Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MLZV4ZgiYZf9QuZTCxrBx5n_w40.roa
File: MLZV4ZgiYZf9QuZTCxrBx5n_w40.roa (raw, json)
Hash identifier: 38GsQutEkN4MOAIeS6VBtCAMC+eqouV0lhEwXZDkGvg=
Subject key identifier: 30:B6:55:E1:98:22:61:97:FD:42:E6:53:0B:1A:C1:C7:99:FF:C3:8D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019422FB66A6209F5A55C515FB50AE804D5D
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MLZV4ZgiYZf9QuZTCxrBx5n_w40.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Feb 2025 14:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:66:a6:20:9f:5a:55:c5:15:fb:50:ae:80:4d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b655e198226197fd42e6530b1ac1c799ffc38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:e6:da:ed:06:24:f2:66:7d:9e:59:bc:ca:
dd:dc:29:50:74:8e:e7:59:01:c3:a0:77:07:e0:c4:
54:99:cf:89:1c:a0:8a:6f:84:23:ec:81:09:2e:68:
1f:8b:52:71:b1:87:de:e7:fa:59:6b:7e:e9:9f:5a:
be:95:f3:42:1a:24:68:8a:4b:bd:da:e9:20:13:16:
cc:6b:3e:1f:07:6b:94:77:5b:30:74:ed:0b:8a:7e:
33:42:00:c1:b2:38:39:22:ca:62:58:0b:f4:6b:88:
37:6e:04:51:9b:45:cd:33:f9:a5:a8:47:7f:96:de:
16:88:91:57:8d:99:97:8a:e5:91:3a:e8:c2:9b:94:
03:18:41:9f:30:6f:ec:ca:1b:06:df:80:9f:3c:dd:
dc:1c:4d:1e:cd:29:77:2d:d9:e3:4c:3f:41:e0:a4:
62:2e:b9:d9:dc:68:07:d8:aa:11:20:0a:0c:04:77:
9c:97:13:ee:ca:60:bd:a5:e2:4c:c8:06:71:84:44:
9f:66:e0:57:39:4b:69:f9:8c:6e:19:74:8b:f3:a6:
7c:33:8e:03:a9:d1:52:5d:43:19:4c:0c:d3:58:10:
bf:88:29:6e:87:c4:11:a5:68:e8:6d:22:bb:4a:ef:
0c:32:6d:6b:8f:41:a9:e3:82:2f:f9:6a:07:0d:58:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B6:55:E1:98:22:61:97:FD:42:E6:53:0B:1A:C1:C7:99:FF:C3:8D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MLZV4ZgiYZf9QuZTCxrBx5n_w40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
7e:50:d6:dd:91:00:1a:41:4b:60:c7:7b:11:6a:e0:ca:d1:44:
61:d3:11:b8:64:08:08:1d:84:b3:65:1e:8c:ed:eb:d1:f3:b8:
ec:32:ea:8f:ac:7e:d1:af:40:ee:b7:6a:3b:de:8c:d7:fb:e8:
76:ac:ad:37:5a:9a:b1:e3:cd:c9:f8:09:66:c0:cb:9a:eb:d7:
22:82:11:ca:3e:55:98:cc:aa:32:c8:95:33:87:ef:55:b3:1e:
40:94:92:2f:09:e0:0d:1b:5b:27:bf:34:5b:49:42:9b:04:e1:
d0:90:28:df:47:7b:bc:05:62:48:a2:c1:a7:dc:a1:ba:af:ff:
59:59:8d:15:5d:a1:f9:52:83:4a:6b:ff:60:7f:1d:fe:17:7b:
86:7e:8d:0e:10:1e:58:7c:e2:f9:8a:26:db:54:d1:07:4a:2e:
55:8c:76:0d:6b:b0:13:6f:bf:de:34:a4:25:bd:76:a9:b8:4c:
65:e0:4c:65:05:a1:43:a7:ad:2d:02:45:1e:9d:ad:47:be:62:
54:8e:91:7b:fd:30:02:37:c2:1a:74:98:bc:6a:39:ad:79:d8:
f4:e9:5b:dc:6f:ad:69:ef:d5:42:a5:97:ab:27:1e:97:15:f0:
c4:fe:e6:ea:f9:e4:c6:a0:d3:05:41:db:70:c0:8e:71:ba:25:
7e:4c:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:47 2025 by rpki-client