Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/nLKzVrNRKhVJV2UzGXbkPl9G-XY.roa
File: nLKzVrNRKhVJV2UzGXbkPl9G-XY.roa (raw, json)
Hash identifier: wS5NWjJfDwq2xbtJSadkevA6VwczD60PZjQgHTdocx8=
Subject key identifier: 9C:B2:B3:56:B3:51:2A:15:49:57:65:33:19:76:E4:3E:5F:46:F9:76
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 0192F2744F5F6B9E3494090CDD4119F1ABF9
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/nLKzVrNRKhVJV2UzGXbkPl9G-XY.roa
Signing time: Sun 03 Nov 2024 14:36:01 +0000
ROA not before: Sun 03 Nov 2024 14:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 21
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.126.0/23 maxlen: 23
89.45.230.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f2:74:4f:5f:6b:9e:34:94:09:0c:dd:41:19:f1:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Nov 3 14:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cb2b356b3512a15495765331976e43e5f46f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:d7:53:42:10:42:99:14:8b:8c:f3:33:13:
e5:ea:f0:cc:16:3e:92:a5:47:16:cd:0b:8a:39:43:
04:9d:d4:36:05:aa:1d:82:4e:2a:00:84:49:6e:00:
3c:51:15:ae:33:20:b1:34:81:03:b3:90:e4:54:ee:
5f:66:f8:58:b4:b2:7c:d3:33:97:c8:5b:b3:59:0f:
48:b0:82:80:7c:d1:c0:c0:49:b1:69:10:b8:cb:59:
b4:c0:62:8b:43:8e:2e:de:14:d5:9d:bf:60:40:02:
db:c8:34:2c:d4:d4:7c:72:df:5a:fe:8f:92:52:a8:
be:c4:97:4a:46:87:5f:e6:f3:5e:3a:5f:f9:49:46:
1f:50:de:3d:32:ef:da:05:a6:df:e6:5a:b5:65:84:
0d:3c:16:ac:e9:b7:ae:93:42:98:d4:06:e8:77:ea:
90:69:f8:23:7b:9f:cb:59:df:87:c6:1b:87:bb:e6:
54:ec:12:f8:c8:82:d7:7f:56:36:13:49:f3:f1:7c:
47:41:58:65:d4:b4:b3:2a:dc:cf:ea:1e:33:8c:ff:
51:95:d5:dd:45:13:09:23:76:1c:fc:a6:78:55:56:
51:35:a9:99:3d:24:ce:27:58:6c:6a:a7:e6:cf:a2:
fb:56:68:cf:cd:fe:5b:99:8c:70:2e:28:f0:70:cf:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:B3:56:B3:51:2A:15:49:57:65:33:19:76:E4:3E:5F:46:F9:76
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/nLKzVrNRKhVJV2UzGXbkPl9G-XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
5a:ef:c9:f7:82:dc:59:63:c4:36:16:55:70:cb:9d:19:f6:fb:
17:37:70:c3:6c:30:fb:cc:ab:15:2d:fb:18:0a:60:e6:92:df:
a0:b7:d5:77:e3:67:b5:03:ff:0b:c0:35:63:dd:ae:29:48:e3:
83:2e:83:41:58:c8:84:25:3b:a3:2e:35:f0:88:1c:3d:b0:80:
9e:31:ac:d0:e2:dc:73:ab:e1:e8:bb:a6:25:e4:8f:01:e0:62:
f5:99:c5:ef:b6:ad:46:8e:ee:b2:71:1c:83:9c:0d:3f:e5:0a:
c2:2a:86:f9:8b:ae:aa:1f:cf:ef:00:aa:bc:58:5c:31:be:69:
1c:76:bc:e5:3c:1a:29:63:9c:71:1d:f9:1a:5e:09:24:e6:ee:
2e:30:09:6b:9b:6d:a5:5b:5b:7c:eb:a1:9c:3c:9c:b8:7a:04:
95:63:87:29:3b:0d:74:06:01:bb:b5:7d:8c:fc:70:19:cf:15:
49:89:f7:2b:8a:67:df:d9:f9:7a:38:dc:68:c7:76:28:2f:7e:
df:c0:f9:bf:de:28:06:cf:53:bd:2c:7e:68:71:1c:49:3e:16:
15:ae:d0:77:c5:24:d9:ff:7c:92:c5:9b:41:5c:dd:93:43:9e:
2c:d6:24:95:51:33:ad:59:8a:2b:f9:9a:83:1b:4e:7d:93:cf:
b1:46:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 2 11:24:32 2025 by rpki-client on console-fra.rpki-client.org