Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w9tNxcyvA2DE6pR-TOlznDRfRUo.roa
File: w9tNxcyvA2DE6pR-TOlznDRfRUo.roa (raw, json)
Hash identifier: qgVkhCtNi6tkvsZ5kzjTyKvFcpMVyRb029IfOFXXBfo=
Subject key identifier: C3:DB:4D:C5:CC:AF:03:60:C4:EA:94:7E:4C:E9:73:9C:34:5F:45:4A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018E50CC87DB243693A03C09175A3F1BAB76
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w9tNxcyvA2DE6pR-TOlznDRfRUo.roa
Signing time: Mon 18 Mar 2024 09:02:45 +0000
ROA not before: Mon 18 Mar 2024 09:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 23
193.247.166.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.193.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:cc:87:db:24:36:93:a0:3c:09:17:5a:3f:1b:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 18 09:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3db4dc5ccaf0360c4ea947e4ce9739c345f454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:f2:68:d9:bc:d4:27:a4:cf:14:e0:b3:5a:
8d:50:35:b8:e2:af:78:a8:e0:a2:c9:7f:43:7a:43:
dc:dc:48:c5:19:57:e4:de:61:12:52:51:07:7b:fa:
f7:1f:e4:b1:98:ca:bb:70:7d:9b:cd:c0:e5:a3:69:
cd:8b:c2:62:e0:81:31:9b:b5:7a:7a:82:8a:d8:1f:
bc:ee:6b:cf:3d:11:b2:4d:fb:7d:e1:02:75:a3:3d:
2d:b7:de:ce:6d:4d:d0:69:fb:bf:91:44:5d:ed:98:
93:e0:51:8b:98:6f:ac:b2:f9:3b:d8:99:89:aa:0e:
8a:61:ee:8c:81:61:a6:09:b3:20:4a:1d:7d:95:90:
ba:d7:b4:5a:eb:3e:34:d6:4d:46:d7:cf:5d:0e:fa:
e1:54:5b:32:34:e4:ef:bf:e3:47:65:90:31:67:ee:
54:9e:05:89:f5:c5:37:bf:85:7e:17:f1:08:89:d0:
00:25:48:0c:2e:4f:91:29:4b:31:cc:eb:e0:a1:a0:
b3:b3:c3:d9:da:62:db:c9:65:19:00:0f:0a:60:5e:
28:5a:35:eb:e5:eb:c5:94:82:bc:64:3c:1e:40:db:
13:de:55:42:07:f7:c6:e4:e3:df:28:28:f6:d9:3a:
5f:8c:4f:26:6a:96:b6:46:87:1f:23:01:26:9d:f9:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:4D:C5:CC:AF:03:60:C4:EA:94:7E:4C:E9:73:9C:34:5F:45:4A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w9tNxcyvA2DE6pR-TOlznDRfRUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
9e:9b:10:ef:fe:5a:da:95:67:7e:3e:a3:a3:79:8a:1f:f4:fb:
15:5c:81:79:bc:e5:66:37:09:11:5c:27:da:41:08:6c:d0:60:
bf:38:b1:1d:07:df:b1:66:c2:15:d8:b1:0b:8c:b3:c8:d1:46:
45:59:71:99:d6:f9:f5:05:ac:bc:8f:7f:77:f9:c4:d0:c4:a3:
71:f7:60:9d:d0:57:b0:21:42:72:19:6e:1d:ca:7f:0d:f6:bd:
cd:16:3a:40:73:9a:2c:83:0d:43:34:e8:89:dd:20:9c:f8:f3:
a4:0a:cc:6b:e1:c6:e4:bf:87:95:4b:e6:97:78:07:97:f0:09:
25:33:ae:8e:93:bc:d7:f0:db:af:ac:f2:00:40:47:2a:f4:f7:
a0:d4:c5:78:79:bc:af:6e:f9:59:d0:a0:52:8e:74:be:7e:cb:
bc:b4:3b:a2:9d:90:a1:b2:5c:06:91:af:f4:d9:30:25:1d:5d:
37:37:12:32:0c:68:83:a5:74:6b:de:14:40:ba:48:bc:08:a4:
97:dd:4d:90:0a:1e:71:cd:1e:07:66:07:79:b4:38:45:c2:cb:
69:43:c1:44:35:a0:97:11:f5:be:2e:30:83:15:91:1f:49:c4:
32:80:a4:ac:51:94:32:0b:bb:fa:b2:00:d6:67:88:25:42:1f:
55:cf:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:14 2025 by rpki-client