Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bqPcB6LIFNZ4TKoF3p0tD9cApQY.roa
File: bqPcB6LIFNZ4TKoF3p0tD9cApQY.roa (raw, json)
Hash identifier: CfVea58qTu3K28o10vQq8fnrvmH47cWv5QZQUD3/WN0=
Subject key identifier: 6E:A3:DC:07:A2:C8:14:D6:78:4C:AA:05:DE:9D:2D:0F:D7:00:A5:06
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01936D61DC0F6F47EFA22FC1810210AFF88B
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bqPcB6LIFNZ4TKoF3p0tD9cApQY.roa
Signing time: Wed 27 Nov 2024 11:29:10 +0000
ROA not before: Wed 27 Nov 2024 11:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
62.220.1.0/24 maxlen: 24
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
202.71.141.0/24 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:61:dc:0f:6f:47:ef:a2:2f:c1:81:02:10:af:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Nov 27 11:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ea3dc07a2c814d6784caa05de9d2d0fd700a506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:4c:38:98:10:a5:7b:cb:0e:8c:da:dc:b6:
e1:f5:4a:94:31:9c:7c:72:19:dc:52:69:08:96:9a:
7f:99:c5:37:16:4c:dc:b4:87:af:79:c6:dd:2a:fe:
6c:4a:cc:e2:f7:5a:8c:59:11:ee:e1:df:7b:d5:90:
fe:d2:67:dc:34:a2:3b:4c:e3:11:19:d8:11:15:8f:
45:b6:f7:24:5f:41:3f:a1:d1:51:b2:73:b5:75:5a:
99:07:7e:66:0a:fd:7c:a6:9b:cc:97:41:7d:e4:c1:
1d:2e:f1:67:ae:50:5a:0b:cd:94:91:5f:79:00:c3:
4f:c9:e4:84:cb:bc:0f:2e:ad:b9:83:fd:29:6b:e3:
86:5c:41:33:18:16:72:c5:14:36:10:5e:da:47:1a:
74:4f:4b:18:d4:1b:87:4d:d5:84:a2:a1:52:40:09:
04:a9:70:7a:5b:75:88:99:b5:35:e2:2f:eb:5a:54:
76:06:73:95:b6:a8:fb:27:47:4f:25:82:7c:f5:2d:
fd:4e:0e:95:ad:2c:d9:be:dc:69:13:b0:d3:b9:26:
ef:57:62:3d:06:25:e5:b7:56:7b:2f:ee:20:48:c8:
7a:19:df:3d:e6:9c:78:60:00:b8:7a:7f:68:ea:63:
4d:ff:cd:e3:28:de:a5:49:e2:18:01:70:f2:e9:aa:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:DC:07:A2:C8:14:D6:78:4C:AA:05:DE:9D:2D:0F:D7:00:A5:06
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bqPcB6LIFNZ4TKoF3p0tD9cApQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
45:aa:dd:09:51:09:c5:08:84:b7:61:da:11:24:21:f3:54:57:
0a:62:e9:04:d8:91:8b:e0:b4:41:88:16:33:c0:fc:0b:04:e1:
75:11:44:75:84:21:12:de:80:f4:e3:6e:b3:c0:22:ac:7f:a1:
84:86:f7:a0:4d:59:8a:81:f5:d1:a1:49:2c:c8:26:38:f8:af:
5c:dd:5d:6a:45:ac:6d:42:f9:73:ba:7a:98:79:80:a2:eb:73:
97:b3:78:cd:0f:ab:36:e4:ea:79:36:4c:b7:e7:f3:8f:c3:c9:
9a:1e:1b:3a:9f:94:63:33:6c:6d:8b:04:36:55:1f:b4:25:18:
88:9f:b9:6b:94:55:17:1a:2d:0b:88:23:79:40:e1:94:2d:6f:
e7:d8:e1:7d:d4:a9:e0:ec:97:8a:6e:94:c5:58:88:43:f5:93:
6f:0c:98:cf:68:20:e5:3f:b1:f0:28:8b:58:08:cc:80:f2:40:
a4:b3:4c:dd:3d:8d:57:5e:3a:14:04:fb:e8:35:e2:c5:83:d0:
c6:88:af:8f:3f:39:e7:69:55:7f:e5:9e:1c:08:2c:87:99:18:
6d:b6:87:ca:90:0b:aa:87:16:9b:ec:1e:fa:e0:79:be:f1:c4:
37:a1:6d:61:e1:be:e2:52:bb:f1:49:71:2b:f4:ed:05:1c:84:
04:25:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:26:03 2025 by rpki-client