Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/g00FFdS8L6_KML4XursJ-i9YekI.roa
File: g00FFdS8L6_KML4XursJ-i9YekI.roa (raw, json)
Hash identifier: xu/IMl++a6SI9jf/nseI6FzzoP/LnKesruSnlQke85g=
Subject key identifier: 83:4D:05:15:D4:BC:2F:AF:CA:30:BE:17:BA:BB:09:FA:2F:58:7A:42
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193B36728CCA5428263CCE7EE2DE16E9489
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/g00FFdS8L6_KML4XursJ-i9YekI.roa
Signing time: Wed 11 Dec 2024 01:48:22 +0000
ROA not before: Wed 11 Dec 2024 01:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3258
IP address blocks: 45.8.112.0/24 maxlen: 24
45.8.113.0/24 maxlen: 24
45.8.114.0/24 maxlen: 24
45.8.222.0/24 maxlen: 32
45.11.44.0/22 maxlen: 24
45.14.64.0/22 maxlen: 24
45.14.68.0/22 maxlen: 24
45.14.70.0/24 maxlen: 24
45.14.104.0/22 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.66.128.0/22 maxlen: 24
45.66.216.0/22 maxlen: 24
45.89.216.0/22 maxlen: 24
45.89.232.0/22 maxlen: 32
45.94.40.0/22 maxlen: 32
45.128.208.0/22 maxlen: 32
45.129.8.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.135.40.0/22 maxlen: 24
45.136.176.0/22 maxlen: 24
45.142.124.0/22 maxlen: 24
45.143.128.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.149.156.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
45.159.48.0/22 maxlen: 24
62.106.70.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
88.218.192.0/22 maxlen: 32
91.200.240.0/22 maxlen: 24
92.60.40.0/22 maxlen: 24
94.124.116.0/22 maxlen: 24
109.107.137.0/24 maxlen: 24
109.107.140.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
141.98.196.0/24 maxlen: 24
141.98.197.0/24 maxlen: 24
141.98.198.0/24 maxlen: 24
147.78.240.0/21 maxlen: 24
149.62.44.0/22 maxlen: 24
176.113.68.0/22 maxlen: 32
176.119.148.0/22 maxlen: 24
176.126.114.0/24 maxlen: 24
185.184.223.0/24 maxlen: 24
185.200.64.0/22 maxlen: 24
185.207.152.0/22 maxlen: 32
185.222.216.0/21 maxlen: 24
193.32.148.0/22 maxlen: 24
193.111.30.0/23 maxlen: 24
194.104.152.0/22 maxlen: 24
194.169.54.0/23 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a09:1::/48 maxlen: 48
2a09:2::/48 maxlen: 48
2a09:3::/48 maxlen: 48
2a09:4::/48 maxlen: 48
2a09:5::/48 maxlen: 48
2a09:7::/36 maxlen: 48
2a09:7::/48 maxlen: 48
2a09:7:1::/48 maxlen: 48
2a09:7:2008::/48 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Dec 2024 15:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:67:28:cc:a5:42:82:63:cc:e7:ee:2d:e1:6e:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 11 01:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=834d0515d4bc2fafca30be17babb09fa2f587a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:e9:05:05:e0:33:8f:16:2b:af:3e:8e:2d:
89:2c:0f:6d:89:db:33:4f:68:5d:65:37:a4:93:49:
