Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mqXcstEZwHvfyWvpYqlsqQNQa-c.roa
File: mqXcstEZwHvfyWvpYqlsqQNQa-c.roa (raw, json)
Hash identifier: CRzf4gfNtBjPSy0LykA1Mji5cRLMf6wt3166n5j07cg=
Subject key identifier: 9A:A5:DC:B2:D1:19:C0:7B:DF:C9:6B:E9:62:A9:6C:A9:03:50:6B:E7
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018DA8939A8FA1C372E7A20D85BE6CE50A12
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mqXcstEZwHvfyWvpYqlsqQNQa-c.roa
Signing time: Wed 14 Feb 2024 17:04:22 +0000
ROA not before: Wed 14 Feb 2024 17:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/16 maxlen: 16
88.157.0.0/18 maxlen: 18
88.157.64.0/18 maxlen: 18
88.157.128.0/18 maxlen: 18
88.157.134.0/24 maxlen: 24
88.157.157.0/24 maxlen: 24
88.157.192.0/18 maxlen: 18
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
193.126.0.0/16 maxlen: 16
193.126.120.0/24 maxlen: 24
194.79.64.0/19 maxlen: 19
194.79.69.0/24 maxlen: 24
194.79.86.0/24 maxlen: 24
195.23.0.0/16 maxlen: 16
195.23.13.0/24 maxlen: 24
195.23.37.0/24 maxlen: 24
195.23.255.0/24 maxlen: 24
212.0.160.0/19 maxlen: 19
212.113.160.0/19 maxlen: 19
212.113.173.0/24 maxlen: 24
212.113.183.0/24 maxlen: 24
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
213.205.64.0/19 maxlen: 19
213.205.64.0/24 maxlen: 24
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:93:9a:8f:a1:c3:72:e7:a2:0d:85:be:6c:e5:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Feb 14 17:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa5dcb2d119c07bdfc96be962a96ca903506be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:5e:be:76:77:2f:73:b5:4b:54:63:99:04:
91:dd:90:8d:d0:f7:98:ae:07:73:25:ce:dd:1b:a0:
e4:b8:84:44:32:15:07:f5:cf:5c:1c:0b:68:6e:ae:
63:0a:83:ca:c2:77:8a:8f:77:9c:8c:0e:38:3d:b9:
4d:18:6d:dc:b7:78:92:05:bd:08:3b:cd:4d:22:c6:
6e:a7:35:b3:06:9c:71:a6:ff:8d:80:70:0d:77:6a:
bd:84:75:0b:00:d1:ba:3e:86:74:8f:2b:1f:0f:67:
3f:2d:39:b0:aa:b4:56:76:05:c5:8e:54:dc:a1:fd:
07:80:3d:33:70:88:13:cd:b1:8d:3e:45:93:b4:88:
1b:20:cb:8f:6b:5b:b2:8e:e1:0d:00:e9:86:74:2e:
50:fb:48:c7:e6:1c:0e:92:86:b0:c9:ac:e6:32:69:
1a:55:71:62:13:6d:53:6b:a2:f6:d7:46:4b:61:47:
33:76:d6:7a:ef:09:53:52:45:ef:a5:14:30:85:04:
4f:34:d9:c3:63:16:6d:d8:3f:bc:46:cb:1e:ab:7d:
e3:da:5a:dc:ca:74:15:27:03:1c:59:eb:5d:ff:76:
e2:71:16:73:d6:1c:1c:fe:30:d3:cb:cb:7e:a7:fb:
b8:7a:ef:e1:d1:de:ca:9d:f7:9c:e9:c7:94:92:cf:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A5:DC:B2:D1:19:C0:7B:DF:C9:6B:E9:62:A9:6C:A9:03:50:6B:E7
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mqXcstEZwHvfyWvpYqlsqQNQa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/16
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
212.113.160.0/19
213.22.0.0/16
213.205.64.0/19
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:62:d0:17:b9:8b:d7:fd:8e:26:26:11:de:86:db:87:aa:20:
b4:5d:07:3e:a1:22:ae:4d:81:2f:d7:3f:30:ee:42:70:0b:6a:
6e:28:5a:a8:3b:53:30:a1:e3:fb:6b:5f:75:cc:67:6d:b6:98:
5f:43:d8:83:17:5e:4a:46:d1:bf:03:f6:5c:15:b0:aa:20:e0:
43:65:9f:a7:aa:e9:af:60:01:d8:99:48:3c:c1:6c:ae:46:9c:
09:3f:ac:54:d5:cb:cb:05:35:ad:ca:8e:14:e4:62:08:fc:d8:
f2:6f:87:80:a5:54:2f:03:2f:ca:60:57:0c:a1:f0:a3:8d:46:
87:0b:2f:a3:5a:86:cf:1c:5d:86:ca:f1:33:e8:3d:d5:4e:cc:
63:94:c9:f1:f5:ca:94:b5:89:79:99:5f:0f:e8:8b:f9:09:03:
53:61:c6:16:aa:e6:e4:d0:39:6b:3d:d3:0f:41:37:4e:ab:3e:
b5:17:49:21:73:fb:73:ba:01:36:1b:f4:33:31:42:a9:60:1f:
7e:68:79:9b:d8:91:8c:83:cc:f6:84:55:1b:dc:b0:f4:c6:76:
f6:17:2f:6b:09:f3:b4:ca:6c:13:06:2d:b7:61:b9:9a:af:96:
6f:ed:96:ba:49:5e:00:bb:99:27:9e:c1:96:e8:70:36:76:7a:
e5:37:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 15:21:39 2024 by rpki-client on console-fra.rpki-client.org