Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/OsL-8MhwNWQXQqqSt0wu_WeM_TQ.roa
File: OsL-8MhwNWQXQqqSt0wu_WeM_TQ.roa (raw, json)
Hash identifier: wvk2/0+JwiN1VNm43ApyFRsV03yxjcF8hBOLhyBH20A=
Subject key identifier: 3A:C2:FE:F0:C8:70:35:64:17:42:AA:92:B7:4C:2E:FD:67:8C:FD:34
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01946EE7189C7E90F4C6C1C0C230F71D62F3
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/OsL-8MhwNWQXQqqSt0wu_WeM_TQ.roa
Signing time: Thu 16 Jan 2025 11:37:06 +0000
ROA not before: Thu 16 Jan 2025 11:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 21:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:e7:18:9c:7e:90:f4:c6:c1:c0:c2:30:f7:1d:62:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 16 11:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac2fef0c87035641742aa92b74c2efd678cfd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:21:68:22:5f:da:b2:f4:d3:3c:5e:e4:91:
0e:af:36:14:e2:83:37:ee:c3:de:f9:29:c6:2e:14:
61:4e:f3:f5:85:6f:c7:fc:59:2e:f1:ce:ac:f2:40:
8e:1e:0d:1d:c7:37:52:3b:62:6f:3f:1c:1b:26:0e:
fb:a2:76:8c:f6:f4:ec:ca:6d:db:62:47:34:15:be:
f4:60:71:0a:85:d5:2f:cc:15:06:34:94:33:26:75:
0c:e9:1b:f0:6f:96:36:99:ac:97:b2:27:26:37:27:
8f:c5:23:2a:7d:20:ab:a5:ab:25:6d:12:24:1f:fd:
7a:78:fb:e9:d9:01:ec:3d:60:06:19:62:c7:f9:ee:
3c:82:59:a8:a4:ff:d5:e4:57:c5:40:84:5c:b5:2c:
b0:c8:ee:a4:63:5b:81:20:ff:b8:17:a7:22:7a:47:
74:5c:65:f8:f1:f7:d4:7b:d0:4d:54:90:a3:c9:25:
90:38:a1:27:2f:ab:8a:0a:e6:7a:6c:74:2a:77:4e:
8b:72:a3:0e:d1:39:82:9b:d7:f3:58:de:15:5a:d9:
b8:d5:b2:e9:44:57:04:ad:cc:ea:6f:1c:3b:ee:87:
c9:42:e9:15:15:e2:03:61:8d:71:1a:12:6e:eb:ed:
51:7c:e8:2b:d2:ed:08:de:b5:75:3b:fe:05:fb:20:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:FE:F0:C8:70:35:64:17:42:AA:92:B7:4C:2E:FD:67:8C:FD:34
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/OsL-8MhwNWQXQqqSt0wu_WeM_TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf46:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
80:22:62:7a:36:7e:11:cd:4d:b8:bc:9a:18:30:14:37:40:2c:
23:c7:51:35:e0:ea:d2:ab:e9:8b:f4:15:a4:c3:f7:10:bb:f6:
c4:00:db:e5:d2:b2:20:91:d2:62:e2:ff:d8:ca:e7:e8:b4:19:
dd:6c:2a:19:78:22:07:3c:f5:68:03:ea:29:20:98:b6:21:a4:
94:61:51:5b:49:2a:61:ba:75:3b:58:e1:6e:c3:06:45:4a:cb:
4d:2e:54:11:fb:e4:c8:cf:c9:b3:58:e1:b1:5d:f5:fe:f6:14:
4a:5a:0a:59:49:63:66:c5:2a:26:68:87:5b:84:d7:f7:c6:39:
a3:79:c3:9c:56:d2:4a:20:71:09:c3:b5:11:bf:77:a7:f3:64:
15:d9:c1:c5:e9:60:9e:70:47:30:b5:f8:4d:29:02:9c:1a:f0:
bc:e3:f9:73:29:54:50:1c:da:d5:65:9f:d0:f5:20:e9:31:09:
71:f6:31:88:e6:4b:80:36:4d:76:44:1f:5f:0b:0a:ce:9c:b5:
47:0c:57:86:b5:3d:59:9f:62:84:96:8c:55:e6:07:30:3a:bf:
05:8e:7f:de:fc:4e:49:e2:cf:0a:4b:ac:26:00:df:95:ac:c3:
54:90:6d:67:33:bb:da:ed:f4:b7:c4:f6:a7:5f:5a:c9:74:07:
1a:88:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:57 2025 by rpki-client