Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/0Y4vwAf6cyfdAqE-2UfgP8WTaUs.roa
File: 0Y4vwAf6cyfdAqE-2UfgP8WTaUs.roa (raw, json)
Hash identifier: 2nSwvqZBEacNX2fO/ZZP5AQ9l0r03dFovVKZdOS2oiM=
Subject key identifier: D1:8E:2F:C0:07:FA:73:27:DD:02:A1:3E:D9:47:E0:3F:C5:93:69:4B
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0193F3D9EB1634A83C4A72005CC0BECB6D9A
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/0Y4vwAf6cyfdAqE-2UfgP8WTaUs.roa
Signing time: Mon 23 Dec 2024 14:09:25 +0000
ROA not before: Mon 23 Dec 2024 14:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:d9:eb:16:34:a8:3c:4a:72:00:5c:c0:be:cb:6d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Dec 23 14:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18e2fc007fa7327dd02a13ed947e03fc593694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:b6:f5:b6:98:96:af:a4:a1:a0:48:3c:c9:
ce:ca:9c:ca:c7:90:60:5d:08:70:63:81:65:c8:ea:
ad:fc:6e:14:3d:4d:ed:3a:29:c8:5c:4f:a7:dc:0a:
5e:c2:3d:30:3d:05:36:bb:7f:17:f2:0b:3e:0d:27:
fc:68:8a:4c:4d:f5:a0:a0:13:9a:e1:4f:0a:ea:3c:
27:6a:56:83:3e:b3:cc:f0:11:0f:ba:b9:f2:88:e8:
56:9e:8d:a3:49:1e:3b:ec:3b:7a:fa:c9:fc:17:b3:
55:66:90:c5:ac:5a:8c:01:86:30:af:84:45:9d:92:
72:55:c4:bc:f7:72:45:48:81:2d:3b:60:b5:b1:9e:
83:7c:7e:e9:a9:af:db:4f:3e:4d:43:bd:24:60:7e:
62:72:f7:85:45:72:38:29:bb:a2:f8:bf:49:a6:ab:
d5:ff:c0:7a:82:64:58:0f:8e:2c:97:87:ad:13:73:
74:3b:65:ce:db:05:80:76:77:f6:18:7a:af:51:95:
15:e1:de:6e:9b:28:80:f8:32:44:62:b7:6d:2b:92:
b8:9c:24:44:9f:4d:4b:d4:8f:d8:02:ff:73:75:ea:
a9:d0:00:e5:d6:ee:d0:c4:1d:8a:7f:68:ea:32:d8:
86:80:e2:a8:20:a6:f4:5d:25:01:f6:f4:e0:23:27:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:2F:C0:07:FA:73:27:DD:02:A1:3E:D9:47:E0:3F:C5:93:69:4B
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/0Y4vwAf6cyfdAqE-2UfgP8WTaUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf46:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c05::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
3f:81:39:71:af:15:83:0e:2f:4d:73:a7:f1:ed:fd:26:8b:b5:
22:e0:e0:75:ec:38:d5:5b:c8:44:55:ed:7c:e8:31:e4:c9:98:
ed:15:ad:21:12:10:c2:a4:81:69:61:b7:c3:ab:8a:39:43:fd:
84:60:44:3c:c9:76:a5:95:62:1f:62:65:bb:d3:6b:da:04:25:
0c:e3:96:d7:76:49:0e:62:00:c0:ae:16:f1:3b:1e:50:be:64:
11:db:b7:e4:e1:d6:e6:f0:71:63:cd:21:2c:07:51:02:4e:b9:
98:eb:e0:21:97:22:ba:5f:e3:ee:d1:ba:b0:c4:f3:bb:e1:34:
93:fc:bc:28:16:63:a4:37:fe:5c:52:18:3e:ab:d6:8a:66:2a:
4c:40:f2:9f:79:0f:bf:2d:ae:85:71:83:cd:4b:0f:25:36:ef:
0f:b2:96:c6:a5:4e:39:27:cb:56:7e:75:6e:22:4f:f2:4d:02:
3b:b2:03:d0:ca:53:79:25:bc:e6:40:11:59:2a:a8:ec:1f:5d:
93:4e:91:e5:d7:5c:2f:0c:14:7c:ce:4c:8d:2f:1a:16:1e:cf:
b5:3d:d2:ec:4e:5c:9b:0e:10:b8:67:1c:65:fe:2a:e1:c7:ee:
0a:0e:8f:83:74:8f:67:ac:e4:44:b2:b7:40:2a:17:ce:54:03:
3c:cb:7a:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:58 2025 by rpki-client