Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/2FpIMmUck7WIW0QzG8t0UEg53qo.roa
File: 2FpIMmUck7WIW0QzG8t0UEg53qo.roa (raw, json)
Hash identifier: vD/F0ZjztZzWpx+PmxCKwBM863s95QCKuSvZDh5WZVE=
Subject key identifier: D8:5A:48:32:65:1C:93:B5:88:5B:44:33:1B:CB:74:50:48:39:DE:AA
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0194CC7635E48DD3C378E1692A36597B359C
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/2FpIMmUck7WIW0QzG8t0UEg53qo.roa
Signing time: Mon 03 Feb 2025 15:38:06 +0000
ROA not before: Mon 03 Feb 2025 15:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204035
IP address blocks: 37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
37.228.148.0/22 maxlen: 22
37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.150.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
146.19.118.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
185.101.92.0/24 maxlen: 24
185.101.93.0/24 maxlen: 24
185.101.94.0/24 maxlen: 24
185.101.95.0/24 maxlen: 24
185.107.192.0/22 maxlen: 22
185.107.192.0/23 maxlen: 23
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
185.116.159.0/24 maxlen: 24
185.245.168.0/22 maxlen: 22
193.46.24.0/22 maxlen: 22
193.56.126.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
193.56.173.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.248.0/24 maxlen: 24
194.125.249.0/24 maxlen: 24
194.125.250.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
2a06:1c40::/29 maxlen: 29
2a06:1c40::/32 maxlen: 32
2a06:1c41::/32 maxlen: 32
2a06:7f80::/29 maxlen: 29
2a06:7f80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 15:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:76:35:e4:8d:d3:c3:78:e1:69:2a:36:59:7b:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 3 15:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d85a4832651c93b5885b44331bcb74504839deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:60:0b:c9:d5:ed:c4:1e:11:ff:88:db:47:
a2:67:95:c9:05:65:c6:09:c8:a1:cc:3c:f5:36:51:
a2:25:52:a0:0c:11:0d:3a:e8:79:44:d0:f1:39:15:
8f:8a:0d:7e:eb:70:49:c2:f3:3d:15:64:be:c1:14:
03:56:43:bc:3c:88:52:3a:ad:07:bd:bd:00:82:12:
9e:45:61:6a:21:3b:4f:0c:a8:c9:54:39:26:f8:92:
49:b2:5e:97:71:44:58:b5:98:35:fa:d2:6a:02:5a:
a2:69:f7:c7:aa:33:62:21:b4:fc:37:00:fd:83:74:
09:d9:52:e9:d9:2b:6f:a2:47:50:e1:9b:b4:fc:7a:
5a:5a:92:31:85:66:f5:56:df:8b:3a:76:2c:c8:a3:
0a:d8:2d:de:e1:4b:68:68:4a:22:70:42:5f:ce:e3:
30:82:22:b6:37:ce:87:23:2e:f7:ca:39:70:c7:a1:
c5:40:5d:d9:c1:a6:36:b1:37:f1:be:63:7f:65:6a:
9e:08:b1:1e:e2:16:b5:ad:21:f0:4c:69:54:f3:81:
0c:57:b4:cc:3e:a4:35:d4:57:1d:77:37:54:cf:61:
09:be:b1:f3:26:75:34:ef:8d:40:aa:04:01:c5:61:
1a:0f:b7:e7:b7:9a:d6:be:5c:a8:0a:fc:19:2b:9c:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5A:48:32:65:1C:93:B5:88:5B:44:33:1B:CB:74:50:48:39:DE:AA
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/2FpIMmUck7WIW0QzG8t0UEg53qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:3a:22:41:bc:5f:29:96:25:0b:da:1d:4d:e3:6f:67:4b:35:
16:60:dc:eb:b3:86:04:cb:5b:d2:70:93:ca:60:85:fd:7e:a3:
13:81:89:1c:a8:02:e0:37:b3:fe:19:a4:a3:8d:88:2f:78:27:
c5:d2:a7:98:97:0f:c6:82:26:39:a8:97:2c:98:54:61:aa:f6:
fe:df:8d:85:eb:63:8c:55:7b:14:ad:80:2c:6d:2d:c9:f6:9c:
c4:af:fb:97:ca:36:8f:a6:01:45:14:10:2c:e4:7b:59:6e:f0:
bb:5f:1b:a1:60:fe:34:ab:47:5d:7e:11:88:ca:cd:9d:e9:8a:
9f:22:24:71:1f:77:ef:9a:4d:81:a9:18:e0:d7:84:b9:eb:f5:
89:ce:75:6b:de:17:c4:44:67:bc:4c:8d:1f:dd:98:70:c0:6c:
2f:fe:a9:b6:77:a2:65:f7:27:51:e4:5d:2c:67:31:5c:5e:51:
c0:cf:e9:8c:94:b5:ed:f0:3e:6c:cf:32:60:96:99:f8:ad:49:
d2:71:84:a6:21:3e:52:4c:4c:d1:5e:e7:d9:34:8d:ad:12:ab:
c0:00:5a:de:f1:48:34:65:18:c8:44:47:d2:ac:d0:92:c2:fb:
4e:3c:20:9a:9c:1b:7f:da:8c:65:7b:7b:77:3f:75:48:f1:97:
b6:e7:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:02:03 2025 by rpki-client