Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/C49ADVZs31vUkn7POI7AQqhBChg.roa
File: C49ADVZs31vUkn7POI7AQqhBChg.roa (raw, json)
Hash identifier: Su5yoyh3YquSsy+ryGavxKPDPoHGum7NMlG3fHm1oIM=
Subject key identifier: 0B:8F:40:0D:56:6C:DF:5B:D4:92:7E:CF:38:8E:C0:42:A8:41:0A:18
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0193C4CC485B742598348DEDD911B52BCBB4
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/C49ADVZs31vUkn7POI7AQqhBChg.roa
Signing time: Sat 14 Dec 2024 10:52:22 +0000
ROA not before: Sat 14 Dec 2024 10:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44244
IP address blocks: 2.144.0.0/16 maxlen: 16
2.144.0.0/17 maxlen: 17
2.144.0.0/20 maxlen: 20
2.144.0.0/21 maxlen: 21
2.144.0.0/24 maxlen: 24
2.144.1.0/24 maxlen: 24
2.144.2.0/24 maxlen: 24
2.144.3.0/24 maxlen: 24
2.144.4.0/24 maxlen: 24
2.144.5.0/24 maxlen: 24
2.144.6.0/24 maxlen: 24
2.144.7.0/24 maxlen: 24
2.144.8.0/24 maxlen: 24
2.144.9.0/24 maxlen: 24
2.144.10.0/24 maxlen: 24
2.144.11.0/24 maxlen: 24
2.144.12.0/24 maxlen: 24
2.144.12.0/25 maxlen: 25
2.144.13.0/24 maxlen: 24
2.144.128.0/17 maxlen: 17
2.144.128.0/24 maxlen: 24
2.144.129.0/24 maxlen: 24
2.144.130.0/24 maxlen: 24
2.144.131.0/24 maxlen: 24
2.144.132.0/24 maxlen: 24
2.144.133.0/24 maxlen: 24
2.144.134.0/24 maxlen: 24
2.144.135.0/24 maxlen: 24
2.144.136.0/24 maxlen: 24
2.144.137.0/24 maxlen: 24
2.144.138.0/24 maxlen: 24
2.144.139.0/24 maxlen: 24
2.144.140.0/24 maxlen: 24
2.144.141.0/24 maxlen: 24
2.144.192.0/24 maxlen: 24
2.144.193.0/24 maxlen: 24
2.144.198.0/24 maxlen: 24
2.144.224.0/20 maxlen: 20
2.144.230.0/24 maxlen: 24
2.144.231.0/24 maxlen: 24
2.144.232.0/24 maxlen: 24
2.144.233.0/24 maxlen: 24
2.144.234.0/24 maxlen: 24
2.144.235.0/24 maxlen: 24
2.144.236.0/24 maxlen: 24
2.144.237.0/24 maxlen: 24
2.144.238.0/24 maxlen: 24
2.144.239.0/24 maxlen: 24
2.144.240.0/24 maxlen: 24
2.144.241.0/24 maxlen: 24
2.144.242.0/23 maxlen: 23
2.144.242.0/24 maxlen: 24
2.144.243.0/24 maxlen: 24
2.144.244.0/24 maxlen: 24
2.144.245.0/24 maxlen: 24
2.144.246.0/24 maxlen: 24
2.144.247.0/24 maxlen: 24
2.144.248.0/24 maxlen: 24
2.144.249.0/24 maxlen: 24
2.144.250.0/24 maxlen: 24
2.144.251.0/24 maxlen: 24
2.145.0.0/16 maxlen: 24
2.146.0.0/15 maxlen: 15
2.146.0.0/16 maxlen: 16
2.146.0.0/17 maxlen: 17
2.146.128.0/17 maxlen: 17
2.147.0.0/16 maxlen: 24
5.112.0.0/16 maxlen: 24
5.113.0.0/16 maxlen: 24
5.114.0.0/16 maxlen: 24
5.115.0.0/16 maxlen: 24
5.116.0.0/16 maxlen: 24
5.117.0.0/16 maxlen: 24
5.118.0.0/16 maxlen: 16
5.118.4.0/24 maxlen: 24
5.118.10.0/24 maxlen: 24
5.119.0.0/16 maxlen: 24
5.120.0.0/16 maxlen: 24
5.121.0.0/16 maxlen: 24
5.122.0.0/16 maxlen: 24
5.123.0.0/16 maxlen: 24
5.124.0.0/16 maxlen: 24
5.125.0.0/16 maxlen: 24
5.126.0.0/16 maxlen: 24
5.127.0.0/16 maxlen: 24
92.42.48.0/21 maxlen: 21
92.42.48.0/22 maxlen: 22
92.42.48.0/24 maxlen: 24
92.42.49.0/24 maxlen: 24
92.42.50.0/24 maxlen: 24
92.42.51.0/24 maxlen: 24
92.42.52.0/22 maxlen: 22
92.42.52.0/24 maxlen: 24
92.42.53.0/24 maxlen: 24
92.42.54.0/24 maxlen: 24
92.42.55.0/24 maxlen: 24
2a01:5ec0::/36 maxlen: 36
2a01:5ec0::/37 maxlen: 37
2a01:5ec0:1000::/36 maxlen: 36
2a01:5ec0:1000::/37 maxlen: 37
2a01:5ec0:1800::/37 maxlen: 37
