Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-Lz4vuWIDBGfVnF8rFO9ZGLiN4.roa
File: V-Lz4vuWIDBGfVnF8rFO9ZGLiN4.roa (raw, json)
Hash identifier: kIpkGMnbU/sGeY2YG/pohBo8iIHzre7NU8fXZc/D/U8=
Subject key identifier: 57:E2:F3:E2:FB:96:20:30:46:7D:59:C5:F2:B1:4E:F5:91:8B:88:DE
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0193EDCBDA049C479BCC7A0FF5E4990383F2
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-Lz4vuWIDBGfVnF8rFO9ZGLiN4.roa
Signing time: Sun 22 Dec 2024 09:56:20 +0000
ROA not before: Sun 22 Dec 2024 09:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1680
IP address blocks: 37.26.144.0/21 maxlen: 21
37.26.145.0/24 maxlen: 24
37.26.146.0/24 maxlen: 24
37.26.147.0/24 maxlen: 24
37.26.148.0/24 maxlen: 24
37.26.149.0/24 maxlen: 24
37.26.150.0/24 maxlen: 24
37.26.151.0/24 maxlen: 24
46.116.0.0/16 maxlen: 16
46.117.0.0/16 maxlen: 16
46.210.0.0/16 maxlen: 24
62.0.0.0/16 maxlen: 24
62.0.87.0/24 maxlen: 24
62.0.88.0/22 maxlen: 24
62.0.92.0/23 maxlen: 24
62.0.94.0/24 maxlen: 24
62.0.114.0/23 maxlen: 24
62.0.116.0/22 maxlen: 24
62.0.120.0/21 maxlen: 24
62.0.128.0/23 maxlen: 24
62.90.0.0/16 maxlen: 24
62.90.135.0/24 maxlen: 24
62.90.143.0/24 maxlen: 24
80.250.144.0/20 maxlen: 24
82.166.0.0/16 maxlen: 24
82.166.100.0/22 maxlen: 24
82.166.112.0/21 maxlen: 24
82.166.201.128/25 maxlen: 25
85.64.0.0/16 maxlen: 16
85.65.0.0/16 maxlen: 16
85.250.0.0/16 maxlen: 16
89.138.0.0/16 maxlen: 16
89.139.0.0/16 maxlen: 16
93.172.0.0/16 maxlen: 16
93.173.0.0/16 maxlen: 16
95.35.0.0/16 maxlen: 24
109.186.0.0/16 maxlen: 16
109.253.0.0/16 maxlen: 24
141.226.132.0/24 maxlen: 24
141.226.134.0/24 maxlen: 24
147.161.8.0/21 maxlen: 24
147.234.17.0/24 maxlen: 24
147.234.22.0/24 maxlen: 24
147.234.27.0/24 maxlen: 24
147.234.27.0/25 maxlen: 25
147.234.27.128/25 maxlen: 25
147.234.28.0/24 maxlen: 24
147.234.43.0/24 maxlen: 24
147.234.83.0/24 maxlen: 24
147.234.84.0/24 maxlen: 24
147.234.86.0/24 maxlen: 24
176.12.128.0/17 maxlen: 24
176.13.0.0/16 maxlen: 24
192.118.28.0/22 maxlen: 22
192.118.28.0/23 maxlen: 23
192.118.30.0/23 maxlen: 23
194.90.0.0/16 maxlen: 24
194.90.1.0/24 maxlen: 24
194.90.229.0/24 maxlen: 24
199.203.0.0/16 maxlen: 16
199.203.1.0/24 maxlen: 24
199.203.21.0/24 maxlen: 24
199.203.76.0/24 maxlen: 24
199.203.191.0/24 maxlen: 24
207.232.0.0/18 maxlen: 18
207.232.50.0/24 maxlen: 24
212.29.192.0/18 maxlen: 18
212.29.244.0/24 maxlen: 24
212.143.0.0/16 maxlen: 24
212.143.194.0/24 maxlen: 24
212.150.0.0/16 maxlen: 24
212.235.0.0/17 maxlen: 24
217.132.0.0/16 maxlen: 16
2001:4df0::/29 maxlen: 32
2001:4df0::/32 maxlen: 32
2001:4df1::/32 maxlen: 32
2001:4df2::/32 maxlen: 32
2001:4df3::/32 maxlen: 32
2001:4df4::/32 maxlen: 32
2001:4df5::/32 maxlen: 32
2001:4df6::/32 maxlen: 32
2001:4df7::/32 maxlen: 32
2a02:148::/29 maxlen: 32
2a02:148::/32 maxlen: 32
2a02:149::/32 maxlen: 32
2a02:14a::/32 maxlen: 32
2a02:14b::/32 maxlen: 32
