Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/8oVdxUxxbDhff4GYKJjwIUKGBpg.roa
File: 8oVdxUxxbDhff4GYKJjwIUKGBpg.roa (raw, json)
Hash identifier: 2rNnjYE1E1ORmeBrSM2GWtCUUDt19mAftfNnJY0zS2s=
Subject key identifier: F2:85:5D:C5:4C:71:6C:38:5F:7F:81:98:28:98:F0:21:42:86:06:98
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 01944092A19B7D1A88EDF11C28073CB2F198
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/8oVdxUxxbDhff4GYKJjwIUKGBpg.roa
Signing time: Tue 07 Jan 2025 11:42:18 +0000
ROA not before: Tue 07 Jan 2025 11:42:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8781
IP address blocks: 37.208.128.0/17 maxlen: 24
37.210.0.0/15 maxlen: 24
37.211.96.0/22 maxlen: 24
37.211.100.0/22 maxlen: 24
37.211.104.0/22 maxlen: 24
37.211.108.0/22 maxlen: 24
37.211.112.0/22 maxlen: 24
37.211.116.0/22 maxlen: 24
37.211.120.0/22 maxlen: 24
37.211.124.0/22 maxlen: 24
37.211.192.0/20 maxlen: 24
37.211.208.0/22 maxlen: 24
37.211.212.0/22 maxlen: 24
37.211.216.0/22 maxlen: 24
37.211.224.0/22 maxlen: 24
37.211.228.0/22 maxlen: 24
37.211.232.0/22 maxlen: 24
37.211.236.0/22 maxlen: 24
37.211.240.0/20 maxlen: 24
78.100.0.0/15 maxlen: 24
78.100.2.0/24 maxlen: 24
78.100.3.0/24 maxlen: 24
78.100.6.0/24 maxlen: 24
78.100.29.0/24 maxlen: 24
78.100.32.0/20 maxlen: 24
78.100.32.0/24 maxlen: 24
78.100.48.0/20 maxlen: 24
78.100.48.0/24 maxlen: 24
78.100.53.0/24 maxlen: 24
78.100.59.0/24 maxlen: 24
78.100.64.0/20 maxlen: 24
78.100.80.0/20 maxlen: 24
78.100.94.0/24 maxlen: 24
78.100.112.0/20 maxlen: 24
78.100.128.0/19 maxlen: 24
78.100.155.0/24 maxlen: 24
78.101.0.0/22 maxlen: 24
78.101.4.0/22 maxlen: 22
78.101.8.0/22 maxlen: 22
78.101.12.0/22 maxlen: 22
78.101.32.0/22 maxlen: 22
78.101.36.0/22 maxlen: 22
78.101.40.0/22 maxlen: 22
78.101.44.0/22 maxlen: 22
78.101.48.0/22 maxlen: 22
78.101.52.0/22 maxlen: 22
78.101.56.0/22 maxlen: 22
78.101.60.0/22 maxlen: 22
82.148.96.0/19 maxlen: 24
82.148.96.0/24 maxlen: 24
82.148.97.0/24 maxlen: 24
82.148.98.0/24 maxlen: 24
82.148.99.0/24 maxlen: 24
82.148.101.0/24 maxlen: 24
82.148.102.0/24 maxlen: 24
82.148.105.0/24 maxlen: 24
82.148.106.0/24 maxlen: 24
82.148.109.0/24 maxlen: 24
82.148.110.0/24 maxlen: 24
82.148.113.0/24 maxlen: 24
82.148.117.0/24 maxlen: 24
86.62.192.0/18 maxlen: 24
86.62.241.0/24 maxlen: 24
89.211.0.0/16 maxlen: 24
89.211.3.0/24 maxlen: 24
89.211.4.0/24 maxlen: 24
89.211.5.0/24 maxlen: 24
89.211.6.0/24 maxlen: 24
89.211.7.0/24 maxlen: 24
89.211.16.0/21 maxlen: 24
89.211.24.0/21 maxlen: 24
89.211.32.0/20 maxlen: 24
89.211.34.0/24 maxlen: 24
89.211.48.0/20 maxlen: 24
176.202.0.0/15 maxlen: 24
176.202.240.0/20 maxlen: 24
176.203.0.0/20 maxlen: 20
176.203.16.0/20 maxlen: 20
176.203.32.0/20 maxlen: 20
176.203.48.0/20 maxlen: 20
176.203.64.0/20 maxlen: 20
176.203.80.0/20 maxlen: 20
176.203.96.0/20 maxlen: 20
176.203.112.0/20 maxlen: 20
176.203.128.0/20 maxlen: 20
176.203.144.0/20 maxlen: 20
176.203.160.0/20 maxlen: 20
176.203.176.0/20 maxlen: 20
176.203.192.0/20 maxlen: 20
176.203.208.0/20 maxlen: 20
176.203.224.0/20 maxlen: 20
176.203.240.0/20 maxlen: 20
178.152.0.0/15 maxlen: 24
178.152.128.0/22 maxlen: 22
178.152.132.0/22 maxlen: 22
178.152.136.0/22 maxlen: 22
178.152.140.0/22 maxlen: 22
178.152.144.0/20 maxlen: 20
178.152.160.0/22 maxlen: 22
178.152.164.0/22 maxlen: 22
178.152.168.0/22 maxlen: 22
178.152.172.0/22 maxlen: 22
178.152.176.0/20 maxlen: 20
178.152.192.0/22 maxlen: 22
178.152.196.0/22 maxlen: 22
178.152.200.0/22 maxlen: 22
178.152.204.0/22 maxlen: 22
178.152.208.0/20 maxlen: 20
