Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LDqAIwt1cVh51MOm-zlRI3iOEJc.roa
File: LDqAIwt1cVh51MOm-zlRI3iOEJc.roa (raw, json)
Hash identifier: pwxzTA84Hjvs4m/DRxCSgxcDO5URnFEJlrL+OgDegAo=
Subject key identifier: 2C:3A:80:23:0B:75:71:58:79:D4:C3:A6:FB:39:51:23:78:8E:10:97
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018E19941DB5B33CEC8F24A2AA5E6FE86500
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LDqAIwt1cVh51MOm-zlRI3iOEJc.roa
Signing time: Thu 07 Mar 2024 15:42:01 +0000
ROA not before: Thu 07 Mar 2024 15:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 28 Mar 2024 09:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:94:1d:b5:b3:3c:ec:8f:24:a2:aa:5e:6f:e8:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Mar 7 15:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3a80230b75715879d4c3a6fb395123788e1097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:1e:75:86:37:d7:eb:dc:d6:a9:9d:4a:2d:
2b:4a:0b:1c:36:5a:e9:1c:02:67:ad:4e:89:c7:7a:
c0:7a:0a:2f:6f:02:af:6c:c8:18:a6:cc:2e:32:6e:
69:e1:b0:a1:40:97:96:91:ff:31:56:ed:64:65:b8:
58:59:5f:99:0a:76:b1:0a:90:40:6e:97:6e:1d:ea:
df:ce:16:01:00:00:07:76:fc:1b:07:b4:7e:12:37:
cb:a0:f5:18:24:48:3d:a7:b9:c5:dd:17:20:e6:2a:
86:66:15:91:90:c1:f0:5b:fd:81:73:48:63:d4:8d:
c6:89:92:98:23:cc:a4:a9:df:ab:d3:28:5f:5c:43:
99:cc:73:34:9e:05:4c:ad:90:4d:3f:f1:16:a1:88:
da:f2:67:86:16:2f:8e:a4:78:5f:73:28:e8:a5:c0:
14:52:40:87:dd:39:91:91:85:45:70:92:5d:6d:c0:
eb:36:0c:cd:11:37:b9:ec:10:bd:c6:b4:eb:47:a9:
c8:54:16:29:82:48:46:a1:71:fc:bb:a4:53:79:62:
40:32:d0:98:d5:4f:8f:f8:87:3a:65:0c:e7:3a:17:
c2:7d:7a:74:b4:fc:7c:5d:ef:30:47:6e:5b:f9:d1:
fe:ca:b2:7e:36:5c:15:d9:40:dc:55:40:95:e3:62:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:80:23:0B:75:71:58:79:D4:C3:A6:FB:39:51:23:78:8E:10:97
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LDqAIwt1cVh51MOm-zlRI3iOEJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
6a:89:f3:58:4c:c5:30:71:f3:2f:90:f6:1c:b5:f2:6c:0c:07:
c8:18:76:91:3e:5b:4d:76:7d:01:5a:ac:f5:5a:2b:ab:1d:83:
4b:c7:0e:f7:ee:8d:d2:37:cf:1e:68:33:d2:64:c0:6d:59:35:
d5:19:89:cd:41:d4:ed:71:4c:7a:92:4d:e8:2a:b6:a3:a5:86:
41:31:89:b4:8d:14:da:87:f4:bf:19:80:ee:59:73:51:98:cc:
6f:26:fe:e1:24:46:5c:e1:35:b3:8e:45:46:e9:77:83:e8:b6:
fa:28:3d:3a:5f:9b:ea:e3:80:5e:70:63:b5:cd:8d:76:f3:20:
a0:ee:88:a0:53:76:0b:d8:0d:d6:2d:37:f6:52:a9:01:48:b5:
a3:21:fd:07:57:6d:de:5d:31:18:97:b7:52:a4:ec:88:8d:3d:
0e:96:d1:cf:1e:b4:79:ef:09:f5:bd:5a:6b:8f:af:c3:38:5b:
95:10:03:14:a7:f5:90:84:82:b4:73:ca:04:3c:be:9c:e6:c8:
5d:41:35:16:16:3f:46:a2:42:ac:bb:d9:b5:c3:b4:21:90:e7:
e3:28:1c:f7:03:b4:a9:19:b5:bd:a2:0a:b5:bd:b0:c5:07:9a:
79:f1:e3:12:60:40:24:53:f6:17:ff:03:ca:b9:38:b3:06:77:
c8:c9:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:28 2025 by rpki-client