Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/Q5P63wAcatiHPG4fdYh3FfUWxU0.roa
File: Q5P63wAcatiHPG4fdYh3FfUWxU0.roa (raw, json)
Hash identifier: 0RvcTBOBVEHkseoCzaW447mbX8YFDTE86aylfuplU/w=
Subject key identifier: 43:93:FA:DF:00:1C:6A:D8:87:3C:6E:1F:75:88:77:15:F5:16:C5:4D
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018F4D05304D6E1E4FC84CD7C6E57252D3FC
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/Q5P63wAcatiHPG4fdYh3FfUWxU0.roa
Signing time: Mon 06 May 2024 08:28:56 +0000
ROA not before: Mon 06 May 2024 08:28:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:1438:1:900::/56 maxlen: 56
2001:1438:1:a00::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 08 May 2024 11:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:05:30:4d:6e:1e:4f:c8:4c:d7:c6:e5:72:52:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: May 6 08:28:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4393fadf001c6ad8873c6e1f75887715f516c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:de:47:45:be:6f:f2:b6:75:ab:23:4c:d2:
1e:b9:36:42:3a:8c:4f:ff:2d:81:1d:6d:0e:3c:fa:
04:34:e6:1e:59:32:9f:10:6a:af:d1:85:af:91:35:
8f:af:28:e9:9d:dc:05:02:9b:7d:9f:60:e8:db:c8:
70:fe:85:9d:ed:39:3f:87:0c:53:7d:d4:8e:97:80:
ce:40:53:d5:0c:dc:a0:25:c6:fd:29:c3:11:f5:94:
39:62:00:30:f5:9e:4d:d6:41:85:fa:c7:ba:d2:60:
0b:ca:7a:72:fc:86:28:ba:c1:48:2d:ec:29:1e:cc:
da:56:c7:e6:b5:a8:59:70:04:8d:45:1b:41:a7:25:
fe:65:59:d2:69:03:ac:f2:38:dc:c0:66:ae:af:5a:
bb:e2:a5:d0:07:ad:f6:0a:17:40:e3:9c:1c:41:07:
12:b9:b9:be:fc:0e:9f:1e:9f:3e:99:48:d7:5d:8c:
95:ed:33:32:99:e1:f6:c5:15:46:84:1d:ca:0a:82:
dd:c9:98:4e:2c:a7:b8:65:2b:e7:a1:e9:51:7e:6d:
26:65:40:23:c1:d4:67:4d:f4:39:79:ca:61:53:87:
f5:e7:91:47:6a:2d:85:9e:f5:c0:18:db:27:f6:78:
70:20:0d:02:10:62:56:d1:2b:71:bf:cf:96:a2:3c:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:FA:DF:00:1C:6A:D8:87:3C:6E:1F:75:88:77:15:F5:16:C5:4D
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/Q5P63wAcatiHPG4fdYh3FfUWxU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
6f:40:cb:2c:93:3c:a6:0d:b6:00:5f:42:60:ea:7a:ad:f2:15:
22:6d:04:01:c3:59:30:b1:ad:8c:ee:3d:1f:45:7b:29:ee:de:
cf:30:07:e8:09:90:f0:a5:79:26:53:cd:07:d1:27:f6:cf:56:
f7:3b:27:ee:96:bd:54:60:36:1f:c6:07:09:29:08:0b:ac:80:
2b:58:7d:46:fb:78:31:27:9d:47:a6:62:85:b1:8d:d7:c8:a4:
06:21:e3:48:fa:0c:9d:2f:ec:b6:69:ac:8c:b8:59:9b:26:10:
9e:8b:8b:e7:f9:aa:e0:63:1b:94:af:84:d8:9b:da:3c:4c:af:
fc:48:81:aa:6a:3c:94:e7:a6:8d:bb:14:00:3d:c0:f8:0c:30:
ea:4b:fe:07:1d:54:f4:ca:f6:f3:0d:e7:00:26:24:eb:ec:c7:
25:00:67:f5:3f:53:3a:81:70:7d:1d:eb:f1:15:94:0c:ae:51:
ff:42:6f:7b:dc:d0:03:21:ca:84:68:90:bf:1a:88:b9:d5:af:
ea:d0:96:d9:56:ff:19:b2:89:10:ec:fb:23:0e:fa:f5:8a:b1:
9b:1e:0c:2e:fa:ae:77:a7:5a:01:72:de:11:5d:4b:93:60:11:
f8:7a:27:e6:92:b1:ce:5e:7a:09:22:97:b0:85:35:98:b3:6c:
e2:71:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:13:12 2025 by rpki-client