Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ipTJX6VtZ7JB1qQ4lycKAf0xSn4.roa
File: ipTJX6VtZ7JB1qQ4lycKAf0xSn4.roa (raw, json)
Hash identifier: pHggpXDIxL7qzeU+ZnUJMkt51a+2jESNqeB9ovgzgtc=
Subject key identifier: 8A:94:C9:5F:A5:6D:67:B2:41:D6:A4:38:97:27:0A:01:FD:31:4A:7E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019376F10FF88F67318439A312FEDE8FBCD2
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ipTJX6VtZ7JB1qQ4lycKAf0xSn4.roa
Signing time: Fri 29 Nov 2024 08:02:09 +0000
ROA not before: Fri 29 Nov 2024 08:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Dec 2024 14:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:f1:0f:f8:8f:67:31:84:39:a3:12:fe:de:8f:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Nov 29 08:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a94c95fa56d67b241d6a43897270a01fd314a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:de:d9:77:71:ce:c6:f0:e8:cb:dc:f4:24:
9a:a0:95:1a:54:c4:33:f1:b1:53:c0:4f:ff:b6:c8:
1e:da:a0:46:f7:c4:38:8a:f9:66:36:13:a0:5a:c8:
1a:86:4b:6a:ce:5b:e2:32:8e:a9:80:18:57:99:da:
cd:4f:bd:02:5c:e1:58:ab:34:f4:80:6c:d4:e6:3b:
04:12:97:43:02:16:0d:27:4f:cb:d5:9a:71:72:41:
e3:43:37:48:b4:32:8f:44:f6:82:da:92:cf:f2:ba:
62:16:df:56:f7:a2:a7:c9:23:2d:15:5a:3a:5d:7e:
44:e3:ab:41:0b:5a:17:e8:23:8b:77:e1:b5:7e:ec:
a5:0b:5b:af:1e:d3:bd:ea:c9:6a:a4:68:f0:67:7d:
53:52:a7:33:4b:d2:ce:eb:5e:04:f2:c8:1f:72:83:
ee:bb:62:82:0f:9d:0a:b1:c5:42:82:cb:71:fc:8b:
9b:0f:4b:f5:97:4a:1d:e4:d3:2c:26:5d:ec:2f:fd:
f0:1f:3d:ed:cb:a5:95:57:38:ce:a4:84:35:fd:86:
05:b5:b6:d2:31:1b:08:8c:a4:98:5c:25:b5:27:46:
81:a0:1c:58:4f:94:fd:9f:a8:7d:e1:b1:31:cf:9a:
e2:4e:57:4f:fa:81:8b:33:05:c4:1e:51:71:ad:11:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:C9:5F:A5:6D:67:B2:41:D6:A4:38:97:27:0A:01:FD:31:4A:7E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ipTJX6VtZ7JB1qQ4lycKAf0xSn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a11:4c05::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
49:a9:45:2e:69:bb:92:43:00:5a:e0:66:4e:c5:e4:44:3a:1f:
40:bd:10:2e:79:64:2f:19:f3:76:ac:40:a2:2b:82:9a:12:24:
e9:1e:8d:07:46:5d:09:40:58:5a:4c:d5:b4:31:0b:b7:69:7d:
94:74:4b:0c:7c:25:eb:66:8a:1e:79:84:93:9a:93:91:30:f8:
82:8d:3a:d2:20:09:08:e1:53:72:3a:48:41:76:1d:bc:96:2b:
27:a0:1a:4d:97:e9:4e:a2:8c:6b:1c:d7:1f:82:88:b4:7c:4c:
af:9a:7c:fa:cb:c2:09:45:35:4b:35:0f:08:6d:58:c2:5d:f0:
14:e7:fe:f1:d5:ab:7e:e2:72:af:0b:2e:e5:3f:75:5b:4b:ef:
c5:c1:fe:45:f6:98:1d:c4:96:4a:61:cc:6a:55:6f:e3:e5:63:
94:dd:d1:4f:bb:91:9a:86:7d:30:02:68:3b:dc:59:f0:b0:8d:
a3:4c:3c:5d:a0:80:85:b5:07:ed:6e:6c:97:72:4e:c9:c9:85:
ad:f6:ae:a5:de:2b:bd:21:6b:6d:3b:cd:de:46:9a:b7:8d:b3:
4a:2c:b0:2e:9d:73:b0:ae:3b:72:84:58:38:63:39:86:46:35:
04:6d:37:f4:ef:18:cf:40:0d:da:1d:13:44:7a:07:88:23:8f:
5d:20:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:06:35 2025 by rpki-client