Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/CEZahpVyVOvgB1tN-ko-mLYap1Q.roa
File: CEZahpVyVOvgB1tN-ko-mLYap1Q.roa (raw, json)
Hash identifier: YYr/G20bgZF8cmj/y0ierMWaoMXCsT9v4Vk7qei1BoA=
Subject key identifier: 08:46:5A:86:95:72:54:EB:E0:07:5B:4D:FA:4A:3E:98:B6:1A:A7:54
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018CCA2B4F1200FF8FC1C2FE38B140B6FB7E
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/CEZahpVyVOvgB1tN-ko-mLYap1Q.roa
Signing time: Tue 02 Jan 2024 12:34:44 +0000
ROA not before: Tue 02 Jan 2024 12:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 46.245.64.0/18 maxlen: 32
46.245.68.0/22 maxlen: 32
85.198.28.0/22 maxlen: 32
85.198.28.0/23 maxlen: 32
85.198.30.0/23 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.84.0/22 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
78.110.124.0/23 maxlen: 32
78.110.124.0/22 maxlen: 32
46.245.64.0/22 maxlen: 32
78.110.126.0/23 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
31.25.128.0/21 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
128.65.176.0/20 maxlen: 32
79.127.0.0/17 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.49.84.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
178.22.120.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.15.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.12.0/24 maxlen: 24
188.0.240.0/23 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
46.143.0.0/17 maxlen: 32
109.122.224.0/20 maxlen: 32
37.156.144.0/22 maxlen: 32
178.216.251.0/24 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
5.134.192.0/21 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.98.112.0/22 maxlen: 32
89.41.40.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
93.118.180.0/22 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.72.0/21 maxlen: 32
2a06:5484::/30 maxlen: 128
2a05:1a00::/26 maxlen: 128
2a05:1a10::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 25 May 2024 13:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:4f:12:00:ff:8f:c1:c2:fe:38:b1:40:b6:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 2 12:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08465a86957254ebe0075b4dfa4a3e98b61aa754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:96:d8:df:e3:47:3d:5a:5b:d8:9e:b4:d7:
a4:c0:3e:90:9d:4f:c9:b5:48:85:7f:8a:56:4f:f2:
00:b4:4e:ea:e7:16:d8:a8:29:4d:3a:63:1f:43:a1:
dc:26:fe:da:49:46:49:96:f4:92:b7:ea:6f:0d:0c:
e7:87:5c:83:47:eb:72:eb:d6:9e:96:a3:38:73:09:
5d:dd:c0:9b:99:52:fe:cf:b1:39:6c:52:57:ad:08:
7c:cb:ea:a7:c9:18:e5:80:ea:e8:d3:1f:f6:da:85:
a4:06:65:6d:9b:7b:43:ee:6c:af:70:a0:f4:c7:f8:
65:4e:55:09:2f:28:1c:b0:c6:dd:66:12:6a:74:2a:
d5:46:be:b8:7f:d9:55:8e:a9:bc:e6:98:4d:14:e6:
21:91:df:08:dd:2f:49:0a:c2:cd:11:b3:9b:69:40:
20:1d:af:ea:01:81:83:d4:ec:a4:3f:4d:c4:78:57:
0f:f9:1e:ec:90:37:7b:42:f5:b0:95:80:1d:d9:15:
ab:a2:f5:77:4b:56:93:7e:ff:12:ec:b9:c7:69:bc:
66:63:3d:5e:d4:e6:a6:80:a0:ca:b9:7d:3e:82:45:
b0:01:36:30:7c:44:fd:76:cf:e6:d5:eb:91:08:48:
70:1d:89:a6:01:45:63:26:21:54:d0:aa:74:aa:33:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:5A:86:95:72:54:EB:E0:07:5B:4D:FA:4A:3E:98:B6:1A:A7:54
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/CEZahpVyVOvgB1tN-ko-mLYap1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
78.110.124.0/22
79.127.0.0/17
85.198.28.0/22
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
82:4b:f4:e5:02:c9:ec:4a:78:15:01:90:53:1e:85:10:45:2e:
8d:0e:bf:ec:fa:4e:c2:d3:dc:7e:6a:4b:1e:eb:1c:16:09:c6:
7e:90:49:66:bd:e4:e8:31:41:3e:64:0d:85:6e:55:ed:33:86:
12:df:25:a3:e0:ff:fc:a4:dc:03:cd:2a:eb:09:97:7d:01:37:
5f:58:9a:bd:af:00:fc:94:a3:d7:30:ce:e1:6c:a3:a8:be:e1:
8f:91:bd:e2:be:7c:f4:0b:d6:60:ce:57:24:e2:cb:a9:ab:74:
61:ad:9b:e8:0b:29:a9:0f:3c:41:98:55:79:e1:40:0b:c0:1d:
32:fd:0f:1e:5f:92:0e:44:68:f4:a9:63:1d:29:4f:1e:02:ab:
f1:41:88:35:69:94:f2:96:53:f1:44:42:ab:93:65:d3:10:50:
90:9f:7e:62:9d:46:4a:8b:8f:99:56:d4:09:f4:36:44:b7:e2:
16:8e:55:30:8f:a0:bb:ea:76:f7:5b:d4:30:fe:9f:ff:6e:d6:
7b:6d:b7:87:bd:86:f8:76:f6:60:35:60:da:76:b0:ab:59:7b:
41:bd:5c:6f:41:5b:ba:1a:3f:3d:dc:8f:6e:7b:c8:e3:05:fc:
e1:0c:45:cc:cd:7d:06:58:b2:69:6b:75:1a:8a:07:5c:c3:ec:
26:3d:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:08:38 2025 by rpki-client