Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/BXB9fV4F24KXYLAD6vIrBYkkIns.roa
File: BXB9fV4F24KXYLAD6vIrBYkkIns.roa (raw, json)
Hash identifier: ojpsuEAP1TzisM3bNK4H7bdhbIvmcgekYu+Ym3nkGE8=
Subject key identifier: 05:70:7D:7D:5E:05:DB:82:97:60:B0:03:EA:F2:2B:05:89:24:22:7B
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01945A6DC718CD37FF3A6376FD7BE9E141EA
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/BXB9fV4F24KXYLAD6vIrBYkkIns.roa
Signing time: Sun 12 Jan 2025 12:12:11 +0000
ROA not before: Sun 12 Jan 2025 12:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51684
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
5.181.198.0/24 maxlen: 24
5.181.199.0/24 maxlen: 24
46.161.200.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
185.16.26.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
212.95.147.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
2a12:f680:80::/48 maxlen: 48
2a12:f680:81::/48 maxlen: 48
2a12:f680:82::/48 maxlen: 48
2a12:f680:84::/48 maxlen: 48
2a12:f680:85::/48 maxlen: 48
2a12:f680:86::/48 maxlen: 48
2a12:f680:281::/48 maxlen: 48
2a12:f680:282::/48 maxlen: 48
2a12:f680:283::/48 maxlen: 48
2a12:f680:284::/48 maxlen: 48
2a12:f680:285::/48 maxlen: 48
2a12:f680:380::/48 maxlen: 48
2a12:f680:381::/48 maxlen: 48
2a12:f680:382::/48 maxlen: 48
2a12:f680:384::/48 maxlen: 48
2a12:f680:385::/48 maxlen: 48
2a12:f680:400::/48 maxlen: 48
2a12:f680:401::/48 maxlen: 48
2a12:f680:402::/48 maxlen: 48
2a12:f680:404::/48 maxlen: 48
2a12:f680:405::/48 maxlen: 48
2a12:f680:480::/48 maxlen: 48
2a12:f680:481::/48 maxlen: 48
2a12:f680:482::/48 maxlen: 48
2a12:f680:484::/48 maxlen: 48
2a12:f680:485::/48 maxlen: 48
2a12:f680:500::/48 maxlen: 48
2a12:f680:501::/48 maxlen: 48
2a12:f680:502::/48 maxlen: 48
2a12:f680:504::/48 maxlen: 48
2a12:f680:580::/48 maxlen: 48
2a12:f680:581::/48 maxlen: 48
2a12:f680:582::/48 maxlen: 48
2a12:f680:584::/48 maxlen: 48
2a12:f680:585::/48 maxlen: 48
2a12:f680:680::/48 maxlen: 48
2a12:f680:681::/48 maxlen: 48
2a12:f680:682::/48 maxlen: 48
2a12:f680:684::/48 maxlen: 48
2a12:f680:700::/48 maxlen: 48
2a12:f680:701::/48 maxlen: 48
2a12:f680:702::/48 maxlen: 48
2a12:f680:704::/48 maxlen: 48
2a12:f680:780::/48 maxlen: 48
2a12:f680:781::/48 maxlen: 48
2a12:f680:782::/48 maxlen: 48
2a12:f680:785::/48 maxlen: 48
2a12:f680:880::/48 maxlen: 48
2a12:f680:881::/48 maxlen: 48
2a12:f680:882::/48 maxlen: 48
2a12:f680:884::/48 maxlen: 48
2a12:f680:900::/48 maxlen: 48
2a12:f680:901::/48 maxlen: 48
2a12:f680:902::/48 maxlen: 48
2a12:f680:904::/48 maxlen: 48
2a12:f680:980::/48 maxlen: 48
2a12:f680:981::/48 maxlen: 48
2a12:f680:982::/48 maxlen: 48
2a12:f680:984::/48 maxlen: 48
2a12:f680:a00::/48 maxlen: 48
2a12:f680:a01::/48 maxlen: 48
2a12:f680:a02::/48 maxlen: 48
2a12:f680:a04::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 17:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5a:6d:c7:18:cd:37:ff:3a:63:76:fd:7b:e9:e1:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jan 12 12:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05707d7d5e05db829760b003eaf22b058924227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:17:19:4f:b2:98:9b:ea:40:83:df:0d:fd:
