Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jUSAp8CGlfYUh76D3BceS3zeVHQ.roa
File: jUSAp8CGlfYUh76D3BceS3zeVHQ.roa (raw, json)
Hash identifier: c2WmIdC63S73wUWBtNfZLBg8S0p4pj4Xkd3bkSuQSKM=
Subject key identifier: 8D:44:80:A7:C0:86:95:F6:14:87:BE:83:DC:17:1E:4B:7C:DE:54:74
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01951DE85F6DC7BE7A445B03CD23CC254D33
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jUSAp8CGlfYUh76D3BceS3zeVHQ.roa
Signing time: Wed 19 Feb 2025 11:12:02 +0000
ROA not before: Wed 19 Feb 2025 11:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.81.152.0/22 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 10:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:e8:5f:6d:c7:be:7a:44:5b:03:cd:23:cc:25:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 19 11:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4480a7c08695f61487be83dc171e4b7cde5474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:61:9b:be:34:13:85:0b:d7:ec:45:dd:05:
c4:76:34:25:76:1e:83:af:3d:72:66:49:29:4f:23:
13:58:45:e0:79:ae:32:a3:e0:be:91:f2:24:54:0b:
e1:1a:fa:2c:69:e7:31:48:ef:24:a9:fa:dd:0c:c2:
3e:77:99:93:1c:94:5c:2d:ea:7f:1d:a2:e6:d2:73:
8d:18:ed:dc:46:b2:cc:63:1d:70:d5:9e:ea:6f:00:
a5:19:6e:b7:a8:c0:63:de:cb:81:0a:c2:a5:a8:29:
67:65:23:a8:3f:74:5a:79:8f:4a:da:c7:60:3f:cd:
7e:0c:b2:a1:94:fc:64:bd:ca:9e:14:5d:85:c1:cb:
e5:56:b6:e9:70:01:c6:47:40:c1:89:64:82:fa:e2:
e4:04:46:16:0d:d9:0e:5c:79:d0:60:4c:72:9d:f0:
22:d6:af:dd:b6:46:b4:f1:9a:ac:90:f2:c9:eb:72:
0c:c3:96:e9:bb:15:8a:2f:fb:64:63:fe:c2:68:11:
08:97:ae:c8:1a:17:ec:a3:f0:61:d2:39:60:3f:b9:
44:a9:b7:e9:d7:bd:b0:de:5a:44:a3:2b:8f:c0:51:
72:16:e9:42:c7:43:9c:a6:9e:78:94:1c:cc:63:82:
cd:14:f8:3e:de:f3:52:c4:33:aa:5f:0a:e1:52:59:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:44:80:A7:C0:86:95:F6:14:87:BE:83:DC:17:1E:4B:7C:DE:54:74
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jUSAp8CGlfYUh76D3BceS3zeVHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.81.152.0/22
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8b:24:5d:61:88:a7:38:0b:e2:a4:41:62:4f:49:c7:19:81:
80:65:90:a5:dc:17:ba:e5:b5:87:f6:e5:ac:b8:b5:4a:57:d1:
ef:ca:cf:97:0f:6e:26:30:db:67:df:e2:52:fb:0e:ab:c7:d5:
d1:b1:bd:30:5c:98:51:e2:93:0c:ee:2e:f7:c4:2e:bf:54:11:
33:37:71:a8:d8:22:da:f4:2d:82:fc:2e:51:05:c7:5c:58:19:
96:ee:58:e9:41:b1:32:94:96:84:aa:c2:87:c7:55:38:d5:37:
ba:d9:ea:73:70:c8:03:14:e8:e7:ff:46:d7:b4:85:03:27:ab:
a5:24:55:ba:58:0f:59:6d:ee:8a:cb:ef:15:a5:6f:d6:dc:95:
fe:3c:d2:7c:cc:4f:3b:9e:4e:88:9d:7b:fd:e6:fc:95:bb:7b:
3d:87:95:e3:ab:0e:93:cf:54:f2:ef:da:f6:8b:49:d3:da:1f:
18:47:e5:20:4c:8e:50:24:e2:e6:d7:64:80:3d:8b:ab:d4:b7:
03:02:9a:13:b8:20:ec:9c:7c:12:25:19:3a:9f:26:a5:21:01:
1e:19:72:61:fc:71:f7:77:de:12:55:7a:7a:89:1a:07:5a:cf:
40:f7:59:4d:01:be:91:ce:ae:3b:2a:3d:ec:a6:51:73:00:f5:
41:1e:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:37 2025 by rpki-client