Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/aFQ8WYhKjqcwbOhP8CtV9qcU2mI.roa
File: aFQ8WYhKjqcwbOhP8CtV9qcU2mI.roa (raw, json)
Hash identifier: FBCtEKyTimUhT3fYQKtM59eO4aUuLYkNVJt9F+HTcmQ=
Subject key identifier: 68:54:3C:59:88:4A:8E:A7:30:6C:E8:4F:F0:2B:55:F6:A7:14:DA:62
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019252A306B1C36C29BE317B61E052DBD98C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/aFQ8WYhKjqcwbOhP8CtV9qcU2mI.roa
Signing time: Thu 03 Oct 2024 13:47:48 +0000
ROA not before: Thu 03 Oct 2024 13:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.236.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 06:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:a3:06:b1:c3:6c:29:be:31:7b:61:e0:52:db:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Oct 3 13:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68543c59884a8ea7306ce84ff02b55f6a714da62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:d9:13:76:02:45:20:e6:29:e7:e6:f5:51:
51:a1:ae:db:0f:9f:46:5a:3b:d2:5e:7a:32:08:76:
2d:dc:a9:44:66:07:5e:71:fb:ac:78:6c:b8:6e:55:
8e:eb:82:11:11:9b:36:38:d8:17:d5:c9:9d:56:4b:
d2:50:ce:e9:73:bb:6c:58:76:c8:f8:d9:a4:58:6c:
12:ec:0e:84:86:92:f6:5b:c8:26:93:96:a4:28:71:
ca:6a:dd:90:6c:73:98:5a:2b:fc:8b:76:c0:4e:9d:
62:cc:ad:f6:4c:84:88:5f:f6:0e:03:2f:67:88:9d:
75:90:4b:16:da:54:6e:bf:65:67:b0:cf:e8:c1:83:
b9:c4:e1:45:cc:59:29:c0:63:87:0d:e7:b2:03:b2:
ab:c9:e0:ca:84:6d:fc:91:5d:dd:a5:1b:78:f7:06:
4b:41:c6:4f:43:5c:dd:e1:10:b5:ac:e7:5f:1f:17:
d4:61:aa:33:76:2f:c8:bc:17:c5:bb:85:37:d0:4b:
a9:f7:c4:f1:2c:39:82:db:8f:12:a6:f9:49:46:32:
b6:80:d0:7d:cc:2f:53:54:91:6b:63:ea:8d:74:03:
8e:d4:de:e2:ec:c0:16:45:99:e0:dd:96:fa:bb:62:
5c:c5:6f:bc:20:61:6c:9e:93:55:cc:e9:1c:d7:6c:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:3C:59:88:4A:8E:A7:30:6C:E8:4F:F0:2B:55:F6:A7:14:DA:62
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/aFQ8WYhKjqcwbOhP8CtV9qcU2mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
20:de:ed:ce:fc:2d:3a:b3:6d:14:61:84:30:26:03:b9:06:bd:
21:3d:56:e8:6d:24:2e:8b:26:2c:6f:f0:75:55:47:03:eb:ef:
58:92:ff:36:86:27:a3:59:93:64:ba:39:38:e2:82:c8:fa:d4:
2a:96:37:1b:b1:f9:3f:55:8c:61:42:19:0b:3b:cd:36:69:c9:
7a:37:e2:22:4d:22:da:20:52:cb:ae:b5:a5:24:ea:20:4f:e8:
35:a5:52:7f:f4:03:ef:c4:e6:03:e5:34:5e:c3:92:8d:ca:87:
61:01:6d:25:16:11:23:bd:f9:c3:b9:45:b5:dd:8e:2f:08:94:
d9:11:fe:8d:2e:68:d9:8f:0c:c1:e9:2c:43:a8:c3:2a:ac:01:
2f:0b:dc:57:5a:72:29:08:46:b5:df:25:3c:48:c9:20:c1:c3:
82:6c:86:39:2e:ce:7c:27:1d:49:97:5d:9a:66:a4:a0:7c:b0:
72:7b:70:86:c7:c3:90:20:4e:06:57:d1:03:e0:a7:68:be:a2:
33:5b:9d:77:e9:62:73:12:b1:7d:94:97:ea:0a:ec:19:c1:b0:
38:5f:77:75:fb:e8:0d:52:d2:b0:c2:b6:f7:f2:73:66:f2:d5:
ae:58:ec:d1:28:fe:86:10:34:59:df:45:12:fc:f4:77:d9:ef:
9e:57:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 08:34:02 2024 by rpki-client on console-fra.rpki-client.org