Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sxOz8eFzKrhAm9cEdOsNLKkpnl8.roa
File: sxOz8eFzKrhAm9cEdOsNLKkpnl8.roa (raw, json)
Hash identifier: JipOOphsmQkfW8rrewdU2QJ8V/0dYZMvJYVnX1v29Mo=
Subject key identifier: B3:13:B3:F1:E1:73:2A:B8:40:9B:D7:04:74:EB:0D:2C:A9:29:9E:5F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0191056B026F27A7373EB5149037AA5BCC93
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sxOz8eFzKrhAm9cEdOsNLKkpnl8.roa
Signing time: Tue 30 Jul 2024 20:53:04 +0000
ROA not before: Tue 30 Jul 2024 20:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.153.0/24 maxlen: 24
45.43.164.0/23 maxlen: 23
64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.222.190.0/24 maxlen: 24
104.233.0.0/21 maxlen: 21
104.233.31.0/24 maxlen: 24
104.233.32.0/20 maxlen: 20
104.233.57.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.238.0.0/22 maxlen: 22
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.250.192.0/21 maxlen: 21
104.250.208.0/20 maxlen: 20
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 17:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:05:6b:02:6f:27:a7:37:3e:b5:14:90:37:aa:5b:cc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 30 20:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b313b3f1e1732ab8409bd70474eb0d2ca9299e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:30:66:ec:fb:9f:67:c4:d0:00:b7:ab:70:
32:da:25:10:3c:7c:43:c9:f6:8f:c8:11:28:43:89:
c1:9f:7f:45:5d:18:42:6c:89:07:58:b0:ac:f6:b7:
69:18:81:55:12:60:6e:8d:2d:9f:8a:e5:4a:7a:21:
08:9c:9a:99:37:7e:04:33:6f:94:60:9f:c2:c2:1c:
97:7e:ad:dd:31:78:c6:23:ef:9a:cf:9c:ef:d9:b8:
a8:1d:d5:db:1d:6d:75:9d:1d:60:26:1b:e3:85:f4:
70:96:b0:12:82:f9:04:73:cd:72:78:96:9c:58:84:
5d:34:d9:c9:59:68:e6:37:53:98:f9:2d:4c:d3:37:
17:9e:40:c8:cf:d1:dd:6f:d9:ed:e7:fe:a8:f9:b9:
24:8f:21:3d:03:e8:18:0b:d1:5b:e2:02:11:ae:8c:
15:60:d8:83:68:97:d7:d4:96:85:30:19:43:1e:ef:
73:8c:f4:57:64:4d:87:2a:88:82:6b:f0:b7:92:14:
d4:19:a7:11:2d:02:87:b3:cf:1d:42:00:e3:f2:67:
1c:81:f5:1a:e6:c1:26:aa:82:b5:32:c9:97:14:55:
ae:83:c5:64:b2:64:0b:7a:6c:a3:6c:f4:57:95:af:
47:39:e3:c3:fc:8f:3b:57:cd:44:b4:ae:e3:d2:59:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:B3:F1:E1:73:2A:B8:40:9B:D7:04:74:EB:0D:2C:A9:29:9E:5F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sxOz8eFzKrhAm9cEdOsNLKkpnl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/21
45.43.153.0/24
45.43.164.0/23
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.222.190.0/24
104.233.0.0/21
104.233.31.0-104.233.47.255
104.233.57.0/24
104.233.60.0-104.233.62.255
104.238.0.0/22
104.238.15.0-104.238.16.255
104.238.18.0/24
104.238.22.0/24
104.238.25.0/24
104.239.9.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.95.0/24
104.239.99.0/24
104.239.110.0/24
104.249.29.0/24
104.249.32.0-104.249.37.255
104.249.55.0/24
104.250.192.0/21
104.250.208.0/20
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
82:84:6c:16:0a:47:c0:e0:79:1b:c1:cb:be:dc:ec:e9:3e:6a:
45:d0:94:5b:da:14:45:6e:15:b9:90:67:4a:05:3c:ad:47:a5:
24:3f:35:86:5b:1f:36:95:df:2f:aa:29:b8:20:07:43:e2:e1:
0c:06:a7:a4:95:bc:b3:36:52:5d:21:7e:19:40:3f:3b:22:2d:
b4:8b:ec:d6:be:8f:e6:59:1a:ba:1c:f1:7b:48:c3:b0:01:3b:
22:ed:90:b2:88:74:49:e2:bc:44:1f:e2:97:05:cb:19:c1:19:
d0:b8:a2:d9:33:3d:b5:5c:7e:52:0a:9c:53:96:33:6a:ab:75:
80:a1:ee:4f:37:26:b2:10:ee:08:a5:50:de:d2:6d:15:ad:cf:
e3:08:2c:f8:06:46:40:b0:85:99:3b:a8:ae:9c:17:b1:ea:b6:
30:fc:ae:32:e9:6c:34:fa:91:fc:ed:52:a2:68:01:03:d9:03:
72:c4:a6:f6:f0:c2:ce:1c:66:4a:f4:9a:32:36:88:bf:fc:3d:
7e:9e:39:3b:65:dc:f0:92:31:48:a2:b0:ed:78:73:71:82:f1:
3c:72:f7:88:e7:b2:39:68:78:46:f5:9b:cd:83:29:18:bd:4c:
93:df:2f:37:31:f1:f4:9e:c6:25:b9:82:b1:14:bb:d5:22:c9:
40:b1:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 20:19:37 2024 by rpki-client on console-ams.rpki-client.org