Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/xRbIMVynzOU_FI71FSJA23_njuo.roa
File: xRbIMVynzOU_FI71FSJA23_njuo.roa (raw, json)
Hash identifier: nf8Nkdq/1yB7C1Ivs5bfBZbFcHOvjRYRXUonI8IPPi8=
Subject key identifier: C5:16:C8:31:5C:A7:CC:E5:3F:14:8E:F5:15:22:40:DB:7F:E7:8E:EA
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 018CC871395398234A7122787226075591C3
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/xRbIMVynzOU_FI71FSJA23_njuo.roa
Signing time: Tue 02 Jan 2024 04:31:52 +0000
ROA not before: Tue 02 Jan 2024 04:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41704
IP address blocks: 84.39.250.0/24 maxlen: 24
84.39.252.0/22 maxlen: 22
84.39.253.0/24 maxlen: 24
84.39.252.0/24 maxlen: 24
84.39.248.0/22 maxlen: 22
84.39.249.0/24 maxlen: 24
84.39.248.0/24 maxlen: 24
84.39.251.0/24 maxlen: 24
84.39.255.0/24 maxlen: 24
84.39.254.0/24 maxlen: 24
79.140.16.0/24 maxlen: 24
79.140.16.0/20 maxlen: 20
79.140.17.0/24 maxlen: 24
79.140.16.0/22 maxlen: 22
79.140.22.0/24 maxlen: 24
79.140.19.0/24 maxlen: 24
79.140.24.0/22 maxlen: 22
79.140.20.0/23 maxlen: 23
79.140.23.0/24 maxlen: 24
79.140.20.0/24 maxlen: 24
79.140.21.0/24 maxlen: 24
79.140.20.0/22 maxlen: 22
79.140.18.0/24 maxlen: 24
79.140.28.0/22 maxlen: 22
145.255.16.0/21 maxlen: 21
145.255.16.0/22 maxlen: 22
145.255.20.0/22 maxlen: 22
145.255.21.0/24 maxlen: 24
145.255.23.0/24 maxlen: 24
145.255.22.0/24 maxlen: 24
95.105.120.0/22 maxlen: 22
95.105.119.0/24 maxlen: 24
95.105.124.0/24 maxlen: 24
95.105.125.0/24 maxlen: 24
95.105.124.0/22 maxlen: 22
95.105.126.0/24 maxlen: 24
95.105.127.0/24 maxlen: 24
95.105.96.0/19 maxlen: 19
95.105.96.0/22 maxlen: 22
95.105.104.0/24 maxlen: 24
95.105.102.0/23 maxlen: 23
95.105.105.0/24 maxlen: 24
95.105.104.0/22 maxlen: 22
95.105.100.0/23 maxlen: 23
95.105.100.0/22 maxlen: 22
95.105.112.0/24 maxlen: 24
95.105.112.0/22 maxlen: 22
95.105.106.0/23 maxlen: 23
95.105.108.0/22 maxlen: 22
95.105.115.0/24 maxlen: 24
95.105.113.0/24 maxlen: 24
95.105.118.0/24 maxlen: 24
95.105.116.0/24 maxlen: 24
95.105.117.0/24 maxlen: 24
95.105.116.0/22 maxlen: 22
95.105.114.0/24 maxlen: 24
46.191.240.0/22 maxlen: 22
46.191.244.0/22 maxlen: 22
46.191.240.0/20 maxlen: 20
46.191.252.0/22 maxlen: 22
46.191.250.0/24 maxlen: 24
46.191.249.0/24 maxlen: 24
46.191.248.0/22 maxlen: 22
46.191.251.0/24 maxlen: 24
46.191.248.0/24 maxlen: 24
46.191.186.0/23 maxlen: 23
46.191.186.0/24 maxlen: 24
46.191.184.0/21 maxlen: 21
46.191.185.0/24 maxlen: 24
46.191.184.0/23 maxlen: 23
46.191.184.0/24 maxlen: 24
46.191.189.0/24 maxlen: 24
46.191.191.0/24 maxlen: 24
46.191.188.0/23 maxlen: 23
46.191.188.0/24 maxlen: 24
46.191.190.0/23 maxlen: 23
46.191.190.0/24 maxlen: 24
46.191.187.0/24 maxlen: 24
94.41.128.0/20 maxlen: 20
94.41.128.0/22 maxlen: 22
94.41.132.0/22 maxlen: 22
94.41.136.0/22 maxlen: 22
94.41.140.0/22 maxlen: 22
94.41.160.0/19 maxlen: 19
94.41.160.0/22 maxlen: 22
