Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ANphTZw931tYeoIJ0CWnCUsZeE0.roa
File: ANphTZw931tYeoIJ0CWnCUsZeE0.roa (raw, json)
Hash identifier: /7JIcHrzt+FZTHo9Go0/ufgJsl5Icgag37mdc0HWveg=
Subject key identifier: 00:DA:61:4D:9C:3D:DF:5B:58:7A:82:09:D0:25:A7:09:4B:19:78:4D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CAC21DC516F22220D3DB7B34C440D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ANphTZw931tYeoIJ0CWnCUsZeE0.roa
Signing time: Wed 01 Jan 2025 01:48:20 +0000
ROA not before: Wed 01 Jan 2025 01:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48146
IP address blocks: 5.182.80.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
45.138.252.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.152.12.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
92.118.248.0/22 maxlen: 24
94.103.244.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
151.237.131.0/24 maxlen: 24
185.25.52.0/22 maxlen: 24
185.87.63.0/24 maxlen: 24
185.148.52.0/22 maxlen: 24
185.189.225.0/24 maxlen: 24
185.189.226.0/23 maxlen: 24
185.192.72.0/22 maxlen: 24
185.192.116.0/22 maxlen: 24
185.195.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
185.210.60.0/22 maxlen: 24
185.210.72.0/22 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
188.240.236.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
193.228.204.0/23 maxlen: 24
194.36.104.0/22 maxlen: 24
194.59.196.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 15:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:ac:21:dc:51:6f:22:22:0d:3d:b7:b3:4c:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00da614d9c3ddf5b587a8209d025a7094b19784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:51:1e:ab:a4:37:40:da:c2:c9:97:d5:dc:
97:64:1a:21:ac:ac:bf:a0:8a:ba:d8:90:7e:30:65:
ab:b3:ff:8b:11:be:46:92:1a:d5:a4:13:8c:32:ff:
9d:7d:ce:92:f9:3f:90:76:4c:06:d7:27:5e:1b:06:
67:50:58:fa:a8:71:f4:a3:19:34:18:1c:11:a9:81:
4e:fc:5e:d4:e1:43:59:3d:5f:a0:6c:d9:20:d8:97:
ed:a7:fa:28:76:1b:d6:bd:de:ac:59:09:0a:55:4f:
1e:24:1a:da:f7:35:e6:93:38:7c:fd:07:74:0f:64:
fc:f9:f8:ea:7a:65:5d:01:c5:27:d6:04:ce:48:7f:
15:21:3b:39:ea:15:e5:5c:7f:ab:cc:84:b4:a7:33:
b6:ff:6d:6b:05:9e:5b:b6:93:24:72:24:0d:f3:ea:
9b:77:6a:28:7e:e6:d3:64:4f:e6:33:81:39:5e:8e:
6d:5c:63:86:7b:a4:5a:9a:25:5a:7d:dd:27:b1:71:
89:ac:6c:5c:13:72:0e:13:c4:ad:b5:30:18:54:31:
8f:57:15:5b:ce:8c:55:74:0c:fc:25:0f:8f:85:d8:
05:ec:c4:18:22:77:48:9a:8b:e0:a2:17:21:43:28:
f8:02:01:b8:5c:df:fe:e8:5d:58:63:ce:aa:f2:6f:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:61:4D:9C:3D:DF:5B:58:7A:82:09:D0:25:A7:09:4B:19:78:4D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ANphTZw931tYeoIJ0CWnCUsZeE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.136.32.0/22
45.138.252.0/22
45.147.204.0/22
45.152.12.0/22
81.22.232.0/22
92.118.248.0/22
94.103.244.0/22
151.237.59.0/24
151.237.131.0/24
185.25.52.0/22
185.87.63.0/24
185.148.52.0/22
185.189.225.0-185.189.227.255
185.192.72.0/22
185.192.116.0/22
185.195.36.0/22
185.198.108.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.22.0/23
185.255.72.0/22
188.240.236.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.59.196.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:6d:bf:48:28:ba:cb:29:e6:e4:2e:0a:9d:4a:b6:74:78:2b:
cb:2d:4e:6d:21:cf:69:02:95:ab:ad:1e:6d:3c:15:b0:f7:16:
b9:89:28:69:ca:6b:e8:64:65:a7:bd:fb:78:81:4b:be:55:7b:
f6:01:8f:a8:51:c8:30:3a:7b:1f:c9:e1:60:c6:0e:b7:59:22:
66:d6:e4:96:8c:28:41:3f:a2:d8:b0:00:c8:9c:bf:f5:d2:68:
e0:a1:ad:51:01:3b:33:d1:81:b1:10:eb:97:7e:fc:a7:9f:90:
7b:02:de:9a:e4:57:eb:c6:a5:6e:2a:e0:54:3f:92:bc:61:81:
d6:17:9f:9f:4d:1a:db:48:b3:1f:3d:6c:3f:ef:e1:15:d3:91:
f3:aa:65:42:fb:ad:79:4c:3d:4f:81:80:78:d3:6e:06:8b:de:
9b:95:df:20:24:be:6f:93:b9:b5:58:e3:8f:a0:26:88:bd:28:
96:bb:1a:8a:01:62:83:b9:a2:c9:db:2f:8a:19:09:82:4f:f5:
93:b1:39:6a:43:67:1c:c6:66:7d:76:2e:b0:2e:fb:60:2c:33:
a5:fd:90:e7:35:c1:a5:5f:35:16:07:dc:54:9f:61:d1:84:06:
42:51:e7:df:4e:a8:60:e5:45:ee:f2:6e:6e:4a:f4:62:d9:f2:
14:88:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:02 2025 by rpki-client