Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/theen-sT5JPULqPmXAKK4bcCHyU.roa
File: theen-sT5JPULqPmXAKK4bcCHyU.roa (raw, json)
Hash identifier: jMna+l12l5Vk7I2KVqS1corgm0T+7A+6+i65K5obaC0=
Subject key identifier: B6:17:9E:9F:EB:13:E4:93:D4:2E:A3:E6:5C:02:8A:E1:B7:02:1F:25
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE830D0B7DB1DB8C8142D4E695E7A3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/theen-sT5JPULqPmXAKK4bcCHyU.roa
Signing time: Tue 02 Jan 2024 06:31:14 +0000
ROA not before: Tue 02 Jan 2024 06:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 95.214.248.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/23 maxlen: 24
45.86.64.0/21 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.74.0/23 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
45.92.160.0/21 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/23 maxlen: 24
45.92.194.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
92.118.232.0/23 maxlen: 24
92.118.230.0/23 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
92.118.234.0/24 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
2.56.117.0/24 maxlen: 24
2.56.118.0/23 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.140.0/23 maxlen: 24
45.15.144.0/22 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/23 maxlen: 24
45.89.108.0/22 maxlen: 24
171.22.138.0/24 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
171.22.136.0/23 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.245.0/24 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.246.0/23 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
171.22.110.0/23 maxlen: 24
45.15.176.0/24 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
171.22.116.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.181.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
185.203.4.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.56.0/23 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 11:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:83:0d:0b:7d:b1:db:8c:81:42:d4:e6:95:e7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6179e9feb13e493d42ea3e65c028ae1b7021f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:ea:b4:31:78:f9:c7:b6:e9:7b:f9:47:be:
e2:81:c6:d0:b5:69:15:0d:64:1b:b0:c9:0a:e4:bf:
c1:c5:35:72:fd:1c:ed:da:65:d8:df:e5:92:02:20:
39:4d:9a:64:b5:2d:3b:fd:de:e3:d0:7c:1d:2b:b6:
c6:27:5e:e2:19:a8:59:5d:06:30:91:84:d4:52:9e:
5d:92:e1:66:d5:67:7b:de:ab:84:ee:77:24:90:7e:
25:f1:2b:e9:a7:7c:5f:46:46:ec:de:df:b7:6c:6f:
4b:29:6a:ce:73:f6:27:aa:8a:56:b5:89:19:50:ff:
b1:91:be:19:dc:2c:30:d1:bb:f7:17:8f:b6:47:9d:
82:d9:7c:f4:27:53:fe:d6:9c:90:e5:15:cc:65:5f:
85:29:d8:88:3c:21:71:bc:a2:92:f3:1b:24:33:ea:
a8:a9:13:18:65:73:97:e7:7d:5b:50:60:45:72:1d:
c8:8b:78:4e:b3:1c:43:64:8b:82:bc:87:78:71:6c:
58:aa:90:45:7a:72:55:7a:1b:a9:56:4d:d2:f0:f1:
c8:64:0d:df:da:be:5b:ec:8a:84:f1:be:9b:a8:7f:
f0:f2:70:96:7b:1d:d7:62:46:9f:bc:d8:e2:e6:0d:
93:8f:d7:f0:d9:c8:51:9c:e1:f9:18:0e:b9:7e:3a:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:9E:9F:EB:13:E4:93:D4:2E:A3:E6:5C:02:8A:E1:B7:02:1F:25
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/theen-sT5JPULqPmXAKK4bcCHyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.179.255
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.125.0-45.15.131.255
45.15.140.0-45.15.142.255
45.15.144.0/22
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.72.255
45.86.74.0-45.86.79.255
45.88.160.0/22
45.88.168.0/22
45.88.176.0/22
45.88.181.0-45.88.183.255
45.89.96.0/24
45.89.98.0/24
45.89.105.0-45.89.111.255
45.89.196.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.58.255
45.128.72.0/22
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.235.255
141.98.160.0/21
171.22.109.0-171.22.138.255
185.106.97.0-185.106.99.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:f5:90:4a:bb:e9:67:22:de:9c:82:68:96:d2:05:f7:c5:93:
79:6f:ed:26:ca:2f:94:ba:b8:c7:75:65:ba:98:ee:84:04:2e:
4d:2a:34:56:d6:43:76:aa:c4:ea:84:19:4f:89:7f:17:5f:dc:
02:13:52:4d:66:4a:11:43:9d:a2:f9:0b:09:cc:d8:bd:7f:78:
f1:c3:86:e8:4c:4a:4b:bc:00:b7:44:ae:f2:c4:8e:a8:27:26:
ef:29:59:d5:26:1a:4e:65:46:93:13:5e:5a:70:45:a5:de:f1:
c8:02:79:1e:c7:ee:ec:87:ea:20:f0:76:e5:05:66:52:3d:0a:
fa:8d:2d:d5:d4:57:ea:1d:95:66:5c:6c:3d:cb:29:ed:41:5f:
1e:32:cd:19:6a:ab:4a:a2:a8:97:ca:47:b3:f1:6e:fb:c3:68:
85:5c:71:44:4d:bc:ef:41:3b:03:e2:91:20:a8:1e:17:3a:aa:
f9:19:c5:34:ca:b7:8e:e0:52:2a:d9:5b:75:6a:90:dc:ca:a4:
ef:ea:ad:2c:71:ef:05:10:6b:bc:eb:a8:21:d1:a8:2e:ec:d6:
46:03:18:6b:76:25:33:01:76:26:6c:9e:1f:93:b3:7e:ac:f2:
6c:77:5a:ed:a5:6f:b2:57:cb:2b:78:95:be:bf:d8:fb:62:de:
55:ca:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:21 2024 by rpki-client on console-fra.rpki-client.org