Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/p49T_EnOTcP0mcBoQojobPH6lm4.roa
File: p49T_EnOTcP0mcBoQojobPH6lm4.roa (raw, json)
Hash identifier: +mGVFT5chkxeVm7o1tZKy3UCpm25X9X3gnIDtIdgksA=
Subject key identifier: A7:8F:53:FC:49:CE:4D:C3:F4:99:C0:68:42:88:E8:6C:F1:FA:96:6E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0195AF57029B051CC7B030A98FE12955D21C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/p49T_EnOTcP0mcBoQojobPH6lm4.roa
Signing time: Wed 19 Mar 2025 16:57:49 +0000
ROA not before: Wed 19 Mar 2025 16:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Mar 2025 13:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:57:02:9b:05:1c:c7:b0:30:a9:8f:e1:29:55:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 19 16:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a78f53fc49ce4dc3f499c0684288e86cf1fa966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:8f:57:90:36:ec:7c:24:39:65:56:c2:11:
3c:01:1f:20:7f:d0:30:cd:3a:44:a5:cc:fa:dd:12:
34:0d:71:2e:4b:9b:87:53:02:67:14:62:ba:aa:22:
1a:05:02:ae:22:14:3a:b5:5e:f7:d9:cf:93:ac:8e:
11:8b:16:3d:c7:be:f2:81:82:16:7f:db:37:8e:1d:
8d:84:16:de:1c:15:c0:d9:be:a5:40:98:e6:1c:6f:
99:a8:9a:0b:0e:cb:ec:0c:c6:f0:66:b1:a9:a2:9f:
89:7a:71:2c:27:d4:39:b6:60:57:87:1d:f9:ab:d0:
1c:ad:64:98:10:4b:f4:24:ad:f6:21:2e:99:ad:2c:
8a:a9:66:60:8e:c0:8d:3a:19:98:fe:ba:90:78:c7:
81:de:ce:39:c3:af:9c:26:e2:5d:1c:9e:41:8d:71:
b0:a8:92:51:c0:0f:32:5e:3c:2c:5d:f4:6c:09:27:
3c:9d:ee:7e:47:75:2c:c3:2b:a2:e1:a0:3a:83:3b:
f0:cc:20:7a:4c:82:5c:ef:7d:33:b7:ee:c9:22:8b:
c5:cf:8d:c7:59:a4:65:0e:29:87:d2:f4:95:ba:37:
89:f6:62:04:e1:d3:ad:dd:aa:7b:bb:fd:30:7f:4e:
cc:8b:e7:6d:89:c4:2b:12:f5:12:d3:4f:d2:7c:3f:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:53:FC:49:CE:4D:C3:F4:99:C0:68:42:88:E8:6C:F1:FA:96:6E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/p49T_EnOTcP0mcBoQojobPH6lm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
96:6e:d7:21:d8:74:15:a6:d4:bc:d7:ec:f0:ea:73:ea:e4:84:
44:99:a7:d9:84:4e:e9:25:2b:12:3a:7f:aa:4d:c0:9e:12:09:
c7:9e:68:3b:e8:f4:00:61:62:97:53:91:45:c4:c7:ac:8c:b6:
85:59:ef:8c:ba:c8:e3:dd:16:33:e1:91:10:0e:1d:d4:07:a4:
26:76:22:b6:2c:36:9e:c7:3e:f7:e4:bb:ff:42:9f:dd:62:b0:
ce:ab:8f:2b:ec:72:f1:8a:10:11:22:00:53:2f:6d:58:4d:09:
d7:2b:6a:e2:e3:a6:3b:15:00:4d:e0:f5:de:c3:30:b4:10:6c:
44:f6:92:9a:33:b7:84:97:f1:63:2f:f2:77:fc:76:9f:3a:1f:
41:27:4c:4d:c6:af:bf:60:fb:7d:28:c1:57:a9:d5:79:fd:08:
57:71:88:6c:b5:5a:a0:45:95:df:21:99:f2:c1:7a:9f:74:85:
29:8c:15:8d:85:92:f2:ed:ef:1c:01:b7:f9:b8:9e:6c:be:90:
fc:ea:41:70:7f:8f:d9:55:55:1c:57:24:ae:e0:00:8d:fb:91:
aa:01:71:b5:59:52:27:01:9f:b5:53:08:58:4f:9e:00:d4:80:
41:dc:5b:e1:cc:d5:28:b4:d2:1f:dd:f0:d2:f1:c0:20:26:37:
e1:b1:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:30:53 2025 by rpki-client