Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/scrrGgDE1RcQ-sQn7EWjTXgwmiM.roa
File: scrrGgDE1RcQ-sQn7EWjTXgwmiM.roa (raw, json)
Hash identifier: vbXtYzInc61qCX2dbgpA2uHa65oglu0E2TVh6CkTUi0=
Subject key identifier: B1:CA:EB:1A:00:C4:D5:17:10:FA:C4:27:EC:45:A3:4D:78:30:9A:23
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01916F4C630A64A03247F00044FFA16A35FA
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/scrrGgDE1RcQ-sQn7EWjTXgwmiM.roa
Signing time: Tue 20 Aug 2024 10:19:22 +0000
ROA not before: Tue 20 Aug 2024 10:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.69.0/24 maxlen: 24
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 21 Aug 2024 07:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:4c:63:0a:64:a0:32:47:f0:00:44:ff:a1:6a:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Aug 20 10:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1caeb1a00c4d51710fac427ec45a34d78309a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:56:91:ae:d3:e0:e0:4f:7a:58:6a:e8:81:
26:ac:b0:67:54:7e:52:88:bd:ca:be:34:76:4b:98:
e1:be:10:f5:af:ae:9d:6a:ad:9e:d1:8e:a7:a1:87:
a2:0f:c1:f8:9b:3a:e3:45:c8:a1:25:a2:98:7e:39:
cf:3e:34:19:fd:46:f3:6e:49:e2:e9:1a:9e:f8:64:
82:c3:a7:f4:7d:cd:8a:1d:c8:42:2e:f4:e3:49:0d:
74:73:3b:bc:ca:f3:f5:00:9e:16:5f:39:de:72:67:
26:81:c7:7c:f6:96:0d:ae:04:25:60:7f:9e:dd:12:
80:91:c4:39:85:1c:b0:be:76:b2:6d:05:90:7f:c5:
2a:ea:23:0d:35:74:92:1c:92:24:c7:62:ba:36:c2:
f3:80:a5:05:5b:03:35:e6:7c:dd:50:6d:df:35:df:
a1:99:0b:36:03:c1:0c:4a:02:c3:fd:64:25:50:a2:
5d:ff:3b:35:57:1e:f3:fc:af:b0:df:96:73:57:f9:
db:35:73:00:6b:8a:46:4c:6b:86:4f:62:65:3d:b2:
1a:0d:fb:24:67:e0:79:bd:75:f6:a3:d9:e2:25:82:
71:b6:9c:c6:2d:be:4a:10:b7:06:b1:59:84:c1:75:
94:80:a6:e5:64:57:60:19:18:29:60:74:22:51:02:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:EB:1A:00:C4:D5:17:10:FA:C4:27:EC:45:A3:4D:78:30:9A:23
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/scrrGgDE1RcQ-sQn7EWjTXgwmiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.148.255.255
80.24.0.0/14
80.29.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.153.0.0/16
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.77.132.0/22
195.235.0.0/16
212.170.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4d:9a:12:7d:2d:1e:b4:58:c2:e4:63:5d:34:ba:c9:00:50:4d:
f6:57:dd:52:c5:0e:e4:62:c5:31:c9:b7:4d:44:70:be:e0:00:
61:51:8b:48:e0:f2:b2:80:51:b0:db:89:91:c1:46:bd:b3:e1:
ee:cd:69:c0:56:8d:ec:ea:77:ec:5d:b6:39:02:3d:86:eb:06:
40:ca:09:ee:d3:46:03:f3:91:47:69:af:c8:7d:42:ec:d4:4c:
34:e2:dd:f2:f4:9c:0e:0e:91:68:6b:80:eb:a6:cb:76:a8:c3:
6e:b7:9f:00:f4:d0:d5:4f:1a:95:5c:34:c1:0a:87:4e:58:ac:
ac:c3:ba:10:58:cc:e9:55:31:32:56:e5:0a:a3:0e:6b:de:59:
14:8c:65:bf:52:78:13:ca:c9:a5:81:cf:6b:a6:98:d8:70:57:
e5:b9:28:78:dc:b7:6d:6a:5f:b9:ed:48:71:f9:bb:0c:87:a2:
b9:59:57:88:e9:f6:53:21:df:ce:82:f1:1b:9b:38:0d:7d:e3:
d7:27:25:cd:c7:ba:71:cf:b0:a1:fe:4a:a6:3f:6c:00:8c:1f:
0f:02:00:7b:e5:b7:ed:cf:b1:ba:65:3c:68:95:ce:c1:16:6e:
8c:4f:13:dc:4f:5c:e9:e5:ff:f1:ac:ea:43:e0:f4:29:56:19:
35:4b:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:03 2025 by rpki-client