2a02:14c::/32 maxlen: 32
2a02:14d::/32 maxlen: 32
2a02:14e::/32 maxlen: 32
2a02:14f::/32 maxlen: 32
2a03:c5c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ed:cb:da:04:9c:47:9b:cc:7a:0f:f5:e4:99:03:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Dec 22 09:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e2f3e2fb962030467d59c5f2b14ef5918b88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:bf:f1:6f:a2:9a:7a:a6:9e:8f:6c:d9:5a:
a3:f6:06:30:5f:e3:cd:4c:04:e8:f6:80:9c:fa:50:
ee:25:1f:28:31:b9:54:e2:b1:83:c2:bf:f1:ef:a0:
05:29:9a:ed:43:2a:01:9b:48:14:86:c1:f1:2c:d0:
dc:0a:c9:4a:cb:af:db:9f:de:f1:5d:71:d9:87:f7:
34:85:6b:04:25:fc:20:8e:31:9c:1c:19:dd:a5:a4:
0d:b4:dc:7e:7d:5d:df:32:78:f3:d2:c3:ac:5a:65:
5b:2d:95:3d:84:a4:56:ec:04:03:b6:34:0a:8a:1f:
91:03:f6:66:36:0f:17:2d:11:7a:0c:a7:45:fc:02:
37:62:8b:63:bd:23:7f:2f:cf:2c:63:a9:93:e5:f7:
90:2f:f7:83:f3:e4:cb:47:4b:b6:cc:9e:1f:60:84:
a7:48:dc:a8:ea:6f:c8:e1:c8:c5:65:b9:26:d9:d7:
97:27:08:c1:11:15:cf:ab:39:1e:9f:62:c8:bd:96:
3e:53:2d:bf:ee:ee:43:d7:db:f9:c5:11:91:00:1d:
44:e1:ab:26:fc:dd:c7:e3:8e:c2:0d:ba:72:6f:c4:
af:04:79:4c:9d:33:07:8d:34:9b:a2:d9:87:fd:c8:
67:c4:2b:e9:91:e5:4c:81:7e:ee:80:4f:3b:20:1b:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:F3:E2:FB:96:20:30:46:7D:59:C5:F2:B1:4E:F5:91:8B:88:DE
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-Lz4vuWIDBGfVnF8rFO9ZGLiN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.144.0/21
46.116.0.0/15
46.210.0.0/16
62.0.0.0/16
62.90.0.0/16
80.250.144.0/20
82.166.0.0/16
85.64.0.0/15
85.250.0.0/16
89.138.0.0/15
93.172.0.0/15
95.35.0.0/16
109.186.0.0/16
109.253.0.0/16
141.226.132.0/24
141.226.134.0/24
147.161.8.0/21
147.234.17.0/24
147.234.22.0/24
147.234.27.0-147.234.28.255
147.234.43.0/24
147.234.83.0-147.234.84.255
147.234.86.0/24
176.12.128.0-176.13.255.255
192.118.28.0/22
194.90.0.0/16
199.203.0.0/16
207.232.0.0/18
212.29.192.0/18
212.143.0.0/16
212.150.0.0/16
212.235.0.0/17
217.132.0.0/16
IPv6:
2001:4df0::/29
2a02:148::/29
2a03:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:11:b5:e2:da:82:15:9b:7a:6a:d9:a6:90:99:ca:20:8c:51:
48:b6:46:f8:24:a9:c2:e1:fd:b3:7c:b1:f3:ac:ad:ce:af:ac:
b7:95:4f:1d:b8:0b:b6:04:f2:47:93:27:a8:ed:38:a1:d2:0a:
42:e0:a8:f8:27:69:0d:84:d7:f3:1c:fe:4d:2e:be:22:e5:70:
7f:14:c8:af:7c:e1:e1:13:59:e4:f5:fa:9e:a8:fa:86:e1:eb:
4c:c1:8c:a3:3d:b3:56:f3:4d:ee:d8:1c:b2:cb:63:5e:98:2f:
b0:bd:1d:60:24:c4:45:44:a0:a6:ec:42:15:b5:de:0e:93:a9:
ec:14:c3:6b:aa:00:c4:22:bd:9e:5b:31:25:09:b8:f2:d4:8a:
1c:ff:88:7e:0f:a5:36:26:7d:df:90:55:72:b4:35:46:cd:47:
f9:41:0b:0f:92:8c:85:93:b7:6f:c2:07:66:aa:55:be:9f:8a:
0f:96:3f:8a:e1:ab:51:55:c8:e3:d1:39:9a:6b:73:c1:55:7e:
f7:31:d9:e6:18:90:ba:51:42:07:c2:d0:cd:1c:c6:95:7c:a1:
59:97:eb:50:15:8e:ef:10:14:ed:c0:04:fb:f5:8d:fa:4a:e3:
f1:a0:cc:77:09:dc:39:f7:5f:0b:03:65:03:39:71:ba:fd:0b:
42:33:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:01 2025 by rpki-client