Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/65vWYqC8NLFUA8BcfdOzNBGzF_U.roa
File: 65vWYqC8NLFUA8BcfdOzNBGzF_U.roa (raw, json)
Hash identifier: McOHSU1jAMOUMR9QT/NrMpHBgtgpTYHU+p8UeYTlux4=
Subject key identifier: EB:9B:D6:62:A0:BC:34:B1:54:03:C0:5C:7D:D3:B3:34:11:B3:17:F5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D3F45BE29DA87934405DD48F4BEE5DAD8
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/65vWYqC8NLFUA8BcfdOzNBGzF_U.roa
Signing time: Thu 25 Jan 2024 06:19:11 +0000
ROA not before: Thu 25 Jan 2024 06:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.110.0/24 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 08:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:45:be:29:da:87:93:44:05:dd:48:f4:be:e5:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 25 06:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb9bd662a0bc34b15403c05c7dd3b33411b317f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:65:39:af:7c:01:7d:e9:ae:63:d6:a9:c8:
4e:06:a8:ff:12:8a:1f:ff:d1:32:80:e0:b2:6e:06:
ba:92:9c:23:80:88:2a:d7:cf:9f:3a:93:69:76:04:
3f:59:5f:f5:27:86:ca:77:7a:e2:28:03:a5:9f:10:
35:88:2b:79:2e:70:3c:f4:1c:b8:cc:a7:06:c8:40:
45:a5:6d:a7:f8:30:14:bf:b4:9f:7d:c5:f9:51:bb:
27:27:91:47:3a:83:11:ab:38:74:6f:d7:9e:6c:a4:
0f:a6:98:5d:84:56:05:85:9f:58:f6:1e:ce:02:22:
00:1b:47:23:8f:03:a1:cc:79:8b:89:69:01:cb:81:
ea:96:a4:83:8b:a3:06:0d:56:7e:94:81:3d:7a:14:
01:e2:88:66:40:86:31:40:2d:ab:60:f1:d6:4d:ba:
d4:d2:c8:0f:7f:a1:7b:1e:55:b5:bf:b1:9d:4a:49:
69:35:ce:a5:e8:79:71:ae:65:54:c8:f9:5e:94:8d:
f9:84:99:76:8c:61:ee:28:ff:93:a0:ed:c1:88:8d:
42:98:f9:68:ba:3c:ea:ef:97:86:27:e7:70:de:ca:
ae:7b:85:5f:36:02:3d:2f:55:70:e5:0f:1a:6e:e6:
ae:af:08:b6:5d:40:70:a0:65:3d:09:10:75:96:51:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:D6:62:A0:BC:34:B1:54:03:C0:5C:7D:D3:B3:34:11:B3:17:F5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/65vWYqC8NLFUA8BcfdOzNBGzF_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0-2.138.255.255
79.144.0.0/14
80.30.0.0/15
81.32.0.0/16
81.34.0.0-81.41.255.255
81.43.0.0/16
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
192.101.1.0/24
194.179.112.0/24
195.53.0.0/16
195.55.110.0/24
213.99.44.0/24
213.99.59.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cf:ce:81:20:e7:4c:94:bc:45:3f:3e:00:7c:2f:62:50:81:
ee:46:50:00:f7:98:34:9d:f7:50:33:2a:63:3d:57:e4:62:b9:
9e:c7:76:64:5f:b6:24:93:1e:c4:ce:45:93:e9:08:d9:1a:8a:
75:a5:5f:55:94:db:ab:9a:2c:f7:57:82:9d:a4:b2:48:20:73:
ba:87:91:68:b6:ed:e5:2f:62:e0:58:b2:fb:0c:a9:47:68:ad:
7f:f9:54:cd:ab:66:a0:9a:f3:57:f4:4f:b7:c2:47:5c:14:af:
03:1d:61:de:d9:21:3c:d5:3b:9c:1a:77:98:74:4e:4b:04:b0:
28:ed:8e:35:a1:02:47:18:2b:0d:bf:33:da:9a:6c:69:53:19:
e9:43:44:5b:79:18:fa:83:e1:aa:8b:59:48:75:3a:3f:2f:1b:
82:bd:cb:7a:b6:92:3a:d4:ce:9d:00:dd:a0:b2:31:ba:86:40:
b3:e9:75:15:bc:4c:b7:a6:7b:28:b1:94:68:e0:90:07:35:4b:
fa:d7:1a:f8:c8:27:08:ab:02:c7:c8:20:d0:ed:d5:1d:81:67:
81:a8:da:70:fc:75:50:4d:71:85:68:dc:79:82:9a:38:c0:8a:
84:e3:df:44:79:a4:39:14:35:11:01:68:ad:85:02:9f:07:92:
96:ee:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:57:54 2025 by rpki-client