Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/_vKBcQbkJiHjbY_SmelEMikfLHc.roa
File: _vKBcQbkJiHjbY_SmelEMikfLHc.roa (raw, json)
Hash identifier: pwUlGfYyh6o1pU9qztEqV2oEJw3118hDOWiPtvsqIFE=
Subject key identifier: FE:F2:81:71:06:E4:26:21:E3:6D:8F:D2:99:E9:44:32:29:1F:2C:77
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 0190915C86B04B1DBFBD35A00C9B0DDAD1E1
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/_vKBcQbkJiHjbY_SmelEMikfLHc.roa
Signing time: Mon 08 Jul 2024 08:01:18 +0000
ROA not before: Mon 08 Jul 2024 08:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.128.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 21
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.126.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 10 Sep 2024 13:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:5c:86:b0:4b:1d:bf:bd:35:a0:0c:9b:0d:da:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Jul 8 08:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef2817106e42621e36d8fd299e94432291f2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:6a:58:30:4b:0d:89:f7:3a:df:a7:c0:09:
43:65:60:ac:24:f0:db:c5:76:aa:14:f9:b2:cb:11:
e1:22:79:2d:82:2d:92:81:33:81:2e:bd:ad:33:af:
57:ed:99:db:92:df:f7:9b:d8:f9:5b:66:a3:38:b1:
ad:2e:64:6d:e3:41:32:7d:2b:16:16:b5:77:bf:f7:
f0:ce:4b:ac:e7:d4:20:12:8d:2b:68:db:31:91:d9:
20:94:53:6e:48:90:2c:ea:1b:e1:b7:49:91:1b:15:
60:21:8e:fa:1e:56:73:75:69:db:e2:50:ea:93:72:
df:f2:9c:90:b9:ec:f5:77:f4:e0:39:56:ee:d7:bc:
8e:cc:5c:55:53:4a:e4:83:b0:77:f2:67:97:49:da:
18:9f:52:90:41:db:be:80:7f:7a:b4:f7:cc:87:81:
2a:5f:33:43:a6:75:82:bd:f5:aa:b8:4c:52:da:06:
e2:fe:11:29:91:ba:41:09:02:55:e1:f6:7b:bd:ea:
ea:52:96:41:ae:32:ab:a1:5e:d6:5e:0d:36:83:01:
c8:c6:99:92:1f:bb:41:1b:1c:53:45:34:e3:7f:53:
89:3c:d1:98:22:ad:08:2b:74:b2:5c:07:79:b7:2a:
ce:8a:b3:3b:87:56:27:59:99:63:bd:7a:6f:c5:73:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:81:71:06:E4:26:21:E3:6D:8F:D2:99:E9:44:32:29:1F:2C:77
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/_vKBcQbkJiHjbY_SmelEMikfLHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.128.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
95:e8:9b:68:0d:94:dc:86:d6:44:c9:1c:7c:d2:df:ff:16:b1:
b2:69:19:7c:32:47:5d:14:a1:6a:ec:ff:f5:72:ad:d8:db:0c:
50:60:1f:dd:f8:ae:5d:1d:d0:0e:f5:43:29:07:c7:bb:7a:7d:
46:b0:de:29:46:34:e5:8b:db:fc:db:99:52:28:b3:bf:e4:79:
7c:b8:17:07:91:9d:9f:1d:0d:7b:73:ed:da:6e:f1:22:1e:18:
52:fd:89:12:be:ba:a9:9d:eb:41:c9:97:b4:80:b6:57:de:d6:
a2:a0:aa:54:56:5d:9a:0a:6f:5f:72:0b:8d:56:ae:90:24:3c:
31:30:82:b9:30:95:a5:cc:bc:a3:d7:7a:d9:10:0d:79:eb:4a:
7f:f2:f0:64:a9:cc:e0:88:35:9a:c1:4e:36:82:78:57:c5:cb:
05:95:5c:e2:30:56:cf:c0:56:2d:6e:c8:32:44:5f:1e:ed:02:
9a:97:d6:7c:2e:06:1c:ba:5d:a4:28:1e:73:8b:d2:fb:27:d8:
40:fa:6a:f0:cd:f3:0e:a8:43:76:ca:6f:a7:b9:bd:72:21:95:
2b:29:c4:a9:40:d2:4a:36:69:6b:1c:46:55:51:a3:c7:81:4b:
24:d3:73:c9:bd:79:0c:1e:94:7f:30:b4:8e:46:0d:a1:16:bc:
1c:a6:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:56 2024 by rpki-client on console-fra.rpki-client.org