83:1f:b3:d6:d5:e0:6e:8b:4f:e7:34:c3:23:68:8b:
5a:f7:71:54:1d:82:99:2c:5a:db:e4:79:9d:c5:1a:
97:47:31:3e:bd:d6:ee:84:c6:3c:81:69:79:dc:89:
2d:ab:94:c5:80:a0:87:fd:8d:81:cd:09:36:68:fb:
f2:e0:a9:16:cd:4a:d0:ca:8d:51:d4:b3:ea:0f:1e:
53:61:18:03:6c:97:b8:ab:c5:f3:fa:35:b1:1d:ee:
f3:7e:e0:4f:2c:f1:ae:89:f6:b1:59:a9:6b:8f:13:
74:01:9d:94:ba:86:7e:f4:e3:e4:7f:d7:e0:36:51:
a8:54:1f:56:01:62:3f:ab:2d:14:db:30:45:e3:8d:
ba:3c:05:5b:5d:d6:43:fc:7b:41:ad:6e:b1:05:46:
2b:ef:34:c9:9f:0a:9b:b9:4c:12:af:a5:3f:88:9f:
6c:c6:8c:e6:9a:00:05:c3:10:0f:83:7f:af:85:1f:
35:f2:3c:2f:57:74:b7:af:82:8c:cd:3f:fd:5f:9f:
e3:f8:dd:8a:8f:1f:12:b4:43:3b:69:19:b9:d8:ff:
b4:01:04:12:4c:e7:f0:3c:db:99:18:74:29:1a:c7:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:05:15:D4:BC:2F:AF:CA:30:BE:17:BA:BB:09:FA:2F:58:7A:42
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/g00FFdS8L6_KML4XursJ-i9YekI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.112.0-45.8.114.255
45.8.222.0/24
45.11.44.0/22
45.14.64.0/21
45.14.104.0/22
45.66.128.0/22
45.66.216.0/22
45.89.216.0/22
45.89.232.0/22
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.134.168.0/22
45.135.40.0/22
45.136.176.0/22
45.142.124.0/22
45.143.128.0/22
45.143.232.0/22
45.149.156.0/22
45.153.244.0/22
45.159.48.0/22
62.106.70.0/24
79.143.140.0/22
88.214.20.0/22
88.218.192.0/22
91.200.240.0/22
92.60.40.0/22
94.124.116.0/22
109.107.137.0/24
109.107.140.0/24
141.98.196.0/22
147.78.240.0/21
149.62.44.0/22
176.113.68.0/22
176.119.148.0/22
176.126.114.0/24
185.184.223.0/24
185.200.64.0/22
185.207.152.0/22
185.222.216.0/21
193.32.148.0/22
193.111.30.0/23
194.104.152.0/22
194.169.54.0/23
195.245.241.0-195.245.242.255
IPv6:
2a09:1::/48
2a09:2::/48
2a09:3::/48
2a09:4::/48
2a09:5::/48
2a09:7::/36
2a09:7:2008::/48
2a0d:c7c1::/32
2a10:480::/29
Signature Algorithm: sha256WithRSAEncryption
4d:2a:34:9a:f1:b3:ef:e3:d5:02:0d:95:fa:d5:ea:09:66:69:
32:42:1e:46:5d:d2:6d:16:e0:14:c5:80:4b:6e:b1:42:c8:06:
71:1c:4c:72:95:60:f8:f5:63:3d:29:5a:6e:f4:0f:bb:e6:b5:
6f:5d:1c:51:f1:6a:a3:a1:1e:e9:3b:f7:f7:7e:7d:98:54:e4:
eb:41:16:2e:77:8d:91:66:e3:62:9a:0d:27:c5:fe:ae:1d:27:
6b:b5:33:bc:ce:c6:77:5c:ea:72:8a:4b:d4:a9:89:f2:d3:73:
f0:ec:33:50:f9:ec:ba:f9:05:11:ef:df:7d:ba:0d:48:6b:f3:
a0:3b:f9:fb:89:1e:99:c7:1d:cd:45:86:e6:d9:3a:ce:68:f9:
e0:a1:78:04:25:bf:e0:d3:4b:6c:b9:cd:77:81:64:80:66:26:
61:2b:d6:44:36:c9:5b:82:9b:ff:53:9a:c5:07:6d:a9:b3:f9:
b2:9c:a8:46:76:03:33:35:b5:92:3a:9b:45:08:a4:03:fa:77:
05:79:5c:83:cd:7a:95:ce:39:42:77:52:a3:94:b9:35:7d:f7:
56:4f:8a:90:a3:02:dd:63:f3:39:ab:69:f9:2d:60:5b:77:d0:
2e:30:ee:f0:a7:9c:03:81:82:65:ce:33:70:32:b3:cd:4d:cc:
f3:b3:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:42 2025 by rpki-client