Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_Eu3AHQZ3Uz4mbV26kNOeZYXxC4.roa
File: _Eu3AHQZ3Uz4mbV26kNOeZYXxC4.roa (raw, json)
Hash identifier: vu1U+2Xw0X7GPWOSPCb9u6/1inJ2pVydm/BIAveLe4A=
Subject key identifier: FC:4B:B7:00:74:19:DD:4C:F8:99:B5:76:EA:43:4E:79:96:17:C4:2E
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0190493342AC29DDDCB5D4E887410A2F4532
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_Eu3AHQZ3Uz4mbV26kNOeZYXxC4.roa
Signing time: Mon 24 Jun 2024 07:43:34 +0000
ROA not before: Mon 24 Jun 2024 07:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3258
IP address blocks: 45.8.222.0/24 maxlen: 32
45.14.64.0/22 maxlen: 24
45.14.70.0/24 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.66.128.0/22 maxlen: 24
45.66.216.0/22 maxlen: 24
45.89.232.0/22 maxlen: 32
45.94.40.0/22 maxlen: 32
45.128.208.0/22 maxlen: 32
45.129.8.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.142.124.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.149.156.0/22 maxlen: 24
45.159.48.0/22 maxlen: 24
62.106.70.0/24 maxlen: 24
88.214.20.0/22 maxlen: 24
88.218.192.0/22 maxlen: 32
91.200.240.0/22 maxlen: 24
92.60.40.0/22 maxlen: 24
109.107.137.0/24 maxlen: 24
109.107.140.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
141.98.196.0/24 maxlen: 24
141.98.197.0/24 maxlen: 24
141.98.198.0/24 maxlen: 24
147.78.240.0/21 maxlen: 24
149.62.44.0/22 maxlen: 24
176.113.68.0/22 maxlen: 32
176.119.148.0/22 maxlen: 24
176.126.114.0/24 maxlen: 24
185.184.220.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
185.207.152.0/22 maxlen: 32
193.32.148.0/22 maxlen: 24
193.111.30.0/23 maxlen: 24
194.104.152.0/22 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a09:1::/48 maxlen: 48
2a09:2::/48 maxlen: 48
2a09:3::/48 maxlen: 48
2a09:4::/48 maxlen: 48
2a09:5::/48 maxlen: 48
2a09:7::/36 maxlen: 48
2a09:7::/48 maxlen: 48
2a09:7:1::/48 maxlen: 48
2a09:7:2008::/48 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 13:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:33:42:ac:29:dd:dc:b5:d4:e8:87:41:0a:2f:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 24 07:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc4bb7007419dd4cf899b576ea434e799617c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:7a:a0:7d:d4:2b:31:1a:bd:79:c6:67:48:
d1:4c:1c:8c:01:e6:11:6d:ba:ea:63:32:37:98:5b:
61:27:c5:aa:26:3d:f9:52:c4:1d:2a:c4:6e:39:7a:
81:bb:0d:7d:d0:4e:47:a2:b4:f0:1a:34:60:d6:da:
af:42:f1:79:06:d3:44:91:c6:56:3f:85:42:08:a1:
9b:a3:e5:7d:2a:22:bb:b3:ef:5f:0f:69:87:ad:9a:
4d:87:dd:f4:24:a2:2f:5f:b3:e9:22:39:db:58:dc:
00:a0:22:4c:6a:2b:f0:0d:ff:1b:6f:5d:37:12:36:
d0:10:07:7d:19:9f:05:30:97:c6:89:17:86:05:3b:
2e:78:74:56:db:01:4d:c9:93:71:23:83:d5:86:c8:
e1:ae:d5:cc:bc:46:98:22:53:a7:0e:85:db:00:d9:
9a:a9:59:fb:ab:78:39:a2:07:95:e3:79:b5:fb:d2:
69:aa:ee:4c:48:23:ae:93:14:ec:58:51:9f:07:83:
1e:89:58:a6:3c:9c:25:3c:9c:c7:00:c2:ec:dc:f0:
84:64:fd:06:48:0a:d0:62:6a:32:bd:c4:a3:63:77:
ab:57:35:a5:e2:03:f1:e0:95:cf:c3:33:05:af:cf:
68:16:8b:d4:c0:fb:83:ae:0b:4e:9c:16:b3:0c:c7:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:B7:00:74:19:DD:4C:F8:99:B5:76:EA:43:4E:79:96:17:C4:2E
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_Eu3AHQZ3Uz4mbV26kNOeZYXxC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.222.0/24
45.14.64.0/22
45.14.70.0/24
45.14.105.0/24
45.14.107.0/24
45.66.128.0/22
45.66.216.0/22
45.89.232.0/22
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.134.168.0/22
45.142.124.0/22
45.143.232.0/22
45.149.156.0/22
45.159.48.0/22
62.106.70.0/24
88.214.20.0/22
88.218.192.0/22
91.200.240.0/22
92.60.40.0/22
109.107.137.0/24
109.107.140.0/24
141.98.196.0/22
147.78.240.0/21
149.62.44.0/22
176.113.68.0/22
176.119.148.0/22
176.126.114.0/24
185.184.220.0/22
185.200.64.0/22
185.207.152.0/22
193.32.148.0/22
193.111.30.0/23
194.104.152.0/22
195.245.241.0-195.245.242.255
IPv6:
2a09:1::/48
2a09:2::/48
2a09:3::/48
2a09:4::/48
2a09:5::/48
2a09:7::/36
2a09:7:2008::/48
2a0d:c7c1::/32
2a10:480::/29
Signature Algorithm: sha256WithRSAEncryption
8d:a1:8d:58:bf:05:7c:04:b1:fa:30:06:f1:7a:bf:19:d5:94:
59:9a:f6:7d:54:da:a4:e7:4f:4f:8c:f4:0b:24:19:a2:98:7e:
52:cd:a2:51:88:2e:7e:26:b6:30:56:29:66:48:bd:ae:aa:aa:
f7:51:14:55:65:84:0a:7b:ed:5e:7d:f8:98:fb:9b:ed:7b:bb:
87:82:66:00:2e:7a:e1:93:bc:0c:43:78:66:25:37:ab:d3:76:
6f:c1:db:05:fa:e5:1e:bf:c6:0f:a8:42:65:bc:bd:65:60:ae:
27:1c:81:dc:b1:36:41:51:c8:1a:c4:a4:d2:96:a2:40:a5:28:
d6:e3:59:54:17:37:79:e3:41:16:2a:68:ae:7e:9a:e0:ff:8a:
b5:4f:e9:fc:fc:2e:5d:5f:ed:88:74:65:5b:76:82:8d:29:da:
ce:b9:d0:76:a5:c1:32:75:db:8c:5a:a4:da:48:db:7a:b8:83:
12:ec:2e:03:07:5c:08:c1:f6:ee:b8:68:d8:ff:07:2c:8f:57:
59:32:82:97:1f:05:ba:75:8d:48:75:96:f4:69:42:d3:80:21:
76:74:7e:a2:fc:1b:ac:88:56:81:9a:b9:20:23:52:97:34:81:
3b:62:78:84:91:73:f5:09:b4:02:c1:5e:bf:62:07:86:1e:e6:
12:13:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:10:13 2024 by rpki-client on console-ams.rpki-client.org