Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/aG9saKuH39LfHjRVeGwukupFKVA.roa
File: aG9saKuH39LfHjRVeGwukupFKVA.roa (raw, json)
Hash identifier: 02J3JLbtK6Bwb628FtGTiP7OiyCpABu55oU8LO3NdBc=
Subject key identifier: 68:6F:6C:68:AB:87:DF:D2:DF:1E:34:55:78:6C:2E:92:EA:45:29:50
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018D3D28AA00A777B8B8594D039ADF59998E
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/aG9saKuH39LfHjRVeGwukupFKVA.roa
Signing time: Wed 24 Jan 2024 20:28:11 +0000
ROA not before: Wed 24 Jan 2024 20:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/16 maxlen: 16
88.157.0.0/17 maxlen: 17
88.157.0.0/18 maxlen: 18
88.157.64.0/18 maxlen: 18
88.157.128.0/17 maxlen: 17
88.157.128.0/18 maxlen: 18
88.157.134.0/24 maxlen: 24
88.157.157.0/24 maxlen: 24
88.157.192.0/18 maxlen: 18
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
193.126.0.0/16 maxlen: 16
193.126.0.0/17 maxlen: 17
193.126.120.0/24 maxlen: 24
193.126.128.0/17 maxlen: 17
194.79.64.0/19 maxlen: 19
194.79.69.0/24 maxlen: 24
194.79.86.0/24 maxlen: 24
195.23.0.0/16 maxlen: 16
195.23.0.0/17 maxlen: 17
195.23.13.0/24 maxlen: 24
195.23.37.0/24 maxlen: 24
195.23.128.0/17 maxlen: 17
195.23.255.0/24 maxlen: 24
212.0.160.0/19 maxlen: 19
212.0.160.0/21 maxlen: 21
212.113.160.0/19 maxlen: 19
212.113.173.0/24 maxlen: 24
212.113.183.0/24 maxlen: 24
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
213.205.64.0/19 maxlen: 19
213.205.64.0/24 maxlen: 24
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 14 Feb 2024 16:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:28:aa:00:a7:77:b8:b8:59:4d:03:9a:df:59:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 24 20:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686f6c68ab87dfd2df1e3455786c2e92ea452950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:66:32:16:82:ac:49:cd:ee:6a:b1:c4:0a:
66:0c:60:68:a7:36:86:64:77:5a:19:aa:d9:07:fb:
db:dd:17:60:85:05:b5:90:7d:01:21:bd:26:14:c1:
58:3e:9d:e6:de:a8:75:63:8e:8c:28:a9:98:89:66:
5d:27:b3:7a:63:f5:93:2e:25:70:09:43:27:e6:72:
80:3d:3a:8e:35:6e:19:99:b5:37:a0:48:d1:0e:9a:
f6:05:25:0e:6a:51:47:1f:74:b6:4f:0b:75:08:a6:
b0:2d:b6:dd:e8:30:e6:44:c7:89:47:a8:a4:e6:43:
d9:69:a1:60:ee:45:e1:2f:b3:91:47:84:8f:1d:45:
18:4e:20:24:cc:84:10:81:68:04:98:92:24:b5:3a:
0f:f6:e0:b6:91:80:9f:9b:39:0a:61:f2:a4:96:f3:
60:0e:24:37:cb:30:db:a1:35:8e:fe:86:9d:d5:d4:
6a:46:60:51:50:4d:b5:38:0d:1f:ff:0a:b5:f2:eb:
73:d4:f9:56:ae:c7:a7:f1:74:68:66:11:fd:bf:f6:
05:e4:2f:e6:66:12:25:a5:0f:1a:79:01:d6:9f:86:
ed:bc:70:ce:91:cb:2e:8a:47:93:a2:70:19:2d:e1:
5f:74:d0:36:a8:c9:7a:24:14:15:bb:79:25:15:9b:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:6C:68:AB:87:DF:D2:DF:1E:34:55:78:6C:2E:92:EA:45:29:50
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/aG9saKuH39LfHjRVeGwukupFKVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/16
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
212.113.160.0/19
213.22.0.0/16
213.205.64.0/19
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:e4:0e:fb:75:35:d8:af:6e:dd:9e:4d:9a:d2:68:cd:88:a5:
41:9e:b6:9d:ae:f3:4a:c8:69:fc:6c:33:0d:2d:44:8e:b1:d9:
4d:fc:f5:32:e5:18:7a:50:e8:56:ca:9d:c6:81:d6:44:72:a5:
36:8b:42:cc:3a:28:21:1e:36:19:aa:b3:ca:ff:c4:2f:1a:4b:
88:0b:32:2e:23:b8:7a:66:02:6c:b1:f2:e1:b6:32:65:00:8b:
ee:e9:38:6f:80:9e:c6:0f:8b:e5:b1:05:ce:a6:cf:5b:72:8c:
1c:69:bb:ae:90:9c:66:c5:27:87:9c:8c:44:21:8c:43:d1:c9:
fd:1d:2a:4d:f5:f5:ee:3e:94:59:fa:7e:95:3c:92:25:f3:0e:
53:28:c0:ed:47:ea:2d:77:24:78:c5:07:83:d1:6a:25:22:55:
da:af:64:c1:3b:ca:5d:c0:98:68:6f:d4:11:e6:0a:d0:29:46:
7e:c9:25:b5:d7:93:cd:26:a1:b1:0b:c7:9f:d8:2c:36:f7:83:
ab:71:58:f3:08:e9:a1:eb:52:0a:86:53:59:77:b7:4b:eb:c4:
42:db:d7:8f:be:d8:52:ac:f3:34:af:fe:b0:62:5a:46:c2:24:
ac:a2:e4:3a:a4:e6:c8:00:69:8d:6a:66:6c:f4:79:74:72:2c:
2c:ae:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 21:22:12 2024 by rpki-client on console-fra.rpki-client.org