Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/fTehu6R3AoM7vzxCOKIZORSQlUI.roa
File: fTehu6R3AoM7vzxCOKIZORSQlUI.roa (raw, json)
Hash identifier: GS3ArN1KMCpgSOmhobJHpxL3olu/s5FKNkG7/hwSOoQ=
Subject key identifier: 7D:37:A1:BB:A4:77:02:83:3B:BF:3C:42:38:A2:19:39:14:90:95:42
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0194BCBD8D6A1CCF74246733F06650FC42F8
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/fTehu6R3AoM7vzxCOKIZORSQlUI.roa
Signing time: Fri 31 Jan 2025 14:22:06 +0000
ROA not before: Fri 31 Jan 2025 14:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 10:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:bd:8d:6a:1c:cf:74:24:67:33:f0:66:50:fc:42:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 31 14:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d37a1bba47702833bbf3c4238a2193914909542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:19:6d:5a:24:52:82:26:55:28:16:67:1e:8a:
2f:5a:60:98:13:67:d2:80:c2:23:b0:00:fb:58:0b:
55:0f:90:2f:8a:9c:6c:4e:e8:a3:f5:96:0d:2d:54:
03:b2:a3:2c:cd:42:58:2f:35:1c:ec:ae:93:2e:fd:
30:93:db:34:8d:38:d6:4e:48:af:fa:cf:81:66:01:
1c:c5:aa:66:dd:24:13:d0:37:d2:98:11:3a:04:a2:
59:98:b3:7f:3b:bc:e0:c9:a8:42:ec:f2:53:50:dd:
71:87:b0:85:49:25:ce:8d:f2:92:0c:c8:58:03:f0:
a6:51:d6:fe:ed:3b:9d:87:52:73:fd:50:8a:fb:ca:
04:ed:47:a9:da:c7:51:4c:ec:98:b4:ad:a3:90:24:
fc:12:c7:52:fa:99:af:6a:25:6b:12:39:cb:ab:7a:
c8:a3:62:5e:42:56:08:cf:cd:08:19:41:9f:d7:06:
90:d0:12:c1:fb:dd:29:d4:39:c7:b2:12:1d:c7:66:
85:98:5f:b8:44:7d:04:2c:52:df:8a:54:8f:b1:4e:
b5:f7:38:84:79:6a:c1:d3:c1:79:61:94:8d:14:1e:
73:fa:c7:e8:88:8d:8f:08:76:d2:34:6e:ff:eb:36:
e5:27:82:96:24:30:b0:b3:13:16:03:20:77:19:ac:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:A1:BB:A4:77:02:83:3B:BF:3C:42:38:A2:19:39:14:90:95:42
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/fTehu6R3AoM7vzxCOKIZORSQlUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
19:69:b8:67:61:c8:a8:3f:09:59:ea:a0:30:ce:73:d7:e1:a7:
6c:08:1d:eb:33:96:68:85:9f:66:79:cb:4f:fb:7d:41:db:4b:
ce:83:c8:67:ee:8b:88:1e:68:b7:44:5f:58:19:bc:3a:ea:5d:
57:c2:d8:cf:00:af:8f:cd:ad:58:8e:16:3b:3f:bc:58:05:d8:
51:b2:16:e9:d4:d8:d5:be:d5:f6:c3:1e:64:e5:a1:b8:f4:01:
20:89:b6:06:db:1b:5e:de:a3:11:51:4a:8b:ee:0f:70:70:69:
ef:fe:fd:4f:db:23:03:9d:37:f9:22:11:06:df:06:9c:b8:3f:
70:3c:7e:12:ce:39:38:bb:06:3b:60:64:53:ae:76:fb:95:1f:
24:0f:9b:2b:13:6e:41:b2:7d:dd:f0:a0:8a:aa:de:09:3f:13:
e7:2b:18:41:4c:16:88:b5:30:0d:32:7e:bf:94:46:36:70:86:
1a:7a:55:16:b0:17:a1:4b:ab:e4:c0:5e:b5:18:e6:43:3d:39:
d5:22:b6:61:24:7e:9e:66:8d:14:20:ae:6c:60:b7:5f:4b:de:
96:8d:f8:13:48:d0:2b:01:40:e4:9a:1f:55:76:31:17:3c:44:
d8:1f:3b:d9:94:2f:de:b9:25:00:37:51:36:ca:b6:3d:34:05:
f4:c1:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:07:27 2025 by rpki-client