Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TSfDsRxMfSRDrFmu1s2tIIQlCGc.roa
File: TSfDsRxMfSRDrFmu1s2tIIQlCGc.roa (raw, json)
Hash identifier: DyxzZCw5mi50/P6rarfW8D7ON4y+nrRAcrWL32lEcwk=
Subject key identifier: 4D:27:C3:B1:1C:4C:7D:24:43:AC:59:AE:D6:CD:AD:20:84:25:08:67
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0195E121EB32F19D7D9EC2679FB5BDE791EC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TSfDsRxMfSRDrFmu1s2tIIQlCGc.roa
Signing time: Sat 29 Mar 2025 09:00:51 +0000
ROA not before: Sat 29 Mar 2025 09:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.50.0/23 maxlen: 24
37.148.52.0/22 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.64.0/21 maxlen: 24
37.148.72.0/21 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.88.0/22 maxlen: 24
37.148.92.0/23 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 12 Apr 2025 09:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:21:eb:32:f1:9d:7d:9e:c2:67:9f:b5:bd:e7:91:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 29 09:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d27c3b11c4c7d2443ac59aed6cdad2084250867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:b7:4f:79:42:95:7e:74:0b:38:8a:10:28:
b5:3b:93:3b:ef:d3:ae:6a:1f:0d:f4:25:ef:4d:77:
eb:38:a9:2d:54:4a:4b:d6:27:d6:01:70:a1:c3:e5:
92:39:85:9e:a6:6c:43:e8:c8:0d:80:dc:16:7f:1d:
63:b9:b4:73:74:3e:a8:3f:02:bd:49:50:f2:11:83:
f8:51:98:c2:40:0f:1f:83:1b:fa:3b:91:e9:12:9a:
c1:4c:a5:3f:f5:47:f9:ab:b3:cb:68:49:95:1a:75:
2f:31:48:2d:7a:37:dd:b5:31:14:33:62:aa:7a:f6:
e9:7e:ac:01:ce:ad:87:f1:28:ef:9a:31:83:b3:3b:
9e:a1:3d:71:9f:48:cd:d4:59:d7:3a:50:df:23:e9:
25:cc:e7:90:aa:b1:4e:71:69:93:16:83:01:3e:df:
19:46:15:3b:86:0d:7e:5c:92:60:b8:54:4e:d4:52:
b2:82:c6:b1:c4:7c:88:df:12:19:0b:bd:4f:9b:b9:
4b:e4:c3:0b:0c:81:47:48:83:7c:63:b2:4e:ad:f4:
07:56:d9:07:24:ff:df:15:ca:03:23:93:8e:0f:6b:
ad:5e:c6:9f:cf:7b:75:f7:01:d3:a4:36:a1:76:e8:
48:7a:e4:7e:4a:0c:ba:9b:40:fc:47:f2:88:fc:b5:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:C3:B1:1C:4C:7D:24:43:AC:59:AE:D6:CD:AD:20:84:25:08:67
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TSfDsRxMfSRDrFmu1s2tIIQlCGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.93.255
37.148.120.0/21
37.202.128.0/18
85.15.48.0/23
94.182.0.0/15
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:51:c7:80:35:8a:7f:64:32:3d:e1:2a:2d:6a:88:6f:88:8c:
25:81:c4:17:dd:d5:69:b7:f4:25:84:86:5c:35:8c:ec:7f:de:
e2:ad:39:91:49:ac:e8:78:53:97:3f:81:9b:14:91:56:44:4e:
19:30:b3:06:30:a3:a1:a4:a5:aa:78:f8:54:bf:3f:c7:7a:3b:
8e:26:d5:66:14:9b:51:e9:db:4c:32:64:41:c8:b4:e5:a8:f7:
4a:d6:6e:82:22:73:4a:9b:e8:a5:b9:18:2a:e9:b1:37:59:c1:
45:6c:4d:28:d7:3d:2d:03:d0:dc:f1:9f:ca:7c:9b:54:2b:1f:
76:47:a1:59:87:f9:05:81:86:62:f6:3b:7f:c4:2e:46:af:00:
30:19:fa:cb:35:18:22:ab:dd:0f:6a:9d:51:f6:e0:f1:18:a1:
66:43:17:83:68:13:9c:7d:c0:da:7c:a2:3e:a7:59:1d:51:14:
57:e9:1f:0c:c2:1a:be:c8:da:ea:d9:7c:45:63:62:a3:cd:4a:
c8:12:32:ab:6a:d3:0c:48:47:26:f3:b3:83:b2:e8:ca:46:3e:
7c:1e:c9:76:87:5c:1e:f3:22:d1:4b:bd:7b:8c:9d:a0:51:56:
26:75:71:73:65:7e:b0:37:f5:5a:52:5b:e2:a3:1e:94:d2:c2:
80:62:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:39:59 2025 by rpki-client