Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/D_Lny2YPCqo_uY3yiCZZwOLA3Hg.roa
File: D_Lny2YPCqo_uY3yiCZZwOLA3Hg.roa (raw, json)
Hash identifier: 97rY73W+9N5GrcA63IGRZdUctZRW1gSz8vpTJRb6sZ0=
Subject key identifier: 0F:F2:E7:CB:66:0F:0A:AA:3F:B9:8D:F2:88:26:59:C0:E2:C0:DC:78
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019392743744CEE4DEC98F6FB087D1385232
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/D_Lny2YPCqo_uY3yiCZZwOLA3Hg.roa
Signing time: Wed 04 Dec 2024 16:15:10 +0000
ROA not before: Wed 04 Dec 2024 16:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8359
IP address blocks: 5.144.96.0/19 maxlen: 19
31.40.112.0/20 maxlen: 20
37.208.120.0/21 maxlen: 21
62.118.0.0/16 maxlen: 24
62.168.224.0/19 maxlen: 19
79.171.115.0/24 maxlen: 24
80.83.237.0/24 maxlen: 24
81.91.32.0/19 maxlen: 19
81.91.41.0/24 maxlen: 24
81.195.0.0/16 maxlen: 24
82.96.192.0/18 maxlen: 18
83.237.0.0/16 maxlen: 16
85.140.0.0/15 maxlen: 24
85.235.32.0/19 maxlen: 19
89.175.0.0/16 maxlen: 16
89.175.248.0/21 maxlen: 21
91.76.0.0/14 maxlen: 14
92.43.184.0/21 maxlen: 21
93.90.224.0/20 maxlen: 20
93.90.224.0/22 maxlen: 22
94.140.128.0/19 maxlen: 19
95.153.136.0/22 maxlen: 22
95.169.128.0/19 maxlen: 19
109.198.224.0/19 maxlen: 19
141.105.24.0/21 maxlen: 21
176.222.17.0/24 maxlen: 24
178.141.0.0/16 maxlen: 16
178.155.0.0/17 maxlen: 17
178.159.16.0/20 maxlen: 20
185.168.236.0/22 maxlen: 22
193.104.128.0/24 maxlen: 24
195.34.0.0/19 maxlen: 19
195.34.15.0/24 maxlen: 24
195.34.32.0/19 maxlen: 19
195.34.36.0/24 maxlen: 24
195.34.38.0/24 maxlen: 24
195.34.42.0/24 maxlen: 24
212.188.0.0/17 maxlen: 17
213.87.0.0/16 maxlen: 16
213.87.64.0/22 maxlen: 22
213.87.70.0/23 maxlen: 23
213.87.76.0/23 maxlen: 23
213.87.80.0/20 maxlen: 20
213.87.98.0/23 maxlen: 23
213.87.100.0/24 maxlen: 24
213.87.104.0/24 maxlen: 24
213.87.105.0/24 maxlen: 24
213.87.106.0/23 maxlen: 23
213.87.128.0/19 maxlen: 19
213.87.160.0/22 maxlen: 22
213.87.200.0/22 maxlen: 22
213.87.204.0/22 maxlen: 22
213.87.208.0/23 maxlen: 23
213.87.210.0/23 maxlen: 23
213.87.240.0/22 maxlen: 22
213.87.244.0/23 maxlen: 23
213.87.246.0/24 maxlen: 24
213.87.248.0/22 maxlen: 22
213.147.32.0/19 maxlen: 19
213.176.228.0/22 maxlen: 22
217.74.244.0/22 maxlen: 22
217.74.248.0/21 maxlen: 21
2a00:1fa0::/29 maxlen: 29
2a00:1fa0::/33 maxlen: 33
2a00:1fa0:8000::/33 maxlen: 33
2a00:1fa1::/33 maxlen: 33
2a00:1fa2::/33 maxlen: 33
2a00:1fa3::/33 maxlen: 33
2a00:1fa3:8000::/40 maxlen: 40
2a02:28::/29 maxlen: 29
2a02:28::/32 maxlen: 32
2a02:28:1::/48 maxlen: 48
2a02:28:a::/48 maxlen: 48
