Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/qv2xFZ1GViu5KnLHqrCUoRDERZ4.roa
File: qv2xFZ1GViu5KnLHqrCUoRDERZ4.roa (raw, json)
Hash identifier: EjIIuRM0nadlLtErTSH5HeCIlI5zXJVZLUe4DvX9qts=
Subject key identifier: AA:FD:B1:15:9D:46:56:2B:B9:2A:72:C7:AA:B0:94:A1:10:C4:45:9E
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 018CC6B8F8D9D74AACBFDF17EBAC9747723B
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/qv2xFZ1GViu5KnLHqrCUoRDERZ4.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 719
IP address blocks: 194.188.0.0/16 maxlen: 16
213.161.32.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
82.141.64.0/18 maxlen: 18
195.74.0.0/19 maxlen: 19
194.188.151.0/24 maxlen: 24
194.188.150.0/24 maxlen: 24
193.229.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
193.66.0.0/16 maxlen: 16
217.25.96.0/20 maxlen: 20
212.38.224.0/19 maxlen: 19
194.86.0.0/16 maxlen: 16
195.255.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
82.118.192.0/19 maxlen: 19
194.240.0.0/15 maxlen: 15
88.112.0.0/14 maxlen: 14
192.126.35.0/24 maxlen: 24
193.65.129.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
212.50.192.0/19 maxlen: 19
217.77.192.0/20 maxlen: 20
193.199.0.0/16 maxlen: 16
212.226.0.0/16 maxlen: 16
192.77.120.0/22 maxlen: 22
193.64.0.0/15 maxlen: 15
212.246.0.0/16 maxlen: 16
91.152.0.0/13 maxlen: 13
80.186.0.0/16 maxlen: 16
217.24.96.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
213.192.128.0/18 maxlen: 18
213.130.224.0/19 maxlen: 19
195.218.64.0/19 maxlen: 19
139.97.0.0/16 maxlen: 16
82.103.192.0/18 maxlen: 18
109.232.80.0/21 maxlen: 21
195.16.192.0/19 maxlen: 19
195.238.192.0/19 maxlen: 19
83.245.128.0/17 maxlen: 17
194.136.170.0/24 maxlen: 24
178.251.56.0/21 maxlen: 21
77.109.192.0/18 maxlen: 18
85.76.0.0/14 maxlen: 14
194.136.213.0/24 maxlen: 24
194.157.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
195.170.128.0/19 maxlen: 19
94.22.0.0/16 maxlen: 16
192.163.128.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
193.184.0.0/15 maxlen: 15
194.211.5.0/24 maxlen: 24
194.211.0.0/16 maxlen: 16
194.157.58.0/24 maxlen: 24
194.157.60.0/24 maxlen: 24
194.157.59.0/24 maxlen: 24
194.157.63.0/24 maxlen: 24
194.157.62.0/24 maxlen: 24
194.157.61.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.36.0/24 maxlen: 24
192.102.32.0/24 maxlen: 24
85.156.0.0/16 maxlen: 16
192.102.38.0/24 maxlen: 24
80.88.176.0/20 maxlen: 20
192.102.42.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
195.236.179.0/24 maxlen: 24
84.230.0.0/15 maxlen: 15
213.250.64.0/18 maxlen: 18
192.102.19.0/24 maxlen: 24
192.163.64.0/18 maxlen: 18
195.197.0.0/16 maxlen: 16
81.197.0.0/16 maxlen: 16
194.136.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
192.163.32.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
