Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/TtYQDDLyUEzDjoLp-0GM9TyvYms.roa
File: TtYQDDLyUEzDjoLp-0GM9TyvYms.roa (raw, json)
Hash identifier: dM6xaxTOZYMhUsG147sxTJpZNCVwsQm/WhgNfi9cS6U=
Subject key identifier: 4E:D6:10:0C:32:F2:50:4C:C3:8E:82:E9:FB:41:8C:F5:3C:AF:62:6B
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 018CC56E2B3EC0B375B79E4B7D28636B5ECE
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/TtYQDDLyUEzDjoLp-0GM9TyvYms.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
89.58.60.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Feb 2024 13:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2b:3e:c0:b3:75:b7:9e:4b:7d:28:63:6b:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed6100c32f2504cc38e82e9fb418cf53caf626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:e9:6b:fc:b0:67:0b:63:25:66:a7:b7:dd:
4f:6f:de:6b:39:ac:76:da:8b:58:af:78:46:6c:bb:
13:f3:c9:59:08:db:2a:58:40:90:89:85:9f:28:3b:
1c:7d:78:a4:96:fa:6f:f2:26:d9:0b:2b:90:5c:8e:
4b:27:79:57:32:5a:17:c4:1d:c0:9c:b3:94:7f:5c:
a7:40:79:0c:06:00:95:41:75:1a:47:91:64:e1:1a:
c2:cf:fd:00:a2:8e:57:1b:37:bb:c3:c0:7e:f9:a3:
7e:96:39:7f:84:a3:54:a4:b4:8d:a9:7a:17:81:51:
e6:be:80:08:b2:56:9f:3d:94:9b:08:70:0f:29:1e:
87:c3:25:17:56:0a:af:62:3e:ed:04:a4:2d:89:da:
bf:b1:60:3f:16:09:4a:81:9d:d0:60:5d:11:3d:16:
1d:ed:d1:d3:60:b6:66:1a:de:be:29:c8:de:25:4c:
27:c7:6d:1b:4a:6a:b6:75:2d:8b:66:bf:f7:76:db:
33:ce:c6:53:f3:30:bf:01:44:c9:9c:9e:8b:48:06:
98:d5:df:5a:f7:87:e1:9e:45:08:28:2e:1b:a7:28:
d0:17:07:00:24:df:80:ba:22:d2:6c:e3:d2:f0:27:
22:65:63:45:bb:b2:70:cd:56:b6:11:72:88:5a:88:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:10:0C:32:F2:50:4C:C3:8E:82:E9:FB:41:8C:F5:3C:AF:62:6B
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/TtYQDDLyUEzDjoLp-0GM9TyvYms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:f4:c6:6e:28:19:27:54:9b:a7:6b:d5:1d:cd:85:4a:99:ca:
e9:4e:ca:31:2d:10:d4:3c:17:e3:4d:f5:47:7f:19:82:73:42:
f8:52:d3:97:f1:25:22:e8:69:08:09:03:a6:34:93:1f:6d:4d:
f9:c1:ed:47:30:d4:e7:de:9b:ea:30:22:8f:25:f5:4f:3c:a2:
5d:79:f4:a5:aa:69:31:fa:08:fc:f5:92:31:59:0f:ff:49:a2:
44:04:b5:c5:4d:6a:34:a5:26:b3:f0:42:44:7d:0d:3f:ce:74:
aa:bf:74:60:00:aa:81:40:5f:a2:c6:44:47:e9:20:60:94:ca:
60:b7:67:33:66:3c:96:b8:73:02:db:ad:bf:a1:5c:f1:64:32:
a5:f5:59:e5:7b:0f:66:78:df:e5:c0:3f:08:cc:33:21:9e:9e:
77:31:14:44:3d:8d:82:4e:4c:1e:c2:58:62:b9:46:21:0f:15:
9d:36:4a:9f:65:fc:16:72:39:ab:e2:99:5a:b8:dc:99:1e:60:
45:de:e0:c1:ae:a4:de:5a:d8:9e:cd:45:d9:17:71:ea:94:6a:
a1:b9:40:8f:e7:bf:f7:68:b0:e0:59:9b:80:e4:e7:1b:fb:19:
4c:93:b3:76:52:61:b9:8e:83:06:e5:a3:48:e1:4e:59:38:c0:
74:4d:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:17 2024 by rpki-client on console-ams.rpki-client.org