2a01:5ec0:2000::/36 maxlen: 36
2a01:5ec0:2000::/37 maxlen: 37
2a01:5ec0:2800::/37 maxlen: 37
2a01:5ec0:3000::/36 maxlen: 36
2a01:5ec0:4000::/36 maxlen: 36
2a01:5ec0:5000::/36 maxlen: 36
2a01:5ec0:5000::/37 maxlen: 37
2a01:5ec0:5800::/37 maxlen: 37
2a01:5ec0:6000::/36 maxlen: 36
2a01:5ec0:7000::/36 maxlen: 36
2a01:5ec0:7000::/37 maxlen: 37
2a01:5ec0:7800::/37 maxlen: 37
2a01:5ec0:8000::/36 maxlen: 36
2a01:5ec0:9000::/36 maxlen: 36
2a01:5ec0:9000::/37 maxlen: 37
2a01:5ec0:9800::/37 maxlen: 37
2a01:5ec0:a000::/36 maxlen: 36
2a01:5ec0:b000::/36 maxlen: 36
2a01:5ec0:b000::/37 maxlen: 37
2a01:5ec0:b800::/37 maxlen: 37
2a01:5ec0:c000::/36 maxlen: 36
2a01:5ec0:d000::/36 maxlen: 36
2a01:5ec0:d000::/37 maxlen: 37
2a01:5ec0:d800::/37 maxlen: 37
2a01:5ec0:e000::/36 maxlen: 36
2a01:5ec0:e000::/37 maxlen: 37
2a01:5ec0:e800::/37 maxlen: 37
Validation: Failed, certificate revoked on Sat 14 Dec 2024 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c4:cc:48:5b:74:25:98:34:8d:ed:d9:11:b5:2b:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Dec 14 10:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8f400d566cdf5bd4927ecf388ec042a8410a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5e:f1:f5:b3:d7:83:69:20:47:39:d6:eb:96:
d2:41:72:bb:b4:15:59:36:c5:d5:2d:f4:ad:83:0c:
ee:70:85:16:4e:48:05:2b:c9:86:4d:6c:e1:32:09:
24:ba:6e:9a:01:f7:76:cb:86:15:57:3b:af:47:33:
31:c7:05:a2:ee:72:2a:71:40:e1:38:c1:cd:30:38:
b1:1e:b4:6d:f2:87:03:93:32:ec:da:75:b1:1b:6c:
09:c3:a6:fd:4d:e0:03:cc:17:32:e1:21:ca:c1:5d:
12:f9:0b:77:c6:53:88:0a:b4:fd:95:6d:d8:a2:66:
0f:77:bc:23:69:8e:1e:a6:c8:36:b0:5d:95:c0:11:
3c:3b:1a:b0:65:2b:b2:2d:d1:3c:91:34:64:3b:68:
3f:3c:21:24:d4:09:9f:7c:89:51:76:e7:a7:27:91:
a9:33:ca:05:49:3f:0e:51:ab:d9:bd:46:dd:92:d9:
5e:49:03:83:54:15:0f:d8:9d:ce:8f:b5:c5:e2:78:
28:ff:d5:d8:e7:a0:9a:85:c8:f9:9d:97:62:fd:c9:
ba:db:9a:fe:7f:9e:20:d8:21:c2:f3:89:69:f5:5c:
b6:61:38:d6:59:8f:0c:42:64:1c:df:63:48:8c:63:
d3:51:99:d2:b7:b4:5b:e4:20:e2:bd:bd:2c:de:70:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:40:0D:56:6C:DF:5B:D4:92:7E:CF:38:8E:C0:42:A8:41:0A:18
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/C49ADVZs31vUkn7POI7AQqhBChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.144.0.0/14
5.112.0.0/12
92.42.48.0/21
IPv6:
2a01:5ec0::-2a01:5ec0:efff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:2c:1e:f8:84:c7:95:95:5b:5a:0f:13:69:74:eb:7a:f9:34:
fd:0c:7e:34:9e:b4:22:10:d5:c9:fd:a8:e3:67:76:f7:7c:35:
61:cc:93:cb:cc:6d:c8:87:83:02:bb:4d:19:1f:67:e7:aa:2e:
ec:d3:22:de:26:9d:17:bb:73:3e:b8:42:2e:f1:93:07:a5:00:
45:a7:79:eb:1f:7a:92:2f:74:73:86:f9:82:6e:86:5e:08:e6:
62:aa:dc:6a:22:82:34:44:c3:5b:4d:ef:11:a3:6f:dd:55:aa:
df:2c:8f:a4:e6:61:cc:53:cc:7c:84:a6:19:65:ce:a8:f1:a2:
06:bd:8e:38:58:40:b9:67:2e:b4:69:89:d1:7f:8f:76:d3:cf:
7a:4c:49:3a:87:74:d9:c3:cf:d2:04:16:cb:bd:61:55:f2:16:
a3:6a:bf:5a:66:1c:89:43:f1:79:07:bd:47:19:3d:cf:a7:d9:
bb:47:ce:ab:e1:cd:c7:05:46:c9:9e:a6:41:13:a1:68:8c:92:
15:ff:a6:78:e4:5e:a2:27:68:66:2c:ed:69:4e:90:5d:86:ff:
ac:33:68:56:70:aa:83:c6:a5:1a:f9:9b:a7:95:76:09:35:83:
a6:79:93:f2:54:3b:cd:2f:2f:95:a3:61:d3:f8:88:c7:fa:50:
9a:a7:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:59:51 2025 by rpki-client