Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9qRllLE1KkZmiWKJfR13s8ojDUM.roa
File: 9qRllLE1KkZmiWKJfR13s8ojDUM.roa (raw, json)
Hash identifier: vlAOyB2RJnL28dMTsw1qe8dK1/nOIg/B/kwZtFDzeNs=
Subject key identifier: F6:A4:65:94:B1:35:2A:46:66:89:62:89:7D:1D:77:B3:CA:23:0D:43
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190FD6EA4D0ABA787F0CCCDEFA07A209579
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9qRllLE1KkZmiWKJfR13s8ojDUM.roa
Signing time: Mon 29 Jul 2024 07:40:05 +0000
ROA not before: Mon 29 Jul 2024 07:40:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jul 2024 08:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:6e:a4:d0:ab:a7:87:f0:cc:cd:ef:a0:7a:20:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 29 07:40:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6a46594b1352a46668962897d1d77b3ca230d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:3b:97:11:25:30:01:0f:d5:a8:3a:34:c3:
05:eb:0e:c7:34:4e:63:93:2f:2b:8f:d3:81:e7:5c:
f3:95:cf:78:81:55:39:67:b1:28:f2:cf:8e:74:fa:
ed:bf:be:66:c5:96:b9:5f:7a:55:ac:e5:01:d4:00:
12:3d:3f:58:99:30:12:5e:b5:65:0e:50:0f:d4:99:
cf:2a:f6:08:33:9a:47:16:0d:7b:36:c2:a1:34:39:
2f:be:5f:c8:b6:30:69:36:cc:37:d8:ab:cd:96:fa:
99:09:7e:37:7f:b0:43:f9:e2:d0:29:e5:64:e7:cd:
b8:c5:aa:ae:85:a2:5b:82:88:23:3d:d5:cf:39:6e:
01:27:54:8f:17:eb:76:52:2f:e6:4a:db:43:5a:2d:
50:6a:91:29:b7:57:42:97:7c:ca:fa:e7:31:c2:e0:
7b:a8:c9:36:e5:29:57:a3:a4:30:ad:5f:51:ec:25:
85:7f:36:c4:a7:0d:ec:5b:89:8d:29:c8:a5:7e:fe:
a4:40:07:62:11:9e:f6:ab:1a:4c:54:c2:b9:a0:50:
23:16:6d:ec:6a:d7:57:0e:a6:d7:79:54:43:15:32:
ef:dc:00:71:0c:c0:77:bd:06:7e:a4:72:cc:a9:77:
14:86:0a:ba:dd:f5:63:d2:66:f2:03:28:13:45:3e:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A4:65:94:B1:35:2A:46:66:89:62:89:7D:1D:77:B3:CA:23:0D:43
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9qRllLE1KkZmiWKJfR13s8ojDUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
6f:66:b4:b8:85:39:2f:33:81:64:33:4c:26:80:25:19:55:f6:
ad:e2:a1:c2:d7:26:36:de:d4:93:55:d9:49:ba:d8:9b:e9:4c:
25:e1:5a:0b:7c:a4:9c:99:8a:fd:ee:27:dc:fd:3b:0e:23:10:
50:28:61:2e:20:2b:63:80:ce:3a:64:bf:33:c4:e2:c8:ce:64:
49:3c:5f:14:29:94:48:8c:02:4a:05:65:0b:a3:ae:ef:64:7b:
08:9c:25:f0:7a:0a:36:fc:11:6a:71:c4:6c:34:4b:4d:57:6c:
be:0c:3e:b8:34:61:7b:c4:32:9c:dd:12:28:d9:bd:26:34:5d:
6c:78:e5:4d:4b:d6:1d:a5:72:ac:f9:e2:20:d4:27:15:7f:d7:
a0:24:7d:8c:08:eb:9e:02:da:83:31:89:c3:e0:29:5f:8b:a0:
02:d4:ec:17:87:38:91:d9:52:8e:53:26:78:0b:7e:94:75:d4:
ac:d1:2b:ca:b1:9b:6b:48:6f:0f:92:ee:bd:2c:af:b4:eb:ad:
54:a4:8b:12:d6:2d:56:ab:86:07:5a:a0:bc:83:9a:4f:16:b4:
68:f6:6a:2e:2b:09:22:1f:c1:80:9b:91:3e:b3:01:ab:82:2e:
1b:79:6f:72:2b:5b:4b:e1:fa:64:f8:9e:c0:c5:b1:98:ca:74:
5d:90:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:47 2024 by rpki-client on console-ams.rpki-client.org