73:a1:7e:0e:f9:08:e5:e5:ba:7d:45:50:b3:59:11:
99:6d:ed:18:ee:82:13:02:70:77:d2:03:c0:b5:d6:
6a:ed:b7:ab:91:29:6a:72:92:62:9a:3c:77:25:09:
80:87:9a:b0:ca:ef:85:27:3d:ae:23:f9:06:cf:22:
f1:78:34:4c:23:71:e7:a8:67:65:b6:38:2a:de:c4:
a3:41:20:f7:91:4d:70:5c:7b:46:da:8b:e3:99:35:
d8:9f:1b:77:dc:1b:69:fc:ee:41:63:00:ce:0f:b0:
f0:47:93:f3:3f:f3:52:60:f5:56:40:9a:49:4a:5c:
00:72:ff:b4:b3:a2:50:79:c8:87:8c:1e:b1:67:97:
19:22:ba:12:c8:29:dd:4d:c8:3e:f5:e7:51:6d:27:
92:34:4b:47:83:c9:c3:41:d1:69:b9:8a:12:6f:01:
9d:e5:ff:87:f1:8e:74:19:c9:be:e8:11:3b:96:8c:
8b:82:69:ea:18:8f:92:54:3e:66:19:96:2d:dc:d5:
ae:ae:57:f2:79:32:94:aa:ef:a4:ff:c4:10:11:4e:
7a:53:54:49:ba:0b:f6:1d:41:80:79:70:a5:cc:4c:
ee:50:63:86:f2:b6:d0:67:77:30:ad:57:54:e3:e0:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:7D:7D:5E:05:DB:82:97:60:B0:03:EA:F2:2B:05:89:24:22:7B
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/BXB9fV4F24KXYLAD6vIrBYkkIns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/22
46.161.200.0/24
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.141.255
212.95.143.0-212.95.147.255
223.25.120.0-223.25.126.255
IPv6:
2a12:f680:80::-2a12:f680:82:ffff:ffff:ffff:ffff:ffff
2a12:f680:84::-2a12:f680:86:ffff:ffff:ffff:ffff:ffff
2a12:f680:281::-2a12:f680:285:ffff:ffff:ffff:ffff:ffff
2a12:f680:380::-2a12:f680:382:ffff:ffff:ffff:ffff:ffff
2a12:f680:384::/47
2a12:f680:400::-2a12:f680:402:ffff:ffff:ffff:ffff:ffff
2a12:f680:404::/47
2a12:f680:480::-2a12:f680:482:ffff:ffff:ffff:ffff:ffff
2a12:f680:484::/47
2a12:f680:500::-2a12:f680:502:ffff:ffff:ffff:ffff:ffff
2a12:f680:504::/48
2a12:f680:580::-2a12:f680:582:ffff:ffff:ffff:ffff:ffff
2a12:f680:584::/47
2a12:f680:680::-2a12:f680:682:ffff:ffff:ffff:ffff:ffff
2a12:f680:684::/48
2a12:f680:700::-2a12:f680:702:ffff:ffff:ffff:ffff:ffff
2a12:f680:704::/48
2a12:f680:780::-2a12:f680:782:ffff:ffff:ffff:ffff:ffff
2a12:f680:785::/48
2a12:f680:880::-2a12:f680:882:ffff:ffff:ffff:ffff:ffff
2a12:f680:884::/48
2a12:f680:900::-2a12:f680:902:ffff:ffff:ffff:ffff:ffff
2a12:f680:904::/48
2a12:f680:980::-2a12:f680:982:ffff:ffff:ffff:ffff:ffff
2a12:f680:984::/48
2a12:f680:a00::-2a12:f680:a02:ffff:ffff:ffff:ffff:ffff
2a12:f680:a04::/48
Signature Algorithm: sha256WithRSAEncryption
4d:44:44:26:e2:34:a0:e4:0b:bc:b7:c6:a1:dd:2d:77:9c:25:
96:74:30:c9:95:67:64:9b:19:51:8e:d6:71:df:e3:41:ff:c5:
24:68:17:2f:71:e2:91:b3:88:97:83:6a:f5:18:89:3d:d5:c5:
37:fa:8a:80:33:db:5d:95:70:92:0a:0e:6f:12:e1:d5:c3:4a:
af:e9:b3:5e:42:f1:a2:48:41:c9:1c:11:18:3d:3b:ea:da:b8:
cb:f3:c1:fe:d7:e7:40:c1:f6:ab:ee:7c:49:03:f2:06:86:2a:
41:04:c3:cc:7e:7e:62:bd:5a:69:76:d1:98:72:8b:27:9d:cc:
ca:04:e6:b1:32:8e:1c:7f:0c:1c:b4:c0:da:22:19:1c:b9:0e:
e6:a1:29:af:40:dc:4f:79:5b:69:d2:9b:56:ea:07:40:a3:bc:
23:a9:61:00:51:78:b3:3f:dd:cf:b7:0c:60:95:b0:91:3d:86:
aa:e0:53:b9:46:45:49:da:85:fb:eb:79:25:ea:72:99:1a:02:
15:74:d7:b2:1e:1e:e5:96:00:b8:7b:2c:7a:96:44:e8:60:78:
c0:58:57:e3:88:26:52:cf:c3:1c:1a:12:b1:84:81:0b:78:73:
d9:6f:88:db:5c:ce:12:45:1a:ff:33:98:de:fa:5b:21:a5:1a:
db:e4:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:45 2025 by rpki-client