Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3GRCtsXMeDR2BKa0-7BoHKYs1x4.roa
File: 3GRCtsXMeDR2BKa0-7BoHKYs1x4.roa (raw, json)
Hash identifier: CP1F5y4tShbX6kaBTmnhKGVq9B+z3LeCI2E8I7961AY=
Subject key identifier: DC:64:42:B6:C5:CC:78:34:76:04:A6:B4:FB:B0:68:1C:A6:2C:D7:1E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019123364613F02DA79CA7BCE41DFE5C4CF2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3GRCtsXMeDR2BKa0-7BoHKYs1x4.roa
Signing time: Mon 05 Aug 2024 15:44:04 +0000
ROA not before: Mon 05 Aug 2024 15:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:36:46:13:f0:2d:a7:9c:a7:bc:e4:1d:fe:5c:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 5 15:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc6442b6c5cc78347604a6b4fbb0681ca62cd71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:2b:f6:8f:f5:17:5c:4e:d3:91:71:aa:11:
d7:fb:c5:7e:ca:5a:60:6d:c0:57:f7:54:fc:b9:6a:
0e:53:76:b0:19:d2:f9:b2:85:52:b4:3f:da:43:b9:
d4:5a:40:3a:00:30:38:97:08:6c:d7:ba:46:ab:0f:
db:41:0a:a9:d0:a1:56:4d:46:f7:5c:ec:9e:5d:8f:
58:10:15:03:e1:15:67:1d:0a:56:67:ed:f9:97:e4:
67:6b:7f:5d:ec:ad:3c:db:7b:cc:4e:d8:da:b6:3b:
4e:92:9c:bc:89:94:c9:28:0f:fe:78:69:06:8b:2d:
51:c8:ce:16:06:ff:9d:f8:40:67:85:d4:50:8c:f5:
18:91:4f:35:c4:dd:2b:83:d3:e6:07:0e:cb:09:ea:
f6:d5:ee:b5:15:d7:e0:c2:b8:57:16:ef:4b:e2:97:
e9:44:f9:bb:e7:96:e4:7f:c3:0e:ae:0e:0c:44:9f:
52:e2:8a:79:d5:7b:0f:b0:b5:a1:fa:6f:44:77:02:
27:43:92:c1:12:39:28:2c:46:7a:6f:eb:07:7b:95:
91:fc:95:2d:cc:ba:cf:f0:0f:58:d4:93:52:68:e9:
aa:1b:3d:71:c0:87:5b:e1:ce:18:ed:38:50:2d:80:
20:99:a4:86:8a:05:60:8c:45:76:5b:6c:0a:a8:c8:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:42:B6:C5:CC:78:34:76:04:A6:B4:FB:B0:68:1C:A6:2C:D7:1E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3GRCtsXMeDR2BKa0-7BoHKYs1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
78:f3:89:e7:f1:c4:9f:c0:19:61:97:f1:28:fc:92:07:9c:22:
56:9c:4a:42:05:c0:ae:d0:74:2c:5f:5c:ce:4d:e6:b7:3e:07:
d8:71:bf:9f:d2:6b:e5:f7:7d:fc:47:af:e4:84:f2:f2:05:6a:
e7:10:5e:66:91:61:87:45:86:4a:bc:06:5e:55:ee:8c:d6:59:
a7:77:da:90:4a:d0:b0:c4:d2:a6:13:90:2d:f5:68:c7:14:75:
8b:1b:4a:80:40:d4:d6:35:73:87:e7:40:7f:07:1a:52:10:a6:
0a:61:90:c7:01:ff:e8:31:70:9d:b4:b9:7d:e6:5e:11:62:bb:
55:42:84:47:70:7d:fc:97:9e:bd:76:51:33:b7:41:62:a3:8b:
0c:85:3b:f2:3e:3d:e2:15:03:f7:c3:89:cd:b6:9c:a7:cd:c2:
b0:d8:53:cc:30:9a:43:dd:a7:86:67:ff:92:de:bd:ba:8b:62:
5e:e7:f4:1f:d6:d3:85:a6:ff:14:7c:b5:23:37:da:bb:53:13:
33:c0:7a:8f:38:d4:af:d3:d8:c4:57:57:c0:65:23:b4:f5:3f:
0b:d1:e6:73:d9:9a:05:94:55:c6:72:de:5e:67:c9:7f:16:78:
3f:5a:16:5a:e6:08:d5:61:6a:03:e1:32:b2:59:ed:b4:34:f9:
74:dd:c0:18
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAZEjNkYT8C2nnKe85B3+XEzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwODA1MTU0NDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzY0NDJiNmM1Y2M3ODM0NzYwNGE2YjRmYmIwNjgxY2E2MmNkNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPwr9o/1F1xO05FxqhHX+8V+ylpg
bcBX91T8uWoOU3awGdL5soVStD/aQ7nUWkA6ADA4lwhs17pGqw/bQQqp0KFWTUb3
XOyeXY9YEBUD4RVnHQpWZ+35l+Rna39d7K0823vMTtjatjtOkpy8iZTJKA/+eGkG
iy1RyM4WBv+d+EBnhdRQjPUYkU81xN0rg9PmBw7LCer21e61FdfgwrhXFu9L4pfp
RPm755bkf8MOrg4MRJ9S4op51XsPsLWh+m9EdwInQ5LBEjkoLEZ6b+sHe5WR/JUt
zLrP8A9Y1JNSaOmqGz1xwIdb4c4Y7ThQLYAgmaSGigVgjEV2W2wKqMjhywIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFNxkQrbFzHg0dgSmtPuwaBymLNceMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvM0dSQ3RzWE1lRFIyQkthMC03Qm9IS1lzMXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DByBAIAATBsAwQBLVlC
AwQCLYCwAwQALYT8AwQAW9lQAwQDXo6IAwQAZ1JnAwQCuQX4AwQCuTrMAwQCuVcw
AwQBuWl0AwQCuXWYAwQCuX3YAwQCuX3kAwQAuci8AwQEwXywAwQAwajgAwQFwkPA
AwQAwy/6MFoEAgACMFQDBwAqCpMAAAADBwAqCpMAAAIwEgMHBCoKkwAA0AMHACoK
kwAA0jAQAwUAKgqTAQMHACoKkwEAAgMFACoKkwIDBQMqC3eAAwUAKgx3wAMFAyoN
OIAwDQYJKoZIhvcNAQELBQADggEBAHjziefxxJ/AGWGX8Sj8kgecIlacSkIFwK7Q
dCxfXM5N5rc+B9hxv5/Sa+X3ffxHr+SE8vIFaucQXmaRYYdFhkq8Bl5V7ozWWad3
2pBK0LDE0qYTkC31aMcUdYsbSoBA1NY1c4fnQH8HGlIQpgphkMcB/+gxcJ20uX3m
XhFiu1VChEdwffyXnr12UTO3QWKjiwyFO/I+PeIVA/fDic22nKfNwrDYU8wwmkPd
p4Zn/5LevbqLYl7n9B/W04Wm/xR8tSM32rtTEzPAeo841K/T2MRXV8BlI7T1PwvR
5nPZmgWUVcZy3l5nyX8WeD9aFlrmCNVhagPhMrJZ7bQ0+XTdwBg=
-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org