2a02:29::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:74:37:44:ce:e4:de:c9:8f:6f:b0:87:d1:38:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 4 16:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff2e7cb660f0aaa3fb98df2882659c0e2c0dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:52:73:ab:6d:fa:10:ba:7d:43:18:60:82:
84:8e:fb:56:46:da:62:9d:58:2c:7e:a9:22:6c:07:
56:35:25:d8:ff:c8:39:df:6e:12:3b:0b:f0:80:7e:
66:32:e9:26:4b:14:a8:4d:1b:1d:55:a1:35:2f:d3:
37:c6:20:b8:4a:25:d2:5f:cb:36:c2:0d:a3:c0:95:
b8:07:e2:bf:5b:3a:8c:c7:5f:7c:a6:0a:02:03:c0:
95:54:7b:b0:8b:92:40:ec:5b:fc:ca:a1:8c:37:fd:
3b:a4:43:21:c3:de:20:7b:3e:e7:78:25:ca:d7:a2:
dc:b3:b7:05:3a:83:42:9c:2e:b9:db:45:da:21:ea:
84:6b:57:ad:fb:26:2b:11:bf:7d:21:d5:0f:18:36:
76:26:22:f2:d7:4e:09:b8:f3:c0:a8:58:fd:78:c6:
7d:5d:ca:c0:1c:9b:d0:e5:a3:e7:03:2f:1c:5b:86:
c7:7f:1f:a2:d2:56:6f:18:c9:8d:e3:6d:67:e0:a2:
90:51:ca:b4:f7:40:eb:8f:3a:7f:fd:50:15:b0:e3:
30:5d:2c:c2:ce:9b:ef:65:33:8d:ba:e8:08:90:65:
cf:2b:26:4e:1e:f5:df:db:47:ce:b4:02:e2:88:2b:
e0:35:77:5b:1e:0e:95:24:0c:98:7c:9e:1e:15:0f:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:E7:CB:66:0F:0A:AA:3F:B9:8D:F2:88:26:59:C0:E2:C0:DC:78
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/D_Lny2YPCqo_uY3yiCZZwOLA3Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.96.0/19
31.40.112.0/20
37.208.120.0/21
62.118.0.0/16
62.168.224.0/19
79.171.115.0/24
80.83.237.0/24
81.91.32.0/19
81.195.0.0/16
82.96.192.0/18
83.237.0.0/16
85.140.0.0/15
85.235.32.0/19
89.175.0.0/16
91.76.0.0/14
92.43.184.0/21
93.90.224.0/20
94.140.128.0/19
95.153.136.0/22
95.169.128.0/19
109.198.224.0/19
141.105.24.0/21
176.222.17.0/24
178.141.0.0/16
178.155.0.0/17
178.159.16.0/20
185.168.236.0/22
193.104.128.0/24
195.34.0.0/18
212.188.0.0/17
213.87.0.0/16
213.147.32.0/19
213.176.228.0/22
217.74.244.0-217.74.255.255
IPv6:
2a00:1fa0::/29
2a02:28::/29
Signature Algorithm: sha256WithRSAEncryption
7a:80:9b:ee:87:58:42:59:59:c1:84:d2:cf:3e:c6:09:7b:1c:
8f:12:91:e6:d4:86:6b:c9:6f:df:55:b7:1a:04:3d:b3:53:cc:
19:93:cd:79:d5:5b:23:8f:c1:06:6c:e2:27:8d:de:aa:ea:1e:
4f:fd:79:64:7b:28:3d:3d:74:fb:17:f1:e3:c7:1f:cd:b9:ff:
a2:d8:5e:87:88:56:4d:a1:64:49:0c:14:0a:a8:27:7d:64:d4:
05:7d:b7:70:c8:49:1c:eb:5b:12:bf:d7:87:fa:3d:6b:01:58:
46:6d:d6:10:ec:b2:10:ab:82:0c:d7:9b:76:7e:b6:2b:d6:ca:
d9:97:6a:7e:de:63:7a:1e:54:d3:b3:1a:99:be:66:51:dd:38:
5a:91:62:79:6f:dc:e4:25:56:2b:79:09:e2:52:83:e1:aa:e9:
35:9c:0c:b9:10:a9:fb:a4:44:74:6d:75:dc:b6:d3:17:f0:93:
15:ba:30:a0:2e:4f:13:85:43:43:47:81:8f:67:dd:7b:5a:42:
02:0f:a0:b2:20:5a:02:13:55:5b:e6:16:e9:38:24:a5:ff:65:
0a:36:f9:9a:24:27:c4:ec:fa:95:eb:e0:55:fd:ca:79:24:22:
27:d4:03:cb:5e:c7:b6:13:bf:ea:0c:b2:c7:60:0f:70:fa:71:
c1:aa:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:43 2025 by rpki-client