Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/_rlJ_AyU8XzgG-pe7y-e2DZ-O04.roa
File: _rlJ_AyU8XzgG-pe7y-e2DZ-O04.roa (raw, json)
Hash identifier: Qv+LpbiF2TBLZNavFnzUfbIOfM7WUa921EperLfE8Gc=
Subject key identifier: FE:B9:49:FC:0C:94:F1:7C:E0:1B:EA:5E:EF:2F:9E:D8:36:7E:3B:4E
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0194D7B4A0FCE913A2F6A48EFA52E421FA59
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/_rlJ_AyU8XzgG-pe7y-e2DZ-O04.roa
Signing time: Wed 05 Feb 2025 20:02:06 +0000
ROA not before: Wed 05 Feb 2025 20:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 62.8.128.0/17 maxlen: 17
62.8.168.0/21 maxlen: 21
62.8.176.0/20 maxlen: 20
62.145.0.0/19 maxlen: 19
62.206.0.0/16 maxlen: 16
62.206.164.0/24 maxlen: 24
62.206.165.0/24 maxlen: 24
62.206.166.0/24 maxlen: 24
83.236.0.0/16 maxlen: 16
83.236.0.0/20 maxlen: 20
83.236.16.0/20 maxlen: 20
83.236.32.0/21 maxlen: 21
84.245.128.0/18 maxlen: 18
85.8.132.0/22 maxlen: 22
87.193.0.0/16 maxlen: 16
87.234.0.0/16 maxlen: 16
92.192.0.0/13 maxlen: 13
92.192.0.0/17 maxlen: 17
92.192.128.0/17 maxlen: 17
92.193.0.0/17 maxlen: 17
92.193.128.0/17 maxlen: 17
92.194.0.0/17 maxlen: 17
92.194.128.0/17 maxlen: 17
92.195.0.0/17 maxlen: 17
92.195.128.0/17 maxlen: 17
92.196.0.0/17 maxlen: 17
92.196.128.0/17 maxlen: 17
92.197.130.0/24 maxlen: 24
92.198.96.0/19 maxlen: 19
92.198.144.0/20 maxlen: 20
92.198.160.0/19 maxlen: 19
92.198.192.0/20 maxlen: 20
92.198.208.0/20 maxlen: 20
92.198.224.0/20 maxlen: 20
92.198.240.0/20 maxlen: 20
92.199.16.0/20 maxlen: 20
92.199.64.0/20 maxlen: 20
92.199.96.0/20 maxlen: 20
92.199.112.0/20 maxlen: 20
92.199.128.0/20 maxlen: 20
92.199.144.0/20 maxlen: 20
92.199.176.0/20 maxlen: 20
92.199.208.0/20 maxlen: 20
92.200.0.0/16 maxlen: 16
92.200.0.0/17 maxlen: 17
92.200.128.0/17 maxlen: 17
185.144.188.0/22 maxlen: 22
194.9.127.0/24 maxlen: 24
194.140.96.0/20 maxlen: 20
195.32.128.0/17 maxlen: 17
195.80.192.0/19 maxlen: 19
195.90.0.0/19 maxlen: 19
195.90.8.0/21 maxlen: 21
195.158.160.0/19 maxlen: 19
212.4.160.0/19 maxlen: 19
212.4.176.0/20 maxlen: 20
212.5.0.0/19 maxlen: 19
212.5.8.0/21 maxlen: 21
212.5.16.0/20 maxlen: 20
212.60.192.0/18 maxlen: 18
212.63.32.0/19 maxlen: 19
212.84.208.0/20 maxlen: 20
212.84.224.0/19 maxlen: 19
212.105.192.0/19 maxlen: 19
212.110.192.0/19 maxlen: 19
212.202.0.0/16 maxlen: 16
212.202.0.0/19 maxlen: 19
212.202.40.0/21 maxlen: 21
212.202.48.0/20 maxlen: 20
212.202.168.0/21 maxlen: 21
212.202.176.0/20 maxlen: 20
213.148.128.0/19 maxlen: 19
213.148.128.0/24 maxlen: 24
213.148.129.0/24 maxlen: 24
213.148.130.0/24 maxlen: 24
213.148.133.0/24 maxlen: 24
213.160.0.0/19 maxlen: 19
213.160.0.0/24 maxlen: 24
213.217.64.0/18 maxlen: 18
217.146.128.0/19 maxlen: 19
2001:658::/29 maxlen: 29
2001:1a80::/29 maxlen: 29
2001:1a80:800::/48 maxlen: 48
2001:1a80:801::/48 maxlen: 48
2001:1a80:802::/48 maxlen: 48
2001:1a81:1000::/36 maxlen: 40
2001:1a81:1000::/40 maxlen: 48
2001:1a81:2000::/36 maxlen: 40
2001:1a81:2000::/40 maxlen: 48
2001:1a81:3000::/36 maxlen: 40
2001:1a81:3000::/40 maxlen: 48
