Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/pbjVtDOs-nhgg28IDJXL3mOPYCw.roa
File: pbjVtDOs-nhgg28IDJXL3mOPYCw.roa (raw, json)
Hash identifier: Ov7bjt03ofi5p0lwwPEktYfX5wI/hVVEDkhD0NWeshc=
Subject key identifier: A5:B8:D5:B4:33:AC:FA:78:60:83:6F:08:0C:95:CB:DE:63:8F:60:2C
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0192992DDA699A9F0C7ABE0E4AAC7118B34D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/pbjVtDOs-nhgg28IDJXL3mOPYCw.roa
Signing time: Thu 17 Oct 2024 06:32:52 +0000
ROA not before: Thu 17 Oct 2024 06:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.0.128.0/17 maxlen: 17
213.0.186.0/24 maxlen: 24
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 17 Oct 2024 09:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:2d:da:69:9a:9f:0c:7a:be:0e:4a:ac:71:18:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Oct 17 06:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5b8d5b433acfa7860836f080c95cbde638f602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:40:0d:db:33:78:ea:24:59:0e:5f:2d:99:
68:84:2b:32:8b:f3:2a:a1:67:56:84:de:c4:30:74:
e7:d6:67:fc:80:ae:0d:8c:f4:a3:39:c8:05:57:7a:
70:c2:cf:81:b3:ba:2e:5b:61:03:c5:e3:35:8e:62:
db:ac:02:85:e2:6e:e2:dc:58:69:d8:8b:e7:52:5e:
bc:34:57:53:4d:0e:08:7b:84:9b:b5:63:ad:c6:e8:
90:e3:43:29:1e:82:eb:d3:4b:e7:81:8b:05:9a:09:
c4:b5:79:b1:70:30:1c:b7:af:43:57:fd:9b:ec:d3:
be:7e:c9:2b:25:73:a2:fc:00:be:c7:09:e3:33:81:
27:0c:c9:4b:6f:09:cb:2a:4f:12:b2:9c:3c:27:c2:
3c:56:5b:2e:03:d6:3c:3e:60:01:70:b1:a3:42:01:
81:f6:56:7e:2c:17:fd:8c:51:94:27:12:c3:43:a4:
a0:9f:30:42:4e:84:49:51:2c:71:02:f6:93:1b:ea:
e9:7d:7d:9b:ea:29:93:6f:c7:e4:e8:fa:82:93:9a:
c7:4e:81:7b:9a:40:e3:c2:f9:27:c3:0f:7d:8e:a3:
20:66:a8:be:b1:4d:39:28:d0:d4:cd:26:f9:19:9c:
82:21:1f:f5:09:c4:44:4c:2d:a4:ee:a0:41:c1:19:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B8:D5:B4:33:AC:FA:78:60:83:6F:08:0C:95:CB:DE:63:8F:60:2C
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/pbjVtDOs-nhgg28IDJXL3mOPYCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
11:8d:be:9a:1f:1e:fd:6d:7f:fa:b3:f0:6d:ea:60:35:bb:ac:
99:f2:80:e0:7e:b1:59:7a:86:89:31:39:bd:18:5d:59:a9:51:
41:ff:6c:9d:86:ff:55:6e:2f:6d:60:17:04:ef:d6:9e:d6:ff:
2c:5d:bc:7c:e9:cc:ae:60:e1:1b:ba:fe:57:4a:3f:c5:07:85:
5a:be:11:a5:1e:c0:31:50:4f:14:95:41:2f:e9:39:7c:dc:27:
1c:ca:8d:09:5b:1d:ed:06:6e:8d:72:92:e1:3e:9e:e5:97:77:
05:10:91:0a:02:8a:f6:03:18:eb:67:dc:fb:9f:55:fa:ee:5f:
9c:6d:02:13:23:8a:a9:d6:09:6d:e8:1e:35:7d:fa:09:a4:31:
52:99:b7:40:ed:cc:c3:98:72:54:1a:ed:5f:7e:b8:c9:b1:1f:
70:76:e2:99:4e:a0:56:b1:82:75:ba:0a:85:84:e0:5f:99:0d:
79:45:33:11:44:26:fa:53:d9:e1:d9:d4:f4:76:76:8e:6f:24:
d8:16:8f:00:c0:02:6e:ad:92:0b:6c:64:78:c4:ac:31:a4:82:
1d:c0:6a:9a:0f:6b:48:77:c5:de:a0:8c:cf:e8:38:b5:60:f5:
2c:e7:b0:29:e4:d7:e7:e8:4c:9d:4f:34:32:d2:3c:e6:46:16:
38:5b:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:21 2025 by rpki-client