Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7xjmkApn7Ela74BCTwx_3Si8Yko.roa
File: 7xjmkApn7Ela74BCTwx_3Si8Yko.roa (raw, json)
Hash identifier: RiowgMLOPVBJP0EArf1vX05YmRGSDa3MWsX7irgnLbI=
Subject key identifier: EF:18:E6:90:0A:67:EC:49:5A:EF:80:42:4F:0C:7F:DD:28:BC:62:4A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D8D38A29AEAAE479152DAA499F3250820
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7xjmkApn7Ela74BCTwx_3Si8Yko.roa
Signing time: Fri 09 Feb 2024 09:35:15 +0000
ROA not before: Fri 09 Feb 2024 09:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:38:a2:9a:ea:ae:47:91:52:da:a4:99:f3:25:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Feb 9 09:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef18e6900a67ec495aef80424f0c7fdd28bc624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:9e:f2:aa:fe:f3:41:15:e9:08:48:67:46:
b9:2f:fa:73:ac:34:a7:6e:69:11:3b:6c:be:21:c7:
ce:af:8f:be:a2:38:34:8c:ff:dc:d8:c1:aa:83:08:
86:74:36:c8:26:8f:d8:59:e4:67:9f:39:e3:28:24:
70:c3:6c:f7:f9:85:d7:80:b2:b8:84:96:da:9c:e7:
57:68:99:29:67:bc:13:a4:b5:89:54:bc:78:43:93:
a0:7d:1b:8f:71:b5:03:71:41:a6:c2:e5:f5:6f:6b:
4d:6a:c5:15:39:60:b7:53:c9:5a:f2:9c:e4:32:64:
27:61:a4:a4:9e:40:d8:62:3a:97:3f:07:05:e3:1f:
0c:d7:bc:c0:e9:c3:25:9a:ca:49:a2:90:da:8e:ff:
30:e0:f2:0a:57:7c:e6:e5:b1:e1:83:15:8e:53:ba:
0f:e5:09:a3:d7:f5:a2:84:88:7f:65:f5:f8:f5:e1:
d0:fc:a5:63:53:5b:80:d5:73:ec:31:79:4e:9f:aa:
a7:1a:ef:dd:86:61:31:59:f7:29:c3:d8:f3:3d:88:
55:fd:dc:15:54:00:61:fd:64:3d:54:1f:98:91:b0:
fe:a3:55:66:ba:f3:98:aa:9e:51:d5:ff:be:21:57:
f1:6a:b1:d2:09:c3:ac:e7:33:b0:51:b5:96:bc:a9:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:E6:90:0A:67:EC:49:5A:EF:80:42:4F:0C:7F:DD:28:BC:62:4A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7xjmkApn7Ela74BCTwx_3Si8Yko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/14
79.144.0.0-79.148.255.255
80.24.0.0/15
80.30.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.61.255.255
83.63.0.0/16
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/15
88.27.0.0/16
88.30.0.0/16
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.235.95.0/24
195.235.188.0/24
195.235.225.0/24
212.170.156.0/24
212.170.159.0/24
213.96.0.0/16
213.99.44.0/24
213.99.59.0/24
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d7:ff:32:92:fd:0e:02:38:01:bf:55:a6:54:55:16:2e:4e:ea:
