Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/2l50dbRcDt4-daGgdS9nw9cBXfI.roa
File: 2l50dbRcDt4-daGgdS9nw9cBXfI.roa (raw, json)
Hash identifier: 6CpQ2ZjNIBJn+LUFvmtCFFEpOAwww2CcQb2AQNomLh8=
Subject key identifier: DA:5E:74:75:B4:5C:0E:DE:3E:75:A1:A0:75:2F:67:C3:D7:01:5D:F2
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01938BAF4575B62361265FFAECB78D4E320C
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/2l50dbRcDt4-daGgdS9nw9cBXfI.roa
Signing time: Tue 03 Dec 2024 08:42:19 +0000
ROA not before: Tue 03 Dec 2024 08:42:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Dec 2024 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:af:45:75:b6:23:61:26:5f:fa:ec:b7:8d:4e:32:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Dec 3 08:42:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5e7475b45c0ede3e75a1a0752f67c3d7015df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:4e:0a:38:d1:dc:ff:42:d6:c9:6e:17:38:
5b:89:bf:73:a2:0f:05:8a:b7:8a:7d:b2:1a:bf:f6:
e5:fa:71:eb:28:6c:fc:75:90:39:9d:d0:dd:e8:aa:
08:79:1b:04:71:36:86:77:63:10:61:b7:af:53:d1:
c6:82:a1:38:d7:03:37:a8:57:be:06:95:0d:24:19:
7b:0e:4a:20:c4:82:62:b7:12:6a:38:97:06:c4:18:
4d:19:03:29:56:8c:ce:ee:89:0d:cf:7b:21:5e:a1:
70:50:da:4a:bc:10:3c:83:7a:ee:ac:54:86:08:74:
d4:50:84:9b:dc:ab:bb:72:d6:6c:a2:a0:fa:ec:76:
96:e8:20:af:ef:4d:e3:58:af:95:fa:80:8b:37:24:
ab:5f:bf:44:5f:e4:9a:96:69:c6:5a:fb:bf:60:7c:
12:32:e6:4f:c3:af:07:90:59:9c:16:00:3e:b4:72:
76:12:46:0a:17:63:16:50:2c:25:2a:d7:b8:2d:8a:
f5:0b:f1:81:b0:42:e3:e6:50:8d:3c:95:19:92:be:
98:44:87:b2:4e:82:20:33:dd:11:df:d9:d8:20:87:
f1:f7:65:31:15:89:f1:8d:5d:ae:fd:e0:3d:c2:88:
6b:bd:08:53:3d:cd:13:24:23:13:1c:02:88:5a:af:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:74:75:B4:5C:0E:DE:3E:75:A1:A0:75:2F:67:C3:D7:01:5D:F2
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/2l50dbRcDt4-daGgdS9nw9cBXfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
37.235.51.0/24
45.153.127.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.214.32.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c3:e1:74:8b:94:db:99:a0:12:69:bf:bb:bc:84:6e:f8:69:
73:88:79:d1:48:28:87:e6:47:89:b9:4f:52:eb:22:79:db:d1:
a2:32:51:ef:14:80:96:69:b1:ea:62:1e:81:e2:15:b4:ab:8d:
1a:a4:ea:99:c4:57:c3:76:40:5c:b7:b5:9e:26:90:4a:5c:0e:
1b:6b:dd:21:b0:dd:e6:b9:e7:c2:da:da:3a:8a:aa:57:40:99:
67:28:7b:b3:45:a5:ad:b0:8a:49:37:9b:a5:e8:1b:5b:42:fc:
31:e6:66:b1:5f:c4:aa:a5:de:da:47:c1:1e:a1:1c:fb:58:87:
17:06:c7:bf:e0:6b:d5:be:53:b3:58:b2:d4:22:0d:8f:4a:a6:
6c:88:85:18:86:6f:2e:a1:52:24:a0:9e:63:62:e3:5e:11:28:
d7:d0:02:99:55:f2:cc:67:00:bf:cc:12:43:73:58:05:83:2a:
1b:90:18:65:6b:62:db:ee:c0:61:c7:37:51:52:2a:d8:29:c4:
c8:0c:0c:2a:53:f3:6d:59:f9:aa:26:fe:04:c7:df:49:33:4c:
35:38:ff:0a:3f:65:45:27:87:9e:cb:35:a8:86:eb:1c:31:bd:
4e:d1:16:8b:d7:1a:11:f4:73:3b:ec:ac:c4:32:30:dc:f7:92:
57:65:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 23 10:29:19 2024 by rpki-client on console-ams.rpki-client.org