Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-WnVYd9Z54mDm2RqM3BWm-PouV0.roa
File: 1-WnVYd9Z54mDm2RqM3BWm-PouV0.roa (raw, json)
Hash identifier: QjAgVmrGL9scZJTx564Cn6DKlZESMY5qRzmxiM3KCDk=
Subject key identifier: F9:69:D5:61:DF:59:E7:89:83:9B:64:6A:33:70:56:9B:E3:E8:B9:5D
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018770C1E6D72C9922EE58B0194004C2F272
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-WnVYd9Z54mDm2RqM3BWm-PouV0.roa
Signing time: Tue 11 Apr 2023 14:39:28 +0000
ROA not before: Tue 11 Apr 2023 14:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 145.97.16.0/22 maxlen: 22
145.137.128.0/18 maxlen: 18
145.97.20.0/22 maxlen: 22
145.97.24.0/21 maxlen: 21
145.124.0.0/15 maxlen: 15
145.23.0.0/19 maxlen: 19
145.23.0.0/16 maxlen: 16
192.87.0.0/16 maxlen: 16
145.100.128.0/17 maxlen: 17
145.97.48.0/20 maxlen: 20
194.171.0.0/16 maxlen: 16
145.107.0.0/16 maxlen: 22
145.33.0.0/16 maxlen: 16
145.20.0.0/16 maxlen: 16
145.97.128.0/18 maxlen: 18
145.138.0.0/16 maxlen: 16
145.74.0.0/15 maxlen: 15
145.37.0.0/16 maxlen: 16
145.101.0.0/16 maxlen: 16
145.144.0.0/12 maxlen: 12
145.97.64.0/18 maxlen: 18
145.76.0.0/16 maxlen: 16
145.116.128.0/18 maxlen: 18
145.103.0.0/16 maxlen: 16
145.140.0.0/14 maxlen: 14
145.2.0.0/15 maxlen: 15
145.109.128.0/17 maxlen: 17
145.96.0.0/16 maxlen: 16
145.116.64.0/18 maxlen: 18
145.116.224.0/19 maxlen: 19
145.127.0.0/17 maxlen: 17
145.90.0.0/16 maxlen: 16
145.90.10.0/23 maxlen: 23
145.117.0.0/16 maxlen: 16
145.19.0.0/16 maxlen: 16
145.116.192.0/20 maxlen: 20
145.120.0.0/14 maxlen: 14
145.9.0.0/16 maxlen: 16
145.28.0.0/15 maxlen: 15
145.92.0.0/15 maxlen: 15
145.146.0.0/16 maxlen: 25
145.48.0.0/15 maxlen: 15
145.102.0.0/16 maxlen: 16
145.38.0.0/15 maxlen: 15
145.116.0.0/20 maxlen: 20
145.52.0.0/16 maxlen: 16
145.116.16.0/21 maxlen: 21
145.116.24.0/21 maxlen: 21
145.136.0.0/15 maxlen: 15
145.126.0.0/16 maxlen: 16
145.108.0.0/16 maxlen: 16
145.44.0.0/16 maxlen: 16
145.98.0.0/16 maxlen: 16
145.0.0.0/16 maxlen: 16
145.97.192.0/18 maxlen: 18
145.91.0.0/16 maxlen: 16
145.118.0.0/16 maxlen: 16
145.81.0.0/16 maxlen: 16
145.95.0.0/16 maxlen: 16
145.85.0.0/16 maxlen: 16
145.24.0.0/16 maxlen: 16
145.88.0.0/15 maxlen: 15
145.51.0.0/16 maxlen: 16
195.169.0.0/16 maxlen: 16
2001:610::/29 maxlen: 29
2001:610:130::/48 maxlen: 64
2001:610::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Apr 2023 14:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:c1:e6:d7:2c:99:22:ee:58:b0:19:40:04:c2:f2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Apr 11 14:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f969d561df59e789839b646a3370569be3e8b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:68:10:7c:39:11:9a:ab:3a:2b:a1:d2:a1:
dd:88:d3:da:0c:07:eb:db:59:0a:8b:fd:65:3c:2c:
d9:87:ca:cc:4c:21:68:90:cc:e7:50:2c:27:ce:4f:
e4:f7:0e:e9:5a:61:79:ac:ee:ef:27:65:0c:c8:33:
c2:57:50:49:f5:16:f9:75:a7:67:e2:9e:57:a0:b3:
cc:53:8c:15:0c:7e:00:f8:16:58:c9:4a:01:48:eb:
fc:0f:44:06:29:85:fc:a6:17:21:2c:2b:68:6c:fb:
5f:9b:fc:4a:8e:be:92:3f:0c:be:03:1a:7c:f4:25:
83:6c:ce:65:37:6d:12:fb:8c:f4:8b:96:3c:9e:54:
32:2a:93:29:49:21:af:90:e8:11:08:a2:d6:4c:f0:
21:6d:8b:fd:b0:8c:d2:3b:97:85:d0:34:9e:96:1c:
2a:82:d0:7c:f1:9f:55:38:7e:14:61:f3:40:57:f1:
5a:b1:b0:fd:78:33:1d:ff:f5:e4:c3:b2:2d:f8:76:
3b:62:18:d0:b7:fc:9b:1f:08:b4:41:70:b3:5c:0d:
4a:df:c7:98:02:18:f8:c5:0c:22:39:b5:3c:58:c6:
44:db:2f:32:3c:82:5e:56:2f:c3:4d:28:8f:98:a2:
d7:d0:b6:2f:0f:25:9c:07:00:23:21:91:8b:3e:4a:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:D5:61:DF:59:E7:89:83:9B:64:6A:33:70:56:9B:E3:E8:B9:5D
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-WnVYd9Z54mDm2RqM3BWm-PouV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.128.0-145.103.255.255
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
16:10:30:bc:33:23:82:bd:be:8b:54:a3:07:b6:94:d2:42:54:
1a:19:ec:bf:1c:fc:c6:93:2f:75:46:9d:09:e9:9b:a1:34:83:
f9:34:e2:96:42:c7:2a:b6:c6:77:3d:04:0f:a7:69:d7:f8:34:
a1:8d:5e:9d:72:56:59:36:82:33:3a:fd:c1:74:64:20:e1:c4:
9c:84:46:55:96:9b:a6:6b:a9:df:30:58:27:4d:de:e3:9b:ea:
58:29:a5:8f:97:8d:d5:9c:fb:b9:9e:6d:2a:d6:1a:a6:19:9e:
75:ce:2d:f9:bc:8d:6e:ca:b6:27:30:07:be:ea:cb:33:69:9f:
a8:51:56:d6:d8:81:47:ad:ee:6f:c1:71:c5:7c:1f:4d:d4:f4:
5c:22:d2:2d:49:d0:99:51:ab:a8:31:6a:f5:8f:0d:84:e1:5d:
c5:56:1f:ef:83:7c:08:13:be:38:d9:43:ad:53:b5:e9:cc:1f:
fc:58:da:1e:6f:c5:8b:b6:eb:6a:c9:d5:3c:6a:31:30:1e:c3:
e0:8b:17:4c:e4:fe:6a:c3:ae:8c:76:a1:66:a3:5d:d2:13:dd:
99:eb:45:52:6c:8f:36:53:c1:16:cf:28:55:c8:2b:6a:09:aa:
3c:7e:e9:7c:1e:ff:f8:08:f8:22:a8:34:d1:00:c8:89:56:80:
ce:06:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org