Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/OEnwui5RAd-gq4ksQi5FUrouFQM.roa
File: OEnwui5RAd-gq4ksQi5FUrouFQM.roa (raw, json)
Hash identifier: xGLeBoI5gdyJjm1F+yABnnBd3BIg8tDviT868sZNxlc=
Subject key identifier: 38:49:F0:BA:2E:51:01:DF:A0:AB:89:2C:42:2E:45:52:BA:2E:15:03
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0192BD9CB5D302B9ACC80E56BB9CE8C1BC1E
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/OEnwui5RAd-gq4ksQi5FUrouFQM.roa
Signing time: Thu 24 Oct 2024 08:20:16 +0000
ROA not before: Thu 24 Oct 2024 08:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
88.98.192.0/18 maxlen: 18
88.98.200.0/22 maxlen: 22
88.98.204.0/22 maxlen: 22
88.98.216.0/23 maxlen: 23
88.98.218.0/23 maxlen: 23
88.98.240.0/20 maxlen: 20
88.98.240.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/23 maxlen: 23
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.118.0/23 maxlen: 23
137.220.120.0/23 maxlen: 23
137.220.122.0/23 maxlen: 23
137.220.124.0/22 maxlen: 22
140.228.32.0/19 maxlen: 19
140.228.40.0/22 maxlen: 22
140.228.44.0/22 maxlen: 22
140.228.48.0/22 maxlen: 22
140.228.52.0/22 maxlen: 22
140.228.56.0/22 maxlen: 22
140.228.64.0/19 maxlen: 19
140.228.80.0/21 maxlen: 21
140.228.88.0/22 maxlen: 22
140.228.92.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
143.58.128.0/18 maxlen: 18
143.58.128.0/21 maxlen: 21
143.58.136.0/21 maxlen: 21
143.58.144.0/22 maxlen: 22
143.58.148.0/22 maxlen: 22
143.58.152.0/21 maxlen: 21
143.58.160.0/21 maxlen: 21
143.58.168.0/21 maxlen: 21
143.58.176.0/21 maxlen: 21
143.58.184.0/21 maxlen: 21
143.58.192.0/18 maxlen: 18
143.58.192.0/21 maxlen: 21
143.58.200.0/21 maxlen: 21
143.58.212.0/22 maxlen: 22
143.58.216.0/21 maxlen: 21
143.58.216.0/22 maxlen: 22
143.58.220.0/22 maxlen: 22
143.58.224.0/21 maxlen: 21
143.58.224.0/22 maxlen: 22
143.58.228.0/22 maxlen: 22
143.58.232.0/22 maxlen: 22
143.58.236.0/22 maxlen: 22
143.58.240.0/21 maxlen: 21
143.58.248.0/21 maxlen: 21
152.37.64.0/18 maxlen: 18
152.37.64.0/22 maxlen: 22
152.37.68.0/22 maxlen: 22
152.37.72.0/22 maxlen: 22
152.37.76.0/22 maxlen: 22
152.37.80.0/22 maxlen: 22
152.37.84.0/22 maxlen: 22
152.37.88.0/22 maxlen: 22
152.37.92.0/22 maxlen: 22
152.37.96.0/22 maxlen: 22
152.37.100.0/23 maxlen: 23
152.37.102.0/23 maxlen: 23
152.37.104.0/22 maxlen: 22
152.37.108.0/22 maxlen: 22
152.37.114.0/23 maxlen: 23
152.37.116.0/22 maxlen: 22
152.37.120.0/22 maxlen: 22
152.37.124.0/23 maxlen: 23
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.210.212.0/22 maxlen: 22
188.210.212.0/23 maxlen: 23
188.210.214.0/23 maxlen: 23
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.64.0/21 maxlen: 21
