Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/KUzMr0Du0Wc2phatNrlSFwOV2z0.roa
File: KUzMr0Du0Wc2phatNrlSFwOV2z0.roa (raw, json)
Hash identifier: WFOpmWJ9IoQjkqZVT/Pm9kg00fnAtFRt1iYJEmWcqLw=
Subject key identifier: 29:4C:CC:AF:40:EE:D1:67:36:A6:16:AD:36:B9:52:17:03:95:DB:3D
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0194236A01CE2451211C48438A4DDF353980
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/KUzMr0Du0Wc2phatNrlSFwOV2z0.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:01:ce:24:51:21:1c:48:43:8a:4d:df:35:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=294cccaf40eed16736a616ad36b952170395db3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:1e:e6:e5:b6:8c:b9:1f:cc:1a:63:54:1f:
94:a6:0d:5e:9b:bf:c9:be:3d:6a:c8:bd:97:25:75:
bd:64:ff:1f:48:ab:ff:5d:ad:8e:81:5d:a7:f1:d8:
7e:f1:af:0f:7e:ec:7f:04:5c:c4:18:d2:af:a7:f8:
27:cb:6f:65:f4:2e:23:00:05:e6:51:7e:63:32:44:
f5:25:7b:ce:94:3a:dc:6a:49:22:45:d2:c4:61:d8:
de:10:2f:ea:41:a3:5d:cf:85:df:fa:dc:91:84:ec:
23:50:bc:e8:eb:1e:6e:72:f1:8a:a4:47:4a:b0:16:
47:93:20:ec:ea:a1:5b:e2:94:0c:c7:e8:32:96:d8:
22:a1:b8:3d:b8:b5:02:66:8f:28:6f:31:92:a2:50:
93:4b:d5:9e:a4:43:cf:e6:8a:f7:a3:50:90:36:9f:
52:9e:43:04:3a:22:14:6b:82:75:c2:7e:da:bc:d7:
98:5c:09:bb:d3:4a:f1:3c:b8:ee:92:95:b9:62:e2:
a3:da:ab:24:3a:af:9c:a0:c8:93:d0:b5:55:13:13:
c4:d4:92:fc:f0:f3:46:9c:32:53:4c:dd:8b:6f:6a:
82:47:0f:8b:db:d1:f4:ca:18:22:4a:9a:2f:28:fe:
e3:1c:c8:42:40:4c:96:e4:42:6a:49:4e:3c:6c:bc:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4C:CC:AF:40:EE:D1:67:36:A6:16:AD:36:B9:52:17:03:95:DB:3D
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/KUzMr0Du0Wc2phatNrlSFwOV2z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf46:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c05::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
27:5f:60:7e:b7:fe:04:70:73:4c:32:7c:98:4b:8e:2e:2a:c1:
6a:1c:03:b0:42:0b:e0:da:0e:08:16:60:a2:bb:4d:4d:29:7d:
8d:9a:8f:22:75:2e:fd:33:02:3f:59:82:64:ed:12:48:0f:b7:
0e:9c:c3:27:f7:a6:3c:61:6c:c2:bf:0b:f1:56:c2:e6:39:93:
11:7d:78:cb:70:e7:10:58:a9:cc:bd:5a:28:62:52:96:e5:af:
2b:12:4f:90:ed:c8:37:70:8e:20:6f:36:08:09:4b:87:8b:8b:
fa:d3:3a:93:41:35:71:ba:6b:5e:4c:0d:5e:ac:f8:38:b7:23:
7f:5f:a5:20:35:88:88:91:c4:82:a7:1b:be:32:ea:c7:7d:6c:
12:e5:cf:d7:7a:33:67:01:0f:e9:50:29:05:07:3f:8b:4a:d1:
9e:d8:f4:25:51:7f:7c:7e:cb:1d:4e:74:cc:f7:0f:f8:5f:33:
34:80:4a:1e:5b:f2:c7:86:89:66:9f:05:69:17:66:4c:15:1b:
d9:52:65:32:22:4f:c5:5a:1b:59:05:dc:cb:24:28:8d:3c:cc:
db:96:36:c5:fe:45:20:02:df:fd:11:c0:7a:25:5e:16:2f:a9:
e5:65:da:5e:16:2b:74:3b:cd:c2:99:1c:f5:f8:67:8f:34:e4:
a2:e1:60:bb
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgISAZQjagHOJFEhHEhDik3fNTmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTRjY2NhZjQwZWVkMTY3MzZhNjE2YWQzNmI5NTIxNzAzOTVkYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pwe5uW2jLkfzBpjVB+Upg1em7/J
vj1qyL2XJXW9ZP8fSKv/Xa2OgV2n8dh+8a8Pfux/BFzEGNKvp/gny29l9C4jAAXm
UX5jMkT1JXvOlDrcakkiRdLEYdjeEC/qQaNdz4Xf+tyRhOwjULzo6x5ucvGKpEdK
sBZHkyDs6qFb4pQMx+gyltgiobg9uLUCZo8obzGSolCTS9WepEPP5or3o1CQNp9S
nkMEOiIUa4J1wn7avNeYXAm700rxPLjukpW5YuKj2qskOq+coMiT0LVVExPE1JL8
8PNGnDJTTN2Lb2qCRw+L29H0yhgiSpovKP7jHMhCQEyW5EJqSU48bLxitQIDAQAB
o4IDNjCCAzIwHQYDVR0OBBYEFClMzK9A7tFnNqYWrTa5UhcDlds9MB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvS1V6TXIwRHUwV2MycGhhdE5ybFNGd09WMnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSgYIKwYBBQUHAQcBAf8EggE5MIIBNTCBywQCAAEwgcQD
BAIl3XwDBAItQ+QDBAIteLADBAA+AwwDBAJKd8AwDAMEAlBczAMEAFBczgMEAlZo
SAMEAVnd4AMEAluEhAMEAFvCoTAMAwQAW+HZAwQCW+HYAwQCZyO8AwQCZ2oAAwQC
Z3FEAwQCZ+dIAwQCsHhAAwQCsHhIAwQCueo4AwQCuepAAwQCuevwAwQCuezoAwQC
ufJUAwQCufqUAwQAwcvKAwQCwjacAwQAwj4qAwQBwvZyAwQCwyroAwQAw5VXAwQE
1Z9AMGUEAgACMF8DBQMqCXxAMA4DBQAqC89FAwUAKgvPRgMFACoROAUDBQEqETwC
MA4DBQAqEUwFAwUAKhFMBgMFAioULYADBQAqFC2FAwUAKhQugAMFACoUL4ADBQAq
FDCAAwUAKhQ4gDANBgkqhkiG9w0BAQsFAAOCAQEAJ19gfrf+BHBzTDJ8mEuOLirB
ahwDsEIL4NoOCBZgortNTSl9jZqPInUu/TMCP1mCZO0SSA+3DpzDJ/emPGFswr8L
8VbC5jmTEX14y3DnEFipzL1aKGJSluWvKxJPkO3IN3COIG82CAlLh4uL+tM6k0E1
cbprXkwNXqz4OLcjf1+lIDWIiJHEgqcbvjLqx31sEuXP13ozZwEP6VApBQc/i0rR
ntj0JVF/fH7LHU50zPcP+F8zNIBKHlvyx4aJZp8FaRdmTBUb2VJlMiJPxVobWQXc
yyQojTzM25Y2xf5FIALf/RHAeiVeFi+p5WXaXhYrdDvNwpkc9fhnjzTkouFguw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:07:34 2025 by rpki-client