Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/ERP3QMTCXJeSNpQh5deBaWnP-oQ.roa
File: ERP3QMTCXJeSNpQh5deBaWnP-oQ.roa (raw, json)
Hash identifier: q/Pa6gbAc4HcwLLff6q2BI8cLNIi1m4QTw7F/R+2rzM=
Subject key identifier: 11:13:F7:40:C4:C2:5C:97:92:36:94:21:E5:D7:81:69:69:CF:FA:84
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01936B1B95521F2E6E90CCA67B3EE759B767
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/ERP3QMTCXJeSNpQh5deBaWnP-oQ.roa
Signing time: Wed 27 Nov 2024 00:53:09 +0000
ROA not before: Wed 27 Nov 2024 00:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
62.220.1.0/24 maxlen: 24
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
202.71.141.0/24 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 27 Nov 2024 01:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:1b:95:52:1f:2e:6e:90:cc:a6:7b:3e:e7:59:b7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Nov 27 00:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1113f740c4c25c9792369421e5d7816969cffa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:e8:ee:05:4a:97:66:99:fc:80:a0:e1:ea:
9c:64:64:cd:da:b7:34:95:b5:a0:97:a4:d8:af:89:
13:fb:d3:de:1d:5b:04:05:43:d7:1f:07:aa:98:30:
a7:84:fb:58:f8:f3:5d:26:58:a7:1e:1a:70:8a:58:
b7:59:59:3e:60:e5:18:34:cc:62:bb:81:a0:9f:6f:
3f:64:6f:83:3a:a1:db:3d:2e:49:50:a0:2b:b0:b9:
67:24:6f:1c:d4:df:e2:f7:96:c4:4f:5c:ae:49:78:
c6:ff:87:7e:6e:1f:e3:20:af:d9:cd:19:13:62:a7:
6c:30:77:23:64:0f:cd:51:01:37:95:bb:72:4d:db:
e9:f8:5d:cb:eb:6e:14:a5:b4:9e:43:82:c3:5b:9d:
2f:bf:e5:71:47:4d:5f:c3:86:4e:bd:a2:60:89:64:
67:3c:a6:64:8e:4d:a1:ce:5b:c1:74:ac:4e:be:43:
8b:be:8d:ac:e2:c5:30:58:a2:f4:1e:4f:a6:06:46:
36:05:cb:9d:17:8f:dc:b7:e1:46:6d:16:ba:57:65:
22:19:8e:c4:3c:15:80:de:d4:d4:69:c9:49:f7:ca:
f1:61:5f:c5:26:b4:80:e4:14:74:7f:49:71:0e:b4:
ea:7e:16:70:e4:68:47:d7:31:5a:87:af:91:e1:8b:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:F7:40:C4:C2:5C:97:92:36:94:21:E5:D7:81:69:69:CF:FA:84
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/ERP3QMTCXJeSNpQh5deBaWnP-oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
77:57:21:f3:30:a0:2a:3a:f0:d2:b6:c7:74:94:f7:47:7e:3d:
a5:c1:da:49:85:4b:11:1a:ed:61:6a:6a:91:17:de:c5:b7:32:
4b:df:fc:fa:f5:60:3b:2e:4d:0a:b0:82:17:a5:74:84:48:8e:
47:64:0c:42:ea:97:72:76:05:91:d3:98:19:22:7a:9d:21:8a:
cf:10:e8:6b:f8:c2:fe:74:18:bb:12:a5:78:9b:93:8f:b7:f8:
59:a2:42:29:dc:55:65:92:07:91:47:1b:1c:d2:f2:f1:04:e5:
ea:b6:6b:12:73:57:c5:10:80:a3:bd:39:db:57:75:02:52:37:
c6:ce:e0:ac:f7:0d:39:27:7b:25:f5:bd:70:10:82:16:1c:cc:
84:7c:66:23:36:cb:5d:96:bd:58:ce:01:40:98:53:6e:9d:52:
4e:75:18:7c:7c:55:c2:7a:d6:9a:d9:1f:1a:b8:b3:c1:6f:52:
93:01:56:05:90:74:b6:62:37:7a:9c:e4:53:87:b8:51:39:bb:
ec:28:ee:4f:df:94:14:9b:89:75:f1:75:7c:2d:38:aa:79:e5:
c9:16:33:36:f4:32:12:3d:70:19:02:cf:9a:8c:b1:05:bb:c5:
a1:44:87:ec:a9:9d:24:1a:1b:45:ed:02:e1:77:49:e0:5b:77:
53:3d:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:26:30 2025 by rpki-client