Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CL2HNkw-YZoZxRR317hH2Ce4Eyk.roa
File: CL2HNkw-YZoZxRR317hH2Ce4Eyk.roa (raw, json)
Hash identifier: vnTU3KLr4R9daEaxPP+49viGlpXCBslJiQMX4WOVA8E=
Subject key identifier: 08:BD:87:36:4C:3E:61:9A:19:C5:14:77:D7:B8:47:D8:27:B8:13:29
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01932AE46038BB02D4C2F4889A0BEC50F99B
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CL2HNkw-YZoZxRR317hH2Ce4Eyk.roa
Signing time: Thu 14 Nov 2024 13:37:09 +0000
ROA not before: Thu 14 Nov 2024 13:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/23 maxlen: 23
94.228.229.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/24 maxlen: 24
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 14 Nov 2024 14:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:e4:60:38:bb:02:d4:c2:f4:88:9a:0b:ec:50:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 14 13:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08bd87364c3e619a19c51477d7b847d827b81329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:6c:cd:d6:27:f6:3a:c8:3c:b4:d5:3f:87:
35:e1:1a:0a:78:19:23:98:a7:82:c5:bf:ee:1d:a5:
30:07:56:a0:aa:25:74:16:2b:bd:39:3b:7b:c6:c8:
94:8c:43:18:87:24:2c:7b:a2:c2:fb:81:25:2c:0e:
03:70:51:2e:bb:ff:b7:e3:1d:78:21:0b:5c:f5:d1:
28:87:48:74:e0:e6:24:6a:eb:2e:79:28:78:19:5a:
8f:aa:74:6f:18:f8:57:57:ce:ae:99:de:50:8d:e1:
6d:b6:aa:1c:df:4a:7c:04:4d:57:1b:86:27:35:50:
7d:bd:6e:34:12:2e:52:9b:37:45:ca:da:56:0e:3b:
05:65:41:ca:8a:f3:1c:85:6d:1e:8e:11:44:86:73:
42:b6:44:d3:48:91:ca:b8:d4:1f:9c:35:86:b8:0e:
76:7a:10:bc:43:81:de:1d:bc:32:af:d2:f2:96:7a:
67:3d:27:ed:84:fc:1b:6c:b6:9b:4f:1f:ff:5c:1c:
e7:65:04:04:fe:8c:6b:41:90:bd:34:29:08:53:7d:
d9:fe:4b:cf:9c:0c:c8:48:64:50:72:be:3e:1e:80:
8c:4a:e2:6f:4a:11:6b:d7:ee:58:9d:74:8d:ac:68:
fc:7b:84:1f:ae:95:8b:55:8d:23:af:97:bd:2c:67:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:87:36:4C:3E:61:9A:19:C5:14:77:D7:B8:47:D8:27:B8:13:29
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/CL2HNkw-YZoZxRR317hH2Ce4Eyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/24
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0-92.60.226.255
92.60.229.0-92.60.231.255
92.60.233.0/24
92.60.237.0-92.60.239.255
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.229.0/24
94.228.231.0/24
94.228.234.0/24
94.228.237.0/24
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/24
176.67.202.0-176.67.204.255
176.67.206.0/23
176.67.210.0/24
176.67.214.0/24
176.67.217.0-176.67.218.255
176.67.221.0/24
178.17.30.0/24
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/24
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:89:d0:d5:7c:c4:4a:ee:30:34:97:bb:82:cf:fd:3c:e0:6b:
bd:1d:d8:b4:de:2b:3b:76:86:78:01:6e:78:94:0f:83:c3:55:
06:e3:e5:47:b7:85:0d:14:c0:eb:77:71:70:4f:1a:55:eb:f7:
68:1f:60:21:f6:4d:07:74:20:50:83:e5:1e:55:39:10:dd:22:
e4:68:3b:6e:b1:c1:7e:f9:09:13:de:83:49:df:48:ad:7d:b1:
bf:a9:c1:b1:5a:21:f0:b4:af:25:41:47:1a:6f:33:30:bf:cf:
61:df:fc:ef:11:8e:05:42:f8:c2:74:92:ad:85:8b:4f:6c:18:
59:30:68:63:8b:b6:a1:a6:c2:c8:e4:2d:08:fe:2e:c2:1c:e4:
e8:27:80:c3:76:5f:f4:32:0d:d8:c9:bb:b7:3a:fb:47:ba:ea:
65:41:0a:73:52:5f:b3:d4:90:47:e5:0c:ba:cd:e2:f7:28:3b:
35:4b:c6:8c:77:0d:11:17:c6:48:1b:11:a2:88:38:6a:84:be:
a7:8f:db:36:87:9d:21:dd:63:2a:27:e9:33:97:6e:32:14:cb:
e0:80:23:9b:e6:bd:94:43:25:29:49:3d:7c:73:32:b3:e7:b1:
44:b1:59:2f:79:d1:81:f8:5e:eb:57:e1:51:47:9b:d4:da:b2:
fe:f6:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:01:37 2025 by rpki-client