Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Gd5QqaUdZ3JqwMe5M0NIvfI4A-c.roa
File: Gd5QqaUdZ3JqwMe5M0NIvfI4A-c.roa (raw, json)
Hash identifier: v/fu5jXAF5WqeaQJxzMq41FUnzS5PVCrC6BypLN3mGo=
Subject key identifier: 19:DE:50:A9:A5:1D:67:72:6A:C0:C7:B9:33:43:48:BD:F2:38:03:E7
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0192B4464654705811B890162F57486B7E98
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Gd5QqaUdZ3JqwMe5M0NIvfI4A-c.roa
Signing time: Tue 22 Oct 2024 12:49:17 +0000
ROA not before: Tue 22 Oct 2024 12:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80::/29 maxlen: 29
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f87:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Nov 2024 09:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:46:46:54:70:58:11:b8:90:16:2f:57:48:6b:7e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 22 12:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19de50a9a51d67726ac0c7b9334348bdf23803e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:44:ce:10:b9:ea:c6:50:97:89:a7:f3:42:
4f:38:39:ad:49:83:ed:94:6c:4b:70:33:8f:37:7a:
65:d7:99:b4:17:ed:f8:22:9e:b0:a6:01:10:e2:47:
e0:bc:4d:55:d7:8e:28:a4:9e:7b:6e:4e:7b:6f:27:
7b:47:b2:34:b8:35:d7:ce:4a:24:e5:60:d1:9b:46:
01:eb:57:a7:73:99:5c:b1:b2:9c:5b:5b:57:f3:ce:
41:59:32:bd:fa:77:24:04:93:46:3a:dd:80:73:aa:
1b:5d:e3:81:1e:1a:f3:5b:3b:28:60:52:eb:2d:19:
d3:27:fb:98:58:eb:5d:74:84:b9:54:ca:29:e8:d3:
a5:6d:9e:51:db:69:78:96:7f:e3:ca:59:65:3e:ce:
07:96:8c:e0:c5:a1:c7:82:cf:19:60:aa:cc:69:c2:
cf:47:af:cd:da:85:24:72:ac:0a:e2:53:bf:b8:1a:
15:75:01:42:9f:b4:7b:77:32:0b:5d:76:13:11:89:
e3:a6:3a:64:ab:21:e8:12:37:83:f7:f4:d0:3d:d4:
82:92:86:ff:e7:df:9f:f7:4b:7d:e3:44:e9:eb:ef:
e3:0c:45:cc:6f:c8:e4:2a:24:75:ea:60:66:64:0a:
0a:17:ab:3f:74:ff:8a:22:6d:a5:ac:59:fd:f1:0b:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:50:A9:A5:1D:67:72:6A:C0:C7:B9:33:43:48:BD:F2:38:03:E7
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Gd5QqaUdZ3JqwMe5M0NIvfI4A-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
45.153.125.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
185.193.51.0/24
185.195.65.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80::/29
Signature Algorithm: sha256WithRSAEncryption
85:35:08:cb:a5:9f:37:f8:e9:a9:bf:e8:54:53:db:ef:89:85:
f5:cd:f7:d2:ec:30:fb:ef:0c:dd:93:e2:b9:a7:56:63:83:a9:
73:3c:07:7c:e7:0b:57:c5:56:1b:15:72:68:32:e5:f5:6b:53:
14:3f:44:b0:cd:f0:e8:94:12:6a:75:e7:0a:f6:ab:1c:db:83:
3a:7a:74:6c:be:9f:70:33:2c:de:e0:bc:c1:9f:03:05:7b:b4:
c5:7b:72:cc:e9:7a:71:3d:7c:1f:dd:77:5f:d7:59:8c:a6:98:
df:b3:ea:92:18:ad:74:52:c9:f3:4c:a7:e2:32:ce:fc:aa:48:
b1:12:87:02:ae:1b:f8:f1:78:7e:5e:a0:16:8b:a8:6b:6b:8b:
1e:40:ff:d6:29:b0:12:72:66:23:08:4c:e0:14:25:df:85:cf:
58:48:d3:79:b3:a7:1a:a9:67:4e:c3:9b:ad:6d:8c:3d:c9:70:
05:38:90:fb:a7:eb:0d:42:6f:ee:8b:5f:c8:00:bd:40:44:3e:
32:8e:3b:d5:32:64:6c:5b:64:ae:67:ce:61:f7:53:57:b7:61:
ba:36:73:01:e0:df:e4:5c:9b:f2:51:97:f6:b2:b8:6d:3d:ec:
14:e3:ea:d2:08:c0:59:6b:8b:a8:f3:90:2b:2a:aa:d3:ae:78:
da:17:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:08 2025 by rpki-client