Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ddma7sTv1gt9q1jtbolLvKA3ZeI.roa
File: Ddma7sTv1gt9q1jtbolLvKA3ZeI.roa (raw, json)
Hash identifier: 6Ir46+tcMsH0ibzgiSBuzy6W9JmLzQ93ICmmJfwHFuU=
Subject key identifier: 0D:D9:9A:EE:C4:EF:D6:0B:7D:AB:58:ED:6E:89:4B:BC:A0:37:65:E2
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193308BD35A040D558324D332F8B2E049A4
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ddma7sTv1gt9q1jtbolLvKA3ZeI.roa
Signing time: Fri 15 Nov 2024 15:58:10 +0000
ROA not before: Fri 15 Nov 2024 15:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:ba80::/32 maxlen: 48
2a00:e080::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Nov 2024 10:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:8b:d3:5a:04:0d:55:83:24:d3:32:f8:b2:e0:49:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Nov 15 15:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dd99aeec4efd60b7dab58ed6e894bbca03765e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:ec:7a:c5:d6:c9:3d:78:e1:a9:ef:6f:f7:
d6:c5:49:bc:aa:40:a6:45:c3:99:dc:ff:02:cb:c7:
fe:70:32:17:44:fa:d4:31:a0:b0:ef:71:fd:3c:6b:
4e:7c:8b:63:27:52:78:0d:d3:61:91:3c:b8:e7:89:
b1:f3:8a:aa:81:a9:e1:af:fe:f4:10:4b:af:87:eb:
d6:fa:28:77:76:e6:b1:d2:91:60:90:48:a0:f6:53:
76:00:2d:9d:f2:c3:78:e4:65:91:03:58:04:dd:68:
28:9f:46:23:86:62:43:d8:92:e4:41:da:1b:92:48:
a1:41:bb:97:68:7f:bc:fc:50:8c:2c:52:17:e5:90:
32:80:19:32:af:3e:fd:a7:e9:85:29:62:c8:4c:5f:
44:cd:68:3d:d1:99:7c:66:bf:4e:70:bb:79:da:da:
2f:7d:98:ee:7e:a9:63:4a:f7:90:47:00:53:25:a1:
5e:66:12:53:a6:5a:03:17:1d:d6:95:67:88:d2:bb:
4d:09:f2:9f:97:7c:04:74:2b:22:46:69:c1:5e:58:
43:c3:5b:49:0d:89:40:0c:fc:a9:20:0a:46:0e:50:
be:6a:26:96:53:3f:2c:de:5c:4b:ac:cb:b6:8e:88:
9d:77:6f:2d:00:19:c1:66:95:28:1e:46:1f:06:9b:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:9A:EE:C4:EF:D6:0B:7D:AB:58:ED:6E:89:4B:BC:A0:37:65:E2
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ddma7sTv1gt9q1jtbolLvKA3ZeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ba80::/32
2a00:e080::/32
2a00:e880::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
8e:c8:bb:09:35:6e:80:6d:89:83:77:66:7b:5b:e7:d4:f3:a6:
ef:ff:2c:f1:b4:95:74:8a:bd:9f:b7:ea:c1:97:c2:5e:66:ae:
d1:38:25:81:0b:60:46:0e:50:05:43:d9:30:da:37:ab:fa:e6:
37:f7:25:3d:f8:80:36:30:1a:d5:86:87:e0:a3:b4:a7:39:0f:
5b:70:0a:8f:8f:30:7d:d2:e8:72:20:39:f9:70:d7:dd:4a:0f:
31:28:a9:f5:c9:c1:1b:ed:b8:c9:12:c8:ab:31:60:0a:24:27:
d3:5a:0a:98:6d:8a:07:35:99:34:a4:80:6e:56:fc:36:21:cc:
7f:53:d2:de:0a:5f:73:af:2b:37:a1:0e:d9:7b:f8:36:d0:9a:
24:59:61:f4:63:84:d7:80:eb:37:c2:75:df:f2:17:b9:35:f3:
e9:39:f6:e0:3b:87:22:19:39:cd:03:65:ff:57:ba:23:74:86:
53:21:3a:cd:4f:57:9b:58:c3:b9:aa:2f:7d:07:28:3a:78:1d:
23:fd:c1:11:7a:ca:0d:a7:36:e0:50:91:ff:cc:d1:fc:b9:00:
d2:c2:79:6e:de:c4:d6:2f:f1:c8:62:5b:73:50:7a:26:05:ad:
0c:69:1a:56:1c:70:da:36:e9:72:93:de:02:2f:be:cb:e8:bb:
33:5b:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:11 2025 by rpki-client