Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/Rv2NVV-KL6-w_m4gEQOKDqauLpY.roa
File: Rv2NVV-KL6-w_m4gEQOKDqauLpY.roa (raw, json)
Hash identifier: KRAY87uB+e+GxYusierfYNnXMhs574AibRDAYjW8gCs=
Subject key identifier: 46:FD:8D:55:5F:8A:2F:AF:B0:FE:6E:20:11:03:8A:0E:A6:AE:2E:96
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 018F965EC653F70A28A383C520C9144CF9CB
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/Rv2NVV-KL6-w_m4gEQOKDqauLpY.roa
Signing time: Mon 20 May 2024 14:19:04 +0000
ROA not before: Mon 20 May 2024 14:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198317
IP address blocks: 91.200.104.0/22 maxlen: 22
91.200.104.0/23 maxlen: 23
91.200.104.0/24 maxlen: 24
91.200.105.0/24 maxlen: 24
91.200.106.0/23 maxlen: 23
91.200.106.0/24 maxlen: 24
91.200.107.0/24 maxlen: 24
91.239.196.0/22 maxlen: 22
91.239.196.0/23 maxlen: 23
91.239.196.0/24 maxlen: 24
91.239.197.0/24 maxlen: 24
91.239.198.0/23 maxlen: 23
91.239.198.0/24 maxlen: 24
91.239.199.0/24 maxlen: 24
155.133.56.0/22 maxlen: 22
155.133.56.0/23 maxlen: 23
155.133.56.0/24 maxlen: 24
155.133.57.0/24 maxlen: 24
155.133.58.0/23 maxlen: 23
155.133.58.0/24 maxlen: 24
155.133.59.0/24 maxlen: 24
185.96.120.0/22 maxlen: 22
185.96.120.0/23 maxlen: 23
185.96.120.0/24 maxlen: 24
185.96.121.0/24 maxlen: 24
185.96.122.0/23 maxlen: 23
185.96.122.0/24 maxlen: 24
185.96.123.0/24 maxlen: 24
185.235.124.0/22 maxlen: 22
185.235.124.0/23 maxlen: 23
185.235.124.0/24 maxlen: 24
185.235.125.0/24 maxlen: 24
185.235.126.0/23 maxlen: 23
185.235.126.0/24 maxlen: 24
185.235.127.0/24 maxlen: 24
193.106.216.0/22 maxlen: 22
193.106.216.0/23 maxlen: 23
193.106.216.0/24 maxlen: 24
193.106.217.0/24 maxlen: 24
193.106.218.0/23 maxlen: 23
193.106.218.0/24 maxlen: 24
193.106.219.0/24 maxlen: 24
195.88.144.0/23 maxlen: 23
195.88.144.0/24 maxlen: 24
195.88.145.0/24 maxlen: 24
2a05:ffc0::/32 maxlen: 32
2a05:ffc0::/33 maxlen: 33
2a05:ffc0::/34 maxlen: 34
2a05:ffc0:4000::/34 maxlen: 34
2a05:ffc0:8000::/33 maxlen: 33
2a05:ffc0:8000::/34 maxlen: 34
2a05:ffc0:c000::/34 maxlen: 34
2a05:ffc1::/32 maxlen: 32
2a05:ffc1::/33 maxlen: 33
2a05:ffc1::/34 maxlen: 34
2a05:ffc1:4000::/34 maxlen: 34
2a05:ffc1:8000::/33 maxlen: 33
2a05:ffc1:8000::/34 maxlen: 34
2a05:ffc1:c000::/34 maxlen: 34
2a05:ffc2::/32 maxlen: 32
2a05:ffc2::/33 maxlen: 33
2a05:ffc2::/34 maxlen: 34
2a05:ffc2::/48 maxlen: 48
2a05:ffc2:4000::/34 maxlen: 34
2a05:ffc2:8000::/33 maxlen: 33
2a05:ffc2:8000::/34 maxlen: 34
