Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CPvHBl8bmA_oZQXwPl-pKee8e8U.roa
File: CPvHBl8bmA_oZQXwPl-pKee8e8U.roa (raw, json)
Hash identifier: +Hl2tpKplIr6OQQLFDpAqvHC/0JzBrADWheN0tm64qY=
Subject key identifier: 08:FB:C7:06:5F:1B:98:0F:E8:65:05:F0:3E:5F:A9:29:E7:BC:7B:C5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019299CE7403062610A7B8CB344A7A4A6647
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CPvHBl8bmA_oZQXwPl-pKee8e8U.roa
Signing time: Thu 17 Oct 2024 09:28:16 +0000
ROA not before: Thu 17 Oct 2024 09:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.0.128.0/17 maxlen: 17
213.0.186.0/24 maxlen: 24
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
2a02:9000::/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:ce:74:03:06:26:10:a7:b8:cb:34:4a:7a:4a:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Oct 17 09:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08fbc7065f1b980fe86505f03e5fa929e7bc7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:2b:8a:f8:95:6c:3a:f8:7e:81:1f:d3:c3:
d5:5f:23:f1:4e:c5:2c:c9:aa:be:47:5e:ca:c2:10:
d3:19:88:47:83:89:ff:7c:8c:d4:30:4f:91:9e:cf:
ec:2c:dd:fa:59:f9:28:8e:95:28:15:87:a5:69:b5:
1e:ef:39:5d:ca:f7:bd:24:d5:a3:1b:93:6d:18:af:
77:6c:b6:dd:de:a8:53:61:03:51:11:4e:55:66:ed:
05:62:00:e6:37:40:f0:f8:c8:20:d4:f4:a0:f5:ef:
46:6c:76:4d:63:bb:0c:85:00:1a:79:15:89:45:e4:
1b:38:83:9b:92:75:72:d7:5f:ec:7d:3d:63:af:c3:
51:01:64:a9:18:39:13:ae:54:cb:76:0c:71:ab:11:
29:92:6f:c9:ba:83:62:28:25:67:90:20:8c:18:59:
97:21:03:db:02:1e:07:e9:b8:3f:44:ca:1e:58:44:
27:c9:84:f3:cf:5a:cf:46:83:e8:fa:5a:5b:58:50:
08:d8:a6:8d:22:6b:87:f5:bb:90:75:03:32:64:29:
42:52:af:f0:b1:a5:ff:a1:03:06:8a:8a:e6:83:3b:
38:2a:b3:e2:34:11:ff:2a:a0:4a:be:08:0a:c9:d4:
19:31:e5:48:27:2c:ce:e8:d7:67:4c:7d:b8:34:c7:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:C7:06:5F:1B:98:0F:E8:65:05:F0:3E:5F:A9:29:E7:BC:7B:C5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CPvHBl8bmA_oZQXwPl-pKee8e8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
IPv6:
2a02:9000::/23
Signature Algorithm: sha256WithRSAEncryption
01:88:13:22:c1:ae:0b:2d:5e:3b:8f:f9:d9:b6:79:88:57:8a:
0b:ab:1a:df:db:bf:14:14:b3:dc:7e:19:13:8e:44:df:24:65:
61:b1:88:46:b0:97:e8:7b:bb:90:c3:5e:e7:7c:62:dd:b0:a8:
4f:b1:4d:02:d6:26:c1:1c:c3:cb:d5:d6:27:e6:40:a2:f0:7f:
5f:f7:73:79:90:c1:4a:56:c8:71:ea:4f:87:df:20:60:ac:39:
c7:03:8e:0c:25:6d:9c:3b:13:3a:77:07:77:02:4d:9a:fd:e9:
a2:07:8f:0b:61:aa:5b:f6:68:cc:49:10:02:64:c7:6c:4d:d6:
0e:9d:94:af:5f:49:41:59:ad:4f:89:eb:6c:52:95:d8:51:50:
f2:d1:76:ad:da:bd:92:fd:6b:1b:49:f8:28:6e:66:21:f9:90:
a6:68:b0:7d:76:8b:20:1c:2d:d8:f2:d8:38:b7:3c:86:bf:f9:
26:65:f3:38:0f:1b:c8:b2:8b:16:7e:d2:53:5a:b8:84:f9:3e:
d6:7e:c5:42:b5:26:81:06:70:bd:ce:53:33:1c:56:01:17:d8:
31:92:96:d8:85:92:8a:b2:38:df:78:36:3d:f5:57:d3:d6:6c:
9e:38:b9:37:66:16:9e:a3:28:17:f6:0c:93:19:fe:dc:b0:3c:
f0:35:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:54 2025 by rpki-client