Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dozBbJYa0xZQgPFY2KPedPfOJWU.roa
File: dozBbJYa0xZQgPFY2KPedPfOJWU.roa (raw, json)
Hash identifier: OoFl6rdAxROGYynP1o77ZdqowIq/aAXWYRCNOQzecRk=
Subject key identifier: 76:8C:C1:6C:96:1A:D3:16:50:80:F1:58:D8:A3:DE:74:F7:CE:25:65
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019159D0788C565B56BF35EAF9CF809D666B
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dozBbJYa0xZQgPFY2KPedPfOJWU.roa
Signing time: Fri 16 Aug 2024 06:12:00 +0000
ROA not before: Fri 16 Aug 2024 06:12:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.69.0/24 maxlen: 24
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 16 Aug 2024 08:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:59:d0:78:8c:56:5b:56:bf:35:ea:f9:cf:80:9d:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Aug 16 06:12:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=768cc16c961ad3165080f158d8a3de74f7ce2565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:f6:d9:9a:26:c9:74:1e:26:91:b0:0b:b8:
d6:d6:45:7e:da:a4:64:d3:95:6a:10:b8:06:d5:f8:
af:3f:60:2c:42:f1:9f:22:a8:ab:97:50:83:90:36:
4e:6d:6c:75:68:f1:39:34:85:86:38:e1:d6:d1:0f:
20:3b:ae:12:e4:6b:f8:89:92:d4:c3:e9:bd:e0:ec:
8e:8a:e4:aa:04:3b:bd:f4:e2:97:87:d8:1a:7d:f9:
50:76:b0:b5:4d:47:3c:fa:79:cd:5c:52:c7:33:34:
bb:00:04:6b:74:55:0d:03:b0:08:08:c5:90:77:42:
ae:44:11:85:d1:e9:d9:39:a1:79:c0:62:06:9a:56:
2a:b7:ad:70:97:61:bf:be:3a:1e:be:59:ac:3c:e8:
80:60:18:e9:24:76:30:96:bb:46:37:cd:dc:66:6e:
8c:37:dc:88:d2:c6:43:dc:2e:d2:73:67:bc:44:27:
7b:d7:ee:dd:04:f6:b9:5b:48:a1:12:ef:08:5f:a1:
d1:c4:21:31:05:d7:c5:63:b0:14:b4:20:3c:dc:9d:
84:17:a9:9d:a8:bd:eb:28:67:b0:5c:30:2f:55:4b:
16:1b:31:8a:57:84:c6:4f:72:da:10:a7:ed:3f:fe:
87:01:e5:76:80:cb:61:6e:db:f9:c7:52:ce:8f:dc:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:C1:6C:96:1A:D3:16:50:80:F1:58:D8:A3:DE:74:F7:CE:25:65
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dozBbJYa0xZQgPFY2KPedPfOJWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/14
79.144.0.0-79.148.255.255
80.24.0.0/15
80.30.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.61.255.255
83.63.0.0/16
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/15
88.27.0.0/16
88.30.0.0/16
95.121.0.0-95.123.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.77.132.0/22
195.235.0.0/16
212.170.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
15:36:79:d9:e9:2e:da:b4:9a:22:fa:e9:5f:ea:58:89:4f:5f:
db:a1:ef:2d:21:ac:e3:d7:04:a1:b2:9c:91:6d:50:14:d0:0b:
4a:d4:6a:c7:e0:12:2a:1e:de:b5:a3:1e:f6:5d:f8:a8:85:60:
99:1a:a9:5c:b4:8e:00:6f:42:4b:a3:95:49:e8:de:71:39:14:
0d:f4:eb:52:49:d9:2c:fb:36:ef:15:3b:c9:50:4f:c7:43:8f:
29:0c:1b:1c:db:6d:73:07:6d:22:78:40:85:bd:2c:4f:a0:89:
0f:50:89:13:31:2f:7a:b6:d3:db:0a:cb:46:9b:8f:75:90:ee:
f3:2a:d0:1c:76:56:8e:9a:f7:e1:6e:88:a9:80:ec:04:b8:30:
04:9b:36:4a:6b:11:75:d2:63:a3:02:ea:38:e2:7c:f0:e0:85:
67:28:6b:a8:b2:2e:68:48:62:bd:5f:1c:48:7b:6d:4a:64:6e:
44:12:a1:cd:8a:5d:0d:9c:db:02:31:49:e0:cc:39:5f:06:32:
62:f4:1c:94:bd:e0:f3:67:a1:d4:f2:94:8a:65:97:50:f3:4e:
bb:fa:37:06:b5:42:5f:2e:3c:97:74:d5:fc:80:23:06:78:00:
3a:2d:d2:0c:cf:05:ec:55:1e:36:f3:37:42:f2:6a:f4:05:3a:
3a:1d:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 13:13:21 2024 by rpki-client on console-ams.rpki-client.org