Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/c_ORo1wHP_Ys-qwJrntly68-ftg.roa
File: c_ORo1wHP_Ys-qwJrntly68-ftg.roa (raw, json)
Hash identifier: l90beGgBlPw+3pWrp0t87mOt1snynvZejpNJyEzjIXU=
Subject key identifier: 73:F3:91:A3:5C:07:3F:F6:2C:FA:AC:09:AE:7B:65:CB:AF:3E:7E:D8
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 018CC72591E95B966FA4C556BF97252568CD
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/c_ORo1wHP_Ys-qwJrntly68-ftg.roa
Signing time: Mon 01 Jan 2024 22:29:37 +0000
ROA not before: Mon 01 Jan 2024 22:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21056
IP address blocks: 103.61.184.0/22 maxlen: 22
103.248.186.0/24 maxlen: 24
103.248.184.0/22 maxlen: 22
45.151.12.0/22 maxlen: 32
103.26.124.0/22 maxlen: 22
80.93.128.0/20 maxlen: 32
185.231.160.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
144.48.192.0/22 maxlen: 32
45.143.36.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
185.241.20.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
87.247.232.0/21 maxlen: 32
45.84.140.0/22 maxlen: 32
213.182.64.0/19 maxlen: 32
185.224.104.0/22 maxlen: 32
79.135.32.0/19 maxlen: 32
185.230.192.0/22 maxlen: 32
185.170.36.0/22 maxlen: 32
103.43.232.0/22 maxlen: 22
185.158.116.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
78.152.96.0/19 maxlen: 32
185.234.164.0/22 maxlen: 32
94.138.160.0/19 maxlen: 32
91.143.192.0/20 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 23 Apr 2024 13:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:91:e9:5b:96:6f:a4:c5:56:bf:97:25:25:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Jan 1 22:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f391a35c073ff62cfaac09ae7b65cbaf3e7ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:86:e8:b4:2f:86:5c:29:fd:5f:87:65:5c:
c0:8a:19:0b:31:ce:81:72:b0:f7:cd:a6:7c:1f:7a:
7e:c1:d8:69:46:50:3a:a1:5a:50:95:1a:19:5c:f8:
77:58:cf:ed:e7:42:6c:f4:20:c2:42:70:6a:5a:ee:
16:08:f4:d0:e6:c0:0e:9d:22:b3:11:f3:bb:94:9c:
d6:19:93:ae:6a:f6:39:51:dc:db:e1:30:54:bb:81:
a9:1b:48:5f:54:78:94:cf:ad:ea:ea:24:c3:5a:7c:
b0:73:f2:d6:ec:3e:cf:db:aa:63:5f:1f:3b:c2:e4:
a6:d0:46:cc:dd:fd:e8:b4:f9:11:b2:23:48:c8:9b:
9e:0e:88:71:2f:eb:d5:5e:4a:2b:8d:58:a8:89:e0:
41:bf:12:5b:70:06:28:8a:89:6f:53:f3:51:92:a3:
de:7a:1f:c4:19:c0:ea:8b:91:ed:5e:c9:b5:29:53:
5b:cf:0e:ae:23:2d:1e:c5:c8:03:c7:78:67:4e:da:
36:2b:fd:3a:32:4d:a2:a3:af:e9:01:dd:ab:9e:f7:
0d:d4:81:f5:6f:af:09:62:10:a4:a3:cf:7e:0a:68:
04:a3:c1:9f:a8:09:85:3a:9f:08:7b:11:48:1d:fd:
ac:81:6c:d5:38:eb:70:72:54:55:88:70:3a:1b:7a:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:91:A3:5C:07:3F:F6:2C:FA:AC:09:AE:7B:65:CB:AF:3E:7E:D8
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/c_ORo1wHP_Ys-qwJrntly68-ftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.12.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.135.32.0/19