178.152.224.0/22 maxlen: 22
178.152.228.0/22 maxlen: 22
178.152.232.0/22 maxlen: 22
178.152.236.0/22 maxlen: 22
178.153.144.0/22 maxlen: 22
178.153.148.0/22 maxlen: 22
178.153.152.0/22 maxlen: 22
178.153.156.0/22 maxlen: 22
185.96.224.0/22 maxlen: 24
212.77.192.0/19 maxlen: 24
212.77.192.0/24 maxlen: 24
212.77.199.0/24 maxlen: 24
212.77.202.0/24 maxlen: 24
212.77.204.0/24 maxlen: 24
212.77.207.0/24 maxlen: 24
212.77.209.0/24 maxlen: 24
212.77.210.0/24 maxlen: 24
212.77.211.0/24 maxlen: 24
212.77.217.0/24 maxlen: 24
212.77.218.0/24 maxlen: 24
212.77.220.0/24 maxlen: 24
212.77.221.0/24 maxlen: 24
213.130.96.0/19 maxlen: 24
213.130.112.0/24 maxlen: 24
213.130.113.0/24 maxlen: 24
213.130.119.0/24 maxlen: 24
213.130.121.0/24 maxlen: 24
2001:1a10::/29 maxlen: 48
2001:1a10::/32 maxlen: 64
2001:1a10::/40 maxlen: 48
2001:1a10:1::/48 maxlen: 48
2001:1a10:c1::/48 maxlen: 48
2001:1a10:cd::/48 maxlen: 64
2001:1a10:100::/40 maxlen: 40
2001:1a10:c00::/40 maxlen: 40
2001:1a10:f00::/40 maxlen: 40
2001:1a10:4000::/36 maxlen: 36
2001:1a11::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 17:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:92:a1:9b:7d:1a:88:ed:f1:1c:28:07:3c:b2:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Jan 7 11:42:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2855dc54c716c385f7f81982898f02142860698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:59:8a:a5:e1:f1:aa:0c:68:ff:fb:c7:f4:
df:aa:59:fa:50:cf:be:a3:e6:e4:bc:ba:7f:83:ea:
3c:9a:b2:8b:58:8d:ef:43:7b:cb:29:92:56:49:c6:
29:3f:94:79:22:0b:ef:d7:28:2a:8a:95:6d:57:d0:
02:c3:46:fa:dd:0b:4e:18:71:a8:e0:ce:06:d0:2a:
43:46:18:f5:0b:de:d7:7b:9c:cc:f7:7d:3d:93:a6:
28:54:00:ab:43:ab:bf:fe:fe:1f:db:3d:72:e2:cb:
fe:28:56:9a:56:ef:39:13:bf:11:57:27:61:10:a5:
84:bf:d2:e8:75:60:c3:24:aa:a2:e2:31:71:aa:34:
d2:51:6a:9c:5d:17:52:38:9e:f6:24:a3:2d:c1:7e:
40:5b:10:de:ae:60:a8:66:b4:fd:fa:93:98:73:a6:
6c:41:eb:3f:7d:db:60:6a:ec:12:6c:1e:57:56:7b:
21:ec:8c:fc:5f:ad:ee:18:a6:ad:ae:4a:6b:5e:49:
b3:2b:7b:ab:98:6f:44:62:8a:8b:c9:57:30:45:39:
c1:c5:b5:47:b3:b1:e0:09:68:10:d2:f1:e5:4b:fb:
8b:1e:53:75:8c:99:b4:55:b7:9a:89:6a:16:18:32:
47:83:21:5f:cb:f7:e5:17:a9:8b:aa:2b:8c:66:75:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:5D:C5:4C:71:6C:38:5F:7F:81:98:28:98:F0:21:42:86:06:98
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/8oVdxUxxbDhff4GYKJjwIUKGBpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/17
37.210.0.0/15
78.100.0.0/15
82.148.96.0/19
86.62.192.0/18
89.211.0.0/16
176.202.0.0/15
178.152.0.0/15
185.96.224.0/22
212.77.192.0/19
213.130.96.0/19
IPv6:
2001:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
97:00:dd:c3:e6:3d:23:0b:0a:10:d2:a7:8d:2d:9c:57:f2:14:
a1:5d:24:45:e9:14:22:1d:a3:6a:99:7a:66:ab:7c:1a:c0:bd:
af:f1:0b:cd:22:eb:3a:22:24:21:51:12:08:9b:be:fc:4c:27:
20:73:df:63:d0:35:b5:70:c3:a2:1e:c4:98:8f:ca:4f:ea:4d:
44:da:d8:d6:a8:4d:dc:d7:39:46:41:90:75:4c:88:26:37:c4:
3f:2f:4d:7b:9a:a9:b2:d7:d9:ab:03:1f:36:90:a9:5c:4b:b3:
21:71:06:66:db:1f:6b:1b:53:ef:fa:6c:18:27:ab:a7:f3:38:
79:06:0b:e2:fe:23:70:73:0b:dc:d0:08:d7:91:6e:ae:56:38:
93:c0:38:bd:42:7d:69:9d:85:25:cc:87:13:8b:e7:3d:95:2e:
7a:36:0c:e3:4a:4d:aa:62:5f:f4:d7:47:22:e7:b2:fd:c4:1e:
58:b7:8d:26:66:0f:cc:05:75:b3:64:82:fa:b4:3d:4c:ad:6d:
63:2d:40:da:e4:19:ee:f7:0d:9d:99:7e:f8:45:d6:ae:62:70:
68:de:8e:1c:74:13:73:35:d2:50:e1:48:32:14:16:bc:44:38:
68:73:96:07:30:b7:e8:b8:66:2f:29:75:30:b5:cb:3a:eb:9f:
25:ab:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:53:27 2025 by rpki-client