a3:18:09:4a:2f:f4:d5:e7:8d:2f:ca:a2:81:46:96:93:40:20:
16:77:44:ab:48:3e:e9:cf:dd:78:e1:2f:1f:93:7d:64:cd:53:
21:e5:79:dd:88:af:b7:d8:74:ff:12:01:49:47:2c:a2:08:a9:
5b:12:6b:41:65:a5:1c:fc:9b:d2:36:ec:11:d3:a2:22:59:d7:
6a:df:53:5b:58:8d:14:38:fb:b1:6f:9c:13:44:34:38:9e:55:
f4:8b:94:a8:89:25:e8:c5:14:cf:67:55:f8:2e:73:3b:f2:11:
be:70:f0:12:84:3d:17:1d:00:a1:56:a9:e3:80:c9:f0:89:fa:
a2:af:44:9c:9c:65:4b:c4:50:ff:3d:4a:d5:c3:61:0f:f2:e9:
4b:8d:50:63:21:b6:bd:ab:e8:47:42:7b:20:4f:30:13:48:7b:
9b:2e:6a:16:8a:e7:03:00:55:0a:1d:eb:56:16:0b:56:79:3a:
ba:2d:07:f8:ea:af:15:e3:22:e1:83:97:5b:04:3a:a6:e5:e8:
ce:52:de:a1:84:c7:8c:52:c3:7f:d7:a7:76:ff:3f:11:a0:aa:
f6:9b:73:30:5f:3f:1d:b3:a1:a2:a5:cf:29:06:24:73:7d:e2:
ca:c4:23:26
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAY2NOKKa6q5HkVLapJnzJQggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMjA5MDkzNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjE4ZTY5MDBhNjdlYzQ5NWFlZjgwNDI0ZjBjN2ZkZDI4YmM2MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf+e8qr+80EV6QhIZ0a5L/pzrDSn
bmkRO2y+IcfOr4++ojg0jP/c2MGqgwiGdDbIJo/YWeRnnznjKCRww2z3+YXXgLK4
hJbanOdXaJkpZ7wTpLWJVLx4Q5OgfRuPcbUDcUGmwuX1b2tNasUVOWC3U8la8pzk
MmQnYaSknkDYYjqXPwcF4x8M17zA6cMlmspJopDajv8w4PIKV3zm5bHhgxWOU7oP
5Qmj1/WihIh/ZfX49eHQ/KVjU1uA1XPsMXlOn6qnGu/dhmExWfcpw9jzPYhV/dwV
VABh/WQ9VB+YkbD+o1VmuvOYqp5R1f++IVfxarHSCcOs5zOwUbWWvKnIGwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFO8Y5pAKZ+xJWu+AQk8Mf90ovGJKMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvN3hqbWtBcG43RWxhNzRCQ1R3eF8zU2k4WWtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwMC
AogwCgMDBE+QAwMAT5QDAwFQGDAKAwMBUB4DAwNQIAMDAFA7MAoDAwVRIAMDAFEs
AwMDUyADAwBTLzAKAwMCUzQDAwFTPAMDAFM/AwMCWAAwCgMDA1gIAwMAWBADAwFY
GAMDAFgbAwMAWB4DBADAZQEDBADCReEDBADCsyIDBADCs3ADBADC4J0DAwDDNQME
AcM3TgMEAMM3bgMEAMM5BQMEAMM5GwMDAMNMAwQAw005AwQAw+tfAwQAw+u8AwQA
w+vhAwQA1KqcAwQA1KqfAwMA1WADBADVYywDBADVYzsDBADZfLYDAwHZfjANBgkq
hkiG9w0BAQsFAAOCAQEA1/8ykv0OAjgBv1WmVFUWLk7qoxgJSi/01eeNL8qigUaW
k0AgFndEq0g+6c/deOEvH5N9ZM1TIeV53Yivt9h0/xIBSUcsogipWxJrQWWlHPyb
0jbsEdOiIlnXat9TW1iNFDj7sW+cE0Q0OJ5V9IuUqIkl6MUUz2dV+C5zO/IRvnDw
EoQ9Fx0AoVap44DJ8In6oq9EnJxlS8RQ/z1K1cNhD/LpS41QYyG2vavoR0J7IE8w
E0h7my5qFornAwBVCh3rVhYLVnk6ui0H+OqvFeMi4YOXWwQ6puXozlLeoYTHjFLD
f9endv8/EaCq9ptzMF8/HbOhoqXPKQYkc33iysQjJg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:30 2025 by rpki-client