Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/p5PtJ0p0jbg72B9GIxu6y5MyvRQ.roa
File: p5PtJ0p0jbg72B9GIxu6y5MyvRQ.roa (raw, json)
Hash identifier: 5gA5mr8fqYms1lJ1rTgUWrlbYNn/Tn3kj5H+6AzRo+I=
Subject key identifier: A7:93:ED:27:4A:74:8D:B8:3B:D8:1F:46:23:1B:BA:CB:93:32:BD:14
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D8D89335C750D4C1CBFAB46806610554B
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/p5PtJ0p0jbg72B9GIxu6y5MyvRQ.roa
Signing time: Fri 09 Feb 2024 11:03:15 +0000
ROA not before: Fri 09 Feb 2024 11:03:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 07 Jun 2024 08:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:89:33:5c:75:0d:4c:1c:bf:ab:46:80:66:10:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Feb 9 11:03:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a793ed274a748db83bd81f46231bbacb9332bd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:d3:fa:d2:4e:62:a5:b3:6c:52:88:6b:4d:
29:a8:3c:7d:18:e8:80:0b:05:d6:ae:53:f3:f6:d0:
2d:91:7f:2f:cd:0d:1c:95:75:c3:a0:06:2f:2f:21:
75:fb:72:b6:84:6a:ef:57:2d:e8:ea:76:dc:33:ac:
85:dc:f9:0e:e8:22:2f:91:fc:3a:45:68:01:7a:6f:
72:21:a8:a6:e4:55:85:56:00:1f:b4:ea:c8:78:f6:
c5:3e:0c:2e:f1:f6:29:b4:dd:06:d0:f5:1d:f7:09:
9c:7c:e1:eb:2b:b5:b5:8e:f9:e3:1c:58:36:1c:c7:
ba:75:f1:c8:55:35:2b:cb:c7:15:75:b1:40:aa:e0:
5f:61:14:09:0e:7b:5a:f6:26:2a:3b:cc:02:82:29:
6a:24:ef:82:83:42:47:a2:9a:19:23:7e:83:6d:51:
21:bd:98:e7:71:9f:a6:80:b3:e1:df:ca:2f:2a:5b:
58:b8:74:f0:b8:93:28:4b:75:21:58:a8:49:d1:fc:
7b:03:03:3d:70:5a:a5:d4:53:b7:bf:65:a3:57:f1:
d2:04:c3:f5:d0:48:bc:35:6f:8d:ac:9e:18:11:f3:
21:68:8f:3c:35:e4:12:af:84:7b:da:4c:fb:3d:ac:
ff:23:eb:12:75:b7:6e:95:ef:ac:66:30:70:4e:9f:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:ED:27:4A:74:8D:B8:3B:D8:1F:46:23:1B:BA:CB:93:32:BD:14
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/p5PtJ0p0jbg72B9GIxu6y5MyvRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/14
79.144.0.0-79.148.255.255
80.24.0.0/15
80.30.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.61.255.255
83.63.0.0/16
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/15
88.27.0.0/16
88.30.0.0/16
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.235.0.0/16
212.170.156.0/24
212.170.159.0/24
213.96.0.0/16
213.99.44.0/24
213.99.59.0/24
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4c:df:db:cd:af:d0:ff:b2:c1:1f:b8:6c:b0:86:87:3e:47:49:
6c:2d:8d:17:29:f2:49:0c:6e:5f:33:11:0d:0b:84:69:18:43:
a5:70:6b:cc:15:5e:f2:a9:47:84:74:87:db:76:a6:47:d7:1c:
34:93:05:ef:77:19:5b:51:c5:95:71:41:ff:a0:40:37:24:f9:
b2:2f:a0:34:22:27:b3:e1:fc:20:f7:91:03:24:3b:de:83:91:
a4:a1:43:41:06:8a:5d:18:d0:42:e0:72:6c:ad:73:d2:27:18:
49:5a:4e:a8:fe:73:65:39:8a:98:7b:5f:7c:5f:4b:3e:c7:b6:
38:5b:0f:2d:51:ca:68:65:c3:59:d7:9c:57:ed:39:95:4f:fd:
06:d7:1c:79:a7:b5:0e:ec:4f:99:08:f5:1a:ae:e3:06:99:20:
1e:bd:f4:05:f3:2b:ec:79:80:ed:74:9b:5b:c7:28:0a:a1:0c:
9d:1d:79:b6:ef:dc:17:68:df:06:0f:7c:8a:f1:25:39:dd:e6:
1a:7e:04:5b:93:56:11:f2:07:d7:85:e5:c5:0b:0b:d0:a4:94:
dc:5d:1d:e9:df:4c:ef:d1:b8:05:b6:86:a4:2c:5f:15:40:8f:
32:95:98:7e:c9:b4:3e:4d:ad:55:0c:76:f8:d3:d7:d7:e0:e3:
4e:32:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:01 2025 by rpki-client