Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Ob5ajarqLCsufRwlowSsQE1HaGw.roa
File: Ob5ajarqLCsufRwlowSsQE1HaGw.roa (raw, json)
Hash identifier: oCJw9gGzW22Y9KNQWraWmx7F4qQbB3eDU0C8hBWows0=
Subject key identifier: 39:BE:5A:8D:AA:EA:2C:2B:2E:7D:1C:25:A3:04:AC:40:4D:47:68:6C
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0190B6FD0885F04F6AD40A8CA2073CB71837
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Ob5ajarqLCsufRwlowSsQE1HaGw.roa
Signing time: Mon 15 Jul 2024 15:22:34 +0000
ROA not before: Mon 15 Jul 2024 15:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 03 Nov 2024 14:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:fd:08:85:f0:4f:6a:d4:0a:8c:a2:07:3c:b7:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jul 15 15:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39be5a8daaea2c2b2e7d1c25a304ac404d47686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7b:27:50:4c:40:cb:39:27:e4:38:fa:17:b4:
bb:60:e2:48:77:08:73:63:19:4d:1c:af:f0:f2:63:
f3:eb:d4:96:af:6f:1a:9e:6d:84:ad:c3:d0:4f:2a:
bf:25:7f:25:cf:6c:87:0f:bb:fd:13:be:d2:82:eb:
27:6c:87:3b:42:47:92:ed:09:1a:f9:0d:e0:2e:9b:
96:a0:d8:93:7a:dd:61:e8:5e:c4:a7:eb:3a:17:fd:
ec:7b:78:cc:22:e2:77:95:51:5a:e8:d1:31:5a:05:
3c:d4:81:7a:c2:c8:fc:a2:5f:24:bc:31:07:55:cf:
b6:6e:80:4f:bb:1c:e6:f0:2a:be:84:06:96:8c:17:
f7:66:01:33:ba:e1:b3:19:f8:4d:29:a3:1f:02:24:
87:2a:87:0a:60:fc:36:f5:34:57:f6:7f:f9:54:e1:
74:c7:76:67:24:11:60:31:25:fa:3a:bb:19:ce:9e:
59:ca:17:da:a6:49:c0:02:9c:c9:ef:ec:37:ac:b0:
96:7b:da:9b:cd:a3:ab:bf:a5:68:43:2a:cd:2e:2f:
ca:51:ac:88:39:b1:95:e7:03:95:93:f7:03:5b:af:
0a:32:86:66:d9:b6:24:ce:70:5b:1a:2e:e3:f0:b0:
e8:46:41:6f:a0:2d:57:ee:53:7c:fe:24:b3:bd:64:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:5A:8D:AA:EA:2C:2B:2E:7D:1C:25:A3:04:AC:40:4D:47:68:6C
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Ob5ajarqLCsufRwlowSsQE1HaGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
07:b1:f6:c9:ac:67:f2:9d:bd:06:7f:09:92:92:3c:18:c9:ae:
64:96:05:7b:ef:1b:10:03:05:0f:c0:9d:a9:f6:58:3b:77:7c:
85:7c:0a:11:9d:1e:b8:f8:f7:54:0c:d2:d7:04:c2:88:50:94:
3d:3f:0a:1e:69:a5:6f:61:fc:11:c6:8e:11:fc:23:c3:57:7e:
48:79:e3:a8:01:1c:a9:0d:77:b1:c4:63:eb:43:25:e5:2a:5c:
82:23:34:88:7f:41:74:04:dc:7b:a1:8d:0f:e1:85:4c:8a:e6:
dd:6a:0e:72:ec:e3:2d:89:f6:98:8a:b0:ab:8f:ac:e3:94:29:
cd:f0:f8:40:27:4a:16:b8:03:ea:e5:19:77:4b:a1:72:47:10:
40:3d:b2:f5:39:95:3b:60:3e:e5:3e:ee:03:37:64:4c:5f:15:
51:50:27:25:e5:57:71:41:5e:b9:73:0d:88:e1:75:45:91:51:
bb:71:8f:f8:f5:1d:80:c1:0d:62:30:58:e2:df:65:6d:ac:23:
fe:54:e7:2a:3d:ea:ad:21:e0:79:da:1c:42:29:e7:c4:44:99:
f2:1a:93:0e:ec:69:d6:a8:37:7e:3b:cf:1b:55:09:14:6b:d9:
77:48:82:a1:e0:3b:9c:2a:a5:cf:2a:ea:ba:90:73:fd:06:af:
fe:81:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org