80.93.128.0/20
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
103.26.124.0/22
103.43.232.0/22
103.61.184.0/22
103.248.184.0/22
144.48.192.0/22
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:91:eb:13:96:32:01:0d:a3:41:71:da:d1:3d:26:fa:78:19:
a7:b8:88:f8:30:88:8a:be:a0:7d:8f:5e:d0:02:2d:09:fd:e2:
f2:81:ad:d6:7f:8d:5d:80:6b:a6:af:c7:28:ad:48:17:a1:d5:
73:11:0f:3c:56:a1:7e:df:9b:83:8a:1b:13:7e:3c:95:8e:6c:
7e:e1:5c:32:38:cd:ed:76:1a:c9:a4:5b:3d:46:39:84:a0:86:
67:91:37:8c:40:63:04:f5:dd:a6:a5:98:33:30:21:40:6a:23:
21:31:a6:67:25:1a:a1:fb:23:fb:db:52:1d:3d:1b:eb:42:91:
82:cf:75:d7:ce:81:70:38:d1:91:d5:3f:2f:cb:9f:be:c6:4c:
7f:03:e3:c4:70:14:1f:fc:68:ed:68:d9:2c:fc:0c:55:73:73:
da:92:9d:d6:c0:89:fb:53:bd:31:9b:6e:fb:c1:4c:81:6b:18:
33:51:ba:06:19:ac:fe:91:a1:14:29:05:a1:0f:5b:cb:90:3f:
40:08:b4:da:5b:c6:09:c0:0a:fa:92:e4:c7:d7:4e:ba:2f:69:
09:a2:e7:c0:c2:c1:ab:06:62:08:c0:da:11:be:51:bc:e5:d4:
09:f4:68:54:a1:cb:c0:f3:b8:88:1f:f8:26:91:97:eb:ad:b3:
8a:99:96:da
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAYzHJZHpW5ZvpMVWv5clJWjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky
N2JkYWYwHhcNMjQwMTAxMjIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2YzOTFhMzVjMDczZmY2MmNmYWFjMDlhZTdiNjVjYmFmM2U3ZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoqG6LQvhlwp/V+HZVzAihkLMc6B
crD3zaZ8H3p+wdhpRlA6oVpQlRoZXPh3WM/t50Js9CDCQnBqWu4WCPTQ5sAOnSKz
EfO7lJzWGZOuavY5Udzb4TBUu4GpG0hfVHiUz63q6iTDWnywc/LW7D7P26pjXx87
wuSm0EbM3f3otPkRsiNIyJueDohxL+vVXkorjVioieBBvxJbcAYoiolvU/NRkqPe
eh/EGcDqi5HtXsm1KVNbzw6uIy0excgDx3hnTto2K/06Mk2io6/pAd2rnvcN1IH1
b68JYhCko89+CmgEo8GfqAmFOp8IexFIHf2sgWzVOOtwclRViHA6G3r4kwIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFHPzkaNcBz/2LPqsCa57ZcuvPn7YMB8GA1UdIwQY
MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt
ZGIwNGYyMTM5MGEwLzEvY19PUm8xd0hQX1lzLXF3SnJudGx5NjgtZnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw
LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBqQQCAAEwgaIDBAIt
VIwDBAItjyQDBAItlwwDBAItl0ADBAYuLMADBAVOmGADBAVPhyADBARQXYADBANX
9+gDBARbj8ADBAVeiqADBAJnGnwDBAJnK+gDBAJnPbgDBAJn+LgDBAKQMMADBAK5
nnQDBAK5qiQDBAK54DwDBAK54GgDBAK55lwDBAK55sADBAK55ugDBAK556ADBAK5
6qQDBAK58RQDBAXVtkAwDQQCAAIwBwMFACoAFPgwDQYJKoZIhvcNAQELBQADggEB
AKqR6xOWMgENo0Fx2tE9Jvp4Gae4iPgwiIq+oH2PXtACLQn94vKBrdZ/jV2Aa6av
xyitSBeh1XMRDzxWoX7fm4OKGxN+PJWObH7hXDI4ze12GsmkWz1GOYSghmeRN4xA
YwT13aalmDMwIUBqIyExpmclGqH7I/vbUh09G+tCkYLPddfOgXA40ZHVPy/Ln77G
TH8D48RwFB/8aO1o2Sz8DFVzc9qSndbAiftTvTGbbvvBTIFrGDNRugYZrP6RoRQp
BaEPW8uQP0AItNpbxgnACvqS5MfXTrovaQmi58DCwasGYgjA2hG+Ubzl1An0aFSh
y8DzuIgf+CaRl+uts4qZlto=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:52 2025 by rpki-client