Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CNHI4gBKJZYn0XraFZEj7FopD2w.roa
File: CNHI4gBKJZYn0XraFZEj7FopD2w.roa (raw, json)
Hash identifier: VWskZRpT0WUtWNzOW0zz09UfGyWz7yQem3f6VBUG9x0=
Subject key identifier: 08:D1:C8:E2:00:4A:25:96:27:D1:7A:DA:15:91:23:EC:5A:29:0F:6C
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01904FAD477291EC4FE7F042EA284D7B02EE
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CNHI4gBKJZYn0XraFZEj7FopD2w.roa
Signing time: Tue 25 Jun 2024 13:54:34 +0000
ROA not before: Tue 25 Jun 2024 13:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.90.7.0/24 maxlen: 24
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Sep 2024 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:ad:47:72:91:ec:4f:e7:f0:42:ea:28:4d:7b:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jun 25 13:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d1c8e2004a259627d17ada159123ec5a290f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:86:92:4e:89:6a:fc:b2:32:bc:4a:6c:c4:
88:cc:d4:50:b1:6c:da:e3:65:98:18:df:36:f6:c8:
fa:65:d7:b5:43:19:53:cb:f5:4f:a5:55:9d:2e:15:
49:7a:03:22:b4:28:0d:91:77:ca:af:9e:bf:c7:5e:
5c:db:66:a3:40:05:62:ff:3f:ac:e9:a1:a4:70:a7:
49:26:72:61:e1:fe:b6:fe:ce:98:f2:1f:52:8a:26:
13:1d:fa:6d:cb:a0:21:bb:b8:b0:e3:85:8e:1b:f2:
ce:8e:db:70:e9:c2:c8:2a:b6:28:4a:9a:4a:14:c3:
53:54:b8:fb:59:04:f5:bc:ed:8c:aa:cc:fa:55:80:
28:8e:44:78:4a:ab:2f:39:7e:e9:be:35:b0:0a:d9:
e6:8d:0e:ae:6e:62:95:8d:07:99:1d:0f:b3:eb:43:
1d:d0:cd:92:e4:6c:5e:53:4d:ce:10:f7:9e:e9:62:
d4:e1:4a:17:93:79:56:b3:e9:13:cf:b1:eb:bf:13:
26:81:5d:2c:76:52:b0:be:f4:82:06:ed:27:6b:06:
da:20:76:99:62:38:65:33:d5:9a:7b:65:49:7b:a4:
ae:e7:a3:20:20:fb:2f:a2:98:cb:35:12:f9:cc:44:
57:05:4b:e7:71:36:9a:ab:0c:20:aa:f5:ef:32:da:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:C8:E2:00:4A:25:96:27:D1:7A:DA:15:91:23:EC:5A:29:0F:6C
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CNHI4gBKJZYn0XraFZEj7FopD2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:7e:35:24:a6:78:d2:e8:bd:a3:f5:cb:f3:9d:82:69:0e:28:
0c:00:85:2a:9b:e0:7e:38:22:f6:f3:56:99:47:0d:76:2c:93:
ac:24:27:ca:70:15:b4:fa:3e:bf:ad:c2:bd:45:a4:1d:90:f9:
1d:81:43:b5:38:8d:cb:bb:ef:61:75:9c:e6:3b:8c:00:69:0e:
79:05:c1:7c:b7:fa:4a:34:9d:8c:2e:ce:c9:83:11:05:18:83:
b7:5a:0e:5b:7e:9c:9d:2b:2b:c7:ba:86:67:2e:80:80:05:e6:
d2:f4:67:72:b8:6c:97:74:5b:69:23:fc:fc:95:54:b8:58:db:
68:83:7f:4d:6f:76:d2:84:5c:02:5e:71:8c:8f:2d:aa:34:e6:
2d:d5:e1:6f:dc:83:a3:e8:26:88:03:22:43:05:3c:93:71:73:
70:a2:c4:71:e6:f1:f5:a4:3a:9b:ce:2c:df:17:f0:f8:dd:fd:
30:61:69:39:23:0d:7e:24:25:34:eb:43:e4:90:41:52:8a:80:
50:9c:1d:7d:d7:7b:8d:3a:cc:e7:cc:8b:9c:68:a2:29:c9:b2:
36:48:c2:73:5f:17:64:59:ff:d4:e6:88:bc:41:55:f7:79:43:
14:0a:75:8f:65:e5:b6:de:34:94:c7:c1:8f:cf:d5:5b:c4:1f:
31:11:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 08:22:49 2024 by rpki-client on console-ams.rpki-client.org