Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TAiTu3f8eIkhs3lTqgxVCuGqmwg.roa
File: TAiTu3f8eIkhs3lTqgxVCuGqmwg.roa (raw, json)
Hash identifier: 8bJ0SZ2vTt0TKk5KFfzlWOzFhgnxFQGNjdUuh558jQY=
Subject key identifier: 4C:08:93:BB:77:FC:78:89:21:B3:79:53:AA:0C:55:0A:E1:AA:9B:08
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191B86045908E4E280DDFF3B68446903620
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TAiTu3f8eIkhs3lTqgxVCuGqmwg.roa
Signing time: Tue 03 Sep 2024 14:53:22 +0000
ROA not before: Tue 03 Sep 2024 14:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.9.74.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 26 Sep 2024 15:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:60:45:90:8e:4e:28:0d:df:f3:b6:84:46:90:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 3 14:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c0893bb77fc788921b37953aa0c550ae1aa9b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:63:7b:87:8e:6c:62:9e:a9:37:8b:2d:32:
00:b1:ef:6c:cd:cc:9f:18:85:18:9f:72:6e:0e:36:
30:d2:00:cb:47:4d:ac:fd:57:af:23:d8:7f:99:a6:
6b:92:04:24:63:7e:e0:47:2d:16:db:95:f9:9e:34:
25:f5:4c:56:7f:ec:a7:69:69:21:9b:b6:a7:f1:52:
2e:31:fc:f0:92:a5:3b:74:1e:27:71:51:7d:dc:83:
2f:25:41:55:e8:29:97:f8:4f:bb:83:6f:b7:ce:37:
e2:14:5e:94:28:86:69:07:bc:bb:d4:c1:ae:e3:e5:
ae:17:d2:ea:4c:81:00:89:63:52:70:f0:b6:e1:8d:
dc:ad:e7:4f:32:85:4f:64:4b:0e:54:bc:96:76:ad:
b8:8b:d1:a5:c2:f7:05:3c:b8:2a:f5:3b:65:d1:3f:
97:28:73:59:3d:e8:65:21:28:7e:2f:69:e8:e9:8a:
25:1b:2e:f5:53:4e:ae:4e:10:13:96:83:1c:57:cf:
2f:9e:8f:39:93:15:52:f7:a9:9b:d5:88:af:92:ca:
c9:6a:f5:91:32:2b:27:aa:3f:da:2d:52:37:51:10:
02:50:ba:26:48:33:e6:2e:b8:ca:0e:59:8c:42:b3:
71:b8:48:a4:40:76:71:76:55:e5:0b:c6:9b:9e:cd:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:93:BB:77:FC:78:89:21:B3:79:53:AA:0C:55:0A:E1:AA:9B:08
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TAiTu3f8eIkhs3lTqgxVCuGqmwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.229.0-185.125.231.255
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
08:c6:74:de:ae:18:c4:17:8b:73:18:53:01:0d:c7:c5:8c:24:
56:b3:83:b6:4f:58:72:20:ff:b5:32:9d:18:20:2c:10:5d:7e:
56:df:d2:85:3b:d0:e5:39:55:9e:11:6a:ec:93:17:91:03:29:
80:b9:51:52:f2:ff:ab:2f:bc:8e:be:2e:1d:74:58:4e:fc:1b:
86:4d:86:42:e0:45:b2:cb:89:10:4f:85:81:2c:2c:58:36:43:
c4:95:2c:76:e9:b6:f6:fc:43:eb:f0:ff:e7:8e:ac:0c:23:c1:
76:f1:70:4f:0f:41:44:f7:e9:80:8a:01:70:e9:1f:c9:87:15:
67:2a:25:8a:18:c9:e1:7d:27:8a:7a:9a:79:ee:fb:4b:85:81:
47:d2:39:05:ec:d9:28:d5:42:49:9f:80:13:b0:06:cb:bc:15:
9a:a1:64:4c:43:e7:91:fb:18:ba:51:cc:a7:c9:11:6f:af:78:
a6:c1:69:24:82:5e:2e:91:86:32:e1:70:81:5f:52:f7:fa:28:
0b:32:c9:2f:7c:1e:56:98:be:5f:85:a5:92:10:76:93:c4:52:
ba:1b:51:b5:46:87:ee:62:83:bc:1a:95:4e:db:2c:96:28:f7:
0b:39:1d:6c:cd:62:cd:2b:b9:60:55:d7:75:29:8d:9e:1b:7e:
ef:18:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 17:49:42 2024 by rpki-client on console-fra.rpki-client.org