Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/cAvENi1UQPafSTZkhSsQNjJ0tF4.roa
File: cAvENi1UQPafSTZkhSsQNjJ0tF4.roa (raw, json)
Hash identifier: y+UD3WLAi/HGfN7g5BIU64bg68S9hFfMsDPWvKMWe/A=
Subject key identifier: 70:0B:C4:36:2D:54:40:F6:9F:49:36:64:85:2B:10:36:32:74:B4:5E
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01953A072960D7EB70C0699D628EF0A29EC2
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/cAvENi1UQPafSTZkhSsQNjJ0tF4.roa
Signing time: Mon 24 Feb 2025 22:15:02 +0000
ROA not before: Mon 24 Feb 2025 22:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 62.8.128.0/17 maxlen: 17
62.8.168.0/21 maxlen: 21
62.8.176.0/20 maxlen: 20
62.145.0.0/19 maxlen: 19
62.206.0.0/16 maxlen: 16
62.206.164.0/24 maxlen: 24
62.206.165.0/24 maxlen: 24
62.206.166.0/24 maxlen: 24
83.236.0.0/16 maxlen: 16
83.236.0.0/20 maxlen: 20
83.236.16.0/20 maxlen: 20
83.236.32.0/21 maxlen: 21
84.245.128.0/18 maxlen: 18
85.8.132.0/22 maxlen: 22
87.193.0.0/16 maxlen: 16
87.234.0.0/16 maxlen: 16
92.192.0.0/13 maxlen: 13
92.192.0.0/16 maxlen: 16
92.192.0.0/17 maxlen: 17
92.192.128.0/17 maxlen: 17
92.193.0.0/16 maxlen: 16
92.193.0.0/17 maxlen: 17
92.193.128.0/17 maxlen: 17
92.194.0.0/15 maxlen: 15
92.194.0.0/17 maxlen: 17
92.194.128.0/17 maxlen: 17
92.195.0.0/17 maxlen: 17
92.195.128.0/17 maxlen: 17
92.196.0.0/14 maxlen: 14
92.196.0.0/19 maxlen: 19
92.196.96.0/20 maxlen: 20
92.196.112.0/20 maxlen: 20
92.196.128.0/20 maxlen: 20
92.196.144.0/20 maxlen: 20
92.196.160.0/20 maxlen: 20
92.196.176.0/20 maxlen: 20
92.196.192.0/20 maxlen: 20
92.196.208.0/20 maxlen: 20
92.196.224.0/19 maxlen: 19
92.197.130.0/24 maxlen: 24
92.198.96.0/19 maxlen: 19
92.198.144.0/20 maxlen: 20
92.198.160.0/19 maxlen: 19
92.198.192.0/20 maxlen: 20
92.198.208.0/20 maxlen: 20
92.198.224.0/20 maxlen: 20
92.198.240.0/20 maxlen: 20
92.199.16.0/20 maxlen: 20
92.199.64.0/20 maxlen: 20
92.199.96.0/20 maxlen: 20
92.199.112.0/20 maxlen: 20
92.199.128.0/20 maxlen: 20
92.199.144.0/20 maxlen: 20
92.199.176.0/20 maxlen: 20
92.199.208.0/20 maxlen: 20
92.200.0.0/16 maxlen: 16
92.200.0.0/17 maxlen: 17
92.200.128.0/17 maxlen: 17
185.144.188.0/22 maxlen: 22
194.9.127.0/24 maxlen: 24
194.140.96.0/20 maxlen: 20
195.32.128.0/17 maxlen: 17
195.80.192.0/19 maxlen: 19
195.90.0.0/19 maxlen: 19
195.90.8.0/21 maxlen: 21
195.158.160.0/19 maxlen: 19
212.4.160.0/19 maxlen: 19
212.4.176.0/20 maxlen: 20
212.5.0.0/19 maxlen: 19
212.5.8.0/21 maxlen: 21
212.5.16.0/20 maxlen: 20
212.60.192.0/18 maxlen: 18
212.63.32.0/19 maxlen: 19
212.84.208.0/20 maxlen: 20
212.84.224.0/19 maxlen: 19
212.105.192.0/19 maxlen: 19
212.110.192.0/19 maxlen: 19
212.202.0.0/16 maxlen: 16
212.202.0.0/19 maxlen: 19
212.202.40.0/21 maxlen: 21
212.202.48.0/20 maxlen: 20
212.202.168.0/21 maxlen: 21
212.202.176.0/20 maxlen: 20
213.148.128.0/19 maxlen: 19
213.148.128.0/24 maxlen: 24
213.148.129.0/24 maxlen: 24
213.148.130.0/24 maxlen: 24
213.148.133.0/24 maxlen: 24
213.160.0.0/19 maxlen: 19
213.160.0.0/24 maxlen: 24
213.217.64.0/18 maxlen: 18
217.146.128.0/19 maxlen: 19
2001:658::/29 maxlen: 29
2001:1a80::/29 maxlen: 29
2001:1a80:800::/48 maxlen: 48
2001:1a80:801::/48 maxlen: 48
2001:1a80:802::/48 maxlen: 48
2001:1a81:1000::/36 maxlen: 40
