Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/puYEVip18Vvx-8cn4E7McoOFCWo.roa
File: puYEVip18Vvx-8cn4E7McoOFCWo.roa (raw, json)
Hash identifier: O7xxXc3OtTliflWTBcHpHg99OWXKw5dkrBDVI6dH5bc=
Subject key identifier: A6:E6:04:56:2A:75:F1:5B:F1:FB:C7:27:E0:4E:CC:72:83:85:09:6A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01916F358042096E013405EA978204CF2497
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/puYEVip18Vvx-8cn4E7McoOFCWo.roa
Signing time: Tue 20 Aug 2024 09:54:22 +0000
ROA not before: Tue 20 Aug 2024 09:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 24
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.69.0/24 maxlen: 24
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 20 Aug 2024 10:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:35:80:42:09:6e:01:34:05:ea:97:82:04:cf:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Aug 20 09:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6e604562a75f15bf1fbc727e04ecc728385096a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:1e:5e:63:47:e0:62:a0:d2:50:8c:65:88:
1c:fc:62:52:8e:60:c5:51:21:4c:93:7a:a1:d0:43:
95:f7:93:bc:7b:05:65:a8:0d:27:13:46:26:33:23:
02:72:a2:55:29:49:57:be:26:dc:c2:a2:3e:4a:cd:
63:b8:2f:32:56:1a:b1:37:5a:1c:0d:62:fb:49:04:
db:d2:a7:a7:03:7e:d5:bf:0d:56:d5:c1:37:cc:29:
cb:f4:d3:29:5f:f1:4d:b0:a7:17:39:78:5c:7e:fd:
40:03:3d:c5:1e:e7:ae:ac:7e:34:8f:70:4e:39:41:
fb:9f:a0:d9:37:45:9a:31:04:16:18:2b:03:7f:29:
36:66:f2:ba:2f:67:07:1d:a3:45:f1:2e:a1:ed:2b:
3e:19:95:22:b7:d7:68:c1:14:c6:e8:43:e8:d4:3c:
14:5c:b4:c1:86:40:69:f8:b4:59:83:ac:78:90:2f:
57:e1:a9:92:67:58:11:da:4e:85:a7:ac:2a:21:7f:
3a:f6:a0:da:9c:4e:10:ee:45:d9:3b:27:9f:1d:93:
78:7d:03:17:cb:8c:92:1e:cb:08:4a:7c:34:4c:a0:
4d:d5:36:9c:03:de:bc:bc:40:dd:98:f8:f9:92:28:
d5:a0:f4:ed:5f:e6:0a:3e:17:3d:4e:c6:e6:24:ab:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:04:56:2A:75:F1:5B:F1:FB:C7:27:E0:4E:CC:72:83:85:09:6A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/puYEVip18Vvx-8cn4E7McoOFCWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.148.255.255
80.24.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.153.0.0/16
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.77.132.0/22
195.235.0.0/16
212.170.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
17:29:98:0f:47:8d:37:14:16:e2:52:26:8b:57:7a:8f:63:2c:
3f:42:24:78:0a:9c:23:75:0a:d5:59:5b:9c:ad:9d:33:2a:ee:
0e:5c:e5:31:f9:7e:bd:76:0c:ae:3e:cf:d7:86:a4:4c:54:86:
15:89:2a:f1:4b:8f:8b:52:46:2e:39:ab:0e:10:65:1b:74:aa:
04:e6:77:fa:f8:52:1b:b2:b2:84:7c:42:a2:25:af:80:bb:6d:
0e:b4:14:c8:5b:8d:20:d8:c7:14:01:78:03:23:31:c9:4d:af:
ce:dc:8a:b5:d8:a8:af:31:c6:26:5a:e7:94:dd:c0:d8:39:2d:
78:78:d0:ba:55:87:8d:bf:bf:0a:c2:2d:12:c8:b3:61:05:82:
97:e7:fc:fa:e1:b4:02:d4:79:92:19:f9:9d:84:d6:7f:e1:33:
04:ac:60:1c:2b:de:4a:34:30:11:51:72:2a:54:fd:7d:8f:6f:
52:04:d6:34:8d:71:2a:3b:91:34:84:f8:1b:7b:65:42:71:2d:
aa:33:f7:b7:1e:b8:5a:c9:73:df:83:eb:d3:4c:2a:dd:c4:64:
93:05:38:cf:d9:a7:4e:55:34:f0:2a:98:87:83:b4:ed:7e:26:
61:e7:f1:27:84:d2:bd:46:03:c3:5b:d7:b0:40:c4:c6:4a:be:
f2:05:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:53:10 2025 by rpki-client