Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AIZNBIVDEy3r4PS_MA01AOJ1nao.roa
File: AIZNBIVDEy3r4PS_MA01AOJ1nao.roa (raw, json)
Hash identifier: N+OrG4ddVJLoq8B+j2KrLK9zpK3PXHDcjOnCHaYM3Bo=
Subject key identifier: 00:86:4D:04:85:43:13:2D:EB:E0:F4:BF:30:0D:35:00:E2:75:9D:AA
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01923276F193DAADC4F2AF41C3D33BCCF3F4
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AIZNBIVDEy3r4PS_MA01AOJ1nao.roa
Signing time: Fri 27 Sep 2024 07:51:48 +0000
ROA not before: Fri 27 Sep 2024 07:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.0.128.0/17 maxlen: 17
213.0.186.0/24 maxlen: 24
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 30 Sep 2024 05:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:76:f1:93:da:ad:c4:f2:af:41:c3:d3:3b:cc:f3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 27 07:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00864d048543132debe0f4bf300d3500e2759daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:4e:97:08:34:75:2d:83:cd:24:b5:99:24:
8e:27:d7:06:9b:91:36:de:fb:59:3d:5c:ed:fc:96:
cd:64:78:38:6e:70:ce:85:8d:9a:90:fa:cc:ae:96:
b6:e3:60:34:b7:14:0c:ca:6a:40:da:9b:6c:f6:07:
26:d3:1c:d7:80:be:58:1b:b7:c0:fc:dd:ba:d4:87:
96:7d:25:46:2b:0e:31:63:96:f4:6d:63:72:2c:f0:
1d:2c:6c:0a:54:63:ba:26:7f:15:3e:7b:c0:6d:76:
b0:99:1c:92:21:83:6b:bd:6b:88:4e:77:ce:c6:23:
ea:75:1e:aa:61:45:42:1b:80:53:5e:a9:f0:99:bb:
19:9d:f0:a8:8f:ff:b2:e5:69:3d:05:ac:5b:41:28:
21:14:d1:bd:85:07:b4:07:6b:d9:f1:89:56:ee:23:
c0:ad:c1:c0:1f:56:c7:73:c8:8c:c9:08:21:19:61:
07:7d:f4:7d:96:78:96:ad:ad:3f:e4:b6:82:23:15:
d8:79:35:c1:a8:6d:c2:d4:4b:f1:85:f8:6d:a5:54:
4b:91:b6:70:1e:f6:fc:ea:d1:7e:db:2a:bf:2e:92:
32:8d:90:83:04:81:1a:0b:b5:0e:7c:a8:dc:db:f8:
f3:47:e1:61:35:14:2c:38:9b:32:df:92:c1:24:b6:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:4D:04:85:43:13:2D:EB:E0:F4:BF:30:0D:35:00:E2:75:9D:AA
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AIZNBIVDEy3r4PS_MA01AOJ1nao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.149.255.255
80.24.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.45.255.255
81.47.0.0/16
83.32.0.0/13
83.47.0.0-83.48.255.255
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0d:be:bd:2a:18:41:fc:3b:57:c4:62:01:11:79:e6:28:cc:ac:
66:76:22:d8:04:19:65:05:1a:4c:6e:4e:c3:f6:29:8e:8f:73:
d4:25:5a:47:b6:e6:46:23:60:8f:7f:71:1b:76:1c:78:39:cd:
af:db:87:8e:2c:4b:85:68:fa:37:5c:35:8a:25:f4:55:32:9d:
1b:f3:92:2e:31:9d:a1:88:c3:39:8f:f9:3d:d0:92:a7:5a:97:
e2:f1:9d:00:d6:7c:39:7d:d6:7e:0e:7d:18:06:25:da:9d:5e:
d0:8d:61:a7:58:96:01:4b:8a:ca:d9:ff:b9:bf:d9:6f:a1:c4:
2b:45:23:31:af:de:f8:ce:9f:c2:1f:b0:0e:d8:e7:4a:0b:e4:
6b:6d:5d:a5:ed:9c:c9:7a:a4:28:5e:ae:4b:de:13:3e:62:bf:
15:36:50:63:2a:a2:fc:dc:ae:8c:42:c6:4c:57:ad:ee:d2:53:
04:d6:8f:3d:8e:20:50:17:81:5e:80:0a:eb:77:10:87:2e:80:
ff:07:e3:47:32:fb:25:d6:6b:9c:ee:59:d6:6b:7e:ff:7c:be:
9c:26:ff:30:9f:4c:3e:09:9c:6a:ab:34:c3:56:d7:49:65:2a:
bd:f5:17:c5:82:75:d1:50:5e:1d:62:72:a9:f2:87:d3:69:26:
fc:0d:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:02 2025 by rpki-client