2001:1a81:1000::/40 maxlen: 48
2001:1a81:2000::/36 maxlen: 40
2001:1a81:2000::/40 maxlen: 48
2001:1a81:3000::/36 maxlen: 40
2001:1a81:3000::/40 maxlen: 48
2001:1a81:4000::/36 maxlen: 40
2001:1a81:4000::/40 maxlen: 48
2001:1a81:5000::/36 maxlen: 40
2001:1a81:5000::/40 maxlen: 48
2001:1a81:6000::/36 maxlen: 40
2001:1a81:6000::/40 maxlen: 48
2001:1a81:7000::/36 maxlen: 40
2001:1a81:7000::/40 maxlen: 48
2a09:7100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Feb 2025 20:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3a:07:29:60:d7:eb:70:c0:69:9d:62:8e:f0:a2:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Feb 24 22:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=700bc4362d5440f69f493664852b10363274b45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:53:5a:f9:a0:38:70:a9:5c:5a:1b:a1:94:
f6:99:ba:d2:50:77:53:6c:39:4b:05:a1:be:a7:94:
b1:53:04:7e:75:ed:30:5b:85:46:c9:86:eb:e7:06:
18:67:06:34:d6:14:06:ab:40:a0:5d:35:d3:99:97:
f7:e4:66:9d:83:a6:78:75:c3:87:0f:f3:7b:34:4c:
ef:79:93:58:1e:a5:10:ae:4e:44:a0:9e:d7:87:8f:
74:bc:86:f9:1d:6e:d9:aa:45:8e:32:4f:1f:38:5f:
05:5f:df:29:9b:fa:c0:b9:00:d9:2b:89:db:ec:08:
82:2a:0f:4a:aa:a8:1a:77:c0:81:87:1c:cd:1c:76:
c2:63:98:55:70:3e:11:bf:87:7b:65:a8:73:94:24:
c9:3e:5a:17:6c:98:a3:b3:d3:6e:e0:7a:ed:7d:b6:
75:46:0e:ab:55:bc:ec:da:e4:a5:1d:69:ce:97:63:
57:9e:94:b3:6e:99:12:05:42:6b:9c:e6:ef:e3:e3:
4b:dd:18:12:da:f5:6d:80:da:75:dd:fd:ad:da:d3:
e2:87:af:2e:17:65:7c:1c:8e:84:ad:0d:a0:12:98:
d9:3b:48:bb:d3:a2:ba:67:4c:a8:af:30:f4:7f:13:
00:48:9f:9b:a9:16:a4:b7:4d:ae:ff:45:b0:13:67:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:C4:36:2D:54:40:F6:9F:49:36:64:85:2B:10:36:32:74:B4:5E
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/cAvENi1UQPafSTZkhSsQNjJ0tF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.8.128.0/17
62.145.0.0/19
62.206.0.0/16
83.236.0.0/16
84.245.128.0/18
85.8.132.0/22
87.193.0.0/16
87.234.0.0/16
92.192.0.0-92.200.255.255
185.144.188.0/22
194.9.127.0/24
194.140.96.0/20
195.32.128.0/17
195.80.192.0/19
195.90.0.0/19
195.158.160.0/19
212.4.160.0/19
212.5.0.0/19
212.60.192.0/18
212.63.32.0/19
212.84.208.0-212.84.255.255
212.105.192.0/19
212.110.192.0/19
212.202.0.0/16
213.148.128.0/19
213.160.0.0/19
213.217.64.0/18
217.146.128.0/19
IPv6:
2001:658::/29
2001:1a80::/29
2a09:7100::/29
Signature Algorithm: sha256WithRSAEncryption
4e:89:7f:aa:16:6e:00:80:a3:37:55:2d:04:d5:3a:e5:15:4f:
87:59:3f:52:9c:3c:22:0c:06:40:35:6b:d6:ca:34:65:88:ed:
4d:39:c2:83:58:46:34:78:85:37:00:eb:d1:3a:75:49:81:92:
74:9d:44:6c:9e:b0:54:fd:37:c5:7a:f6:a0:ee:2c:55:70:8c:
0a:80:8c:c4:9b:5d:e7:b0:dd:e6:c7:0d:f9:18:a5:85:bc:e9:
56:eb:47:05:d6:65:89:6c:16:56:83:1b:f1:6a:94:23:78:6e:
22:97:7f:15:44:b0:01:ec:c1:07:cb:1a:e9:2f:96:76:4c:73:
34:f2:7c:ff:ab:99:80:72:92:ba:71:08:2b:0d:19:f0:5d:13:
70:47:91:41:62:ea:7d:69:3c:94:10:c4:85:1f:22:76:81:14:
9b:b1:d0:30:57:33:47:52:00:66:5b:39:3b:ab:30:d9:30:9d:
cb:0c:ba:78:21:22:58:1a:f3:b8:4c:05:b2:f7:69:6f:71:ad:
14:3d:a7:06:fa:28:c7:e5:10:c1:61:a6:fa:2c:1b:7d:a2:70:
85:cb:29:ef:1b:88:70:4b:5a:c5:d7:b2:4e:78:15:bb:5b:41:
96:1b:85:2c:a0:6d:ec:09:b5:33:a6:1d:89:c0:55:84:ef:28:
a2:97:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:38 2025 by rpki-client