Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/szC_xceZAPPs4g8M4Lr9ig-0WEk.roa
File: szC_xceZAPPs4g8M4Lr9ig-0WEk.roa (raw, json)
Hash identifier: iRM7u8csAgYIumdnIhqGolijmAX33TB958WHRpUVKyM=
Subject key identifier: B3:30:BF:C5:C7:99:00:F3:EC:E2:0F:0C:E0:BA:FD:8A:0F:B4:58:49
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0191718D2B9CE828C5F41916EAAD25114F61
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/szC_xceZAPPs4g8M4Lr9ig-0WEk.roa
Signing time: Tue 20 Aug 2024 20:49:22 +0000
ROA not before: Tue 20 Aug 2024 20:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 45.11.45.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
45.13.199.0/24 maxlen: 24
45.80.188.0/22 maxlen: 24
45.82.76.0/22 maxlen: 32
45.89.232.0/22 maxlen: 32
45.90.210.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
45.94.40.0/22 maxlen: 32
45.128.208.0/22 maxlen: 32
45.129.8.0/22 maxlen: 32
45.130.20.0/22 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.23.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
62.133.32.0/22 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.35.0/24 maxlen: 24
78.142.192.0/22 maxlen: 24
78.142.193.0/24 maxlen: 32
78.142.195.0/24 maxlen: 32
78.142.228.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
88.218.192.0/22 maxlen: 32
91.200.241.0/24 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.40.0/24 maxlen: 24
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
109.94.168.0/22 maxlen: 24
109.94.168.0/24 maxlen: 32
141.98.196.0/22 maxlen: 24
147.78.176.0/22 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.240.0/24 maxlen: 24
147.78.241.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
176.113.68.0/22 maxlen: 32
185.49.32.0/22 maxlen: 24
185.64.79.0/24 maxlen: 24
185.184.220.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
185.194.52.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
185.207.152.0/22 maxlen: 32
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
185.248.84.0/22 maxlen: 24
185.254.73.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.254.75.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
193.187.116.0/22 maxlen: 32
194.36.24.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
194.36.27.0/24 maxlen: 32
194.36.222.0/23 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
194.124.228.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.180.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
213.232.112.0/22 maxlen: 24
2a03:d9c0::/29 maxlen: 128
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a09::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a09:0:9000::/40 maxlen: 128
2a0b:4080::/32 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a0c:59c0:3000::/40 maxlen: 128
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a10:480::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Sep 2024 08:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:8d:2b:9c:e8:28:c5:f4:19:16:ea:ad:25:11:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 20 20:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b330bfc5c79900f3ece20f0ce0bafd8a0fb45849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:60:a6:50:13:1d:f8:69:40:ac:c2:a9:d4:
54:dc:97:b8:c9:d7:3c:6e:5d:da:e8:e6:24:2a:66:
74:b6:82:a3:99:69:f1:ed:63:f2:32:42:66:e6:4a:
3f:06:ca:96:13:fd:66:81:c4:b3:b9:c6:3e:a9:60:
61:3f:ae:b0:7c:02:db:9c:87:54:dc:f2:63:97:fc:
1f:65:ee:a6:82:32:5a:5d:98:7d:b7:be:0a:56:28:
d8:23:be:b2:c7:db:82:e5:5f:f5:f4:2e:29:5b:f7:
7a:50:c8:d8:71:47:c3:ec:e2:c2:f1:02:1a:9f:7c:
e7:14:78:2a:e0:43:44:48:b5:bf:8f:a2:b9:f1:19:
09:33:2c:ae:95:d5:d7:c6:23:d1:7b:ae:67:32:a8:
a8:13:55:f2:91:8c:fc:d5:2a:80:35:57:fb:47:8a:
11:86:a7:75:87:cb:4c:57:c7:32:e2:11:74:2d:df:
75:84:ad:ed:ba:7d:18:7d:36:3c:ee:4c:8e:5a:62:
0d:3a:83:e7:43:3a:f0:bf:e1:37:64:55:1d:74:09:
97:10:98:17:78:15:1c:2c:4b:70:63:da:ee:a3:f0:
3f:5a:34:b1:3e:e1:9e:84:7c:74:5f:7d:79:47:90:
06:86:20:6d:09:e1:30:e5:8a:81:9f:6f:d8:29:dc:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:BF:C5:C7:99:00:F3:EC:E2:0F:0C:E0:BA:FD:8A:0F:B4:58:49
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/szC_xceZAPPs4g8M4Lr9ig-0WEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.82.76.0/22
45.89.232.0/22
45.90.210.0/24
45.92.157.0/24
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.131.152.0/22
45.134.168.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/23
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
78.142.228.0/22
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
88.218.192.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
147.78.240.0/23
149.62.44.0/22
176.113.68.0/22
185.49.32.0/22
185.64.79.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.207.152.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
193.187.116.0/22
194.36.24.0/23
194.36.27.0/24
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
213.232.112.0/22
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
03:a0:47:6b:39:8f:4f:95:0b:44:26:80:26:c5:eb:ca:b8:1b:
e6:56:3a:75:f8:46:2d:c5:ef:9d:a0:e3:0e:76:94:2d:3a:ef:
5c:b4:17:06:47:4e:76:1b:44:ce:65:1b:af:36:38:26:ac:87:
78:30:fe:34:0c:3a:71:21:24:57:e7:7c:34:4c:c1:e7:00:e9:
3d:74:44:8a:8d:fa:b6:6b:99:93:cc:ec:32:c6:67:62:eb:a5:
51:68:b1:d7:c6:ef:89:b9:d2:61:5e:f5:3d:22:b8:0b:e9:29:
28:47:4d:a6:0f:80:c3:9a:e1:65:2c:95:1b:88:ad:64:1a:6e:
3f:4b:64:37:94:ee:4d:6a:db:44:1c:a1:72:93:27:e2:36:46:
ea:50:5a:08:fd:94:21:db:cc:b7:39:d1:fe:11:a4:c6:8f:30:
53:56:42:b3:6c:2d:9f:89:93:9a:45:4c:d5:58:e0:f5:38:fa:
b7:69:6f:c2:81:fa:29:ab:14:ed:c2:7f:f9:e4:cd:dd:fb:bb:
23:81:79:d9:69:87:c8:65:39:82:0d:c0:e5:d4:c7:7b:dc:03:
1c:07:5b:99:2f:9e:cb:c7:3b:12:01:13:4f:af:8e:f7:c2:07:
5a:6a:62:1a:b1:95:5d:9a:fa:4c:e3:f5:86:37:0d:f3:c9:57:
ae:6b:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:46:30 2024 by rpki-client on console-fra.rpki-client.org