Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/LVgNtXZByEHJ83DgmSnAoPqPgRo.roa
File: LVgNtXZByEHJ83DgmSnAoPqPgRo.roa (raw, json)
Hash identifier: r+RQkWmJb/KjkZA/rl5nElwIOTgHXX3vwrRsFdnNxQs=
Subject key identifier: 2D:58:0D:B5:76:41:C8:41:C9:F3:70:E0:99:29:C0:A0:FA:8F:81:1A
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0194B40AFDD20052351B36298E27000F34A4
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/LVgNtXZByEHJ83DgmSnAoPqPgRo.roa
Signing time: Wed 29 Jan 2025 21:50:06 +0000
ROA not before: Wed 29 Jan 2025 21:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 14:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b4:0a:fd:d2:00:52:35:1b:36:29:8e:27:00:0f:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 29 21:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d580db57641c841c9f370e09929c0a0fa8f811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:7d:8f:1f:0b:61:d0:ee:a9:16:44:3e:2d:
a4:f9:29:4f:aa:04:b1:82:a2:99:9d:91:ed:33:85:
18:7b:7b:0d:a9:0d:fb:24:a1:42:66:7e:ce:ec:30:
b4:5a:3d:67:97:0b:8d:b2:17:f6:c7:89:0d:9f:98:
e4:26:a2:39:6a:32:6d:81:25:4e:cb:81:7a:25:a0:
08:a7:69:b8:c5:2d:a6:a9:d9:dc:b3:59:1f:0d:d1:
5b:f3:1d:0f:2d:61:17:3f:6e:ab:e7:9d:c6:92:83:
ee:5e:22:6b:b2:2a:6c:76:ef:9a:60:b9:ff:f1:3c:
19:f1:05:47:a6:81:8b:5f:7a:0f:f8:0c:1f:fe:54:
4f:64:c0:8b:72:3a:a9:57:45:11:4c:48:da:24:49:
08:da:ba:07:97:cd:41:ee:b5:91:86:9d:67:19:be:
fa:37:39:78:21:0e:62:a9:1c:43:f7:07:fb:dd:a0:
1c:5b:b8:4a:70:30:46:f8:6d:f5:1b:84:f3:6f:af:
18:24:37:cd:64:df:58:6b:b8:d3:23:c8:d3:b0:f4:
1e:4c:38:32:47:1c:94:94:22:de:bc:19:60:33:fa:
bf:a0:18:9d:fe:56:5c:47:41:3b:85:d5:39:d3:e0:
a3:d5:b5:70:fd:71:47:8a:ca:fa:37:0c:39:7e:55:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:0D:B5:76:41:C8:41:C9:F3:70:E0:99:29:C0:A0:FA:8F:81:1A
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/LVgNtXZByEHJ83DgmSnAoPqPgRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
a3:d1:52:5a:5e:18:c1:6b:4c:61:f0:b3:8d:df:76:d9:7e:d5:
01:ba:c1:b2:03:97:21:c6:6d:ce:f1:f5:68:66:13:66:f7:f3:
4e:74:72:4f:63:ce:67:61:ca:8a:2f:39:74:e3:4b:bb:63:33:
a2:20:fb:82:a4:4a:bf:a1:ba:f2:1e:e4:93:60:04:49:82:c8:
78:50:41:c5:bd:73:72:33:8e:5d:fd:da:31:b1:3c:19:f3:db:
d4:e9:d6:90:8f:69:4e:f1:68:1d:24:f1:4b:2d:97:df:76:60:
e9:88:c1:0b:10:5f:30:eb:5b:41:83:7b:69:bd:1a:54:9b:36:
52:14:05:b2:2c:3c:94:69:ba:c8:b6:e0:a3:66:c9:0f:72:c0:
19:a0:12:b4:4b:a7:11:a5:21:ee:74:3d:61:80:f3:80:c0:a2:
e7:5e:ea:2e:9b:04:81:17:36:57:80:b6:bd:78:9f:93:34:a2:
55:88:62:bb:ca:b7:09:97:79:cb:a0:73:19:6b:3e:ee:3b:7f:
90:0b:0a:a6:40:e5:b4:b3:6d:b5:6f:64:52:5b:7f:f9:32:f4:
e6:bb:93:2c:40:2f:2b:37:4f:cc:9a:ae:e0:38:4f:9c:55:a6:
cc:d6:5f:99:8e:ff:4a:dc:93:d3:ee:ee:54:3f:32:3f:9f:81:
7c:31:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:13:47 2025 by rpki-client