Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4ZNps4yc_K9lGNFI_72m95KaZTg.roa
File: 4ZNps4yc_K9lGNFI_72m95KaZTg.roa (raw, json)
Hash identifier: M8DJa0HSGNAnTWeeLic32BZJgsnJMjU0XEJfisI+a9w=
Subject key identifier: E1:93:69:B3:8C:9C:FC:AF:65:18:D1:48:FF:BD:A6:F7:92:9A:65:38
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01940DE59D54A686DAFA82B531DD4BF8A51B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4ZNps4yc_K9lGNFI_72m95KaZTg.roa
Signing time: Sat 28 Dec 2024 15:32:19 +0000
ROA not before: Sat 28 Dec 2024 15:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.227.0/24 maxlen: 24
91.242.236.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
93.177.105.0/24 maxlen: 24
93.177.107.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.108.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
185.198.153.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.148.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:e5:9d:54:a6:86:da:fa:82:b5:31:dd:4b:f8:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Dec 28 15:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19369b38c9cfcaf6518d148ffbda6f7929a6538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:65:c2:9c:be:61:6f:34:f3:22:bd:80:71:
61:5b:73:1b:52:22:0e:07:88:db:78:0a:68:30:79:
5c:4a:c8:48:1c:13:52:7d:eb:08:36:ff:ab:44:5a:
ef:2f:49:38:1b:97:73:2b:41:d6:b8:62:e2:86:ee:
b1:98:d2:ec:40:06:58:ed:7c:8e:7c:e0:ad:2b:28:
07:53:e4:d4:e7:fa:e0:54:b0:f5:e5:37:e2:a6:76:
df:f1:4b:ce:c1:da:ca:ca:cd:46:8f:81:1c:b9:a1:
3d:4b:12:b7:2f:3e:69:a8:2f:22:fe:db:72:f8:b2:
1c:4a:9e:0a:61:e4:c4:92:99:62:58:85:18:49:57:
86:22:c0:4d:31:39:d7:79:ae:93:ad:60:2b:8b:da:
33:f6:4b:d0:af:ec:8a:07:ec:bd:13:e6:93:fe:f6:
ea:62:4f:f5:9e:c9:82:d3:cf:14:b2:fc:91:c7:44:
da:73:20:49:45:7b:1c:58:48:c1:44:e0:77:27:13:
e0:4a:e0:d7:74:d4:83:ea:10:29:f1:9e:94:f5:0c:
68:0f:29:35:e6:ac:56:bc:c5:47:df:62:1a:25:64:
c7:9e:d3:91:02:c0:7a:43:75:33:84:7e:d9:78:38:
1d:00:44:d8:07:da:4d:06:fc:b6:d7:47:28:9e:1b:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:69:B3:8C:9C:FC:AF:65:18:D1:48:FF:BD:A6:F7:92:9A:65:38
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4ZNps4yc_K9lGNFI_72m95KaZTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
45.132.48.0/24
45.157.136.0/24
62.68.83.0/24
62.68.86.0/23
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.45.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.226.247.0/24
91.242.225.0/24
91.242.227.0/24
91.242.236.0/24
91.242.238.0/24
93.177.104.0/23
93.177.107.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.108.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.185.0/24
146.19.187.0/24
146.19.190.0/24
146.19.194.0/24
176.56.37.0-176.56.38.255
178.211.140.0/24
185.122.206.0/24
185.155.101.0/24
185.198.153.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0-195.64.110.255
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.136.0/24
195.96.146.0/24
195.96.148.0/24
195.96.155.0/24
195.96.157.0/24
212.18.96.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
25:11:4e:69:49:8b:05:01:f8:d3:78:cb:d4:75:0a:d4:1c:a3:
e0:cb:1a:a5:9c:11:4e:47:e2:ef:fe:1c:bc:25:37:ea:0c:88:
b5:d4:92:65:21:dc:48:74:45:6b:e1:e0:8e:82:1b:95:a9:99:
35:61:8e:d6:f5:cd:67:dd:09:cc:cd:8f:ae:3e:49:30:1b:f6:
79:22:67:7e:70:cc:a6:62:33:e5:b4:cc:10:43:be:cb:dd:97:
70:5b:2e:9c:f0:b7:20:cf:08:48:d5:b0:a9:8d:ea:e9:f8:8b:
3a:60:20:f4:e5:55:24:dc:c8:88:1f:ff:8a:f9:ec:c7:cd:9d:
fd:58:63:c0:75:3e:33:cc:55:8e:86:ca:5c:2a:f5:04:e0:48:
2d:55:e3:67:9f:da:59:b4:19:77:de:63:7d:3b:d5:58:70:b3:
14:17:be:44:93:c1:72:fc:a3:87:87:46:4d:82:2d:18:c1:19:
16:41:d2:94:ad:1c:53:1c:cb:c5:fe:b7:1e:12:98:43:5f:1a:
8c:f2:3b:e9:82:7f:1d:50:f1:cc:31:9d:d7:b4:1c:96:77:a1:
04:8a:ac:21:75:73:6a:4f:f0:e9:82:f2:ff:dc:d0:df:74:9b:
3b:9b:ad:a4:fc:87:05:4d:79:b9:ec:cd:ad:6f:6d:31:a1:f6:
12:f1:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:16 2025 by rpki-client