Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4cdVn5pihrsrIpiPuHGfhZZdXUo.roa
File: 4cdVn5pihrsrIpiPuHGfhZZdXUo.roa (raw, json)
Hash identifier: op6W2CJAYfrJ4zYjPGkVDmSf3wCa4He9NQ4l957Ds8c=
Subject key identifier: E1:C7:55:9F:9A:62:86:BB:2B:22:98:8F:B8:71:9F:85:96:5D:5D:4A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019127A3B1A8CFFD3E2CB16FC6D5BABFB9E4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4cdVn5pihrsrIpiPuHGfhZZdXUo.roa
Signing time: Tue 06 Aug 2024 12:22:04 +0000
ROA not before: Tue 06 Aug 2024 12:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Aug 2024 20:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:a3:b1:a8:cf:fd:3e:2c:b1:6f:c6:d5:ba:bf:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 6 12:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c7559f9a6286bb2b22988fb8719f85965d5d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:1e:a5:59:fe:7d:b9:00:8d:36:77:44:96:
49:03:cc:3f:79:b2:df:e1:00:1c:1f:c0:30:8c:54:
d1:0d:ab:e3:c6:d7:4f:57:eb:af:2a:be:36:38:b3:
3d:d5:0d:63:1c:d5:c5:40:72:54:3e:90:0c:4c:fd:
1d:53:7e:18:53:6c:db:5e:a0:91:b9:fd:b6:22:6d:
b8:cd:4f:91:7c:ea:bd:e6:e7:f2:de:4e:08:eb:75:
cd:ee:b0:e2:81:1e:ec:f9:e6:9c:a7:fa:08:30:13:
33:e0:0d:f7:74:5f:8d:c0:12:d9:07:dc:2b:5d:f1:
bf:b8:9f:96:a5:00:80:95:e5:ad:4d:1d:77:b2:e4:
b0:49:a2:e5:53:e7:b3:5f:e7:cb:e5:f8:4b:ce:1d:
6e:ca:03:30:85:19:40:0b:ff:3b:cf:33:6b:05:1f:
17:de:45:e3:df:96:fa:ea:4b:58:7c:e0:03:14:6c:
05:6c:96:ee:a7:1f:17:3c:0f:42:d2:c6:1b:bc:28:
40:19:6a:60:97:72:e6:2a:22:1d:46:11:39:19:5e:
f5:b0:f4:b0:19:18:57:61:57:05:fc:ed:fb:d7:8a:
92:e1:69:65:f3:3a:85:84:e1:9c:35:33:96:1f:f1:
1b:7c:25:00:97:5e:d1:4e:c0:40:d5:eb:a1:93:fe:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:55:9F:9A:62:86:BB:2B:22:98:8F:B8:71:9F:85:96:5D:5D:4A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4cdVn5pihrsrIpiPuHGfhZZdXUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
54:33:f0:a9:d1:bb:f0:db:54:17:a5:d1:13:55:03:86:4f:82:
b5:e1:86:37:df:53:b9:1c:9f:5b:76:75:5f:5b:93:e7:1e:55:
1c:17:60:84:8e:06:cc:0d:82:4e:66:9e:86:6f:7d:9f:a7:9a:
fb:5d:56:84:2b:95:10:ab:8c:de:35:7f:60:d0:7f:63:5c:b7:
a7:b4:4d:5a:ab:78:33:f4:cf:38:f1:fb:6b:42:17:a9:72:b8:
87:04:d9:5d:51:ee:64:08:1d:4a:dd:e0:06:54:3b:d3:9d:44:
a2:b8:41:a8:fb:41:ca:d1:a3:4e:97:a7:19:e1:32:c1:f0:91:
76:c7:b1:b4:ec:15:28:50:28:4f:c3:5e:2e:22:7b:f9:12:eb:
57:17:3f:a6:5d:a3:e7:5d:aa:d0:c6:a7:13:85:1e:9c:df:09:
13:cd:4f:36:fb:20:a4:99:a2:4c:3b:1c:fd:8d:89:78:c0:e2:
88:43:bc:fa:23:d6:1f:9f:94:e0:58:60:b1:f9:a5:a1:8c:35:
0f:81:6e:b6:d0:24:ce:31:05:0e:08:72:fb:2d:1e:41:c2:30:
87:ac:01:c4:63:18:9e:76:ae:01:e3:80:0e:0d:2f:49:42:64:
f1:96:d9:f6:36:c3:79:9f:ee:f9:d9:a6:fe:d9:ad:b8:30:f2:
e2:98:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 23:21:00 2024 by rpki-client on console-ams.rpki-client.org