Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/0K99xCkboaZlLbAXWDJgkGjxyKM.roa
File: 0K99xCkboaZlLbAXWDJgkGjxyKM.roa (raw, json)
Hash identifier: wknHMhSv4t1ZNlHUGMFGC7Ly4kiSbK21TzHNIZasxHY=
Subject key identifier: D0:AF:7D:C4:29:1B:A1:A6:65:2D:B0:17:58:32:60:90:68:F1:C8:A3
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 0193F1362DF2B24AD213CA72AD4251104BB1
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/0K99xCkboaZlLbAXWDJgkGjxyKM.roa
Signing time: Mon 23 Dec 2024 01:51:20 +0000
ROA not before: Mon 23 Dec 2024 01:51:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8781
IP address blocks: 37.208.128.0/17 maxlen: 24
37.210.0.0/15 maxlen: 24
37.211.96.0/22 maxlen: 24
37.211.100.0/22 maxlen: 24
37.211.104.0/22 maxlen: 24
37.211.108.0/22 maxlen: 24
37.211.112.0/22 maxlen: 24
37.211.116.0/22 maxlen: 24
37.211.120.0/22 maxlen: 24
37.211.124.0/22 maxlen: 24
37.211.192.0/20 maxlen: 24
37.211.208.0/22 maxlen: 24
37.211.212.0/22 maxlen: 24
37.211.216.0/22 maxlen: 24
37.211.224.0/22 maxlen: 24
37.211.228.0/22 maxlen: 24
37.211.232.0/22 maxlen: 24
37.211.236.0/22 maxlen: 24
37.211.240.0/20 maxlen: 24
78.100.0.0/15 maxlen: 24
78.100.2.0/24 maxlen: 24
78.100.3.0/24 maxlen: 24
78.100.6.0/24 maxlen: 24
78.100.32.0/20 maxlen: 24
78.100.32.0/24 maxlen: 24
78.100.48.0/20 maxlen: 24
78.100.48.0/24 maxlen: 24
78.100.53.0/24 maxlen: 24
78.100.59.0/24 maxlen: 24
78.100.64.0/20 maxlen: 24
78.100.80.0/20 maxlen: 24
78.100.112.0/20 maxlen: 24
78.100.128.0/19 maxlen: 24
78.100.155.0/24 maxlen: 24
78.101.0.0/22 maxlen: 24
82.148.96.0/19 maxlen: 24
82.148.96.0/24 maxlen: 24
86.62.192.0/18 maxlen: 24
86.62.241.0/24 maxlen: 24
89.211.0.0/16 maxlen: 24
89.211.3.0/24 maxlen: 24
89.211.4.0/24 maxlen: 24
89.211.5.0/24 maxlen: 24
89.211.6.0/24 maxlen: 24
89.211.7.0/24 maxlen: 24
89.211.16.0/21 maxlen: 24
89.211.24.0/21 maxlen: 24
89.211.32.0/20 maxlen: 24
89.211.48.0/20 maxlen: 24
176.202.0.0/15 maxlen: 24
176.202.240.0/20 maxlen: 24
178.152.0.0/15 maxlen: 24
185.96.224.0/22 maxlen: 24
212.77.192.0/19 maxlen: 24
212.77.192.0/24 maxlen: 24
212.77.199.0/24 maxlen: 24
212.77.202.0/24 maxlen: 24
212.77.204.0/24 maxlen: 24
212.77.207.0/24 maxlen: 24
212.77.209.0/24 maxlen: 24
212.77.210.0/24 maxlen: 24
212.77.211.0/24 maxlen: 24
212.77.217.0/24 maxlen: 24
212.77.218.0/24 maxlen: 24
212.77.220.0/24 maxlen: 24
212.77.221.0/24 maxlen: 24
213.130.96.0/19 maxlen: 24
213.130.112.0/24 maxlen: 24
213.130.113.0/24 maxlen: 24
213.130.119.0/24 maxlen: 24
213.130.121.0/24 maxlen: 24
2001:1a10::/29 maxlen: 48
2001:1a10::/32 maxlen: 64
