Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SaCD2vadeYPR7DuvRkaK78wPLWA.roa
File: SaCD2vadeYPR7DuvRkaK78wPLWA.roa (raw, json)
Hash identifier: asLQEUH+r2gTWRlsWivrc2Qj0tOsBO3BjMRc7cIAiQE=
Subject key identifier: 49:A0:83:DA:F6:9D:79:83:D1:EC:3B:AF:46:46:8A:EF:CC:0F:2D:60
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0190DFAB3A9E158A681CC256E354C3585A3C
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SaCD2vadeYPR7DuvRkaK78wPLWA.roa
Signing time: Tue 23 Jul 2024 12:57:39 +0000
ROA not before: Tue 23 Jul 2024 12:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Nov 2024 15:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:ab:3a:9e:15:8a:68:1c:c2:56:e3:54:c3:58:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 23 12:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49a083daf69d7983d1ec3baf46468aefcc0f2d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:d7:4b:4c:fa:e2:06:24:94:be:25:01:9f:
5b:b9:da:5e:10:2f:a6:33:db:0f:af:d5:a6:83:50:
aa:8c:c0:87:37:88:9a:7a:c3:83:c9:19:4d:57:0b:
e4:c3:db:cd:0e:fb:96:65:aa:02:f6:5e:76:3f:dd:
33:63:6b:ac:43:b0:d9:99:01:be:91:55:6a:f7:aa:
1a:3c:26:8e:85:aa:0c:10:ca:d9:a0:bb:4c:ec:dc:
78:7a:88:fe:23:ee:67:49:fc:c0:3c:c6:1e:05:6e:
6e:d3:d9:67:5d:88:61:77:6f:61:03:7b:3c:88:03:
04:1a:d0:f5:5e:29:cc:95:6a:7a:c8:ab:8d:25:44:
70:7c:4d:a3:a7:e6:d1:30:a1:6e:14:11:6f:26:f8:
1d:2f:2f:45:ac:7a:6c:b8:8a:c1:cc:56:01:50:fc:
b4:ec:90:03:20:21:84:ae:a1:98:72:3d:21:1b:cd:
03:3b:47:1d:f4:67:7b:dd:2a:12:f1:da:da:52:59:
9d:0b:29:dd:73:2b:42:88:bb:db:24:30:d6:bb:38:
27:e5:6f:40:ec:bc:2f:31:b7:ac:8f:86:a4:b1:a8:
dd:ef:a0:5d:6e:90:e1:e2:33:aa:39:c7:89:48:6d:
c0:89:b2:5f:51:ee:76:7f:e5:00:2e:a7:2b:a5:e8:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:83:DA:F6:9D:79:83:D1:EC:3B:AF:46:46:8A:EF:CC:0F:2D:60
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SaCD2vadeYPR7DuvRkaK78wPLWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
6e:6f:f4:ab:71:98:fa:45:f3:e2:34:3a:a8:fe:3b:34:60:56:
2a:13:88:68:dd:29:98:74:c4:cf:09:20:3a:d2:6d:30:c0:bd:
09:56:e0:9d:2d:91:08:44:1c:2e:7d:bf:75:58:88:50:ee:b5:
3d:41:f3:8a:5f:95:21:d5:bf:85:8d:6b:43:a5:18:56:b0:ac:
77:58:9f:2d:d6:e0:13:cd:fa:1d:7c:71:d1:75:24:09:4f:4b:
4a:fa:0c:c6:80:fd:a5:cd:21:29:44:ba:48:39:7d:83:fc:78:
90:55:7b:84:cf:f9:cc:98:b4:34:2a:8b:f9:35:56:8e:a7:e9:
87:dd:09:14:72:0b:51:60:56:39:a2:43:41:e0:ab:45:1d:5d:
f2:9a:1d:2a:05:81:5d:98:8d:f6:ed:6c:20:b8:5e:a4:ef:7d:
1c:bc:4d:1d:c8:8b:25:5c:d5:54:6b:ac:bd:f6:c3:4a:e6:02:
db:d2:de:9b:ef:a2:19:cf:bb:a2:b4:b1:a4:e3:d1:c2:2c:77:
1d:5e:2e:76:6f:79:cd:c2:3a:31:6e:a3:76:1e:39:28:bf:cb:
93:37:1a:21:86:d6:d8:05:2b:71:00:c9:1f:8b:18:a6:8e:5b:
6b:bd:2d:10:91:3e:0c:85:55:ad:af:d7:a0:08:4c:b0:ed:2f:
4f:5c:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:02:59 2025 by rpki-client