Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ovXrAyRBo2cc9mZ6qHFariZA7bI.roa
File: ovXrAyRBo2cc9mZ6qHFariZA7bI.roa (raw, json)
Hash identifier: cAEf/O/YKVJHmGQd8SSr/fkj0wLE8G2MjPFAT9X1TC4=
Subject key identifier: A2:F5:EB:03:24:41:A3:67:1C:F6:66:7A:A8:71:5A:AE:26:40:ED:B2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0195C8751E4097975051B44CA57C3105C429
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ovXrAyRBo2cc9mZ6qHFariZA7bI.roa
Signing time: Mon 24 Mar 2025 14:01:13 +0000
ROA not before: Mon 24 Mar 2025 14:01:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 10:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:75:1e:40:97:97:50:51:b4:4c:a5:7c:31:05:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 24 14:01:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f5eb032441a3671cf6667aa8715aae2640edb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:2a:6b:83:5f:f8:ef:67:aa:23:40:a0:ca:
3a:21:cd:05:29:ab:b4:cb:40:5b:05:af:b6:c9:5d:
d0:38:10:97:99:b3:d0:fd:2f:b9:90:7f:bd:9b:ca:
57:67:1e:47:dd:f6:ea:a7:fd:1c:1f:4b:9c:21:c9:
6f:c0:bb:6f:4c:d7:43:cb:59:4f:4c:d2:5f:cd:5f:
b7:03:6a:5f:ab:94:0b:72:8c:97:24:a5:e0:9c:12:
e2:12:73:e9:a9:86:02:17:e6:14:4d:6e:58:d8:c6:
dc:cf:54:ea:31:82:41:eb:e0:ba:a3:17:b4:a8:23:
53:e0:ea:31:75:5f:a9:62:eb:86:4a:b0:bd:c3:ac:
5c:d2:b9:38:19:70:0f:a6:ab:1e:87:65:a0:4f:f6:
e7:b5:b4:dc:e2:8e:8e:74:b9:29:5d:13:d4:16:ae:
9f:73:d2:a1:b7:cb:64:1b:95:a1:6c:29:1a:ad:7d:
78:77:13:58:29:ac:d4:a3:c6:a5:6e:cf:80:2d:a2:
47:60:17:22:95:3d:21:a5:53:17:08:15:ec:e5:16:
fc:02:be:c2:1f:60:76:1d:79:97:bd:07:d0:74:d0:
85:51:50:92:58:14:72:a8:07:4f:c9:25:7e:b3:66:
44:38:25:69:e1:79:69:60:7a:e3:0b:8e:bc:ec:ff:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:EB:03:24:41:A3:67:1C:F6:66:7A:A8:71:5A:AE:26:40:ED:B2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ovXrAyRBo2cc9mZ6qHFariZA7bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
12:b1:1c:8f:ea:bf:48:c1:d3:b0:f2:e9:52:a8:b8:d1:84:72:
d4:a0:4f:49:d9:96:5a:a3:94:26:06:21:3d:35:e6:a6:bf:9f:
b4:cc:45:42:4b:b4:e5:26:72:5c:9f:69:ce:45:98:e3:32:ff:
59:9c:ca:12:18:fd:c2:6f:c2:62:7d:96:58:d1:bc:6d:fa:50:
46:c5:27:22:bc:90:bd:7c:7f:5e:09:e5:9b:1d:6b:3d:15:0d:
6f:05:ec:76:98:1e:71:7a:62:5f:a9:48:82:b2:01:ff:f0:78:
18:f2:ea:68:f9:b1:bb:41:9b:5e:6a:9c:7c:f4:6e:ce:ad:de:
b0:43:fb:32:ae:20:54:b3:9e:2e:47:e9:1b:14:bf:cc:1c:3e:
d8:26:ee:66:e6:1f:1c:7a:e2:22:8b:29:fc:11:42:04:59:79:
9f:c3:be:c5:56:ce:4c:05:b7:c9:6e:25:b5:b3:a9:7a:1d:f4:
6e:ac:66:eb:fa:b3:b8:9e:6e:0b:66:c5:a7:62:98:bd:9b:6e:
b1:2b:1a:a9:4d:82:06:7b:3f:06:3e:50:d5:ef:2b:08:db:20:
1e:48:61:01:75:e1:f9:2d:e4:a5:c0:51:ba:b1:67:5b:38:8f:
d5:cf:3a:57:08:d0:6a:0b:3f:7a:43:9d:e8:43:71:01:2b:52:
c7:56:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:37 2025 by rpki-client