Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DaQFvPzFZIs1_iUDtwHfv6ImLGE.roa
File: DaQFvPzFZIs1_iUDtwHfv6ImLGE.roa (raw, json)
Hash identifier: mLvSo4k6YsunUOgomLrmafIBsQraVdaLnVCL8Jt3C5w=
Subject key identifier: 0D:A4:05:BC:FC:C5:64:8B:35:FE:25:03:B7:01:DF:BF:A2:26:2C:61
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018F80E9D5145B64A7AE756BBB85804DFFBF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DaQFvPzFZIs1_iUDtwHfv6ImLGE.roa
Signing time: Thu 16 May 2024 10:19:19 +0000
ROA not before: Thu 16 May 2024 10:19:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
103.127.76.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 May 2024 12:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:e9:d5:14:5b:64:a7:ae:75:6b:bb:85:80:4d:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 16 10:19:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0da405bcfcc5648b35fe2503b701dfbfa2262c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:6a:e8:dd:1b:89:18:cb:cd:c1:de:e4:af:
4f:8b:c9:82:66:7a:2a:a0:f2:05:0b:e3:f4:f8:18:
cc:83:35:4d:60:e5:38:7a:fc:2e:ad:41:49:8a:54:
ff:84:9c:c2:9e:07:c7:45:57:37:09:4f:7c:d5:5c:
02:93:ee:8c:3e:d2:1f:2d:a8:20:3e:f3:17:9d:f2:
1c:7e:39:3a:47:1d:08:ad:d6:ef:bb:fa:6e:3d:7e:
bc:1d:d7:fd:d4:f7:df:71:b9:f9:c6:1c:4c:6f:1a:
e8:16:7e:f2:2e:af:c9:04:40:78:77:79:41:d4:95:
55:e3:08:44:31:53:d3:ab:3b:c3:c9:c3:35:ce:00:
f6:3f:71:b4:ae:15:f7:60:d7:0f:e3:f7:c6:5d:8b:
e8:f7:35:cd:5c:c9:93:4f:61:21:de:18:e3:ad:c3:
c9:f4:89:70:7d:0d:20:06:07:db:ca:86:d6:cb:1e:
a8:c7:24:96:5a:19:4d:07:dc:bd:ea:4c:78:93:3a:
89:37:6c:1e:f5:1b:47:e9:a6:a0:8d:d1:b4:2f:81:
ab:2e:83:5f:92:bd:7c:8c:47:d3:b6:66:ac:97:5e:
b1:6a:81:79:29:f7:87:d5:42:86:ec:11:f6:10:c6:
93:2e:18:24:b4:fc:96:76:06:e0:d5:f3:50:89:59:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:05:BC:FC:C5:64:8B:35:FE:25:03:B7:01:DF:BF:A2:26:2C:61
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DaQFvPzFZIs1_iUDtwHfv6ImLGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
103.127.76.0/23
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
0f:d4:55:97:c4:41:c7:5e:3a:e2:7c:dd:58:3f:fd:27:18:f5:
ea:96:72:e7:05:7c:59:13:d3:be:27:b9:f5:57:6f:7b:cc:98:
0e:19:1e:63:10:31:f4:3c:b2:39:e2:dc:0b:54:83:94:6e:d2:
46:3e:50:5a:a6:c6:d8:80:0e:eb:9f:df:bb:e6:94:fc:9d:5e:
2d:6b:90:95:ef:97:e5:a7:66:24:5a:f4:68:26:e9:4d:cb:98:
7c:ca:bc:40:1b:2b:92:cd:f7:f5:c9:30:5c:ae:7b:f2:ce:2c:
7a:88:b5:96:ff:ba:76:87:22:59:39:c0:6b:9f:56:75:6f:dc:
f1:d9:dc:43:9e:7c:3a:67:fb:4b:9a:10:72:42:33:69:52:c0:
61:f8:64:97:6e:5f:28:a2:6f:12:f9:2b:d1:03:1f:13:f0:d7:
4c:66:af:92:91:ae:a6:ac:44:7f:6a:26:69:55:af:8a:cd:44:
a5:f0:ee:b9:4d:4a:7a:45:34:91:36:ba:11:68:58:df:fd:1d:
4d:78:3f:b1:f5:8d:3e:f8:3e:07:0e:79:ee:1d:50:6c:33:5c:
03:59:a3:8c:07:74:8e:3e:e4:28:23:f3:f5:a4:8b:78:b1:ec:
98:18:0e:55:a6:b2:90:fd:fb:51:71:2d:06:93:51:b0:a1:84:
05:29:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:46:59 2024 by rpki-client on console-fra.rpki-client.org