31.7.16.0/20 maxlen: 20
212.54.0.0/19 maxlen: 19
81.209.0.0/17 maxlen: 17
82.215.192.0/18 maxlen: 18
193.142.51.0/24 maxlen: 24
80.81.160.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.148.192.0/19 maxlen: 19
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
213.169.0.0/19 maxlen: 19
2a00:1dd0::/29 maxlen: 32
2001:670::/29 maxlen: 32
2001:1658::/29 maxlen: 32
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 10:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f8:d9:d7:4a:ac:bf:df:17:eb:ac:97:47:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aafdb1159d46562bb92a72c7aab094a110c4459e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:37:ad:40:e8:dc:f6:80:14:ad:d3:40:38:
1e:2d:11:7f:0f:d4:13:61:ab:8d:ac:4d:78:6e:ce:
1e:20:dd:8c:0b:cd:fd:c2:1e:db:56:ba:55:b7:9d:
6c:86:2f:52:b8:4d:65:36:2f:51:eb:a5:2f:79:cc:
ec:3e:fa:1c:34:7d:c7:cd:8c:eb:d7:c3:2b:58:3b:
c0:4d:5e:6e:80:67:e2:f1:12:a1:33:b9:6e:9c:08:
f8:52:1e:87:9a:92:10:b1:a4:60:8c:b8:f1:9d:d0:
2f:e7:61:67:13:2d:ff:b4:ec:05:7f:91:45:ea:1f:
cb:e2:ee:1f:72:4c:ab:7f:97:23:8a:52:dd:cf:44:
16:cf:c2:5b:f9:09:6e:54:b4:43:6e:dc:aa:03:b2:
4c:78:a5:d8:a7:db:b8:4d:4e:91:8b:b6:d3:e2:d4:
05:09:89:39:d2:58:44:9f:46:70:a9:62:1d:8d:e8:
1c:f8:ff:36:44:8e:f3:f0:9b:fa:77:e6:b4:62:73:
b2:9b:f7:93:54:5f:58:bd:89:22:c9:6a:52:03:b1:
c0:3d:b7:4e:58:4c:68:98:bf:e0:ea:39:83:44:43:
5b:a5:6e:9b:f4:cd:80:5c:b8:b0:f7:13:a7:4b:00:
18:46:7e:53:3f:0d:21:c0:c0:09:1b:33:c8:0c:07:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:B1:15:9D:46:56:2B:B9:2A:72:C7:AA:B0:94:A1:10:C4:45:9E
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/qv2xFZ1GViu5KnLHqrCUoRDERZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.19.0/24
192.102.32.0/24
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
193.64.0.0-193.66.255.255
193.94.0.0/16
193.142.51.0/24
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:670::/29
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:80:07:3c:2f:84:e9:b8:19:47:09:ae:43:c3:63:0f:ca:7e:
b0:f7:34:88:a3:32:22:27:d5:73:25:37:87:9a:d3:9e:65:9f:
90:c0:82:cc:b5:1b:96:6d:46:a6:52:7a:ca:d7:1c:8a:9d:f2:
ed:98:5d:06:30:0a:52:53:28:ca:e4:68:93:61:37:b5:1b:78:
b6:2c:81:2b:cf:67:7f:78:0f:1b:34:7b:f0:09:6b:b7:51:bd:
1c:1c:6e:b3:f4:f6:94:d7:9c:d1:e7:66:10:77:f8:4f:71:73:
86:b9:bf:b4:d5:76:00:53:58:28:0e:43:1e:dd:ee:92:8c:7a:
08:7a:31:5b:0b:bb:33:4e:f6:6e:71:bd:75:3b:96:be:09:f7:
af:95:0f:40:ae:6c:06:87:a8:21:56:4c:39:2a:4b:ca:68:be:
81:dc:9b:8e:a9:3b:f5:5e:d7:9a:b0:9e:24:74:ec:cf:fc:00:
a6:45:f6:67:2c:05:bd:de:de:9f:fe:80:eb:4a:1f:54:a0:0f:
9d:9f:ed:dc:1a:1b:5f:46:49:88:27:cf:de:00:f7:df:4a:3c:
94:9e:21:61:07:37:32:89:81:3e:b5:e3:45:0d:11:03:6f:3c:
b7:64:f1:cb:1d:96:f0:b0:d5:95:f5:2e:59:e3:89:57:71:f3:
e5:bd:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:12 2025 by rpki-client