Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/cUr05yVG8384wEikhBMYgFDspwE.roa
File: cUr05yVG8384wEikhBMYgFDspwE.roa (raw, json)
Hash identifier: 6eyMp5jMykyjBkq7FzMiLgvtBrRSzkEkljODNOAztvs=
Subject key identifier: 71:4A:F4:E7:25:46:F3:7F:38:C0:48:A4:84:13:18:80:50:EC:A7:01
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01920537B281FBFFCF8D84A9D8C017A20626
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/cUr05yVG8384wEikhBMYgFDspwE.roa
Signing time: Wed 18 Sep 2024 12:59:48 +0000
ROA not before: Wed 18 Sep 2024 12:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.156.143.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 09 Oct 2024 09:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:37:b2:81:fb:ff:cf:8d:84:a9:d8:c0:17:a2:06:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Sep 18 12:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714af4e72546f37f38c048a48413188050eca701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:03:60:c8:2c:11:8e:8c:82:e1:92:18:e2:
63:41:37:f1:a6:98:1f:3e:5c:bc:14:7b:69:54:96:
28:33:4d:bc:b8:f9:18:4d:83:2d:b1:e4:6e:02:a9:
29:76:04:6a:9c:dc:03:8f:af:4a:5b:89:39:0a:2e:
4d:a0:fe:9c:bd:e4:8e:e0:b3:05:78:3d:8b:3f:c3:
07:42:eb:df:d5:6f:5a:90:b3:11:6c:42:79:45:31:
8f:f4:6a:49:9a:8d:08:af:03:f2:25:e3:87:fe:93:
c5:4f:3a:69:f5:61:d3:1e:9b:a4:81:de:81:80:c3:
f5:02:23:68:58:f0:7f:63:a8:64:b0:52:82:61:70:
2b:0c:96:ea:13:9c:d1:7b:04:2e:72:b4:49:49:4f:
e7:c2:94:f3:8c:b3:14:2d:f7:00:80:f0:45:db:97:
29:2c:2d:4b:98:cd:b1:05:41:8c:9e:d7:97:3b:4f:
2e:bc:3e:0c:9d:c1:5b:11:19:a2:e2:bc:fc:75:ca:
b3:e9:4e:f2:dd:e3:57:d3:c9:03:17:cd:ae:ca:b9:
0b:c9:b7:98:e0:40:bd:75:ce:e7:53:49:50:a6:b8:
55:59:ba:e4:a1:98:4a:4e:72:61:1e:52:ca:e2:02:
cc:ae:16:08:c2:f5:19:73:96:39:54:29:1c:22:42:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:F4:E7:25:46:F3:7F:38:C0:48:A4:84:13:18:80:50:EC:A7:01
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/cUr05yVG8384wEikhBMYgFDspwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
45.156.143.0/24
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
98:3d:b5:41:b9:bc:14:78:2d:8e:22:ae:12:c6:66:68:0b:e5:
b6:4b:e8:e7:29:41:fc:2b:5d:e1:29:02:fa:aa:16:52:98:61:
8a:56:c9:e3:6e:a9:af:9c:91:a4:6b:55:37:f3:9a:f7:7e:05:
f8:51:13:b4:7d:1c:c3:e6:d2:c3:97:a2:48:bd:82:e7:6c:04:
f2:b5:20:8f:ef:5e:7c:0a:36:34:84:20:af:49:7a:e9:20:3a:
d0:3a:37:c7:9d:7b:8d:12:90:a6:7f:9b:0c:c0:f7:5a:dc:79:
5e:9b:cf:79:da:f0:70:01:41:d8:71:ee:c4:03:f4:a6:ca:d4:
46:38:44:f9:b4:c7:61:a8:d9:2b:0f:0c:20:ff:32:29:fb:3f:
f3:2a:7a:77:eb:eb:3a:4b:f0:a0:dd:f2:ae:dc:ff:57:9f:81:
77:27:31:34:6a:dd:7a:bd:2b:c4:dc:2b:c8:de:4e:3a:b9:85:
28:ba:38:bc:9a:24:81:aa:9f:d0:db:09:09:e2:be:a1:5d:3b:
67:a8:12:ab:34:37:53:c8:26:07:07:dc:5b:11:7a:b2:47:65:
fb:9a:dd:3c:3a:4a:38:fa:83:54:4e:d3:6b:86:41:b6:d1:88:
54:5c:43:73:74:fe:ea:e6:f8:3b:8e:ca:2c:f7:59:b0:90:f3:
9e:97:6e:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:27 2025 by rpki-client