2a05:ffc2:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 31 May 2024 12:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:5e:c6:53:f7:0a:28:a3:83:c5:20:c9:14:4c:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: May 20 14:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46fd8d555f8a2fafb0fe6e2011038a0ea6ae2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:31:97:9e:02:3a:2b:a8:cf:ee:05:07:26:
12:b0:c2:7d:20:74:b3:b9:c9:bb:3c:59:8e:0c:41:
47:6f:e4:c4:a8:61:88:2d:a7:a8:e9:99:04:28:24:
e6:c8:9f:2c:97:a4:be:d9:fb:b3:3a:16:dd:f6:92:
41:3b:ac:00:8a:ca:09:e5:48:2f:cf:93:48:3e:b6:
3d:41:02:0d:16:b9:98:01:ea:c6:59:16:6b:7f:6a:
60:ed:b0:45:36:7a:17:87:5e:d8:cb:73:2f:64:7b:
e9:bd:ea:54:8c:18:e5:d7:27:30:0b:13:1b:05:a4:
24:77:9a:9b:98:f4:2d:83:17:73:f3:d8:56:5b:dd:
23:4e:76:14:06:e5:98:79:0f:f0:55:d4:47:e1:a2:
64:29:f8:a5:db:5f:66:03:f2:5f:59:1b:8d:56:ae:
33:49:6c:6e:b0:6f:61:7d:27:b6:88:c3:f1:8f:00:
9a:73:b6:29:f2:53:1b:65:93:34:26:c2:d3:c7:3a:
03:71:28:79:fe:a9:91:f1:bb:cf:3a:35:fb:ea:d3:
3e:7c:94:b3:30:a6:60:37:be:67:d5:98:8a:69:c7:
35:34:35:92:a6:55:83:9c:30:5c:ac:cb:37:86:0d:
4b:3c:eb:54:7d:7f:1b:9d:65:fa:88:c8:58:52:67:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:8D:55:5F:8A:2F:AF:B0:FE:6E:20:11:03:8A:0E:A6:AE:2E:96
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/Rv2NVV-KL6-w_m4gEQOKDqauLpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.104.0/22
91.239.196.0/22
155.133.56.0/22
185.96.120.0/22
185.235.124.0/22
193.106.216.0/22
195.88.144.0/23
IPv6:
2a05:ffc0::-2a05:ffc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:89:94:24:95:78:12:1b:44:85:22:5b:90:66:a2:22:ab:e8:
62:14:bf:23:90:66:d2:a5:fe:68:07:37:bc:b2:6f:91:a0:49:
0d:18:48:30:34:63:46:fe:08:a1:48:ba:1c:95:36:e9:50:20:
b7:2e:a6:dc:33:d4:1c:5f:4c:0a:7a:72:0f:6f:cf:8d:32:c2:
99:1d:a4:02:e3:2b:b6:53:01:7f:4f:24:4e:78:4e:12:c6:ed:
aa:d4:46:4f:99:2b:a6:de:fa:af:21:1b:08:3b:91:09:2b:fe:
51:d6:8c:2a:07:c0:0b:24:84:24:4e:ca:85:e0:47:69:bd:7c:
f7:a0:f3:09:b0:b4:8d:34:6b:73:3c:5d:4c:79:4f:70:79:0b:
0f:eb:21:4d:9b:d5:2b:eb:9a:d3:1b:d9:a6:90:9e:6a:f5:d7:
3c:2d:a6:fb:7c:91:26:34:4a:26:6c:ed:b0:83:2e:1c:fe:54:
c7:68:ce:06:fb:b4:9f:83:0f:6b:d9:98:b5:64:77:f2:39:52:
3c:e1:4b:74:00:c6:41:6c:c7:a8:96:e4:7c:f5:7b:ef:4a:2f:
78:20:cc:4f:f3:56:13:58:50:c5:eb:28:53:c9:9d:b9:e5:71:
8e:80:c4:51:fa:d7:1b:ac:d8:ba:7d:b1:c7:2e:bd:06:85:95:
3e:3c:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:31 2025 by rpki-client