2001:1a10::/40 maxlen: 48
2001:1a10:1::/48 maxlen: 48
2001:1a10:c1::/48 maxlen: 48
2001:1a10:cd::/48 maxlen: 64
2001:1a10:100::/40 maxlen: 40
2001:1a10:4000::/36 maxlen: 36
2001:1a11::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:36:2d:f2:b2:4a:d2:13:ca:72:ad:42:51:10:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Dec 23 01:51:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0af7dc4291ba1a6652db0175832609068f1c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:ca:04:33:26:17:68:5f:f3:6b:91:55:6e:
b7:f0:bb:60:dd:b6:2e:66:23:16:d9:32:ca:dd:f9:
f4:b0:03:0a:5f:82:2e:08:a0:d8:8a:84:33:27:79:
9b:ea:24:76:f6:14:4c:06:25:52:5c:46:d6:a5:ef:
84:10:61:d6:c8:26:e4:d2:9f:00:8c:e1:c7:b2:89:
7a:00:26:96:22:46:4b:29:b1:36:e8:92:23:a3:87:
99:f6:da:f8:cc:97:92:d6:45:5e:f2:dc:00:69:f7:
07:1e:5f:a5:17:a1:a4:b3:8a:f9:34:51:95:65:ba:
2b:9a:e6:da:03:fc:c6:28:69:e3:2a:6f:d7:a1:38:
50:a4:81:2d:6b:79:cd:e1:27:fe:cc:6f:2e:06:82:
a7:5a:6f:1d:3c:dc:d9:da:1b:6f:b6:f7:9d:d4:4f:
8f:46:ac:54:02:23:b1:5e:5c:b0:cd:f5:e7:13:bf:
d6:94:5a:08:df:f1:d9:31:ea:0a:be:dc:ab:cc:15:
e2:6d:e9:67:9a:a2:96:a8:4e:6e:a2:f8:12:b3:f2:
25:af:77:e4:c8:c0:4b:77:34:90:af:87:3b:61:aa:
5a:97:b6:33:57:3e:3b:04:0e:30:22:e7:32:7c:da:
d8:ed:fc:db:a1:65:34:c5:83:5c:ea:e8:71:f5:67:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AF:7D:C4:29:1B:A1:A6:65:2D:B0:17:58:32:60:90:68:F1:C8:A3
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/0K99xCkboaZlLbAXWDJgkGjxyKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/17
37.210.0.0/15
78.100.0.0/15
82.148.96.0/19
86.62.192.0/18
89.211.0.0/16
176.202.0.0/15
178.152.0.0/15
185.96.224.0/22
212.77.192.0/19
213.130.96.0/19
IPv6:
2001:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
8e:49:66:7b:3a:d2:8b:91:a5:44:7b:98:a0:2d:26:d1:e2:7b:
b6:c1:22:50:8d:bd:ae:a5:10:4a:ef:a4:e9:19:26:ac:66:46:
28:93:fc:bb:3f:3b:d1:92:e9:c6:6a:65:bc:57:98:17:9c:d6:
73:ad:66:07:03:b4:c9:ac:c3:46:47:27:e4:99:4f:d4:96:38:
3a:68:93:11:32:e4:9e:24:f0:ac:8a:77:d6:13:5f:e6:aa:fa:
5a:16:12:d8:96:88:74:23:1c:fd:a5:92:5f:69:b0:5a:38:e9:
99:04:2e:6e:2f:ca:61:3a:38:db:98:eb:d2:aa:f9:08:4f:b7:
5f:d5:ff:a4:4c:51:05:91:ad:a2:26:16:33:99:63:ed:1e:bb:
b8:66:38:0f:bf:0e:6a:4d:41:fa:42:48:fa:1c:21:d8:37:ee:
76:f7:40:a1:e6:e5:d5:c7:7a:07:30:29:32:1e:28:54:0c:a4:
45:ee:2e:ba:cf:66:64:ef:e2:36:b3:23:15:1a:66:9e:74:a9:
6a:dd:54:05:04:15:34:39:1d:9e:35:7c:e6:87:2f:93:15:9c:
a9:3d:8a:6b:fa:af:10:a2:17:97:77:95:d4:b6:a8:5b:ce:43:
b8:fb:6c:36:cb:e3:ca:9b:d4:30:0b:4d:ac:6f:99:66:3f:c1:
9f:2a:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:54:58 2025 by rpki-client