Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/jUsiyvSUaXENxcraMqnbLIpKuZQ.roa
File: jUsiyvSUaXENxcraMqnbLIpKuZQ.roa (raw, json)
Hash identifier: VnywnrvSbrcJsNEQzuWk/SIBDja6bwXE86NdFtewc9o=
Subject key identifier: 8D:4B:22:CA:F4:94:69:71:0D:C5:CA:DA:32:A9:DB:2C:8A:4A:B9:94
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 019251F16A623D461E7F69DBBC660BAEB3D2
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/jUsiyvSUaXENxcraMqnbLIpKuZQ.roa
Signing time: Thu 03 Oct 2024 10:33:48 +0000
ROA not before: Thu 03 Oct 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50564
IP address blocks: 45.131.28.0/22 maxlen: 22
45.131.28.0/24 maxlen: 24
45.131.29.0/24 maxlen: 24
45.131.30.0/24 maxlen: 24
45.131.31.0/24 maxlen: 24
94.158.252.0/22 maxlen: 22
94.158.252.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.24.0/24 maxlen: 24
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.236.0/24 maxlen: 24
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.124.0/24 maxlen: 24
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
185.184.0.0/22 maxlen: 22
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.48.0/24 maxlen: 24
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 07:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:f1:6a:62:3d:46:1e:7f:69:db:bc:66:0b:ae:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Oct 3 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d4b22caf49469710dc5cada32a9db2c8a4ab994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:80:ad:76:d9:1c:d1:4e:79:a0:ae:d5:2d:
0e:bc:69:c4:5c:3e:1a:ea:aa:96:e2:b8:3c:cd:29:
d8:bf:a1:af:99:22:29:e2:12:b7:bc:6b:39:47:82:
a8:ec:d4:e7:c8:3a:f2:cc:62:7e:9d:61:bb:f2:cc:
ca:3c:f6:d4:0e:79:ef:37:7a:2a:74:c5:5e:99:39:
78:4f:41:58:ca:87:f9:a0:28:2f:a8:15:57:4f:ec:
9f:8a:ea:81:92:7f:8d:c8:29:fd:76:28:9c:bb:6a:
50:9d:b1:b2:f6:22:d5:bd:db:d4:c0:41:ad:97:56:
0a:41:35:7a:c8:4e:7f:59:0b:8c:63:00:67:22:f6:
07:ed:87:ff:55:7a:29:60:92:d2:7d:8e:2f:26:69:
e2:9b:44:3c:c3:e5:53:2f:34:81:db:c8:b1:23:5a:
58:db:2f:31:c6:01:2b:0e:ab:cd:2a:e2:d6:24:33:
71:cd:89:3d:64:c4:31:c5:fd:9e:26:91:63:fd:e7:
4e:f0:2f:f2:62:dc:9b:4e:a8:3b:32:97:80:4f:a3:
78:f7:11:92:e4:21:c0:3c:ab:e4:7d:5a:b8:7a:4c:
09:37:2d:d3:7f:a1:7b:dc:47:57:6e:65:cc:08:46:
79:9f:93:cd:2c:a4:85:51:8e:67:86:41:60:b9:a4:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:22:CA:F4:94:69:71:0D:C5:CA:DA:32:A9:DB:2C:8A:4A:B9:94
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/jUsiyvSUaXENxcraMqnbLIpKuZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:8e:6d:49:61:e9:d1:78:e4:ad:f9:9a:ac:d5:1f:27:92:9d:
c2:fe:52:5c:d8:1b:47:52:6c:a6:22:ee:09:f3:aa:e8:b2:7d:
cd:3f:e9:ac:67:5d:2b:ff:c7:4d:dc:5d:f6:29:1c:78:a0:59:
b7:fb:fa:c9:6c:4c:02:46:b1:3f:22:36:19:29:51:5e:2b:d0:
e3:43:3f:4b:f7:ef:55:05:9d:96:7b:d6:96:d3:d5:de:48:37:
09:ff:dd:e3:3c:01:e1:e6:61:0b:bf:a1:43:9e:22:c0:8a:0e:
5e:f3:5a:1d:74:ca:41:e8:47:ab:1b:7b:b1:27:8e:2b:00:ff:
61:5d:ad:9d:46:a5:92:d0:08:b6:8b:0e:30:83:e1:71:85:d1:
38:61:7c:36:d8:33:cf:95:79:57:8b:9e:50:ff:f5:20:91:ca:
fb:21:b9:67:8e:e7:a5:63:53:6e:cb:f5:1e:11:72:9b:86:61:
b0:01:98:ab:8f:d2:45:71:cb:1c:69:9c:51:d4:58:74:17:14:
f4:81:07:af:b2:97:5e:31:4a:eb:a3:95:63:91:15:ec:e7:c4:
9d:92:13:8c:22:8b:98:1d:ec:07:a4:42:ec:2f:5e:ee:eb:35:
8a:6c:56:0f:70:33:69:ae:5c:b7:84:c4:83:12:4a:5d:5c:0c:
b9:52:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:15:31 2025 by rpki-client