Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pGzxlGRhPgla-3cRvwoF__qwNVs.roa
File: pGzxlGRhPgla-3cRvwoF__qwNVs.roa (raw, json)
Hash identifier: yMSqlR9sM02cwrYxe9kzANEL726nE01aayBM13w7x0A=
Subject key identifier: A4:6C:F1:94:64:61:3E:09:5A:FB:77:11:BF:0A:05:FF:FA:B0:35:5B
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018FB611ABE6EBB8E0BE30CFEFD3FD6DC1E4
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pGzxlGRhPgla-3cRvwoF__qwNVs.roa
Signing time: Sun 26 May 2024 18:02:42 +0000
ROA not before: Sun 26 May 2024 18:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.81.224.0/22 maxlen: 22
45.82.68.0/22 maxlen: 22
45.82.176.0/22 maxlen: 22
45.87.0.0/22 maxlen: 22
45.136.84.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
46.18.107.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
77.220.212.0/22 maxlen: 22
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
81.31.197.0/24 maxlen: 24
91.201.25.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
91.209.226.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
94.124.78.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
185.23.108.0/24 maxlen: 24
185.51.121.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
185.93.6.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
185.201.252.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.232.164.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.216.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
185.244.219.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.206.0/24 maxlen: 24
185.250.207.0/24 maxlen: 24
193.22.21.0/24 maxlen: 24
193.56.8.0/24 maxlen: 24
193.163.7.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
194.29.53.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
212.8.246.0/24 maxlen: 24
212.23.221.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.162.152.0/22 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Jun 2024 11:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:11:ab:e6:eb:b8:e0:be:30:cf:ef:d3:fd:6d:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: May 26 18:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a46cf19464613e095afb7711bf0a05fffab0355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:8e:9e:5d:64:3e:b8:27:cc:09:86:2a:5a:
ca:02:92:ff:19:63:46:86:f0:c1:89:1d:8d:5f:da:
69:34:56:cb:d7:9f:ca:d8:d9:e0:46:c8:ef:19:4c:
fc:3b:e1:82:78:3a:fb:8c:a7:d7:eb:1d:32:c9:a5:
81:a3:42:1b:d5:19:48:db:b4:04:48:42:44:1f:5f:
a0:79:8a:8d:01:f6:7a:7d:30:e7:4a:53:a3:2f:b4:
9f:c4:6a:c7:9a:85:fb:d9:a9:8b:16:78:14:2e:8f:
5e:3a:0c:13:04:d5:03:4d:65:59:bc:db:eb:6c:41:
69:3a:40:dd:50:b9:74:7e:cd:1c:e0:24:58:dd:3e:
0c:a2:50:e1:6e:3c:bd:6a:eb:69:58:33:ca:ec:92:
ae:ce:7c:67:03:25:a4:4e:eb:a4:4f:96:10:80:27:
c0:e2:74:61:90:24:da:4b:ba:e5:ea:90:06:84:4c:
dd:90:27:d9:6e:4c:32:83:8b:6e:9c:28:dc:f5:78:
96:80:a8:f7:05:bb:24:a0:ac:c4:ea:40:d3:2a:dd:
e5:1c:55:9a:22:bd:53:25:09:9e:b7:ce:93:cc:2a:
9d:ea:da:bd:7c:90:c9:ee:6f:98:b2:28:7f:e7:9e:
80:10:7d:e4:ce:11:06:49:4e:2c:d8:91:97:83:23:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:F1:94:64:61:3E:09:5A:FB:77:11:BF:0A:05:FF:FA:B0:35:5B
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pGzxlGRhPgla-3cRvwoF__qwNVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.136.84.0/22
45.137.64.0/22
46.18.107.0/24
46.21.250.0/24
77.220.212.0/22
81.31.197.0/24
91.201.25.0/24
91.208.127.0/24
91.209.226.0/24
91.228.56.0/24
94.124.78.0/24
178.159.38.0/23
178.159.42.0/23
185.23.108.0/24
185.51.121.0/24
185.51.246.0/23
185.93.6.0/24
185.107.237.0/24
185.201.252.0/24
185.204.109.0/24
185.232.164.0/24
185.235.128.0/22
185.241.52.0/22
185.244.216.0/22
185.250.204.0/22
193.22.21.0/24
193.56.8.0/24
193.163.7.0/24
193.163.113.0/24
194.29.53.0/24
212.8.244.0/24
212.8.246.0/24
212.23.221.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
98:32:88:f1:a2:e7:ef:f5:ba:88:a9:aa:6e:9b:56:ac:b2:ef:
e6:e9:c7:b5:61:90:51:30:9d:30:4f:e6:eb:0b:25:b3:55:09:
e8:a3:97:08:f2:96:61:fd:e1:2c:b4:c8:78:a2:7e:1c:11:bf:
fd:47:ca:ff:a8:75:4d:fa:40:9a:63:7b:a9:e2:ff:57:8a:bd:
1b:06:64:c0:75:90:fa:3d:a3:f9:26:16:a5:17:bc:c0:47:7c:
bf:74:49:a0:09:58:da:e8:24:03:bd:d6:6a:b7:fa:47:17:6f:
88:95:3f:72:83:09:1d:40:b1:7f:7c:5a:d3:2f:d1:92:80:05:
f5:da:04:1f:c3:66:b2:b3:c9:26:30:a8:36:9f:13:c1:69:6a:
4d:43:c2:af:3c:26:44:21:81:7b:d3:d1:74:cd:3c:20:5c:33:
9c:e9:46:98:3e:e9:f1:28:8b:85:ab:2d:ab:d4:79:4f:d4:96:
af:c5:58:e7:de:bf:31:42:ce:ea:dc:88:4b:eb:04:8d:a4:32:
0f:45:1b:0a:f5:90:7e:3d:8d:f3:7c:20:25:c0:9d:72:ba:90:
0f:db:ba:36:aa:01:d4:fb:07:6b:cb:da:23:f7:3f:80:ac:45:
e8:d4:d9:12:a7:97:8f:6b:12:29:34:d5:cc:38:12:31:b5:5d:
89:01:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:39 2024 by rpki-client on console.sobornost.net