Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u2eRoFO_Dzm88Ew4xj6S65yxN98.roa
File: u2eRoFO_Dzm88Ew4xj6S65yxN98.roa (raw, json)
Hash identifier: 03BOKaK63IUDDZiXtWUNxpYmkEscSGrHie7DRZj6wmc=
Subject key identifier: BB:67:91:A0:53:BF:0F:39:BC:F0:4C:38:C6:3E:92:EB:9C:B1:37:DF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018E5C84B73DC67494A6570A831B5A1F920D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u2eRoFO_Dzm88Ew4xj6S65yxN98.roa
Signing time: Wed 20 Mar 2024 15:39:45 +0000
ROA not before: Wed 20 Mar 2024 15:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
103.127.76.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 May 2024 10:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:84:b7:3d:c6:74:94:a6:57:0a:83:1b:5a:1f:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 20 15:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb6791a053bf0f39bcf04c38c63e92eb9cb137df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:e4:54:4c:26:c8:78:30:4d:33:bc:18:65:
b2:bc:8c:e2:5c:47:1a:c9:6d:02:08:a0:80:35:32:
bd:5d:a8:e0:68:55:b3:66:22:af:07:ad:16:46:6e:
43:b5:bf:e0:20:45:5f:c9:41:9f:b7:9d:c5:e1:87:
e5:7f:5b:19:39:63:15:62:8c:a1:ea:53:05:69:fa:
c0:3b:7f:e2:32:91:a9:0a:ac:e3:5a:80:7b:1e:3f:
55:b7:01:49:66:8a:dc:cc:8e:4d:3e:14:27:a6:a9:
ef:2c:ec:b2:e0:ad:0f:24:45:97:81:55:ef:0e:92:
68:82:39:d1:b1:0b:aa:fd:c9:02:74:e0:a8:a1:87:
ef:cb:d5:7d:36:d6:8b:f0:d3:d4:8f:cb:e8:a1:8a:
7d:7a:68:c0:1a:84:a7:9b:57:4d:67:17:c9:a9:f8:
96:dc:5a:58:21:5c:19:8c:9a:3b:97:19:1c:64:68:
91:7f:5b:1d:90:fa:63:9c:00:54:64:2e:fd:3c:72:
f2:9e:16:92:86:c3:b8:a9:34:49:06:25:0c:25:99:
21:e5:b9:82:e5:f1:64:5c:3a:d6:0b:e4:d9:23:5c:
9d:ba:ef:88:64:d2:b4:f1:d2:50:bc:ba:2d:76:04:
ed:65:66:db:ed:5f:ef:da:05:b6:f1:c5:a5:27:ec:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:67:91:A0:53:BF:0F:39:BC:F0:4C:38:C6:3E:92:EB:9C:B1:37:DF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u2eRoFO_Dzm88Ew4xj6S65yxN98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
103.127.76.0/23
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
c0:02:05:e3:a5:51:ca:d8:25:d9:c1:94:89:b6:27:e3:1a:ff:
64:28:b9:91:b6:38:d0:14:e9:80:6c:eb:04:c9:28:cf:ac:db:
5c:a6:ae:93:95:53:36:1a:4d:d3:01:81:0b:d2:c2:e7:b8:d7:
94:f8:39:97:25:18:da:9f:f3:26:ec:4a:5e:a8:64:5b:fb:57:
03:01:d1:2c:04:c6:1c:03:0f:d8:c5:68:21:ee:c9:1e:42:06:
21:4d:8b:92:0c:1f:c2:27:a4:8c:db:cf:10:ce:91:90:8e:b6:
14:fa:9e:d8:97:d8:66:5e:86:f6:05:63:5e:53:38:2d:e5:6a:
3a:e6:58:4b:b4:59:e2:c8:53:52:ee:cc:8e:30:22:43:68:9d:
9c:c8:59:e5:78:eb:fa:26:31:a0:d9:06:04:b1:8d:30:47:41:
c4:d0:59:2a:34:4f:c3:ca:cb:6f:16:7d:50:0f:c4:4c:a5:6b:
7f:a8:e7:48:1f:44:2a:7e:ad:b6:7b:7b:15:88:92:3b:d1:ad:
3b:6e:e0:db:82:92:3a:c5:38:d6:10:11:a0:cf:ed:44:27:03:
72:bb:a9:ff:e3:a3:60:43:eb:38:47:7f:e3:9d:ae:48:b5:82:
a2:10:b7:ac:c4:c4:88:a2:42:01:ad:f3:13:be:fa:76:77:8d:
9c:80:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org