2001:1a81:4000::/36 maxlen: 40
2001:1a81:4000::/40 maxlen: 48
2001:1a81:5000::/36 maxlen: 40
2001:1a81:5000::/40 maxlen: 48
2001:1a81:6000::/36 maxlen: 40
2001:1a81:6000::/40 maxlen: 48
2001:1a81:7000::/36 maxlen: 40
2001:1a81:7000::/40 maxlen: 48
2a09:7100::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Feb 2025 09:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:b4:a0:fc:e9:13:a2:f6:a4:8e:fa:52:e4:21:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Feb 5 20:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feb949fc0c94f17ce01bea5eef2f9ed8367e3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:90:60:ae:d7:95:50:6c:d9:de:62:4c:24:
94:4c:01:27:ba:30:59:66:1b:80:b3:db:f0:25:4d:
c9:ec:2e:b1:70:10:32:be:a6:30:86:d6:22:a0:eb:
c5:be:f7:a5:c3:62:b2:85:df:a4:a8:fc:20:4c:ab:
a6:9c:dc:3c:11:cf:2b:92:fe:67:64:32:8d:89:f2:
df:5e:a5:5d:c6:32:3e:79:20:be:d3:d4:37:71:72:
c8:d0:fd:2e:f0:c0:f1:99:54:6f:bf:22:65:f1:6e:
d0:78:e2:7a:c5:43:dd:6f:33:51:a3:7e:5e:2e:e5:
1f:23:f4:5f:f8:9c:37:49:34:c3:8e:3a:b4:5b:1b:
2c:1e:8b:42:a7:b8:68:aa:ed:7a:35:3c:7f:4c:98:
8e:90:96:8c:43:9d:f0:a8:d2:ba:e2:b7:dd:26:dc:
7d:c9:8e:db:30:ee:4d:c7:1f:da:0d:35:6a:cb:ef:
dc:3f:46:0d:95:bd:75:c1:17:86:2f:fb:30:3c:9c:
e3:48:27:e9:13:7c:2d:1a:69:8f:d7:67:cc:c2:3f:
e9:71:dc:a4:b2:25:b8:4d:3a:57:39:bd:07:46:d3:
c8:3b:c2:01:05:4c:55:8f:af:51:2d:96:1f:46:44:
73:b6:e9:cc:6d:18:a5:00:94:88:f2:79:02:cb:57:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:49:FC:0C:94:F1:7C:E0:1B:EA:5E:EF:2F:9E:D8:36:7E:3B:4E
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/_rlJ_AyU8XzgG-pe7y-e2DZ-O04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.8.128.0/17
62.145.0.0/19
62.206.0.0/16
83.236.0.0/16
84.245.128.0/18
85.8.132.0/22
87.193.0.0/16
87.234.0.0/16
92.192.0.0-92.200.255.255
185.144.188.0/22
194.9.127.0/24
194.140.96.0/20
195.32.128.0/17
195.80.192.0/19
195.90.0.0/19
195.158.160.0/19
212.4.160.0/19
212.5.0.0/19
212.60.192.0/18
212.63.32.0/19
212.84.208.0-212.84.255.255
212.105.192.0/19
212.110.192.0/19
212.202.0.0/16
213.148.128.0/19
213.160.0.0/19
213.217.64.0/18
217.146.128.0/19
IPv6:
2001:658::/29
2001:1a80::/29
2a09:7100::/29
Signature Algorithm: sha256WithRSAEncryption
83:8a:78:0c:21:d9:de:e3:82:ee:6b:3f:38:6b:90:08:68:25:
74:50:5e:70:30:e2:f6:70:6c:2b:ba:a1:f7:0c:b1:85:d3:49:
8c:0b:dd:0d:51:b5:09:f9:2d:9f:bd:cb:bb:c5:82:2e:97:a5:
35:f6:6d:93:71:2e:0e:b8:85:e2:df:6b:5d:49:46:cb:4b:c9:
a5:15:5d:bc:c9:c8:c2:96:ee:ea:ca:1f:81:63:56:e1:e8:0e:
35:e4:5d:b9:82:05:8f:39:73:a5:67:4b:3e:97:c8:3c:4e:f9:
01:95:55:70:4d:b9:38:db:a9:1b:1e:41:85:9a:0d:0f:4e:8a:
d6:24:8b:3f:e0:59:94:d0:29:d5:13:c1:2e:a5:b3:97:1e:67:
31:9e:42:66:6b:9e:73:2f:07:0f:db:ea:f0:21:d0:61:8e:20:
2d:d8:55:b9:4a:81:c6:5e:c7:75:06:81:17:5e:e6:69:f0:61:
fe:20:0a:b6:ee:4e:ad:9e:35:fd:7c:d0:e9:04:6a:24:70:ed:
62:0e:f6:2c:b1:0c:f2:f3:80:25:d7:71:fa:2f:ed:bc:e9:f7:
c6:2f:39:1d:77:1c:ca:28:ed:b9:ba:c2:f7:09:58:d5:42:28:
d1:51:51:6e:35:d3:f7:df:63:72:a6:4d:02:7b:4d:1c:3c:df:
e9:66:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:50 2025 by rpki-client