Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tf1WOVTRRKzLaolIY72QtCfDTZ0.roa
File: tf1WOVTRRKzLaolIY72QtCfDTZ0.roa (raw, json)
Hash identifier: hIRiKELFzY6x3ewfT+O5K33WLfkL5V/RFJ64+2jzntQ=
Subject key identifier: B5:FD:56:39:54:D1:44:AC:CB:6A:89:48:63:BD:90:B4:27:C3:4D:9D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01946FF52F35B6961ACA5484B3D2EB61C43E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tf1WOVTRRKzLaolIY72QtCfDTZ0.roa
Signing time: Thu 16 Jan 2025 16:32:06 +0000
ROA not before: Thu 16 Jan 2025 16:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.150.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.167.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.247.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 16:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:f5:2f:35:b6:96:1a:ca:54:84:b3:d2:eb:61:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 16 16:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5fd563954d144accb6a894863bd90b427c34d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:11:1d:df:0a:05:e6:2c:29:45:31:a4:e7:
d2:b0:45:f0:e2:c4:b7:02:6b:d3:eb:b7:0d:e2:12:
5c:03:c3:96:8f:cb:84:12:cc:72:24:e1:96:c8:ab:
c7:15:86:bb:11:4b:78:eb:d2:b6:20:13:c9:a2:12:
46:86:9f:39:7e:06:92:24:ca:1d:6d:ea:a6:1d:1f:
af:98:e4:fa:6d:51:26:0d:69:24:0c:16:30:9c:ab:
01:ba:7f:af:d8:66:b7:03:a6:e5:bb:7f:f4:e2:1f:
65:c8:b2:e8:bf:7a:f7:32:4e:ac:5c:a3:f4:fd:51:
4f:6f:2b:71:60:23:41:32:ca:ea:92:2a:91:4c:37:
9f:28:69:84:4a:67:df:0b:15:21:26:47:25:11:b4:
32:bc:28:6e:56:85:9f:58:d6:8c:d9:fc:01:b1:26:
f7:4d:92:e2:a7:80:4b:fd:dd:30:e6:59:d8:44:23:
b6:c5:eb:09:3a:25:95:a8:85:71:57:00:14:f3:66:
04:c5:d9:03:98:1a:53:03:0d:ca:d8:11:12:56:d8:
86:35:42:5e:20:d0:7d:2b:bf:8c:6c:9d:a4:ef:00:
b7:c7:c1:29:23:aa:fe:3e:2c:5f:c8:21:83:cb:d1:
67:06:5b:ae:62:fd:62:df:4a:18:43:a1:3f:e7:24:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:56:39:54:D1:44:AC:CB:6A:89:48:63:BD:90:B4:27:C3:4D:9D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tf1WOVTRRKzLaolIY72QtCfDTZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.63.0/24
37.18.78.0/24
37.18.103.0/24
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.254.0/24
46.243.137.0-46.243.140.255
46.243.148.0-46.243.150.255
46.243.163.0/24
46.243.167.0/24
46.243.173.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.191.0/24
141.101.199.0/24
141.101.235.0/24
141.101.248.0/24
141.101.255.0/24
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
178.170.247.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
32:9c:cc:3b:50:10:70:a0:ee:0f:3f:67:c6:69:47:b5:0d:b8:
9c:4b:3c:8d:7e:3b:0a:52:2b:d2:40:b7:ae:de:6a:17:86:27:
d1:70:7c:ad:db:05:84:03:7b:b3:58:ba:a8:ff:4a:1c:21:49:
ea:9d:a0:d8:35:6d:94:55:c2:b4:94:63:92:f2:8b:04:4e:10:
95:3a:7f:cd:76:aa:03:b3:f1:03:1a:7d:c3:cf:7f:01:8d:5d:
7e:0f:81:fe:d2:14:53:f0:2f:7d:31:85:66:42:f1:96:ff:6a:
0f:6e:7d:59:f8:a4:e2:8f:ac:3c:56:14:d1:ed:74:78:60:c5:
49:db:67:f3:2d:49:5a:48:99:85:86:1a:f5:43:bd:af:68:52:
65:94:25:83:3a:20:2a:aa:e3:e2:8e:87:80:1a:13:6a:79:d4:
e1:cd:24:f0:26:c9:b9:d6:2e:42:09:32:59:d8:a9:7e:51:3d:
8d:dd:c8:35:7b:de:7b:49:86:04:86:31:46:10:0b:8c:90:87:
7b:ab:74:45:e8:4e:df:d8:a2:c0:16:4a:ea:6f:4d:a8:9c:6a:
db:b4:f1:fd:b9:a8:69:bf:a1:02:1e:50:03:0f:e5:d1:b3:69:
cb:83:00:8d:ef:52:8d:d2:ec:4b:e8:65:53:cc:ec:56:ea:9d:
8a:1e:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:48 2025 by rpki-client