Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Vg5nqNJ3P7H3sYiu1YmiXzZd24Y.roa
File: Vg5nqNJ3P7H3sYiu1YmiXzZd24Y.roa (raw, json)
Hash identifier: puv4l1NuGzV0C9eHD3qSpwtqIjUwGbwfP40pR5T1E2A=
Subject key identifier: 56:0E:67:A8:D2:77:3F:B1:F7:B1:88:AE:D5:89:A2:5F:36:5D:DB:86
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01877B02F14DD0FFB1DDEC02105AE0F4B5F4
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Vg5nqNJ3P7H3sYiu1YmiXzZd24Y.roa
Signing time: Thu 13 Apr 2023 14:26:43 +0000
ROA not before: Thu 13 Apr 2023 14:26:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 145.97.16.0/22 maxlen: 22
145.137.128.0/18 maxlen: 18
145.97.20.0/22 maxlen: 22
145.97.24.0/21 maxlen: 21
145.124.0.0/15 maxlen: 15
145.23.0.0/19 maxlen: 19
145.23.0.0/16 maxlen: 16
192.87.0.0/16 maxlen: 16
145.97.48.0/20 maxlen: 20
194.171.0.0/16 maxlen: 16
145.107.0.0/16 maxlen: 22
145.33.0.0/16 maxlen: 16
145.20.0.0/16 maxlen: 16
145.97.128.0/18 maxlen: 18
145.138.0.0/16 maxlen: 16
145.74.0.0/15 maxlen: 15
145.37.0.0/16 maxlen: 16
145.144.0.0/12 maxlen: 12
145.97.64.0/18 maxlen: 18
145.76.0.0/16 maxlen: 16
145.116.128.0/18 maxlen: 18
145.103.0.0/16 maxlen: 16
145.140.0.0/14 maxlen: 14
145.2.0.0/15 maxlen: 15
145.109.128.0/17 maxlen: 17
145.96.0.0/16 maxlen: 16
145.116.64.0/18 maxlen: 18
145.116.224.0/19 maxlen: 19
145.127.0.0/17 maxlen: 17
145.100.0.0/15 maxlen: 15
145.90.0.0/16 maxlen: 16
145.90.10.0/23 maxlen: 23
145.117.0.0/16 maxlen: 16
145.19.0.0/16 maxlen: 16
145.116.192.0/20 maxlen: 20
145.120.0.0/14 maxlen: 14
145.9.0.0/16 maxlen: 16
145.28.0.0/15 maxlen: 15
145.92.0.0/15 maxlen: 15
145.146.0.0/16 maxlen: 25
145.48.0.0/15 maxlen: 15
145.102.0.0/16 maxlen: 16
145.38.0.0/15 maxlen: 15
145.116.0.0/20 maxlen: 20
145.52.0.0/16 maxlen: 16
145.116.16.0/21 maxlen: 21
145.116.24.0/21 maxlen: 21
145.136.0.0/15 maxlen: 15
145.126.0.0/16 maxlen: 16
145.108.0.0/16 maxlen: 16
145.44.0.0/16 maxlen: 16
145.98.0.0/16 maxlen: 16
145.0.0.0/16 maxlen: 16
145.97.192.0/18 maxlen: 18
145.91.0.0/16 maxlen: 16
145.118.0.0/16 maxlen: 16
145.81.0.0/16 maxlen: 16
145.95.0.0/16 maxlen: 16
145.85.0.0/16 maxlen: 16
145.24.0.0/16 maxlen: 16
145.88.0.0/15 maxlen: 15
145.51.0.0/16 maxlen: 16
195.169.0.0/16 maxlen: 16
2001:610::/29 maxlen: 29
2001:610:130::/48 maxlen: 64
2001:610::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:02:f1:4d:d0:ff:b1:dd:ec:02:10:5a:e0:f4:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Apr 13 14:26:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=560e67a8d2773fb1f7b188aed589a25f365ddb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:c1:df:88:59:15:8a:da:e2:15:cb:30:b0:
ab:3a:6c:8f:c7:07:04:1d:d8:d1:40:cb:b7:b9:ae:
2d:37:79:6b:08:97:8c:4a:ce:b7:49:16:b1:dc:6a:
0f:6b:8a:91:8c:d4:bc:bc:2c:6b:d8:5e:ad:b5:3c:
68:32:a1:a2:be:4a:d7:78:9a:30:ef:e2:14:7c:9d:
36:26:03:b4:2e:98:68:e9:94:45:99:48:78:6f:31:
7f:be:d6:1c:3b:18:7a:b4:c8:45:03:6f:85:9e:14:
44:78:9a:78:2b:f5:8f:24:73:fd:b5:45:30:15:6a:
d6:75:1e:c5:23:ac:58:f8:5e:4a:d0:e1:1e:92:3a:
9c:59:8d:be:2a:3a:47:35:5d:89:be:5a:6d:6b:ae:
8d:50:97:66:57:86:97:3f:32:6f:9a:b2:c2:6c:d3:
f0:d8:7d:5d:13:5d:b7:aa:05:dc:46:4c:ed:89:2d:
fb:e5:33:a8:c4:91:3a:93:8a:df:17:6e:a1:f8:99:
a2:a4:f4:35:64:31:e4:dd:05:f3:92:c9:26:89:b2:
bb:63:c7:7f:b1:ec:72:81:a0:8e:70:a5:95:73:be:
b5:29:6d:fe:10:e7:b3:64:da:46:f0:df:d0:c6:de:
ca:dc:86:d1:3b:d6:aa:54:8b:30:66:c2:83:1c:1d:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:67:A8:D2:77:3F:B1:F7:B1:88:AE:D5:89:A2:5F:36:5D:DB:86
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Vg5nqNJ3P7H3sYiu1YmiXzZd24Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
65:4e:e5:ef:11:65:93:30:c0:e6:d6:7e:0e:bd:75:89:15:fc:
1b:e5:78:2f:ea:c8:0e:a9:5e:84:c0:a4:7e:3c:b4:d4:a0:5e:
60:88:5a:19:e1:66:e9:15:17:fc:28:09:1b:3e:b0:e8:55:37:
67:3e:2c:45:f3:bb:f0:13:a2:e5:81:e2:ec:5d:8a:66:fa:d5:
27:3c:80:3e:9b:1e:f0:1c:2c:70:e4:40:23:b0:74:41:74:b9:
1c:72:d3:14:49:ee:af:b5:a2:a6:ca:b4:3c:b0:e1:b1:41:85:
6e:96:82:97:1c:fd:c8:35:94:a7:ff:8a:85:30:07:c6:22:52:
a4:d8:07:8c:7a:fe:0a:f6:82:74:3c:41:c8:07:bf:a4:73:08:
cb:0a:81:ca:b7:4b:46:21:df:c8:3c:8b:18:07:9e:1e:cd:a3:
0b:89:03:82:90:72:14:32:2a:da:fa:2e:29:a7:f0:e9:3a:cf:
4b:df:af:c8:51:44:91:cd:2e:90:40:e6:6e:fb:61:26:f2:52:
b1:64:21:85:2c:da:cf:f6:54:ca:d6:38:b2:a3:14:77:cb:0b:
a7:fd:d6:a8:d1:d8:a9:89:97:4c:1f:f3:bc:55:1b:fd:19:0e:
88:5f:4a:3a:c9:16:c1:a4:bd:04:17:6f:b3:ee:e9:f3:42:83:
1d:18:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org