Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MBHtHf2A-BolewkdYi37tJiapoY.roa
File: MBHtHf2A-BolewkdYi37tJiapoY.roa (raw, json)
Hash identifier: J6flVDTbQjfntVoA0huYVT9/v4zT3pSBQQUX88bpRrs=
Subject key identifier: 30:11:ED:1D:FD:80:F8:1A:25:7B:09:1D:62:2D:FB:B4:98:9A:A6:86
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 0195F1478086E8A00D1A7FCA04543E09F415
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MBHtHf2A-BolewkdYi37tJiapoY.roa
Signing time: Tue 01 Apr 2025 12:15:49 +0000
ROA not before: Tue 01 Apr 2025 12:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Apr 2025 13:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:47:80:86:e8:a0:0d:1a:7f:ca:04:54:3e:09:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 1 12:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3011ed1dfd80f81a257b091d622dfbb4989aa686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:ae:72:d9:99:9b:4a:5b:fb:c4:8c:da:5b:
19:93:30:07:fd:44:48:9d:79:04:e0:dd:c1:90:67:
9c:c5:c1:a4:e0:93:16:9e:9e:f8:3a:91:d0:16:b1:
cb:76:ce:b0:33:88:cd:1a:44:c3:da:09:44:93:36:
f6:4c:c7:e1:95:54:dd:de:b4:ef:c4:13:41:6a:01:
d3:d5:e0:cf:e1:16:a9:5e:ad:60:9e:55:94:45:95:
7d:da:01:24:c6:63:e2:16:85:f6:34:be:b4:5b:b4:
e9:fd:df:12:e0:a6:07:33:7d:9c:9b:1b:8b:69:6c:
39:5b:83:bf:1d:c6:05:7a:47:90:0e:56:0e:e1:91:
cd:37:e1:43:c6:5d:21:fe:ba:45:cf:9d:4b:61:51:
db:b9:4e:7b:c5:4a:16:38:33:bf:4a:ce:e1:da:5b:
ea:a8:aa:ba:d9:43:40:77:0f:56:97:37:d0:df:f2:
17:4a:c3:5b:fa:e1:6a:57:74:08:e2:af:a1:99:34:
fd:0a:d7:6f:c8:5a:46:85:97:c3:16:b3:c5:50:dd:
85:6e:4d:ca:65:a3:1c:b7:03:e3:ee:9e:50:6f:cc:
fb:11:8e:f9:da:c1:99:60:5c:db:ba:5c:b7:19:e0:
cf:0a:e3:2b:09:61:93:c5:36:a5:8c:42:e5:80:ae:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:ED:1D:FD:80:F8:1A:25:7B:09:1D:62:2D:FB:B4:98:9A:A6:86
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MBHtHf2A-BolewkdYi37tJiapoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.23.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
32:d2:b7:17:30:22:7c:e4:17:ba:d6:5e:39:91:eb:2a:8f:1d:
bb:0b:8f:a1:53:ad:7b:88:3b:46:ad:db:27:43:50:9a:25:a4:
fa:8c:8b:43:4f:19:b7:ac:36:13:b8:ce:ac:a0:6b:2f:b8:b5:
29:47:86:4d:46:33:e2:89:d3:81:1c:35:ce:ec:ed:34:44:98:
2b:fc:06:8c:45:66:51:34:fe:00:8e:4d:41:0c:31:5a:1c:67:
cd:7b:b7:a2:a9:25:74:a8:3f:ef:52:a8:04:d6:91:b8:1d:bf:
e3:1b:64:01:d2:7c:93:7a:40:83:6d:80:ea:9d:40:ec:da:ab:
d9:67:4a:c9:3c:9f:54:ca:03:cc:ab:40:12:91:fd:7c:48:16:
55:72:d4:ab:8c:95:92:0a:87:1f:6e:df:a4:a9:6c:05:1a:ce:
18:dd:d6:9a:55:50:dd:0e:75:d8:7f:70:51:47:a2:90:82:43:
77:e9:cf:f8:5e:68:78:94:9e:6c:98:bb:94:06:58:18:59:4b:
1b:0b:fc:4f:b9:93:22:c3:01:62:6f:ef:18:67:ef:14:3b:f1:
f0:dc:5e:46:49:7f:74:56:8f:cf:cd:9c:59:59:df:0a:00:ec:
09:30:8f:ba:18:af:db:f8:7b:cf:b0:8f:6d:fb:5e:b5:fa:63:
20:cf:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:21:36 2025 by rpki-client