Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/444h5F7tetAjXInedAk-nGMz_bo.roa
File: 444h5F7tetAjXInedAk-nGMz_bo.roa (raw, json)
Hash identifier: 2tCA5ZvQW1lJIThkDOzReKE1K3JRn7k8AXupSrBfTms=
Subject key identifier: E3:8E:21:E4:5E:ED:7A:D0:23:5C:89:DE:74:09:3E:9C:63:33:FD:BA
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018DC0FFBDEC4BF19EA7879F7E860108A37C
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/444h5F7tetAjXInedAk-nGMz_bo.roa
Signing time: Mon 19 Feb 2024 10:53:22 +0000
ROA not before: Mon 19 Feb 2024 10:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/16 maxlen: 16
88.157.134.0/24 maxlen: 24
88.157.157.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
193.126.0.0/16 maxlen: 16
193.126.120.0/24 maxlen: 24
194.79.64.0/19 maxlen: 19
194.79.69.0/24 maxlen: 24
194.79.86.0/24 maxlen: 24
195.23.0.0/16 maxlen: 16
195.23.13.0/24 maxlen: 24
195.23.37.0/24 maxlen: 24
195.23.255.0/24 maxlen: 24
212.0.160.0/19 maxlen: 19
212.113.160.0/19 maxlen: 19
212.113.173.0/24 maxlen: 24
212.113.183.0/24 maxlen: 24
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
213.205.64.0/19 maxlen: 19
213.205.64.0/24 maxlen: 24
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 17:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:ff:bd:ec:4b:f1:9e:a7:87:9f:7e:86:01:08:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Feb 19 10:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38e21e45eed7ad0235c89de74093e9c6333fdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:18:cb:7f:6a:21:73:a0:79:00:7b:e1:b9:
77:d7:a8:34:9c:db:f8:ad:25:a8:11:8f:93:cd:5a:
34:d5:4b:b4:05:5d:2d:5c:8b:9d:e9:78:74:23:f5:
c8:b3:d7:ea:33:5c:2e:32:11:3f:71:e8:0d:22:12:
99:d3:cb:f0:9b:48:83:0c:9f:97:db:df:e1:6f:b0:
6b:a9:8a:da:a8:ad:80:eb:22:a9:80:55:ec:88:a7:
eb:fc:1c:2d:7f:6c:f9:4f:bc:2b:9f:b3:43:b1:af:
27:86:99:32:fe:cd:56:51:da:8a:c9:58:ca:63:54:
0b:f7:64:ec:0c:ea:30:1b:0a:a4:ec:6a:ab:bf:81:
34:45:83:46:67:8c:dc:e3:03:44:47:be:8c:fd:a2:
6f:93:32:4e:ef:bc:3c:07:51:b6:9d:d9:29:2c:7b:
ef:15:12:47:d0:41:51:ef:bc:d1:cb:a0:51:0d:6a:
7d:82:4d:f9:5b:43:e6:6c:c8:53:31:00:aa:f8:3b:
54:31:cb:a3:ea:77:be:5f:56:b0:09:f9:4e:e4:3e:
82:94:10:32:63:d1:70:c7:59:5e:5d:83:4e:19:59:
94:b0:ef:df:d7:75:ea:23:27:33:d8:71:1b:80:4b:
f7:e8:d3:0c:09:61:b1:c4:48:4b:8f:9b:f5:aa:9c:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:21:E4:5E:ED:7A:D0:23:5C:89:DE:74:09:3E:9C:63:33:FD:BA
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/444h5F7tetAjXInedAk-nGMz_bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/16
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
212.113.160.0/19
213.22.0.0/16
213.205.64.0/19
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:f1:f6:e0:31:92:8c:45:b9:2e:93:34:bc:8b:fc:3e:73:28:
bd:4f:ef:c4:b4:49:36:67:81:d1:8f:85:99:a3:51:7d:50:2a:
c9:99:f1:11:30:fc:9f:28:de:44:8e:49:8f:57:10:fc:48:4b:
dd:b0:bf:3a:9a:2d:1b:17:57:fd:56:54:b4:62:44:95:8b:d7:
61:39:cb:db:2f:e5:04:9c:d3:c6:1d:ca:92:c4:74:1c:69:55:
1c:10:99:23:74:8b:15:d6:f3:77:b6:c2:0b:fb:77:af:d5:04:
4d:32:9b:03:91:5d:23:7d:8d:d7:c0:e1:df:ca:a8:01:cb:e9:
aa:9e:3d:ff:b3:8b:4a:ac:70:94:5e:ee:16:31:ee:0b:4d:73:
84:ff:88:22:ab:2a:a2:60:42:56:84:70:fa:c9:ae:c7:14:59:
4f:95:58:96:a5:bf:7c:27:62:53:f1:b3:7b:6b:92:b9:45:0b:
24:00:c7:f0:6d:60:26:5b:17:a8:bb:33:36:3c:e3:50:80:7b:
fe:19:82:d6:16:59:01:d0:b7:68:75:a2:91:31:bc:fa:d9:e7:
bf:e2:70:13:46:96:d6:a3:43:27:53:c3:d8:61:0f:46:73:ed:
b9:ac:7b:a2:fb:ba:a6:03:08:87:23:6b:5a:2a:c1:57:29:5b:
2e:8f:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 20:55:24 2024 by rpki-client on console-ams.rpki-client.org