Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/MLhID8z6CuSTyuizPVE_IqcMsz4.roa
File: MLhID8z6CuSTyuizPVE_IqcMsz4.roa (raw, json)
Hash identifier: cgTdGxdZivI7UoclQWc+oYz7XwhbzHuAutMVS4/zKMM=
Subject key identifier: 30:B8:48:0F:CC:FA:0A:E4:93:CA:E8:B3:3D:51:3F:22:A7:0C:B3:3E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0194DF8079DF6807AA8C98AD9CDFC88A320F
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/MLhID8z6CuSTyuizPVE_IqcMsz4.roa
Signing time: Fri 07 Feb 2025 08:22:06 +0000
ROA not before: Fri 07 Feb 2025 08:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.128.0/19 maxlen: 19
37.251.160.0/20 maxlen: 20
37.251.248.0/21 maxlen: 24
37.251.255.0/24 maxlen: 24
77.81.164.0/23 maxlen: 23
86.105.192.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.32.44.0/24 maxlen: 24
89.35.173.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
89.38.248.0/24 maxlen: 24
89.38.249.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.252.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
91.208.142.0/24 maxlen: 24
93.119.227.0/24 maxlen: 24
94.24.29.0/24 maxlen: 24
94.24.48.0/21 maxlen: 21
94.24.72.0/22 maxlen: 22
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
109.95.8.0/21 maxlen: 21
128.0.46.0/23 maxlen: 23
185.171.184.0/24 maxlen: 24
185.171.185.0/24 maxlen: 24
185.171.187.0/24 maxlen: 24
188.214.142.0/24 maxlen: 24
188.215.48.0/21 maxlen: 21
193.239.130.0/23 maxlen: 23
193.242.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 13:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:80:79:df:68:07:aa:8c:98:ad:9c:df:c8:8a:32:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Feb 7 08:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b8480fccfa0ae493cae8b33d513f22a70cb33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:35:a7:47:dc:39:06:d4:e0:92:b1:30:55:
b4:ba:6c:7c:4e:23:a4:79:64:7b:b1:a9:d4:07:36:
9b:cd:65:e8:f7:7b:5f:79:a5:a8:c4:86:9d:c3:58:
10:2c:41:ea:77:13:1c:a3:76:73:69:84:86:1f:d6:
19:13:c3:c2:29:06:e7:96:c9:aa:8e:2d:8c:61:b6:
6f:a9:a8:a9:1a:3c:a5:54:d6:e9:8b:90:0e:5c:0c:
16:04:6d:3b:29:c4:f1:b7:64:34:de:e1:d9:50:55:
2f:3c:43:44:0c:87:7f:7c:8e:5d:9b:35:cf:9b:94:
c9:96:d0:29:e9:3c:59:ef:fa:60:c8:61:63:4a:26:
c7:98:89:9c:fa:79:cf:e1:5f:25:bf:b1:66:c0:fe:
67:a1:ef:9f:cc:ee:b1:50:21:35:59:81:8f:d9:0d:
d5:38:e7:8b:47:05:ff:86:34:0d:60:80:64:ad:91:
b8:6c:03:fd:db:52:d4:d1:ec:f5:56:9e:fb:57:0b:
ae:5a:93:04:0f:e4:27:ea:eb:c6:ff:3b:93:38:bd:
f8:75:82:f4:cb:9e:01:38:4f:7d:be:dc:f6:a5:e9:
7a:38:ab:45:df:eb:57:36:0c:12:02:21:b4:01:b7:
2b:31:f9:69:e4:97:66:4d:5d:c1:c9:07:09:2f:a0:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:48:0F:CC:FA:0A:E4:93:CA:E8:B3:3D:51:3F:22:A7:0C:B3:3E
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/MLhID8z6CuSTyuizPVE_IqcMsz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
77.81.164.0/23
86.105.192.0/24
89.32.44.0/22
89.35.173.0/24
89.36.128.0-89.36.130.255
89.36.132.0/22
89.38.248.0/21
89.42.11.0/24
89.45.192.0/21
91.200.120.0/22
91.208.142.0/24
93.119.227.0/24
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
128.0.46.0/23
185.171.184.0/23
185.171.187.0/24
188.214.142.0/24
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:30:49:c9:fd:af:2c:2b:e4:b2:c4:57:bd:55:d4:96:3a:
5c:14:2c:3f:8c:82:20:d9:37:90:47:ae:e5:6e:34:dd:2c:b7:
32:de:2a:8c:cc:a7:91:8a:6d:fd:96:8f:62:88:76:80:3a:fa:
89:20:b3:29:af:ba:f9:9b:96:ca:28:f2:53:ae:72:7c:bd:3c:
8b:c1:f9:db:2a:0a:78:0c:47:34:e0:fb:c7:ec:95:29:2f:cb:
47:67:50:b2:d5:80:13:43:7b:22:de:ca:0f:84:96:08:ae:56:
50:43:bf:64:14:b7:5b:c0:5d:85:bb:9b:f8:e1:8e:f2:b5:41:
cb:60:8c:92:9d:d6:39:b8:aa:6d:e7:97:8d:01:23:c1:0f:1e:
6b:6d:e0:fe:a7:6d:2d:2c:65:1e:70:4d:d5:d9:9d:b6:7f:09:
a7:95:68:4a:95:4c:66:01:ca:b6:0a:9c:b7:4a:38:d7:ee:ab:
32:b0:53:b0:2f:90:74:40:b3:bb:23:f0:ce:65:79:84:b2:ad:
09:df:74:96:a3:dc:1c:72:6f:e4:da:10:4b:17:c9:63:19:ae:
c5:81:6d:63:93:e2:3b:13:e0:32:65:20:14:3e:3e:14:ca:eb:
1b:50:a7:76:3c:b6:a2:1d:b1:95:91:2c:ec:43:12:b2:30:29:
19:f7:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:30 2025 by rpki-client