Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSsJVYOaPwE6TfQZKX4ODatMKUg.roa
File: XSsJVYOaPwE6TfQZKX4ODatMKUg.roa (raw, json)
Hash identifier: MQbon0g5pkrL38tgACWViC7tjwqQkME+Dz9n7NlZbM4=
Subject key identifier: 5D:2B:09:55:83:9A:3F:01:3A:4D:F4:19:29:7E:0E:0D:AB:4C:29:48
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190B74474054DC1ED5A0A183FF40F4FA9AA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSsJVYOaPwE6TfQZKX4ODatMKUg.roa
Signing time: Mon 15 Jul 2024 16:40:34 +0000
ROA not before: Mon 15 Jul 2024 16:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.188.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 22 Jul 2024 13:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:44:74:05:4d:c1:ed:5a:0a:18:3f:f4:0f:4f:a9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 15 16:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2b0955839a3f013a4df419297e0e0dab4c2948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:84:48:8c:0d:08:9c:b0:bf:b2:59:fc:bb:
dd:35:45:87:66:f3:d7:05:2d:b3:f4:82:da:70:a7:
42:dd:e1:25:7f:89:2e:f8:2f:c5:46:79:2d:1f:28:
b1:79:2d:20:77:fd:2f:ea:cc:c9:0a:7f:e4:a6:21:
8f:09:6e:9c:cc:30:05:38:da:46:c2:70:ff:c2:fc:
24:7f:b1:39:77:c5:53:be:2d:04:87:d6:2e:2a:0d:
4a:e9:fb:97:87:0e:da:e3:0a:36:76:7d:cf:ce:aa:
12:88:f9:a8:71:59:06:23:bf:f6:66:4b:f3:dc:19:
d0:ae:60:c9:ec:af:4c:5e:53:36:5b:a4:41:a7:0a:
e6:b8:f8:3a:97:35:08:59:7e:b9:a0:a3:2f:2b:9a:
bd:45:89:79:9a:16:70:a9:a1:27:62:60:0e:47:20:
c0:9f:d1:98:ed:de:8d:66:a0:73:0e:cf:a7:34:42:
03:00:89:b4:e5:cc:d7:95:77:50:cd:c1:62:4a:36:
6a:d7:25:56:b1:a9:84:27:8c:48:79:b7:07:a6:4b:
34:08:c0:05:36:61:28:0a:71:80:91:d3:4e:00:2d:
92:40:c3:b5:71:9c:99:a2:31:6f:4f:0f:ad:3f:ef:
ce:06:fe:7f:f6:da:a1:5b:e8:09:98:83:4e:e9:03:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:09:55:83:9A:3F:01:3A:4D:F4:19:29:7E:0E:0D:AB:4C:29:48
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSsJVYOaPwE6TfQZKX4ODatMKUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
57:c5:65:7c:f1:27:3c:fa:31:9d:ed:15:35:0c:b9:ca:ac:b3:
59:81:3c:79:07:36:eb:29:ba:14:03:56:b8:ef:a5:81:e6:64:
bd:69:b9:f8:47:17:b1:16:d4:ed:03:6c:7a:e6:c2:38:36:df:
be:e3:da:30:18:8f:df:f5:0c:5f:01:79:3c:0a:07:e3:d9:a3:
07:64:31:67:61:de:00:b7:cc:d1:bf:2c:83:63:ee:e7:44:8b:
9c:a2:77:fc:cc:d4:36:3f:97:e1:5c:53:a5:a0:03:99:2e:b3:
df:33:e6:7c:89:f1:9a:68:ed:07:bc:d9:e9:34:b1:12:94:3c:
62:50:02:2e:28:40:c6:1a:00:d5:41:59:4d:80:18:aa:97:f7:
90:d5:3b:9b:01:1a:5f:32:0f:15:b4:7e:07:f3:ad:08:86:1c:
49:cc:fe:34:90:4d:3b:01:7d:f9:07:95:b1:57:2b:b0:39:08:
a1:3c:82:3b:a6:6f:0c:e1:66:2f:83:2b:f4:1d:90:97:4e:7a:
99:47:51:b1:5b:84:3e:62:08:ba:49:bf:7e:9b:c6:da:d3:3e:
1c:a2:dc:08:ee:b7:2b:5d:64:52:03:65:11:58:a5:45:4d:c6:
6c:23:e5:82:47:59:e9:fe:1b:58:25:af:43:1e:51:47:a0:9e:
37:1c:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 16:02:47 2024 by rpki-client on console-fra.rpki-client.org