Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/mW32d-G8z6K5UmFt0TmQV_aSwTM.roa
File: mW32d-G8z6K5UmFt0TmQV_aSwTM.roa (raw, json)
Hash identifier: Z3E4xgrpPe1AGRzlaWQ0am2+IH9/tYBZfHUqcIQU36g=
Subject key identifier: 99:6D:F6:77:E1:BC:CF:A2:B9:52:61:6D:D1:39:90:57:F6:92:C1:33
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0192E59BBBA3F44C1BF9E53B2EF5D0E8509B
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/mW32d-G8z6K5UmFt0TmQV_aSwTM.roa
Signing time: Fri 01 Nov 2024 02:44:01 +0000
ROA not before: Fri 01 Nov 2024 02:44:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Nov 2024 18:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e5:9b:bb:a3:f4:4c:1b:f9:e5:3b:2e:f5:d0:e8:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Nov 1 02:44:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996df677e1bccfa2b952616dd1399057f692c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:5a:88:08:18:dc:4f:cc:1c:2e:7a:b8:8e:
e5:93:f2:b0:7e:0e:d4:05:47:69:a8:a7:96:d6:b5:
37:bb:39:bd:43:02:34:81:2c:8e:a4:cf:85:01:df:
10:a3:1f:4f:19:a8:2b:c0:92:59:6c:e8:f1:8e:ea:
d2:e3:9e:20:b4:e9:2b:48:92:c7:0d:0c:03:02:24:
6e:4b:ff:0d:79:7c:67:57:21:93:fd:29:9a:4b:2d:
bf:a6:34:f1:7a:55:49:05:52:e8:af:0b:40:f0:ae:
cb:29:4a:11:19:42:82:56:2c:34:13:a8:53:07:4d:
5a:fb:57:8f:fe:0c:93:92:05:06:5d:9f:16:da:f7:
05:e1:84:4c:d6:77:86:86:85:94:41:a2:22:81:11:
75:b4:7c:00:55:83:29:12:87:51:37:ea:a9:80:1f:
80:5a:80:5b:33:8c:46:40:b1:5a:4c:22:54:e8:b8:
9e:1e:6c:c8:c6:e8:ff:29:49:e5:2e:aa:ee:62:31:
fd:79:f8:66:28:4f:23:7b:64:c9:9c:7a:b7:45:18:
8e:bd:49:63:e7:55:c8:b3:6f:f3:60:4a:fd:ef:e5:
51:9c:e7:38:16:20:3b:6f:1c:ec:a3:2d:4e:60:f3:
6b:71:73:60:e4:4f:4b:8c:c4:b1:15:15:0f:77:d3:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6D:F6:77:E1:BC:CF:A2:B9:52:61:6D:D1:39:90:57:F6:92:C1:33
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/mW32d-G8z6K5UmFt0TmQV_aSwTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
4d:22:5f:3e:9e:0c:a1:b0:39:48:2e:ef:95:c6:29:9b:d1:48:
84:b6:28:34:6d:2d:8c:1f:1f:88:94:94:6d:a6:05:3e:19:26:
94:18:86:7c:94:c6:02:b1:6b:57:c5:2e:a9:4b:b7:ea:e1:a8:
6a:b1:7e:33:91:10:e3:c5:cd:e4:fe:45:e8:95:58:6d:8b:f5:
91:69:58:4a:04:3a:66:8d:a9:64:e4:43:1a:b6:f1:7c:ce:3d:
50:54:31:3f:65:a2:5a:4b:9a:2c:8f:9c:f8:9e:50:c8:7e:c1:
29:25:23:69:57:54:81:ad:c1:67:99:9d:62:02:e7:15:4c:d7:
b2:bd:a4:46:bc:9e:6d:8c:99:18:d1:b1:90:a0:09:55:63:a7:
5f:14:7f:8b:e1:30:68:f8:8a:65:07:60:c7:a7:68:43:20:32:
f3:88:8e:9c:a3:4c:7d:dc:a8:08:6f:02:3a:75:df:cb:f0:10:
5a:ed:e0:f5:c5:e0:32:8a:1c:00:62:70:09:3b:1d:48:75:f9:
28:59:e5:96:59:27:3c:65:1a:49:7d:b7:9f:fa:12:ae:21:f1:
6a:6f:72:de:a1:c0:22:d3:17:81:39:cb:d4:f7:76:13:ad:6c:
1c:30:ee:fe:13:0f:5f:3c:c1:dd:6e:b8:0a:70:b7:6c:4e:4e:
d7:be:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:22 2024 by rpki-client on console-fra.rpki-client.org