Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/TRUJNlnKbMGvC69Imk-Lgp_iKUk.roa
File: TRUJNlnKbMGvC69Imk-Lgp_iKUk.roa (raw, json)
Hash identifier: aMN+Y1jPnrGvm3MdOoG/kWW6d4qw1OpoR5NKULkPcz8=
Subject key identifier: 4D:15:09:36:59:CA:6C:C1:AF:0B:AF:48:9A:4F:8B:82:9F:E2:29:49
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01922CEB019667B2131B79329276D9A29EEE
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/TRUJNlnKbMGvC69Imk-Lgp_iKUk.roa
Signing time: Thu 26 Sep 2024 06:00:51 +0000
ROA not before: Thu 26 Sep 2024 06:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.128.0/17 maxlen: 17
213.0.186.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 26 Sep 2024 06:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:eb:01:96:67:b2:13:1b:79:32:92:76:d9:a2:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 26 06:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d15093659ca6cc1af0baf489a4f8b829fe22949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:d2:67:99:9e:0c:9f:59:bc:14:d8:d6:8d:
01:96:a9:19:95:8b:7e:f4:7b:cb:f5:1e:37:a9:2f:
fc:95:43:76:bd:a3:8f:ec:66:f4:1f:ab:33:70:bb:
4d:c4:14:2f:5d:d5:8e:c3:48:fb:86:7f:af:25:61:
be:e8:e9:98:3d:7a:e8:ce:13:63:04:34:c0:08:ef:
c2:4e:b1:eb:3c:15:67:34:01:d6:ae:94:70:09:89:
ef:89:1c:6e:1d:b2:97:4b:2b:77:bc:63:3c:a9:d9:
d8:b5:68:5f:25:72:7d:13:82:1d:f0:3b:e3:e5:43:
c7:98:f3:04:6d:0c:4b:04:54:28:b1:9f:fb:38:a7:
19:af:8e:66:c8:30:7f:d9:cb:e0:45:4e:f1:f8:2b:
88:43:56:2c:dd:0e:e1:6e:4f:7f:c3:bd:14:9b:d2:
df:f3:04:f0:b9:84:e1:b8:ea:30:a7:29:a1:17:6c:
db:ca:d2:47:56:be:83:af:1d:b2:02:71:8e:ee:63:
39:47:84:36:b6:67:eb:8e:d8:99:52:b2:40:9f:95:
ef:02:a5:0c:ca:4d:81:4d:fb:5a:e2:c5:0a:b3:4f:
fa:6f:06:9f:fa:8b:5d:89:d2:79:de:fb:fe:29:d2:
44:1f:a5:16:10:ec:2f:76:88:3b:b1:86:45:0a:ab:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:09:36:59:CA:6C:C1:AF:0B:AF:48:9A:4F:8B:82:9F:E2:29:49
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/TRUJNlnKbMGvC69Imk-Lgp_iKUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.149.255.255
80.24.0.0/14
80.29.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
81.47.0.0/16
83.32.0.0/13
83.47.0.0-83.48.255.255
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.153.0.0/16
194.69.225.0/24
194.179.0.0/17
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.77.132.0/22
195.235.0.0/16
212.170.0.0/16
213.0.128.0/17
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
04:22:75:f1:8e:ab:0b:17:bf:be:56:53:eb:26:6f:67:6e:2f:
9c:0d:33:ed:7d:83:e3:2a:3c:63:94:22:eb:ce:b9:41:b8:9f:
8a:40:50:33:b8:f0:b3:7b:25:1a:2d:7e:4c:61:cc:03:60:b7:
65:f3:db:ab:57:8c:27:75:5b:c7:1a:46:f8:a1:c9:e8:1c:05:
47:99:38:74:53:47:ee:d5:f5:0c:f6:e7:1a:18:75:18:bb:f6:
55:f1:69:20:4e:ba:02:4d:e7:07:95:b0:80:1a:bc:35:de:33:
aa:95:8b:cd:5f:9b:a9:d7:28:bf:63:a1:04:16:12:59:b8:3f:
98:c7:1a:3a:82:d6:bd:cc:8e:b0:40:35:0b:c3:d5:c3:db:5a:
33:be:a3:14:92:8a:62:0b:72:57:9b:69:7d:7c:75:c2:dd:59:
58:e2:23:61:8c:76:76:0d:19:ae:c3:74:78:31:d7:a2:c1:e2:
4f:7b:ef:ab:f1:ae:6c:e0:1a:80:f7:c3:9c:e4:cc:9d:e4:68:
f4:a3:30:62:c9:4e:e4:35:05:91:67:3e:f4:08:1d:83:41:d4:
cd:3d:8b:bf:87:1e:33:46:65:1f:db:02:0a:6c:29:65:5e:32:
98:a7:28:15:76:6b:9a:a0:24:ed:38:0e:98:e5:39:58:13:ce:
d0:dd:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:01:47 2025 by rpki-client