Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/A1UbQ68qQaDz575OBcWhH7hOHxI.roa
File: A1UbQ68qQaDz575OBcWhH7hOHxI.roa (raw, json)
Hash identifier: vjzs9/Vaa6LegJC82ynA0OE7ZQdwggBDa5dvu89EwD8=
Subject key identifier: 03:55:1B:43:AF:2A:41:A0:F3:E7:BE:4E:05:C5:A1:1F:B8:4E:1F:12
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01936297B647EB3BB39B0B8F43420E530D52
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/A1UbQ68qQaDz575OBcWhH7hOHxI.roa
Signing time: Mon 25 Nov 2024 09:12:09 +0000
ROA not before: Mon 25 Nov 2024 09:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Dec 2024 07:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:97:b6:47:eb:3b:b3:9b:0b:8f:43:42:0e:53:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Nov 25 09:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03551b43af2a41a0f3e7be4e05c5a11fb84e1f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:cc:98:6b:d8:0b:75:5e:b9:5c:63:d6:b5:
bc:53:ce:a4:d2:3a:2b:18:f1:c0:1c:45:b0:0c:0f:
58:e0:41:8d:d4:57:e2:ba:3e:fe:b2:b4:56:45:7a:
e0:bb:f9:74:b2:64:6d:70:23:ff:41:8f:23:c2:36:
e4:59:52:f6:70:58:bf:1e:05:00:ae:ca:8a:18:ff:
ad:dc:a6:ee:d1:f2:5e:71:43:22:98:27:11:b2:7a:
ea:bb:06:dd:2b:95:c1:6c:ea:3d:02:e7:80:ce:f3:
6c:8b:d6:4f:37:d1:e7:4b:aa:1f:f9:03:8d:2c:23:
f2:b2:03:7b:7f:ef:c0:60:02:09:14:14:69:12:97:
96:1e:65:fb:97:60:3a:f2:d3:cf:43:b3:fb:11:f8:
1e:ba:a0:2a:60:60:cf:af:92:bf:1a:96:40:ad:61:
a6:af:cb:8f:a0:69:81:71:b2:14:e5:da:12:b9:4a:
54:a3:c0:21:9f:a6:46:ec:fb:ec:2d:90:cc:18:7b:
63:4b:f5:65:33:38:4c:36:30:dd:0d:f8:95:50:c7:
62:ca:cf:05:bb:ac:70:2e:b1:8c:cf:0c:e4:10:ac:
9c:6d:8e:0a:4a:c5:7e:3a:83:1b:b6:85:c3:18:0c:
97:36:d7:9d:d5:70:17:84:4e:8b:2a:44:fb:36:2c:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:1B:43:AF:2A:41:A0:F3:E7:BE:4E:05:C5:A1:1F:B8:4E:1F:12
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/A1UbQ68qQaDz575OBcWhH7hOHxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
45.153.125.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
185.193.51.0/24
185.195.65.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::/48
2a03:f80:56::/47
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f82:abcd:43::/64
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
43:b6:40:f6:b4:ff:2d:ca:ca:48:4e:26:3c:f9:3e:7e:99:a8:
d5:6a:1e:ae:41:9c:8c:6f:1f:23:5b:f3:ac:8b:5f:9e:96:7a:
7d:38:8b:79:f4:0c:c5:93:75:b6:33:fe:3c:14:6d:1f:57:a3:
ab:a1:ed:f4:fb:05:a9:1b:56:9f:12:64:37:be:ed:7a:a1:06:
62:5e:af:6f:78:64:0e:d3:a7:f3:a7:81:c0:16:af:7c:0d:70:
66:b9:9c:b0:d5:72:aa:36:a2:61:d5:67:6f:eb:80:0f:00:fe:
31:5e:a4:52:56:c4:52:b9:2b:9d:b0:9b:e6:db:c1:5d:25:1a:
fe:b2:9b:d6:37:d7:9f:b6:35:ad:8c:b6:a1:f0:79:0f:f4:07:
d2:20:da:bc:31:2d:99:59:d7:ec:9d:ef:2b:da:9f:6a:55:ff:
67:2a:bc:cf:c1:d5:a8:70:b5:7a:4c:d7:1a:a3:28:4d:39:d7:
5d:4d:44:0c:73:67:a1:23:5a:14:4b:92:7a:01:25:74:fa:8b:
c1:4a:c4:65:86:98:83:b3:b0:07:98:d4:c1:05:c7:1f:4c:a8:
6f:2c:85:b8:56:a6:ec:e8:ff:aa:dd:e9:0d:e6:6a:8c:c8:d4:
cd:61:e3:d0:3d:d3:bf:40:24:25:3c:ae:7c:ad:eb:7c:28:ff:
ff:ce:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:46:51 2025 by rpki-client