Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/iVtiIQdNg3XzwnqlpwuGa4m-zKs.roa
File: iVtiIQdNg3XzwnqlpwuGa4m-zKs.roa (raw, json)
Hash identifier: JBbkrzbDoS+mh3PPVTyzQ0nG/twxBFZvlpTZEfNx1Qg=
Subject key identifier: 89:5B:62:21:07:4D:83:75:F3:C2:7A:A5:A7:0B:86:6B:89:BE:CC:AB
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0191DF71E3F28F38848EC6CA6E341B0BA65C
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/iVtiIQdNg3XzwnqlpwuGa4m-zKs.roa
Signing time: Wed 11 Sep 2024 04:57:48 +0000
ROA not before: Wed 11 Sep 2024 04:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204170
IP address blocks: 5.102.176.0/21 maxlen: 21
5.102.176.0/24 maxlen: 24
5.102.177.0/24 maxlen: 24
5.102.178.0/24 maxlen: 24
5.102.179.0/24 maxlen: 24
5.102.180.0/24 maxlen: 24
5.102.181.0/24 maxlen: 24
5.102.182.0/24 maxlen: 24
5.102.183.0/24 maxlen: 24
78.111.32.0/20 maxlen: 20
78.111.32.0/24 maxlen: 24
78.111.33.0/24 maxlen: 24
78.111.34.0/24 maxlen: 24
78.111.35.0/24 maxlen: 24
78.111.36.0/24 maxlen: 24
78.111.37.0/24 maxlen: 24
78.111.38.0/24 maxlen: 24
78.111.39.0/24 maxlen: 24
78.111.40.0/24 maxlen: 24
78.111.41.0/24 maxlen: 24
78.111.42.0/24 maxlen: 24
78.111.43.0/24 maxlen: 24
78.111.44.0/24 maxlen: 24
78.111.45.0/24 maxlen: 24
78.111.46.0/24 maxlen: 24
78.111.47.0/24 maxlen: 24
84.242.32.0/20 maxlen: 20
84.242.32.0/24 maxlen: 24
84.242.33.0/24 maxlen: 24
84.242.34.0/24 maxlen: 24
84.242.35.0/24 maxlen: 24
84.242.36.0/24 maxlen: 24
84.242.37.0/24 maxlen: 24
84.242.38.0/24 maxlen: 24
84.242.39.0/24 maxlen: 24
84.242.40.0/24 maxlen: 24
84.242.41.0/24 maxlen: 24
84.242.42.0/24 maxlen: 24
84.242.43.0/24 maxlen: 24
84.242.44.0/24 maxlen: 24
84.242.45.0/24 maxlen: 24
84.242.46.0/24 maxlen: 24
84.242.47.0/24 maxlen: 24
94.176.16.0/20 maxlen: 20
94.176.16.0/24 maxlen: 24
94.176.17.0/24 maxlen: 24
94.176.18.0/24 maxlen: 24
94.176.19.0/24 maxlen: 24
94.176.20.0/24 maxlen: 24
94.176.21.0/24 maxlen: 24
94.176.22.0/24 maxlen: 24
94.176.23.0/24 maxlen: 24
94.176.24.0/24 maxlen: 24
94.176.25.0/24 maxlen: 24
94.176.26.0/24 maxlen: 24
94.176.27.0/24 maxlen: 24
94.176.28.0/24 maxlen: 24
94.176.29.0/24 maxlen: 24
94.176.30.0/24 maxlen: 24
94.176.31.0/24 maxlen: 24
96.9.128.0/19 maxlen: 19
96.9.128.0/24 maxlen: 24
96.9.129.0/24 maxlen: 24
96.9.130.0/24 maxlen: 24
96.9.131.0/24 maxlen: 24
96.9.132.0/24 maxlen: 24
96.9.133.0/24 maxlen: 24
96.9.134.0/24 maxlen: 24
96.9.135.0/24 maxlen: 24
96.9.136.0/24 maxlen: 24
96.9.137.0/24 maxlen: 24
96.9.138.0/24 maxlen: 24
96.9.139.0/24 maxlen: 24
96.9.140.0/24 maxlen: 24
96.9.141.0/24 maxlen: 24
96.9.142.0/24 maxlen: 24
96.9.143.0/24 maxlen: 24
96.9.144.0/24 maxlen: 24
96.9.146.0/24 maxlen: 24
96.9.147.0/24 maxlen: 24
96.9.148.0/24 maxlen: 24
96.9.149.0/24 maxlen: 24
96.9.150.0/24 maxlen: 24
96.9.151.0/24 maxlen: 24
96.9.152.0/24 maxlen: 24
96.9.153.0/24 maxlen: 24
96.9.154.0/24 maxlen: 24
96.9.155.0/24 maxlen: 24
96.9.156.0/24 maxlen: 24
96.9.157.0/24 maxlen: 24
96.9.158.0/24 maxlen: 24
96.9.159.0/24 maxlen: 24
141.105.168.0/21 maxlen: 21
141.105.168.0/24 maxlen: 24
141.105.169.0/24 maxlen: 24
141.105.170.0/24 maxlen: 24
141.105.171.0/24 maxlen: 24
141.105.172.0/24 maxlen: 24
141.105.173.0/24 maxlen: 24
141.105.174.0/24 maxlen: 24
141.105.175.0/24 maxlen: 24
178.20.16.0/21 maxlen: 21
178.20.16.0/24 maxlen: 24
178.20.17.0/24 maxlen: 24
