Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/fn_6lxAqlisxA9ByS4g7mOMYqyY.roa
File: fn_6lxAqlisxA9ByS4g7mOMYqyY.roa (raw, json)
Hash identifier: 7TTuFWDsIY085X/dyQGJMN6YckhzuGlHhQZRxzMPF1Q=
Subject key identifier: 7E:7F:FA:97:10:2A:96:2B:31:03:D0:72:4B:88:3B:98:E3:18:AB:26
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018CC94BE3DB4BD212198AF08466CFDF6A01
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/fn_6lxAqlisxA9ByS4g7mOMYqyY.roa
Signing time: Tue 02 Jan 2024 08:30:43 +0000
ROA not before: Tue 02 Jan 2024 08:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56630
IP address blocks: 45.141.8.0/22 maxlen: 24
185.224.250.0/24 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
45.150.232.0/22 maxlen: 24
195.238.124.0/22 maxlen: 24
185.140.209.0/24 maxlen: 24
185.140.208.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
89.36.161.0/24 maxlen: 24
89.36.160.0/24 maxlen: 24
103.97.88.0/24 maxlen: 24
217.30.8.0/22 maxlen: 24
194.59.46.0/24 maxlen: 24
185.140.12.0/22 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
194.59.142.0/24 maxlen: 24
89.34.238.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.32.0/24 maxlen: 24
5.182.228.0/22 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
88.210.38.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
77.72.16.0/23 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
213.183.63.0/24 maxlen: 24
92.119.88.0/22 maxlen: 24
212.23.200.0/24 maxlen: 24
91.192.83.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
45.135.120.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
213.226.68.0/22 maxlen: 24
93.189.58.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
93.189.57.0/24 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
2a06:f906::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f900::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jan 2024 21:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e3:db:4b:d2:12:19:8a:f0:84:66:cf:df:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 2 08:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7ffa97102a962b3103d0724b883b98e318ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:5c:5c:08:26:f4:e0:25:03:42:03:ac:a4:
b1:c9:09:5b:65:ee:c1:d6:ad:e5:d2:f4:6e:f0:99:
9f:c0:78:24:40:53:83:2c:78:89:04:da:b7:d8:ff:
9e:96:ea:e2:1c:c3:61:38:75:d7:da:41:7a:92:ac:
b2:ac:81:e1:24:67:5a:7c:a2:72:48:6a:fe:24:0b:
9c:f0:04:c1:1b:5d:4c:1b:8f:da:aa:9b:43:b0:37:
37:c6:29:1a:10:3d:d1:0c:f9:6f:f1:58:bc:85:97:
ec:ed:7f:3d:37:66:5e:89:4e:86:6e:03:b7:6e:4b:
c8:84:0d:74:93:d6:2a:16:c2:ad:91:36:b8:33:ff:
ca:02:b0:fa:33:32:c3:91:6d:b1:e6:b1:c8:68:e5:
21:ce:a3:cd:4d:88:6e:38:b8:ad:70:ec:dd:af:62:
02:95:df:7a:f9:a7:a8:03:6e:07:30:f3:9a:4b:76:
a0:2a:ba:ab:f9:41:9a:ad:ed:8d:a3:11:25:ec:f3:
64:9c:0d:ad:5a:6b:2f:15:a1:bf:36:b2:8a:40:c4:
9c:4a:f9:db:cd:08:ad:b7:9c:72:5f:59:92:70:55:
ef:03:13:82:b3:a2:fe:fd:49:90:a0:e9:36:21:bc:
12:2b:f1:c5:0a:bd:ef:c4:74:ba:3f:97:6c:2d:04:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:FA:97:10:2A:96:2B:31:03:D0:72:4B:88:3B:98:E3:18:AB:26
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/fn_6lxAqlisxA9ByS4g7mOMYqyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
89.34.238.0/24
89.36.160.0/23
91.192.80.0/24
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
103.97.88.0/24
185.6.12.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.250.0/24
185.246.152.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
212.23.200.0/24
213.183.32.0/23
213.183.36.0-213.183.53.255
213.183.58.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f903::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
52:48:69:33:5e:a0:9e:8b:fb:0e:60:9c:43:69:94:d3:af:12:
29:18:13:a8:3a:0d:b9:ee:0c:dc:7e:ac:ff:b8:50:3e:f0:c6:
b1:db:a5:57:cc:00:1d:f2:72:76:c9:cc:f5:d7:84:ad:9c:ec:
93:5c:d0:d7:ec:2c:37:d3:ce:ba:86:03:37:19:1a:e3:2a:7b:
97:2e:f5:c4:6c:f9:4f:af:03:49:8b:9f:ee:6a:4f:b4:70:5e:
64:5e:78:69:03:bc:e0:20:28:7a:f5:0d:fd:28:a8:8c:c9:b8:
28:4f:f6:08:7b:02:cf:c0:b1:c2:6c:ef:16:91:31:3e:f6:ba:
3a:87:da:ea:d1:72:9b:42:04:d4:ac:fb:1a:61:e6:44:93:35:
66:12:1e:93:57:17:77:ee:b6:95:1e:7c:b8:7a:d9:b5:4d:17:
f1:c7:b4:69:63:90:ae:25:83:fd:2c:1c:ee:49:09:8d:ba:5c:
38:e3:ea:39:8c:cd:17:0e:3c:01:18:51:35:42:a7:98:95:29:
68:23:f0:db:ac:fe:21:78:ba:82:a4:97:2d:2e:14:4b:d3:c2:
c5:67:61:82:01:75:7c:2c:bc:6d:48:e0:98:e0:34:a9:95:62:
7d:43:96:b8:f7:15:49:52:20:55:47:e7:4a:ca:3a:fe:0a:1f:
29:f8:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 01:10:47 2024 by rpki-client on console-fra.rpki-client.org