Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/0APDJTiNsjHo9UNit-K57Z--MNQ.roa
File: 0APDJTiNsjHo9UNit-K57Z--MNQ.roa (raw, json)
Hash identifier: yHCI4NSR+ZiYS88z9rfzofVOjKI4BLp6ubbphShKWz0=
Subject key identifier: D0:03:C3:25:38:8D:B2:31:E8:F5:43:62:B7:E2:B9:ED:9F:BE:30:D4
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 0192B4E852E801B899F00383D3F0827862BD
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/0APDJTiNsjHo9UNit-K57Z--MNQ.roa
Signing time: Tue 22 Oct 2024 15:46:17 +0000
ROA not before: Tue 22 Oct 2024 15:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.129.0/24 maxlen: 24
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 21
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.126.0/23 maxlen: 23
89.45.230.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Sun 03 Nov 2024 14:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:e8:52:e8:01:b8:99:f0:03:83:d3:f0:82:78:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Oct 22 15:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d003c325388db231e8f54362b7e2b9ed9fbe30d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:19:14:1f:63:1e:41:86:03:fe:ea:73:4d:
68:3c:a9:e2:7b:8e:d3:f2:3d:c6:f8:8e:36:96:e2:
eb:e7:ef:cc:f3:bd:90:b0:31:f7:b7:d3:54:ec:9f:
9e:a4:58:07:6d:54:01:3c:11:62:c4:1d:64:81:4b:
03:01:c0:d6:6a:39:07:b0:0a:f9:56:88:1d:a0:95:
4b:2b:d7:06:f0:94:1e:40:dc:42:25:91:49:f0:87:
6f:75:69:0b:8a:5d:a8:81:fe:0b:c9:31:50:c1:f5:
58:3d:c7:79:a2:ef:05:08:51:6e:45:b6:19:d9:1b:
1b:06:b2:c1:f0:99:da:c8:12:e6:e1:00:58:1c:b5:
f3:a2:4b:4d:11:2a:df:fd:6e:99:64:a0:0f:00:2f:
92:49:ff:cc:28:48:25:36:7a:69:8a:3d:69:c0:e4:
02:2c:2f:a3:03:cf:1b:78:32:44:ae:ff:c5:92:13:
12:6c:e3:a4:a9:37:54:ec:fe:77:46:36:79:fb:6c:
62:0c:48:c7:b1:b9:bb:04:57:54:a9:4c:cd:90:5d:
f5:da:76:91:66:bc:2b:30:7f:31:ab:52:5d:74:ea:
3c:6d:a3:c9:b3:77:c2:51:fe:73:72:53:f8:7e:d5:
28:d2:7c:4c:d4:13:cd:75:3b:0e:05:f1:10:08:a2:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:C3:25:38:8D:B2:31:E8:F5:43:62:B7:E2:B9:ED:9F:BE:30:D4
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/0APDJTiNsjHo9UNit-K57Z--MNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.129.0/24
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
c9:07:af:89:4a:f7:34:be:28:4c:de:3d:a3:4a:67:40:cf:5a:
78:6c:8a:28:b0:59:da:5e:a1:00:35:2b:d2:0e:bd:5d:52:40:
0d:4c:51:c5:cb:60:e4:2d:a9:47:e6:d3:03:ed:aa:a5:1f:3a:
7e:1f:40:70:69:45:6d:b3:4d:bf:8b:b0:00:57:0c:db:29:1d:
56:67:95:5d:86:b2:81:9b:ec:ff:96:87:a4:c7:91:b6:d8:c6:
6e:67:12:60:56:4d:89:c8:c3:b4:a6:fe:b8:21:4a:d7:f2:40:
a0:3d:15:b7:ed:06:a2:e4:78:a7:e2:73:fa:10:d7:4c:6b:85:
ee:67:e0:79:a3:b7:20:ca:96:90:fb:c9:58:05:28:47:2b:e1:
41:18:ac:32:34:71:6e:d5:96:76:5c:5c:dc:83:38:01:f6:ae:
2b:ba:c3:80:56:18:48:62:3f:35:21:ce:34:22:ef:c0:d6:7c:
03:5c:b5:9f:4d:0a:f5:03:e4:48:26:57:ec:79:04:15:d3:0f:
ce:62:0d:7d:2a:90:1a:3e:14:ab:27:17:6e:40:e2:67:59:65:
29:38:23:7b:fc:f3:14:ab:99:73:63:e5:c5:a8:8a:90:b3:85:
04:bc:70:6a:22:d5:c7:45:8a:0d:14:e3:82:3c:74:46:ad:7b:
ba:4e:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:32 2025 by rpki-client