Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/dxgOYk4AAGWGIpl9BnRixP6dNJ0.roa
File: dxgOYk4AAGWGIpl9BnRixP6dNJ0.roa (raw, json)
Hash identifier: HT0TbCen+giGyj3OkweuJgfMBxKe8xkcKpOIHj6l0X8=
Subject key identifier: 77:18:0E:62:4E:00:00:65:86:22:99:7D:06:74:62:C4:FE:9D:34:9D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA4698F4BED08202C6E23A9561850C495
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/dxgOYk4AAGWGIpl9BnRixP6dNJ0.roa
Signing time: Wed 03 Apr 2024 14:42:45 +0000
ROA not before: Wed 03 Apr 2024 14:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.137.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
45.43.142.0/24 maxlen: 24
45.43.143.0/24 maxlen: 24
45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.10.0/24 maxlen: 24
104.233.11.0/24 maxlen: 24
104.233.22.0/24 maxlen: 24
104.233.23.0/24 maxlen: 24
104.233.27.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.29.0/24 maxlen: 24
104.233.30.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/24 maxlen: 24
104.233.33.0/24 maxlen: 24
104.233.34.0/24 maxlen: 24
104.233.35.0/24 maxlen: 24
104.233.36.0/24 maxlen: 24
104.233.37.0/24 maxlen: 24
104.233.38.0/24 maxlen: 24
104.233.39.0/24 maxlen: 24
104.233.40.0/24 maxlen: 24
104.233.41.0/24 maxlen: 24
104.233.42.0/24 maxlen: 24
104.233.43.0/24 maxlen: 24
104.233.44.0/24 maxlen: 24
104.233.45.0/24 maxlen: 24
104.233.46.0/24 maxlen: 24
104.233.47.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.57.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
104.239.72.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.87.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.103.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
216.173.77.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:69:8f:4b:ed:08:20:2c:6e:23:a9:56:18:50:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 3 14:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77180e624e0000658622997d067462c4fe9d349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:67:ba:f3:04:0e:1f:0b:d8:69:66:b0:1c:
23:38:ff:a5:37:ac:ed:df:f5:8e:d8:87:5c:eb:34:
2b:e2:e8:97:df:ee:70:e6:4a:88:f2:88:4d:cb:bb:
ac:49:10:34:71:5f:b3:44:28:10:23:d5:55:3f:5c:
31:0c:50:13:14:2b:b8:48:60:d7:b1:5f:68:de:d0:
9d:5f:d9:b9:9f:6a:ce:4e:7f:3b:63:47:b7:52:c9:
75:98:9d:64:29:52:95:5e:f8:ab:bd:16:2c:53:cb:
c0:13:6a:08:53:91:2a:62:14:0a:10:cd:cb:f3:77:
5b:30:c0:38:68:f6:7f:51:77:ec:a2:d9:72:03:cf:
3a:1f:1c:7b:ab:35:42:47:68:f5:ba:39:6f:26:35:
40:50:23:76:10:ca:c3:76:5d:71:be:d3:3e:e0:89:
bc:28:c7:8c:6f:ff:71:02:a3:72:fd:bc:7a:2d:1a:
82:16:90:e9:7e:35:3b:a7:8c:04:68:af:74:13:99:
a2:82:69:8f:b7:f9:7c:66:e9:78:8c:f7:8a:ef:e5:
e8:10:d3:af:99:73:87:5c:9b:ef:4e:f4:74:f0:37:
ac:1f:f7:65:71:f0:7e:2a:bd:a6:7d:e6:c8:61:44:
a3:e9:3e:50:76:51:00:33:7d:01:04:60:5b:07:0d:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:0E:62:4E:00:00:65:86:22:99:7D:06:74:62:C4:FE:9D:34:9D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/dxgOYk4AAGWGIpl9BnRixP6dNJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0-45.43.146.255
45.43.148.0-45.43.152.255
45.43.154.0-45.43.162.255
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/22
104.233.22.0/23
104.233.27.0-104.233.47.255
104.233.56.0/22
104.238.6.0/24
104.238.11.0-104.238.13.255
104.238.15.0-104.238.18.255
104.238.21.0-104.238.25.255
104.238.28.0/24
104.238.30.0/24
104.239.8.0/23
104.239.12.0/24
104.239.14.0/23
104.239.29.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.54.0-104.239.67.255
104.239.72.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.87.0/24
104.239.89.0/24
104.239.99.0-104.239.100.255
104.239.102.0/23
104.239.109.0-104.239.110.255
104.239.127.0/24
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.64.0/22
216.173.77.0/24
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
85:a6:d4:40:aa:bd:5a:e8:50:a1:15:bf:03:42:1f:9d:e1:82:
00:6b:78:5c:de:93:ac:61:4e:f7:ef:ad:d4:88:25:30:a4:cb:
38:16:60:05:b2:d5:7e:a6:75:d9:5d:e2:f1:38:4b:73:4d:94:
b6:c0:0b:04:44:06:fc:03:29:cc:14:91:e1:2c:94:70:ee:e9:
fd:2b:80:ac:87:6d:69:9b:47:c2:65:11:97:2b:11:d9:d8:6b:
57:46:5d:ef:36:4f:20:a5:60:b6:60:c8:59:17:5d:f5:2e:62:
2c:84:20:24:08:d8:57:48:c5:78:af:ac:05:14:70:7b:6d:0b:
75:36:8a:1d:79:e4:ab:94:3a:2c:b4:10:76:96:5b:bb:04:23:
5f:62:11:f1:2a:54:db:96:c6:0c:fe:ba:9a:98:f9:34:c5:f3:
89:77:f7:31:e3:91:0a:45:1d:77:f3:59:cd:73:9b:ca:c7:75:
8d:13:2b:b5:e9:e3:a1:7a:6f:60:46:48:2d:81:ab:25:5d:37:
83:51:60:b3:5d:9b:95:c5:70:a8:ce:97:ea:c2:cb:2a:19:87:
11:94:cb:4f:a1:bb:02:af:2b:d6:63:bf:56:c9:e6:27:85:ce:
29:49:d1:07:bb:08:79:38:dc:87:cb:ee:23:8b:df:5d:d9:c4:
57:58:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 12:05:29 2024 by rpki-client on console-fra.rpki-client.org