178.20.18.0/24 maxlen: 24
178.20.19.0/24 maxlen: 24
178.20.20.0/24 maxlen: 24
178.20.21.0/24 maxlen: 24
178.20.22.0/24 maxlen: 24
178.20.23.0/24 maxlen: 24
185.29.140.0/22 maxlen: 22
185.29.140.0/24 maxlen: 24
185.29.141.0/24 maxlen: 24
185.29.142.0/24 maxlen: 24
185.29.143.0/24 maxlen: 24
185.112.104.0/22 maxlen: 22
185.112.104.0/24 maxlen: 24
185.112.105.0/24 maxlen: 24
185.112.106.0/24 maxlen: 24
185.112.107.0/24 maxlen: 24
199.48.224.0/24 maxlen: 24
206.167.33.0/24 maxlen: 24
2a0a:c740:2::/48 maxlen: 48
2a0a:c740:4::/48 maxlen: 48
2a0a:c740:5::/48 maxlen: 48
2a0a:c740:7::/48 maxlen: 48
2a0a:c740:8::/48 maxlen: 48
2a0a:c740:100::/48 maxlen: 48
2a0a:c740:2000::/48 maxlen: 48
2a0a:c740:9998::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Sep 2024 05:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:71:e3:f2:8f:38:84:8e:c6:ca:6e:34:1b:0b:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Sep 11 04:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895b6221074d8375f3c27aa5a70b866b89beccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:3a:ad:e4:f6:bb:1b:9f:cc:b2:1b:ae:24:
ae:5b:92:c1:61:d7:39:a2:ff:55:ff:10:30:01:40:
8d:66:c4:2d:0e:83:34:28:37:6e:49:05:f1:5a:73:
e3:b2:77:cc:b9:28:cb:c3:a7:96:2d:b9:3e:0b:b2:
16:e0:f3:2d:59:7b:cb:55:5b:92:63:78:8b:cc:dd:
1e:dc:19:7d:b8:b5:a4:7f:e2:a4:26:27:d9:f1:dc:
8b:ac:18:b2:d0:53:7d:c0:40:45:6e:08:c4:97:f1:
b3:f6:28:b0:3d:60:9e:19:8c:c1:98:c1:28:88:8b:
cf:f7:a7:b1:a1:d7:79:81:da:b1:fc:8c:81:20:f7:
e0:65:e5:b7:fb:28:27:99:00:70:06:57:6a:7d:a8:
c4:f0:5c:01:9a:f9:d7:92:37:6c:1e:b7:3a:00:83:
41:54:79:df:dc:20:fa:9e:74:e5:75:b5:e7:5f:a5:
17:1e:9d:b0:18:f6:e7:91:18:5b:55:c2:a7:f1:a7:
d8:50:ee:6f:38:3d:9e:0f:a4:68:fb:d1:f7:c4:26:
00:f0:29:a5:35:02:92:90:54:da:48:bd:4f:f8:27:
63:01:85:5b:fd:ac:e7:87:56:ab:ec:7e:b5:26:4a:
5d:92:c5:fa:5c:55:da:92:ee:24:9f:92:df:c6:d3:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:62:21:07:4D:83:75:F3:C2:7A:A5:A7:0B:86:6B:89:BE:CC:AB
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/iVtiIQdNg3XzwnqlpwuGa4m-zKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.176.0/21
78.111.32.0/20
84.242.32.0/20
94.176.16.0/20
96.9.128.0/19
141.105.168.0/21
178.20.16.0/21
185.29.140.0/22
185.112.104.0/22
199.48.224.0/24
206.167.33.0/24
IPv6:
2a0a:c740:2::/48
2a0a:c740:4::/47
2a0a:c740:7::-2a0a:c740:8:ffff:ffff:ffff:ffff:ffff
2a0a:c740:100::/48
2a0a:c740:2000::/48
2a0a:c740:9998::/48
Signature Algorithm: sha256WithRSAEncryption
28:f7:23:b1:be:fe:38:3c:ed:a4:c4:5d:8a:25:e4:33:47:16:
58:82:22:cd:f7:76:1e:0b:79:43:4d:88:2d:68:f4:a7:c9:b1:
1c:bb:3e:0a:6d:4c:59:9c:6a:9b:45:b9:08:ab:58:b4:44:eb:
10:18:97:12:90:5c:d9:17:8c:46:3c:9f:ea:fd:ac:e1:55:0a:
2f:fc:2a:73:71:d1:bd:f1:28:9f:1a:13:87:10:99:6b:af:ec:
04:bc:4a:2b:5f:43:cd:4e:1a:d7:c5:8b:fa:cb:6d:b0:61:12:
98:be:73:94:80:6b:c5:8c:ed:51:c2:ea:ca:a2:47:47:19:e3:
da:af:84:43:a8:c2:7f:e0:08:22:31:32:de:cb:54:80:58:83:
07:d8:b2:3f:f9:0f:df:04:ca:71:91:73:64:3f:72:6b:31:8d:
dc:ac:9e:66:f3:41:0c:30:ab:e6:ab:c0:c0:59:3e:eb:4b:26:
15:97:f3:71:e7:d0:0d:b1:43:6d:58:23:93:04:b1:b3:d4:b0:
91:09:22:c8:9d:a2:35:2c:ad:f1:d8:c2:25:35:18:ab:d8:e5:
5f:28:cb:f7:35:8a:a9:4f:61:58:79:da:fb:b5:66:e0:c1:ee:
8a:bc:15:ec:9f:1a:40:27:10:9d:f3:97:c7:1a:34:10:17:c1:
a5:f4:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:50:46 2025 by rpki-client