:7a:9a:61:ac:24:05:08:63:7c:
da:30:75:e2:bf:a6:9c:04:56:18:ad:13:bc:02:2f:
90:f9:7f:ec:af:8d:a4:47:9f:5a:2a:f7:45:76:75:
00:6a:4a:33:9b:4e:44:7c:e1:8b:b0:22:97:61:97:
ac:39:10:64:bf:81:26:45:7a:19:3b:6b:02:00:97:
2b:6f:ca:70:c3:69:eb:6e:04:09:13:f2:b5:47:42:
c9:46:eb:77:2b:99:41:77:d5:c8:35:c6:a5:6e:fe:
5c:68:bb:bf:05:be:7a:e4:06:f5:6a:34:1d:a1:a2:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:41:50:8A:65:C0:92:C3:55:EC:AC:F4:24:79:68:B7:DD:CA:AC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_JZBUIplwJLDVeys9CR5aLfdyqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0-45.43.146.255
45.43.148.0-45.43.162.255
45.43.172.0/22
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/22
104.233.22.0/23
104.233.27.0-104.233.47.255
104.233.56.0/22
104.238.6.0/24
104.238.11.0-104.238.13.255
104.238.15.0-104.238.18.255
104.238.21.0-104.238.25.255
104.238.28.0/24
104.238.30.0/24
104.239.8.0/23
104.239.12.0/24
104.239.14.0/23
104.239.29.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.54.0-104.239.67.255
104.239.72.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.87.0/24
104.239.89.0/24
104.239.99.0-104.239.100.255
104.239.102.0/23
104.239.109.0-104.239.110.255
104.239.127.0/24
104.249.8.0-104.249.23.255
104.249.40.0/24
104.249.42.0-104.249.54.255
216.173.64.0/22
216.173.77.0/24
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
33:c0:45:6a:f4:2f:7b:d2:da:2c:cc:88:ff:71:35:be:3c:b5:
82:32:aa:5a:9e:ec:a0:6c:7c:0f:96:d1:76:da:67:1e:45:3a:
90:6f:79:9f:7c:b9:c2:f1:77:1d:f5:c0:fe:70:c6:c4:3f:c9:
ca:bd:9e:5f:48:68:5d:9e:ec:3b:31:d6:ef:bc:29:74:94:9f:
dc:df:26:62:0d:75:2d:ab:ae:33:cf:31:44:c5:68:2d:5f:85:
87:f8:06:e9:e6:1d:b3:dc:d3:44:62:cb:c3:d0:cc:72:67:5a:
6c:24:e7:b6:fc:2e:bf:12:67:aa:83:95:7a:a5:3e:1d:00:cb:
d2:83:56:c3:6d:4f:5c:ca:73:eb:b5:d8:70:f4:72:77:32:96:
9d:af:cc:ff:30:43:4a:90:5f:f7:f2:fc:a9:39:73:c2:94:7d:
21:ec:e0:b9:34:0a:52:04:15:dc:9d:c5:8e:ea:85:87:76:27:
14:4c:05:10:31:01:45:3d:f0:a3:5f:19:19:e6:57:ce:57:e5:
8b:65:9b:cf:25:22:ff:db:46:60:58:36:6d:cb:81:f9:4e:db:
76:16:fa:92:61:26:c6:77:ed:85:04:13:72:4d:b9:b3:98:0b:
7f:d9:7a:71:1c:a6:76:1b:42:b4:3b:cf:af:b6:65:04:23:91:
1b:4f:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 13:57:59 2024 by rpki-client on console-ams.rpki-client.org