Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/64pG8-Y6B2BuV98rBpBTkvTxBxg.roa
File: 64pG8-Y6B2BuV98rBpBTkvTxBxg.roa (raw, json)
Hash identifier: Kf3rJXhwAmGf1eRXu0uY2xeb8KBtYTzJkgqIhoToyUg=
Subject key identifier: EB:8A:46:F3:E6:3A:07:60:6E:57:DF:2B:06:90:53:92:F4:F1:07:18
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 0191EA77FF3CA8DAF1C1A70134C67B25234F
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/64pG8-Y6B2BuV98rBpBTkvTxBxg.roa
Signing time: Fri 13 Sep 2024 08:20:18 +0000
ROA not before: Fri 13 Sep 2024 08:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.129.0/24 maxlen: 24
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 21
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.126.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 22 Oct 2024 15:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:77:ff:3c:a8:da:f1:c1:a7:01:34:c6:7b:25:23:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Sep 13 08:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb8a46f3e63a07606e57df2b06905392f4f10718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:88:98:aa:ee:a4:eb:ab:54:17:59:e0:c3:
0a:1f:41:3c:a1:f4:2a:ca:d8:e3:f4:81:b7:2d:0f:
c5:1b:37:ca:21:41:b7:6a:a2:60:8e:a1:3d:f9:ca:
e9:bd:2c:95:35:27:56:a7:c9:4e:e5:b2:98:89:0a:
91:7c:20:e0:c3:7f:4d:fe:bc:14:42:90:4f:53:0e:
ce:d9:0d:aa:2d:8f:81:cc:63:c1:55:1a:6c:9c:04:
21:c6:df:17:af:7f:f7:6a:b9:57:aa:a6:97:8d:94:
19:21:9d:56:42:0c:a9:bc:65:d6:70:91:fc:d2:24:
f5:3f:94:f9:c8:49:c5:92:ab:f3:cb:40:70:3b:31:
33:37:ff:95:78:c6:ed:f6:cb:4b:7c:54:52:91:3f:
06:96:e3:e1:b3:4f:aa:03:12:ed:04:0b:52:f6:1d:
1f:74:d8:9c:e9:4f:f2:32:a8:1f:4b:7b:6c:3c:28:
4f:c0:41:77:50:e0:bb:8c:22:b3:f1:f5:04:59:e8:
41:69:41:9d:5a:47:36:29:14:4b:3c:5b:03:83:d6:
27:ec:56:98:59:62:c8:8e:75:dd:d4:1d:3d:39:64:
bf:c4:15:dc:71:71:85:df:d3:c5:20:36:e0:dc:f9:
74:0d:e2:4a:df:35:4f:f3:fd:43:c4:7c:fa:b0:48:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:46:F3:E6:3A:07:60:6E:57:DF:2B:06:90:53:92:F4:F1:07:18
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/64pG8-Y6B2BuV98rBpBTkvTxBxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.129.0/24
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
30:b5:8d:1e:bc:cb:0b:c3:8f:e2:e4:56:a4:86:aa:4c:1d:d4:
20:f2:f0:2f:13:a5:e3:2a:88:87:69:f5:70:fa:d5:20:9b:a5:
14:a3:54:19:fd:ae:e6:0c:9f:ed:11:a5:a6:12:1a:b6:38:f8:
99:0b:04:b3:68:6f:52:66:63:42:97:c1:00:03:c3:73:e3:3f:
17:3a:2c:76:57:f9:7f:1f:65:25:5d:f9:41:54:ed:46:dd:05:
15:d5:11:b7:ca:93:31:08:71:6a:fc:4a:0f:ce:ae:14:2b:73:
40:03:0f:8b:33:1b:91:de:dc:6d:d4:db:93:f8:4c:47:9b:82:
dc:1b:4e:f0:33:80:fa:9d:89:2e:cd:94:11:e6:f9:89:69:3e:
95:5f:25:42:72:84:ac:53:73:59:1d:13:3c:48:43:b4:48:9c:
c8:cf:70:a4:1b:d3:89:a1:dc:88:90:e0:5f:bf:c1:c5:6a:5f:
aa:c9:5d:b8:01:2d:29:85:b5:6c:62:6b:b0:f8:82:4f:67:17:
09:73:8a:f2:26:ef:70:5f:b5:80:0e:71:b3:73:84:7b:dc:e4:
59:9f:7c:2e:67:7f:4e:c5:55:e8:7e:9a:52:3d:6e:5d:ca:43:
a2:dd:b7:38:da:3d:22:01:18:17:b0:b3:ff:60:9f:7b:c5:01:
56:d6:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:31:00 2024 by rpki-client on console-fra.rpki-client.org