Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/duALl3KSomJWHX-a0oXzt60tJO4.roa
File: duALl3KSomJWHX-a0oXzt60tJO4.roa (raw, json)
Hash identifier: OCGDmqh0gVKi2xi8+Muxo4o7b7RS+cTxpCnqK8njcWs=
Subject key identifier: 76:E0:0B:97:72:92:A2:62:56:1D:7F:9A:D2:85:F3:B7:AD:2D:24:EE
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019127A49BDF3F52CFB1F1579116A381CC96
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/duALl3KSomJWHX-a0oXzt60tJO4.roa
Signing time: Tue 06 Aug 2024 12:23:04 +0000
ROA not before: Tue 06 Aug 2024 12:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 45.9.73.179/32 maxlen: 32
45.9.73.184/32 maxlen: 32
45.9.73.236/32 maxlen: 32
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.136.67/32 maxlen: 32
94.142.139.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a09:5302:ffff::/48 maxlen: 48
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Aug 2024 20:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:a4:9b:df:3f:52:cf:b1:f1:57:91:16:a3:81:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 6 12:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76e00b977292a262561d7f9ad285f3b7ad2d24ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:d3:89:5c:13:56:9a:1d:f6:bc:83:d1:22:
0a:ff:99:02:63:44:5c:ba:a2:95:e4:a3:5f:f3:18:
e2:00:6a:1a:dc:04:89:d9:07:e4:a3:7e:d8:df:46:
5b:d7:85:ce:eb:32:21:74:31:f2:d3:f4:73:c3:b9:
08:3e:60:07:f6:36:61:fb:11:aa:7a:ca:26:69:dc:
e8:30:7c:f8:d3:f8:78:9f:7e:da:23:42:f8:c9:ee:
4d:1e:ad:71:78:00:0b:3c:e8:22:52:86:a4:f2:86:
95:42:3c:39:73:94:b7:f1:15:fa:54:b1:c5:da:61:
47:c8:cc:b4:6a:ea:ce:f3:46:1a:97:96:be:68:2b:
76:18:76:7a:40:32:91:84:3e:c0:48:6b:52:ad:e9:
ac:fd:34:f1:59:a3:50:cb:a7:9f:87:1c:ef:1d:83:
e8:36:21:c1:ea:c8:bf:41:0e:a3:ac:be:9c:cb:6e:
4b:06:58:11:61:9c:fa:43:c8:ca:72:61:26:27:fd:
60:ea:7d:93:a8:3d:67:26:81:e6:c3:e4:2c:05:37:
fd:84:7f:f9:0c:42:cd:12:ab:b5:10:34:dd:29:15:
f9:03:7d:5e:7b:55:cb:71:7e:8b:fb:1f:c7:ef:e0:
ef:f9:2d:db:5a:f3:11:c9:8b:56:85:f0:e9:60:5c:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:0B:97:72:92:A2:62:56:1D:7F:9A:D2:85:F3:B7:AD:2D:24:EE
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/duALl3KSomJWHX-a0oXzt60tJO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
b3:52:82:74:4e:d1:42:54:f8:b9:d5:22:26:7a:69:d9:33:b6:
f3:e3:4c:e4:7b:83:5a:46:18:06:bf:fa:be:d9:82:47:2a:7c:
1c:68:42:05:26:e3:6f:35:c9:47:58:61:42:ed:91:39:43:40:
39:6c:81:7a:65:34:3b:24:d3:6d:2a:d0:cb:32:ea:c4:05:81:
42:f6:67:6c:22:1b:be:8c:81:75:de:8c:65:55:47:7a:05:2c:
e7:f3:59:34:4d:d2:61:34:33:ae:42:2d:99:d5:8e:d8:98:bd:
9e:bb:47:26:53:da:03:63:9b:a7:c8:e1:84:6b:51:ba:7c:af:
f5:1d:4d:fa:53:75:6a:fb:95:5c:f8:1a:46:68:bf:a9:ea:14:
59:b2:c2:16:54:de:7b:d4:42:ec:5f:32:50:32:de:58:bc:44:
f1:a1:85:2c:8e:71:07:ae:60:8c:3b:26:86:13:00:2d:46:f4:
c0:b1:08:d0:ca:0c:30:43:92:92:ed:2c:fd:bc:e2:02:a8:fc:
a2:a5:9a:a6:c3:9a:af:9a:1c:25:23:23:79:1c:ae:de:9f:b6:
47:da:a5:ac:01:29:28:f5:f8:ef:af:71:a2:d7:a3:c2:d3:e6:
43:9b:14:31:7b:d0:67:02:08:9a:a5:8c:8b:ad:7a:bd:a0:74:
93:d9:dd:6d
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZEnpJvfP1LPsfFXkRajgcyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwODA2MTIyMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmUwMGI5NzcyOTJhMjYyNTYxZDdmOWFkMjg1ZjNiN2FkMmQyNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HTiVwTVpod9ryD0SIK/5kCY0Rc
uqKV5KNf8xjiAGoa3ASJ2Qfko37Y30Zb14XO6zIhdDHy0/Rzw7kIPmAH9jZh+xGq
esomadzoMHz40/h4n37aI0L4ye5NHq1xeAALPOgiUoak8oaVQjw5c5S38RX6VLHF
2mFHyMy0aurO80Yal5a+aCt2GHZ6QDKRhD7ASGtSrems/TTxWaNQy6efhxzvHYPo
NiHB6si/QQ6jrL6cy25LBlgRYZz6Q8jKcmEmJ/1g6n2TqD1nJoHmw+QsBTf9hH/5
DELNEqu1EDTdKRX5A31ee1XLcX6L+x/H7+Dv+S3bWvMRyYtWhfDpYFwMSwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFHbgC5dykqJiVh1/mtKF87etLSTuMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvZHVBTGwzS1NvbUpXSFgtYTBvWHp0NjB0Sk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjBxBAIAATBrAwUALQlJ
swMFAC0JSbgDBQAtCUnsMAwDBAAtWUEDBAItWUADBAItgLADBABb2VADBANejogD
BAK5BfgDBAK5OswDBAK5VzADBAG5aXQDBAK5dZgDBAK5fdgDBAK5feQDBAXCQ8AD
BADDL/owMQQCAAIwKwMHACoJUwL//wMHACoKkwAQADAQAwUAKgqTAQMHACoKkwEA
AgMFACoKkwIwDQYJKoZIhvcNAQELBQADggEBALNSgnRO0UJU+LnVIiZ6adkztvPj
TOR7g1pGGAa/+r7ZgkcqfBxoQgUm4281yUdYYULtkTlDQDlsgXplNDsk020q0Msy
6sQFgUL2Z2wiG76MgXXejGVVR3oFLOfzWTRN0mE0M65CLZnVjtiYvZ67RyZT2gNj
m6fI4YRrUbp8r/UdTfpTdWr7lVz4GkZov6nqFFmywhZU3nvUQuxfMlAy3li8RPGh
hSyOcQeuYIw7JoYTAC1G9MCxCNDKDDBDkpLtLP284gKo/KKlmqbDmq+aHCUjI3kc
rt6ftkfapawBKSj1+O+vcaLXo8LT5kObFDF70GcCCJqljIuter2gdJPZ3W0=
-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:04 2024 by rpki-client on console-fra.rpki-client.org