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
2a01:4b00::/32 maxlen: 32
2a01:4b00:d000::/36 maxlen: 36
2a01:4b00:e000::/35 maxlen: 35
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:9c:b5:d3:02:b9:ac:c8:0e:56:bb:9c:e8:c1:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Oct 24 08:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3849f0ba2e5101dfa0ab892c422e4552ba2e1503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:96:00:df:b3:5b:78:0b:0d:14:a8:ff:c4:
82:25:03:7b:d6:99:28:75:6b:10:89:b8:0b:23:29:
18:b1:4e:78:12:07:7c:c4:c2:3a:58:59:a9:c4:59:
7b:dd:ba:f5:65:7b:94:62:cd:f9:16:ef:d1:c1:81:
c1:31:f9:38:ed:df:f3:ea:0b:7a:6d:0d:52:c5:e9:
cd:c7:9e:a5:76:2c:74:18:1b:5d:d7:db:e4:29:3f:
a3:cf:15:74:e0:5a:b9:ff:ef:54:35:8c:96:6d:b0:
ac:d5:7f:d9:6d:1f:0f:e4:31:02:e7:03:23:c7:7c:
ad:27:5e:13:5c:6a:38:6d:80:88:38:e9:ed:e4:20:
aa:b5:bf:6c:6d:6b:ac:61:20:d7:4e:3e:dc:1a:93:
8b:a7:fd:11:fa:fe:4b:39:ae:5c:be:e2:74:b8:73:
e0:f0:52:7b:02:ad:30:0c:63:39:e4:0a:19:44:44:
79:52:9e:f3:1c:eb:0b:9f:a7:f7:c7:a8:5b:46:d3:
07:e4:ca:d5:0b:fb:b9:8b:6c:a0:ed:0c:23:8f:56:
f5:6d:e8:f8:3e:8f:a3:cb:d1:c9:58:b6:d3:51:16:
76:1d:ca:14:18:29:9d:03:69:28:5b:ef:26:f1:84:
d6:bf:44:db:44:8f:16:b4:b7:58:4f:8a:e3:1d:1a:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:F0:BA:2E:51:01:DF:A0:AB:89:2C:42:2E:45:52:BA:2E:15:03
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/OEnwui5RAd-gq4ksQi5FUrouFQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
88.98.192.0/18
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
140.228.32.0-140.228.95.255
141.0.144.0/20
143.58.128.0/17
152.37.64.0/18
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
IPv6:
2a01:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
29:ef:fe:37:5f:c1:56:00:fa:9a:6b:6c:e4:a2:44:e2:fa:57:
18:11:68:28:df:c8:56:4c:af:52:af:a8:56:bb:4a:3b:d5:6d:
f9:f3:93:7c:09:51:b2:6c:31:2e:b7:45:e3:15:1b:13:d6:44:
5d:3b:60:36:bf:72:07:e0:31:a2:ec:75:55:a5:83:00:45:61:
31:ef:f1:63:bf:68:11:2b:96:6a:0d:76:5a:66:98:d6:4c:54:
ed:1b:4f:03:b6:41:4b:77:af:5b:5b:f6:b8:f3:c0:3c:46:64:
05:6b:02:4e:8e:26:44:4a:62:44:9d:9f:f2:96:29:63:24:39:
94:39:fb:5f:e8:6d:98:a5:ab:59:84:f5:e0:28:fb:4f:d6:9f:
62:78:2d:5d:b6:c6:7b:5f:2d:c2:9c:8b:41:88:90:86:b8:8a:
af:cf:c2:fa:e4:2e:6d:2d:cf:9e:1a:1e:4b:ec:91:a4:8c:5f:
bc:df:4f:ce:c4:b7:30:b0:e5:11:bd:84:49:d7:44:30:7a:6c:
d3:69:6e:ee:7e:ca:ba:36:ae:a8:dd:b8:b1:d4:61:79:51:5e:
58:e2:1c:9f:ea:ee:63:00:4b:26:8f:5e:b0:c7:08:23:88:31:
22:07:43:ae:9e:9f:25:13:61:00:cd:42:82:96:ce:ac:34:63:
44:32:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:46 2025 by rpki-client