Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xeKu0h9kkzaa3Sq7YjFFc6Ulzo8.roa
File: xeKu0h9kkzaa3Sq7YjFFc6Ulzo8.roa (raw, json)
Hash identifier: 5IhZDpwOCFB5r3LkpX0nMT45gb1WJBHBy8E0YvW8RC4=
Subject key identifier: C5:E2:AE:D2:1F:64:93:36:9A:DD:2A:BB:62:31:45:73:A5:25:CE:8F
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01922D11696AD46ADAD1A73C55A37A21A7F8
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xeKu0h9kkzaa3Sq7YjFFc6Ulzo8.roa
Signing time: Thu 26 Sep 2024 06:42:48 +0000
ROA not before: Thu 26 Sep 2024 06:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.0.128.0/17 maxlen: 17
213.0.186.0/24 maxlen: 24
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 27 Sep 2024 07:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:11:69:6a:d4:6a:da:d1:a7:3c:55:a3:7a:21:a7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 26 06:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e2aed21f6493369add2abb62314573a525ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:37:38:49:0f:26:4d:84:d1:72:0e:5b:11:
27:b5:67:d6:36:e5:93:8a:de:fe:67:44:72:ec:bd:
1c:66:86:91:dd:14:1b:b4:5b:59:ac:b2:fa:d6:c0:
38:5f:b3:45:f6:47:2e:b2:b5:36:ef:2e:24:15:dc:
2a:d7:9b:c5:1d:61:95:e8:84:94:21:b6:1b:d5:30:
02:51:a9:96:10:3a:23:ee:c6:2b:55:5c:8e:3e:1b:
fe:e1:e2:7c:9f:28:69:f4:36:82:e7:9f:22:03:9f:
12:4b:45:01:38:9e:16:5c:62:3c:03:f1:eb:35:d8:
59:af:eb:1f:3f:e4:15:8a:3d:bb:b1:93:c3:47:1b:
d4:c1:e1:23:f9:dd:b2:a9:64:cd:ab:d8:43:2c:06:
d7:43:1f:7f:fc:f9:e8:76:b6:66:36:b1:d2:4a:22:
4f:ae:3e:ce:78:e9:b6:35:fd:98:fb:55:55:79:69:
5b:66:f5:cb:be:20:b0:25:cc:cd:f7:72:3b:f9:b2:
52:00:eb:a9:4f:d0:31:ef:fc:17:0f:fa:d4:21:36:
7a:e8:03:84:e5:21:ff:cf:85:58:9c:63:fb:62:54:
c3:f7:e8:ed:59:47:f2:36:6b:57:1b:83:2b:a1:a8:
fa:ad:fb:95:78:b1:30:ee:60:10:43:c5:37:d5:75:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:AE:D2:1F:64:93:36:9A:DD:2A:BB:62:31:45:73:A5:25:CE:8F
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xeKu0h9kkzaa3Sq7YjFFc6Ulzo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.149.255.255
80.24.0.0/14
80.29.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
81.47.0.0/16
83.32.0.0/13
83.47.0.0-83.48.255.255
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.153.0.0/16
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
df:cf:73:37:db:11:2a:ab:56:89:39:d1:0d:83:2a:91:92:e0:
1c:7f:20:e5:8a:a2:62:8e:58:cc:38:cf:3f:5f:3f:1b:fe:aa:
91:55:b1:8c:11:27:8b:28:27:cf:d2:dc:41:fb:88:9e:fc:e7:
17:c2:2d:09:b3:86:98:5a:b7:9a:32:95:eb:8d:d9:49:6b:2f:
3c:71:11:e2:cc:60:5a:97:df:5e:1e:7f:c3:ad:17:f1:6e:d5:
bc:64:ac:ee:03:06:f1:85:c0:46:98:98:4f:80:59:5f:64:22:
d2:53:0f:15:b1:94:72:95:0c:ab:19:da:54:2c:77:77:0a:aa:
28:9e:87:f8:fb:21:b5:45:a9:37:51:a7:31:60:23:58:d8:fb:
41:ac:91:56:bc:0e:6a:66:f4:37:ad:15:ec:9a:db:f3:e7:6f:
35:d9:fb:28:a7:5a:91:f4:2d:b2:71:95:bb:08:b8:d2:78:20:
8a:17:1f:5a:8c:cf:13:4a:aa:27:b6:af:58:bf:21:64:79:02:
7b:b3:05:7f:a3:54:96:15:07:c7:71:c4:d2:83:58:de:02:5a:
c8:a6:e9:c0:4d:45:52:b6:fb:e4:c4:14:b4:f6:2e:66:7c:b0:
93:c5:cc:3e:48:85:95:45:3c:7b:a2:87:9e:e6:4a:21:4a:ef:
3b:aa:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:31 2025 by rpki-client