Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhqvLNYvaioPuWqYjYpg6ez6OZk.roa
File: rhqvLNYvaioPuWqYjYpg6ez6OZk.roa (raw, json)
Hash identifier: NHNzPyq/1f6gf1YOTq8qYjwTL+pN5uR/hcL6KnThnag=
Subject key identifier: AE:1A:AF:2C:D6:2F:6A:2A:0F:B9:6A:98:8D:8A:60:E9:EC:FA:39:99
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018E1333BB3C76056112059D10EF33FB2BFF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhqvLNYvaioPuWqYjYpg6ez6OZk.roa
Signing time: Wed 06 Mar 2024 09:59:01 +0000
ROA not before: Wed 06 Mar 2024 09:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Mar 2024 15:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:33:bb:3c:76:05:61:12:05:9d:10:ef:33:fb:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 6 09:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1aaf2cd62f6a2a0fb96a988d8a60e9ecfa3999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:9f:c6:25:d9:ac:3d:5f:3a:44:49:04:c5:
cd:41:f5:46:07:de:00:80:1a:80:cc:7e:53:0e:27:
d0:89:fe:5f:4c:41:a6:18:47:ee:e4:9e:fb:e0:8d:
16:26:c5:ba:b0:58:70:58:7a:b3:b4:df:fd:b1:bb:
92:50:38:27:94:39:b4:27:91:06:f8:2f:1a:30:76:
87:76:cc:d2:fb:3e:59:3b:69:3a:1c:4d:64:19:ba:
59:d0:0c:05:c6:6b:44:0e:2f:04:e9:33:42:d5:72:
ff:5a:c4:45:fb:e1:ab:0a:68:9e:6c:6b:5f:0f:b3:
b9:79:5b:d5:ac:54:85:d2:8a:b0:5a:74:19:f8:a7:
3c:f5:6e:3b:4c:19:3e:14:67:39:10:67:0a:ff:9c:
59:8d:86:1a:55:77:2c:3b:bb:04:3d:18:a9:d3:d6:
02:fa:7b:17:16:49:b8:53:6b:9e:d9:d9:c6:10:8e:
17:ac:4b:a7:2d:b5:42:3f:bd:3f:24:7e:ed:a0:6b:
17:16:1e:4f:6e:66:97:5c:88:a7:f6:f7:ae:6b:78:
76:fc:5b:2d:34:bd:0e:21:cb:b2:bf:be:26:d0:dd:
72:05:93:c5:64:76:b1:13:dc:36:b4:2d:f5:cb:42:
f5:d6:bb:26:eb:92:d7:6d:a8:63:35:b9:b2:5c:84:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:AF:2C:D6:2F:6A:2A:0F:B9:6A:98:8D:8A:60:E9:EC:FA:39:99
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhqvLNYvaioPuWqYjYpg6ez6OZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
9b:23:cc:83:1d:70:2b:a3:04:86:44:e5:6e:8e:c6:2d:01:6f:
f1:00:11:0b:87:55:9e:5f:ce:55:c7:a8:82:3d:c0:53:7d:c4:
99:ce:20:ba:b2:52:0b:da:d6:b8:db:2c:0f:df:84:da:a7:5b:
ca:11:85:2b:94:d8:47:92:c2:01:b8:0f:cd:0e:25:d5:04:2b:
a1:d9:df:a5:cb:b5:db:b4:d0:2f:16:39:88:3e:f9:b7:27:8f:
e8:7d:dd:bb:d4:97:f7:cb:05:1f:91:28:7a:f0:b6:43:37:80:
9e:f6:11:ab:98:41:a2:c2:5b:69:2c:2f:f1:73:b3:65:30:6d:
3a:74:b1:7e:c7:75:58:ad:93:ab:06:90:39:cd:e9:12:1e:59:
30:69:ab:a4:c1:a1:32:b3:08:5b:ef:65:8e:1f:b9:ae:7f:45:
2c:39:f6:51:94:5a:fc:c8:f7:6e:33:37:9f:3b:83:c7:cd:2f:
de:76:04:4a:5f:b0:36:86:c8:ad:16:42:9c:1c:c0:93:cc:6b:
06:54:5b:b7:65:e6:64:e2:50:23:92:13:32:e5:0a:ab:45:07:
9f:2e:ce:4f:1e:01:f7:cc:24:a8:1c:78:4b:62:d8:b7:c4:29:
75:c9:5b:79:b1:54:88:e9:89:08:f0:c7:0d:50:12:0c:61:84:
6c:a1:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org