94.41.160.0/21 maxlen: 21
94.41.164.0/22 maxlen: 22
94.41.168.0/22 maxlen: 22
94.41.172.0/22 maxlen: 22
136.169.240.0/22 maxlen: 22
136.169.244.0/22 maxlen: 22
136.169.243.0/24 maxlen: 24
136.169.240.0/20 maxlen: 20
136.169.253.0/24 maxlen: 24
136.169.252.0/22 maxlen: 22
136.169.252.0/24 maxlen: 24
136.169.248.0/22 maxlen: 22
136.169.255.0/24 maxlen: 24
136.169.254.0/24 maxlen: 24
94.41.176.0/22 maxlen: 22
94.41.184.0/22 maxlen: 22
94.41.180.0/22 maxlen: 22
94.41.188.0/22 maxlen: 22
2a02:1c8:7::/48 maxlen: 48
2a02:1c8:700::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 May 2024 08:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:39:53:98:23:4a:71:22:78:72:26:07:55:91:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c516c8315ca7cce53f148ef5152240db7fe78eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:34:85:b8:5f:e6:cd:84:e3:72:9d:aa:bd:
51:48:0d:a2:ae:94:84:d4:79:6a:33:eb:41:2e:d6:
48:99:1b:20:a1:79:af:2d:d3:2f:1d:74:b2:ff:bc:
86:fa:ee:bc:5f:1b:cb:eb:04:60:11:b4:3d:06:85:
d5:c5:56:74:a7:e1:25:a9:d8:8a:6f:51:02:48:ab:
7a:e1:8c:32:3a:cc:14:ee:8e:5e:4f:43:80:c3:23:
4e:f7:fe:45:33:f3:43:43:5d:1b:f7:9f:f3:5d:7c:
24:12:81:5c:32:ed:40:c3:d7:b4:63:22:4f:5d:a3:
8f:5a:d4:7e:0e:c8:88:63:93:dc:41:f0:6a:4f:67:
ba:24:1c:c2:e7:08:87:c1:b3:29:81:8c:e5:f4:f8:
a5:f9:ee:95:bf:fe:34:5e:3c:5b:5a:5e:cf:c7:85:
47:94:a6:f3:40:d5:7a:c3:f4:88:f1:ab:b3:18:23:
cd:b8:41:83:56:b3:8b:1a:e8:db:91:e4:a6:f6:64:
1e:52:f6:3c:cc:ea:2e:6f:9b:86:a2:3a:c3:f0:f4:
6a:7b:d8:17:bc:97:ab:3d:50:0e:0e:c8:dd:09:6e:
f2:9e:a0:1e:c0:48:be:12:c9:06:76:3e:c3:1c:4e:
29:c3:05:8e:6a:d6:18:2e:ba:5c:4f:29:26:35:73:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:C8:31:5C:A7:CC:E5:3F:14:8E:F5:15:22:40:DB:7F:E7:8E:EA
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/xRbIMVynzOU_FI71FSJA23_njuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
46.191.240.0/20
79.140.16.0/20
84.39.248.0/21
94.41.128.0/20
94.41.160.0/19
95.105.96.0/19
136.169.240.0/20
145.255.16.0/21
IPv6:
2a02:1c8:7::/48
2a02:1c8:700::/40
Signature Algorithm: sha256WithRSAEncryption
24:50:b8:48:e2:6f:48:7b:36:68:e8:e3:df:f8:1a:8d:b6:3a:
e3:8c:c9:24:0e:1a:44:99:13:7c:3e:9c:08:86:e6:e6:10:f8:
ad:e9:f2:4a:b4:e9:d1:9f:eb:fd:a7:f7:74:f4:ae:5a:5e:3a:
ba:52:14:9d:10:6b:ca:37:91:62:3d:34:ec:0b:85:46:53:65:
24:dc:93:71:9b:9b:7c:a2:61:11:2a:12:ca:43:3f:ed:8e:b2:
41:49:10:4b:5a:c4:dd:bf:60:58:d9:e3:eb:b2:17:ce:89:23:
53:9e:ca:5f:fe:5c:12:5e:15:f9:2a:ac:4c:91:d7:af:66:6c:
95:ca:d7:31:a2:f2:fd:60:d0:da:89:07:e1:e3:a8:08:b0:f5:
12:72:80:c5:f0:50:a3:73:86:35:ea:10:7c:10:b4:b4:4c:3c:
f9:58:af:28:b6:96:7f:71:c7:b7:4b:26:6c:8c:a0:41:79:a3:
bc:76:7c:fa:ca:ee:38:91:ac:91:84:f4:a7:b6:b4:fd:11:20:
0a:7b:54:58:1e:4a:3e:af:ea:20:45:69:ab:15:f1:c0:c5:30:
fa:ee:ff:5d:f3:83:d7:4c:60:fe:35:84:bc:ca:4a:9b:9d:90:
6e:89:2c:59:b2:dd:e3:37:88:53:76:a0:b9:71:16:f2:d6:17:
bb:74:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org