Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/O4jGHNWNtezLL-mhsTzBpHxjOI8.roa
File: O4jGHNWNtezLL-mhsTzBpHxjOI8.roa (raw, json)
Hash identifier: z4pUHjOy6fAyTj4XGZ9OIn932Jb3n+T8439yT1q5sOo=
Subject key identifier: 3B:88:C6:1C:D5:8D:B5:EC:CB:2F:E9:A1:B1:3C:C1:A4:7C:63:38:8F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01910E390BC7098198386CFE2A265709F293
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/O4jGHNWNtezLL-mhsTzBpHxjOI8.roa
Signing time: Thu 01 Aug 2024 13:55:05 +0000
ROA not before: Thu 01 Aug 2024 13:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Aug 2024 15:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:39:0b:c7:09:81:98:38:6c:fe:2a:26:57:09:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 1 13:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b88c61cd58db5eccb2fe9a1b13cc1a47c63388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ec:19:96:9e:10:51:e4:42:77:39:1b:bf:
50:27:7b:b6:44:0b:6a:72:6d:47:8d:15:63:ba:4c:
0a:ce:ee:7d:93:61:9f:16:b2:6d:98:2d:cf:11:ba:
77:4a:f5:fc:df:92:35:31:3a:ee:af:ec:fd:3e:2d:
14:04:50:ed:f3:9f:df:12:4b:b4:14:de:f2:e9:fa:
c7:17:00:7c:dc:53:87:45:63:c0:21:97:f3:25:c4:
41:d0:87:dd:fc:3d:e7:ec:3c:8e:c6:d1:c7:2d:55:
da:3e:c5:56:69:3b:1f:c1:92:58:d1:a3:7b:73:3d:
23:84:c9:b0:4a:a2:c6:e3:9a:ae:5a:03:fd:a1:28:
4d:a6:41:67:be:01:5c:d6:be:12:5b:22:3f:89:39:
14:0f:83:7a:41:d4:3f:0a:1e:a0:b6:2e:75:d2:20:
16:94:f5:52:56:2c:55:6b:a5:9f:61:cd:2e:21:8c:
c8:ac:2e:56:4c:9a:30:37:4a:4e:9e:12:02:06:30:
2a:fb:30:fc:aa:59:f7:3c:df:fc:c4:82:5a:ed:5b:
d9:97:c5:b0:96:2c:94:b6:8f:0f:9a:b3:72:34:37:
c8:cf:43:57:19:a3:08:58:3f:e5:cd:a4:c7:ab:5c:
0c:bb:45:8e:d6:e2:2f:78:54:fe:cb:9b:19:80:32:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:C6:1C:D5:8D:B5:EC:CB:2F:E9:A1:B1:3C:C1:A4:7C:63:38:8F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/O4jGHNWNtezLL-mhsTzBpHxjOI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
5f:48:ea:bf:ee:73:b9:68:0a:6b:95:1e:e5:f1:45:f6:7a:da:
f6:e7:b9:35:51:18:73:a5:de:91:50:7d:42:8f:fb:fe:cb:2d:
e8:1e:d5:27:cd:81:83:64:ce:77:04:ee:66:07:07:91:57:55:
4f:9f:30:25:03:0c:bd:ec:bc:fa:23:a2:83:b8:de:83:dd:04:
69:bd:a7:fe:3c:cd:60:10:68:c3:43:d1:ef:af:bf:02:4d:a1:
72:e7:80:aa:85:8d:a0:1b:b6:c6:bc:84:a5:b9:bb:c1:82:74:
90:18:fe:d1:58:2f:af:91:11:7b:93:8c:2e:59:c4:90:41:4d:
93:94:5e:c0:7d:96:f8:52:68:20:39:ab:27:1a:36:12:c5:4c:
71:07:39:fe:16:1f:df:1d:bf:3f:47:5c:a3:a5:9c:0c:03:f3:
6d:43:66:d4:48:47:2d:8e:f1:13:fc:59:e4:d2:7e:4e:49:08:
1c:37:8e:cc:72:80:b9:a1:05:89:e3:d5:fa:63:a0:e0:3b:f7:
42:30:57:6b:cd:a9:fc:fa:2c:40:76:6c:2e:ee:f5:44:50:15:
68:bb:bf:f2:fc:be:b2:64:37:ac:40:24:61:f1:f3:59:6c:d3:
ab:53:16:bc:53:69:56:02:3e:ad:e8:f3:02:82:69:34:32:33:
12:2a:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 18:50:06 2024 by rpki-client on console-fra.rpki-client.org