Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/QQtq1-ty1-wlU5CUgH2f43rBYkE.roa
File: QQtq1-ty1-wlU5CUgH2f43rBYkE.roa (raw, json)
Hash identifier: MB96sJiLW7yS5wOx6YCIBu+O85L/PkUuIh4BOHk6MDQ=
Subject key identifier: 41:0B:6A:D7:EB:72:D7:EC:25:53:90:94:80:7D:9F:E3:7A:C1:62:41
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01907F54706C79B424CE1998267100876611
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/QQtq1-ty1-wlU5CUgH2f43rBYkE.roa
Signing time: Thu 04 Jul 2024 19:59:18 +0000
ROA not before: Thu 04 Jul 2024 19:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.160.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
78.90.206.0/24 maxlen: 24
78.90.247.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.9.224.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.18.240.0/24 maxlen: 24
217.18.245.0/24 maxlen: 24
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 08:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7f:54:70:6c:79:b4:24:ce:19:98:26:71:00:87:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jul 4 19:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=410b6ad7eb72d7ec25539094807d9fe37ac16241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:5d:f5:7e:12:9a:c1:6f:8c:d5:61:cc:c5:
f2:0c:3c:93:94:88:98:15:65:26:74:66:3c:a1:df:
b1:2c:59:d1:aa:97:1c:5d:5f:bd:cd:4b:0d:35:ac:
e9:d1:5e:dc:29:87:34:4d:a6:a0:e1:ea:c6:8c:38:
96:84:cc:2c:be:ac:e1:71:13:63:3b:b6:28:a1:a9:
e1:08:af:03:f9:1e:ab:50:26:9f:e1:10:bb:e4:7e:
88:a0:2f:e1:1e:10:ef:18:06:ed:98:17:09:ab:12:
14:6e:a6:f3:5f:6d:64:0f:27:d7:b0:1b:03:fc:43:
a9:c7:6d:56:3d:26:b7:9f:67:cd:08:a8:07:3d:cc:
41:1b:53:db:ea:80:fc:78:8f:b3:ba:18:25:18:d0:
91:b1:bd:40:dc:47:c5:77:6d:2f:1c:02:8b:4b:13:
94:f9:c7:ff:4b:67:02:40:05:0c:50:f9:63:54:93:
c1:8f:bd:e0:03:53:a6:e0:41:1f:cc:9b:61:fc:42:
8a:f3:4d:f2:fd:49:07:89:01:35:2b:ac:0e:d8:fa:
5e:b5:f8:0a:a5:98:5f:60:a5:fb:f3:7b:8f:1c:0b:
86:c5:06:be:77:d6:28:23:b4:b9:4e:73:e2:db:d1:
2a:43:c6:54:02:76:3a:b8:47:23:c0:36:95:c3:f7:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:6A:D7:EB:72:D7:EC:25:53:90:94:80:7D:9F:E3:7A:C1:62:41
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/QQtq1-ty1-wlU5CUgH2f43rBYkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
0c:61:07:98:8f:79:da:6c:cf:11:b9:27:ba:fc:48:d1:3f:57:
26:2c:59:50:19:36:69:fd:19:32:e4:05:46:cb:b4:bd:69:a6:
1d:42:1c:94:00:6c:bf:29:0e:5e:41:7a:57:23:56:6c:c2:d1:
8f:68:97:fc:93:0b:d3:70:6b:37:86:97:44:22:33:a8:fb:d8:
dd:8d:e9:11:4b:46:e0:86:8d:e9:26:2c:e5:36:01:71:d8:4c:
e2:ad:4f:dd:0b:8c:1e:83:fd:2a:4c:8b:03:ec:90:f0:ec:c1:
46:c2:6a:5e:0f:0c:86:06:5e:3c:7b:47:c7:1b:f0:c2:46:a5:
b1:16:59:dc:bc:8d:87:43:a1:cd:2f:dd:ea:6d:97:f9:ca:78:
0f:47:4d:3a:32:dc:95:6f:b8:44:a7:c0:49:60:ef:50:11:37:
76:e9:b5:6e:31:74:84:7d:02:65:1a:7f:da:fe:74:16:45:76:
53:4c:13:93:46:b9:fe:bb:b5:0e:4a:e6:76:21:67:8e:74:18:
21:bc:67:9e:0c:df:d3:77:12:01:77:00:5f:ee:11:d8:77:42:
ca:1d:a9:f2:4c:0d:cb:5c:7c:ef:33:ef:9f:46:d6:f2:aa:3e:
db:f7:8d:b8:90:08:31:99:e2:2b:70:c6:fe:c8:79:d5:5b:48:
0c:a2:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 10:36:06 2024 by rpki-client on console-fra.rpki-client.org