Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/787F1FaprU2Ja5ZykNgUK646Ajo.roa
File: 787F1FaprU2Ja5ZykNgUK646Ajo.roa (raw, json)
Hash identifier: xEOm0e6AKhqif/zLJQS97oJBZMwmEEP2EPE8JmVBzVo=
Subject key identifier: EF:CE:C5:D4:56:A9:AD:4D:89:6B:96:72:90:D8:14:2B:AE:3A:02:3A
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0192F282F53264A87A8A7C00AB4B230A214E
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/787F1FaprU2Ja5ZykNgUK646Ajo.roa
Signing time: Sun 03 Nov 2024 14:52:01 +0000
ROA not before: Sun 03 Nov 2024 14:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Nov 2024 10:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f2:82:f5:32:64:a8:7a:8a:7c:00:ab:4b:23:0a:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Nov 3 14:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcec5d456a9ad4d896b967290d8142bae3a023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:d1:ed:1b:1e:ab:27:2f:63:09:54:71:66:
2c:2c:44:51:c0:3e:25:34:23:e4:f7:2d:a0:ba:e7:
09:50:23:4d:0e:a0:eb:08:49:74:49:eb:1e:b5:4a:
b5:f6:87:21:e3:cd:7b:03:e1:c4:62:d2:8f:e6:c3:
b3:17:04:8c:7b:25:1a:47:1a:ce:b3:33:bc:2a:ef:
1e:fd:84:56:bb:3a:03:85:ad:1a:37:e8:a0:bd:d2:
05:b8:7d:99:62:4d:70:d1:f2:32:40:6c:f2:99:51:
9a:50:04:44:a4:18:8f:fc:8d:b2:17:5e:29:d6:42:
e6:34:e1:73:69:bd:83:d2:65:8f:41:7b:1f:65:67:
35:ef:71:a2:12:6c:f3:af:3d:d0:47:e5:c4:87:e1:
5b:6a:ee:7d:a2:49:21:2b:4b:53:27:40:78:d4:ea:
99:0c:c1:f7:bc:3f:32:a4:16:c6:be:da:e3:c0:8b:
5f:b3:ff:f7:50:90:ae:34:90:4e:14:74:5f:83:47:
07:1f:85:91:53:2f:a6:d5:3b:aa:ab:ac:a8:d4:b9:
2d:59:78:ed:54:78:c5:4c:6e:85:f5:44:0b:e5:03:
ee:43:cc:3f:ec:b1:f5:9a:d1:06:c3:69:81:a3:23:
88:c1:6a:86:38:4e:db:0d:25:bc:f2:55:eb:e5:51:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:C5:D4:56:A9:AD:4D:89:6B:96:72:90:D8:14:2B:AE:3A:02:3A
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/787F1FaprU2Ja5ZykNgUK646Ajo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
ad:44:0e:7e:8c:0b:1c:36:41:60:82:ff:c6:ec:72:ea:0a:02:
35:02:15:de:f5:2b:b1:c4:ed:b2:57:f0:95:9f:f2:3c:df:96:
c5:8a:3e:b6:27:b4:c1:08:16:59:07:2d:c5:41:f9:31:98:68:
05:a5:35:d3:7d:77:72:c4:71:97:68:e3:f3:f6:a9:2c:06:4c:
99:a5:e4:fa:a5:0a:17:75:71:bd:15:0c:ff:ff:46:b6:c8:a0:
72:fa:52:20:9c:62:31:96:ff:5e:3c:a3:66:39:af:af:ef:6a:
7a:dd:c9:83:a1:14:5a:c6:d5:11:7b:72:db:5e:8a:a5:2d:26:
40:a9:e5:fe:f1:d9:dd:39:27:64:e7:58:f9:e9:89:1f:6d:d0:
1f:7e:ed:05:d8:78:a8:3c:31:ad:03:44:5f:43:ae:bb:b8:58:
be:2c:f3:72:fc:4b:33:59:7a:53:fa:c4:6a:5c:bd:16:3e:c8:
31:9d:2d:38:83:95:f0:5c:34:9a:35:b6:47:ab:b6:6b:08:1b:
d7:28:80:f6:09:ba:b3:df:9e:8a:28:0f:cf:33:64:d0:9b:62:
38:04:c2:fd:20:5b:71:07:88:c5:28:52:34:d7:9c:89:6c:92:
da:64:de:b1:14:2b:35:9d:bc:75:f0:75:9a:e9:6d:1b:58:06:
a7:52:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:07:44 2024 by rpki-client on console-ams.rpki-client.org