Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/up0EAm9WmlJKgB9a0bEg43rWRFE.roa
File: up0EAm9WmlJKgB9a0bEg43rWRFE.roa (raw, json)
Hash identifier: dAld+JBOLYHAhKe9K5DlWhw8mLmGrW29FXOg9Qc+VA0=
Subject key identifier: BA:9D:04:02:6F:56:9A:52:4A:80:1F:5A:D1:B1:20:E3:7A:D6:44:51
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0190917713DA032ACE573B7AA6ABB881588E
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/up0EAm9WmlJKgB9a0bEg43rWRFE.roa
Signing time: Mon 08 Jul 2024 08:30:18 +0000
ROA not before: Mon 08 Jul 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
78.30.0.0/21 maxlen: 21
78.30.8.0/21 maxlen: 21
78.30.16.0/21 maxlen: 21
78.30.24.0/21 maxlen: 21
78.30.32.0/20 maxlen: 20
78.30.48.0/20 maxlen: 20
81.0.0.0/18 maxlen: 18
81.0.0.0/20 maxlen: 20
81.0.16.0/20 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
89.35.62.0/23 maxlen: 23
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.248.0/22 maxlen: 22
119.12.248.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
185.197.242.0/23 maxlen: 23
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.150.0/23 maxlen: 23
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.130.0/24 maxlen: 24
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.177.192.0/19 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:7000::/37 maxlen: 37
2a00:d100:7800::/37 maxlen: 37
2a00:d100:8000::/37 maxlen: 37
2a00:d100:8800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:3000::/37 maxlen: 37
2a00:d102:3800::/37 maxlen: 37
2a00:d102:4000::/37 maxlen: 37
2a00:d102:4800::/37 maxlen: 37
2a00:d102:5000::/37 maxlen: 37
2a00:d102:5800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 08 Jul 2024 10:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:77:13:da:03:2a:ce:57:3b:7a:a6:ab:b8:81:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jul 8 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba9d04026f569a524a801f5ad1b120e37ad64451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:37:62:94:1f:9e:90:8f:7b:05:25:44:4e:
6b:59:f7:9f:8e:ec:2c:23:1c:b6:ac:89:26:5c:0e:
99:13:41:7a:4d:05:ed:68:d2:03:18:e6:8b:aa:54:
7d:13:12:7d:51:e2:03:19:7e:fd:46:a1:35:73:12:
19:e7:00:e5:0b:71:80:cb:99:c1:fa:fc:8b:f7:75:
59:59:e3:69:1c:04:c3:9e:27:be:f9:24:8b:d7:95:
44:d7:55:52:27:3c:dd:d5:34:dc:96:01:63:e9:74:
1b:a6:a9:71:81:24:ea:cc:15:54:fa:72:9b:23:3a:
75:01:01:5f:d5:03:80:40:7b:48:4e:53:ed:06:03:
e4:56:85:0b:ef:09:4c:62:a2:e6:63:45:80:1f:df:
e0:fa:bb:59:dc:d7:ad:84:f1:81:db:75:6c:05:00:
67:fd:85:4b:9d:5b:0d:cb:25:95:29:93:f0:ac:4e:
6d:08:5e:56:29:f7:8b:8e:fd:b4:fd:b7:9b:91:81:
85:fd:42:96:9a:58:a1:9f:67:f7:59:27:57:b2:13:
bd:a3:ad:9b:65:8d:fe:51:6a:e5:bd:05:05:f5:9d:
a7:1f:ae:d7:c3:01:a6:4c:80:98:42:63:3e:f8:c8:
f5:19:e1:f1:ba:be:8d:8d:7e:1b:aa:ad:60:9e:82:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:04:02:6F:56:9A:52:4A:80:1F:5A:D1:B1:20:E3:7A:D6:44:51
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/up0EAm9WmlJKgB9a0bEg43rWRFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.88.0-31.222.90.255
66.81.160.0/19
67.218.224.0/19
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.235.68.0/22
85.239.128.0/21
89.35.62.0/23
89.39.52.0/24
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
176.222.75.0/24
176.222.82.0/24
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.150.0/23
206.204.156.0/22
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.22.0/24
212.230.136.0/24
212.230.156.0/24
212.230.159.0/24
212.230.233.0/24
212.231.112.0/20
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:8fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:37ff:ffff:ffff:ffff:ffff:ffff
2a00:d101:4000::/36
2a00:d102::-2a00:d102:5fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
7d:eb:81:16:51:cc:9b:7b:10:96:54:fd:fe:fb:d6:4e:85:16:
9c:6c:30:7c:48:15:e8:9d:e7:d1:f9:89:22:5d:80:0c:ee:8a:
43:58:85:90:3a:66:8c:9d:60:29:74:93:60:1f:de:50:63:02:
c3:e1:53:a8:11:85:73:e6:79:bd:d4:1b:24:d0:80:3b:0b:b3:
63:b7:c9:b3:28:62:ef:0d:7f:aa:21:d5:c1:68:b7:e0:84:ff:
b4:9b:a8:5c:40:7a:e1:11:90:8a:98:23:12:6a:d1:81:af:13:
6c:09:08:fa:06:08:34:0c:96:fb:bd:30:a6:1b:36:d2:14:6b:
b4:5e:59:db:3f:4e:b9:11:00:62:d5:56:68:ad:61:1d:d0:21:
c1:38:df:c8:24:ca:95:fa:22:11:28:31:a2:7a:ff:f1:24:e4:
19:95:b3:91:fe:e2:3b:f1:c2:4c:b7:20:20:30:1e:a4:a9:eb:
a0:69:95:23:d9:10:7f:9e:ab:f8:9d:79:46:48:73:43:0a:72:
46:f6:e1:39:a3:89:ac:85:54:ab:da:19:5f:a2:da:f7:73:ba:
98:4d:ce:9c:03:0a:86:ba:e7:09:f9:ae:a3:d9:3c:d9:ac:a3:
4f:a9:a2:d1:f9:df:75:c6:ec:d3:5f:ca:91:46:12:64:de:df:
17:66:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:36 2025 by rpki-client