Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2ff_JsgR65fySrlYECASuT5R-14.roa
File: 2ff_JsgR65fySrlYECASuT5R-14.roa (raw, json)
Hash identifier: 5Xrf8G++2whg1MTtFEMvreHcNQMs5LqorK7bdkelcu8=
Subject key identifier: D9:F7:FF:26:C8:11:EB:97:F2:4A:B9:58:10:20:12:B9:3E:51:FB:5E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018D566339D049656BF949426BFBF8A0AE22
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2ff_JsgR65fySrlYECASuT5R-14.roa
Signing time: Mon 29 Jan 2024 18:02:39 +0000
ROA not before: Mon 29 Jan 2024 18:02:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 22
185.137.36.0/24 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 22
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 May 2024 14:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:63:39:d0:49:65:6b:f9:49:42:6b:fb:f8:a0:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 29 18:02:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9f7ff26c811eb97f24ab958102012b93e51fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:aa:39:69:dd:57:d6:40:98:a9:36:04:b5:
ca:74:c1:07:fd:43:af:55:b3:55:59:4f:62:63:ca:
8a:31:4d:67:44:38:dd:17:83:9e:af:9c:93:1d:cd:
c8:64:1e:4b:ee:8d:cc:03:73:26:54:e0:fa:43:7f:
a0:fb:3c:a5:80:70:f7:c4:51:d7:3c:0c:c9:76:5e:
0e:84:a0:ce:ef:54:85:bf:2d:42:92:a0:b3:7a:ae:
eb:01:8a:85:bf:ab:7f:a3:0f:a8:67:50:3a:aa:94:
5c:73:ab:2c:d7:1d:a7:d9:53:1e:b6:a8:7b:6f:25:
9a:82:33:c4:e8:b3:4d:34:c5:65:62:ec:f3:1b:b5:
7e:a6:37:ed:5d:fa:6f:2b:04:98:90:2e:93:40:15:
40:00:d6:b9:b1:c7:69:1b:f0:60:dc:ce:e6:52:58:
79:0e:92:bd:9b:b7:5c:a7:f9:0c:65:61:cb:57:d7:
2a:d3:f8:2f:0e:cd:c4:06:31:7d:0a:5f:ee:a4:2a:
f2:24:1e:03:06:8f:20:a9:e4:4d:e2:6b:a9:3a:96:
bb:08:9e:a8:0f:b4:43:08:bf:cd:aa:16:ce:ba:1a:
b7:37:e0:ba:56:dc:70:af:26:ca:1a:59:45:e2:a6:
d1:50:87:0c:bd:53:29:6c:ec:68:ad:5f:2f:b3:53:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:FF:26:C8:11:EB:97:F2:4A:B9:58:10:20:12:B9:3E:51:FB:5E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2ff_JsgR65fySrlYECASuT5R-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
81.19.208.0/20
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
b9:92:21:42:6c:48:3e:cd:30:13:d5:45:04:17:6a:3a:da:db:
00:35:bc:00:ae:6a:90:e0:1c:2b:19:1f:ca:28:5b:31:c9:67:
98:78:e4:55:53:07:da:c1:99:0e:2b:da:fa:9d:82:94:08:11:
de:0f:32:08:a7:03:52:44:0a:84:be:15:4e:c0:43:fe:88:37:
4e:35:38:b0:bb:01:93:9b:23:39:96:4e:43:59:98:7c:76:54:
68:e9:36:eb:e3:7a:49:d7:a1:1f:86:72:4f:f4:a6:9d:db:58:
b2:95:31:b3:17:fd:72:fb:5f:a6:4c:e4:67:de:40:38:2d:0c:
06:d1:1c:b8:84:ea:96:c5:ed:f4:10:1c:48:95:6a:56:3d:f6:
ff:a1:e9:0b:b1:08:d5:26:57:e7:15:ba:a3:61:8c:26:39:c6:
3a:93:4a:9e:a8:e6:af:ed:20:a8:6a:9d:bb:3b:03:5f:df:f9:
38:35:85:ac:32:ab:f4:49:d5:7a:1a:15:86:aa:81:d0:2a:f0:
06:a7:66:d7:e3:04:83:89:77:29:78:9e:73:c1:cb:13:e8:9f:
a9:56:d3:48:72:9c:b3:60:ce:9a:bb:12:2a:3f:88:36:55:40:
bc:15:72:c1:14:4f:01:6a:e1:35:2d:4f:6b:16:57:9f:5a:5a:
3b:75:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org