Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9urky_Wi9yFJCl1XyVlNnVkCBPM.roa
File: 9urky_Wi9yFJCl1XyVlNnVkCBPM.roa (raw, json)
Hash identifier: 5Y54n2Vmok+VgAtaZ4MzXEnvNwzKGpTRmxJNl1PzB9g=
Subject key identifier: F6:EA:E4:CB:F5:A2:F7:21:49:0A:5D:57:C9:59:4D:9D:59:02:04:F3
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018E75C7FF5F5AD470D895B7C68728000AAA
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9urky_Wi9yFJCl1XyVlNnVkCBPM.roa
Signing time: Mon 25 Mar 2024 13:23:45 +0000
ROA not before: Mon 25 Mar 2024 13:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 23
193.247.166.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.193.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 May 2024 13:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:c7:ff:5f:5a:d4:70:d8:95:b7:c6:87:28:00:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 25 13:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6eae4cbf5a2f721490a5d57c9594d9d590204f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:e6:46:70:57:a7:50:14:e8:a9:8d:58:2d:
4d:6a:6a:08:b3:ca:1a:1e:72:4c:f1:e6:a9:f5:49:
64:ba:00:d1:d2:c5:9e:73:51:a0:a3:f0:d3:ac:21:
57:79:92:19:8e:c9:91:ac:e0:09:b1:80:7f:bc:81:
69:a7:1f:cd:c9:85:cf:f9:30:de:13:1a:60:ca:5b:
97:04:11:68:00:af:b8:7b:04:52:e7:7f:b3:bb:89:
7f:c9:49:fd:1e:06:82:b0:11:a7:e1:e6:a4:17:fb:
f1:a7:5e:1a:29:11:eb:42:c5:32:09:57:1e:a0:72:
41:a9:9a:68:38:62:8c:96:92:67:e1:c2:3f:21:90:
d9:93:6b:33:c4:2f:68:15:fc:ab:c0:fd:c0:3e:92:
22:09:b6:ba:b2:a3:5b:f2:19:e8:72:14:b5:e9:69:
12:ea:b3:c6:dc:dd:b3:52:63:90:b7:f0:7b:a6:98:
de:a2:cf:d2:91:d7:24:ce:10:99:bb:ad:a5:e6:30:
e8:cf:35:bb:c3:e3:11:44:7e:b9:eb:57:4a:5b:c9:
9f:ef:e7:98:3c:cd:d1:a4:f5:73:7d:a7:33:77:e3:
86:3f:f8:a1:5f:7b:4d:da:b5:3c:6b:a7:ed:b7:db:
0f:a7:22:26:dd:8e:43:d2:d8:d2:30:18:9a:46:01:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:E4:CB:F5:A2:F7:21:49:0A:5D:57:C9:59:4D:9D:59:02:04:F3
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9urky_Wi9yFJCl1XyVlNnVkCBPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c8:e7:67:66:90:4b:fb:b1:92:94:c2:b1:7c:c0:13:66:2e:
31:ec:a2:d4:61:5e:0a:77:f1:2c:7a:b6:b3:14:c4:6c:57:b9:
d4:b2:53:1e:fb:61:9a:30:95:60:6e:77:6f:9c:1c:c5:c6:6d:
06:42:db:e4:4d:41:c3:08:03:de:95:6c:f6:a8:e3:e7:3c:5c:
9c:17:55:f8:54:c5:7e:84:e4:a8:e1:37:f1:c6:89:c6:c5:b9:
e6:e9:b3:1a:a9:47:35:2b:2b:27:24:c4:9e:f0:69:d6:bf:3b:
09:8b:6d:b3:7e:6a:2d:13:82:ea:3d:e3:b0:ef:ad:ad:09:aa:
3a:20:59:92:8f:14:fd:11:10:96:0e:11:99:c3:c2:da:d5:a6:
d0:ee:69:81:e2:45:a9:6d:99:55:b7:19:da:1b:38:41:5f:26:
0f:8e:f7:71:48:fe:ea:be:6b:a5:4f:a9:f2:3e:01:6b:15:ff:
7a:31:82:45:b6:b8:cd:54:84:4a:6b:8f:94:9e:5d:fe:6c:1c:
27:a1:b6:a0:c6:f0:36:36:f7:71:41:68:b3:9a:95:44:01:b3:
c4:6d:23:61:61:03:03:3d:4a:79:56:a8:08:fd:b1:84:1c:af:
68:b3:6b:ec:e9:d9:35:34:73:5d:49:1f:0c:12:b1:42:86:66:
24:a2:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:30:31 2025 by rpki-client