Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEem-FQAH3jUXgezYBdbZJopgts.roa
File: nEem-FQAH3jUXgezYBdbZJopgts.roa (raw, json)
Hash identifier: UVYHMBWXO8THod/d9b9PjM6F6CGGiilkxvA3/2kE/cI=
Subject key identifier: 9C:47:A6:F8:54:00:1F:78:D4:5E:07:B3:60:17:5B:64:9A:29:82:DB
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018D3CB63942D094E4D2F2CE6E0F0C586189
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEem-FQAH3jUXgezYBdbZJopgts.roa
Signing time: Wed 24 Jan 2024 18:23:11 +0000
ROA not before: Wed 24 Jan 2024 18:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/16 maxlen: 16
88.157.0.0/17 maxlen: 17
88.157.128.0/17 maxlen: 17
88.157.134.0/24 maxlen: 24
88.157.157.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
193.126.0.0/16 maxlen: 16
193.126.0.0/17 maxlen: 17
193.126.120.0/24 maxlen: 24
193.126.128.0/17 maxlen: 17
194.79.64.0/19 maxlen: 19
194.79.69.0/24 maxlen: 24
194.79.86.0/24 maxlen: 24
195.23.0.0/16 maxlen: 16
195.23.0.0/17 maxlen: 17
195.23.13.0/24 maxlen: 24
195.23.37.0/24 maxlen: 24
195.23.128.0/17 maxlen: 17
195.23.255.0/24 maxlen: 24
212.0.160.0/19 maxlen: 19
212.0.160.0/21 maxlen: 21
212.113.160.0/19 maxlen: 19
212.113.173.0/24 maxlen: 24
212.113.183.0/24 maxlen: 24
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
213.205.64.0/19 maxlen: 19
213.205.64.0/24 maxlen: 24
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Jan 2024 20:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:b6:39:42:d0:94:e4:d2:f2:ce:6e:0f:0c:58:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 24 18:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c47a6f854001f78d45e07b360175b649a2982db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:32:57:ce:0b:c7:4e:d2:b5:cb:63:a2:b0:
b6:94:1d:f0:a9:6b:11:89:be:8b:97:84:97:37:96:
37:e3:a1:7e:cb:26:1b:7b:5b:10:6c:0c:99:87:a9:
59:dd:3c:2d:92:2b:49:6c:01:fe:49:d3:3e:44:fb:
5c:ed:93:b3:46:93:22:19:82:22:c2:73:97:0d:ad:
b1:dc:8a:ad:99:dc:4a:c6:eb:bf:d4:1f:62:d7:b1:
01:f2:c6:7d:70:94:4c:f0:01:cc:98:6d:e7:09:65:
7d:f5:49:f2:55:fe:82:ea:46:6d:bc:b9:3e:5a:f7:
54:0f:25:81:8b:13:11:2c:b0:f1:ce:32:0a:b6:87:
e4:bd:75:a2:77:16:34:5c:ac:41:07:a8:80:d2:4f:
25:70:4a:87:b0:39:1f:c6:f8:3a:99:20:d4:ee:54:
92:e9:59:d1:a7:8b:88:5f:3b:cb:91:6e:e4:77:ae:
2c:d2:96:ea:4c:89:f3:a6:01:a2:08:a7:b2:3c:4f:
0b:81:de:17:d9:c6:e6:29:3a:b1:78:bd:a5:7c:c7:
80:11:df:19:26:55:14:b5:1b:24:76:4a:ef:1b:be:
2e:03:e1:e8:c5:5a:c8:0d:3a:57:8b:51:87:8e:a0:
a7:83:7b:e5:64:87:85:74:f5:e6:b5:f5:3e:4d:d0:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:A6:F8:54:00:1F:78:D4:5E:07:B3:60:17:5B:64:9A:29:82:DB
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEem-FQAH3jUXgezYBdbZJopgts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/16
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
212.113.160.0/19
213.22.0.0/16
213.205.64.0/19
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:74:6c:0e:7a:a7:42:5e:c1:15:ce:20:ea:7e:df:1e:c7:7b:
0d:bd:a2:5d:3f:b9:1c:8e:e1:58:73:9d:ca:eb:79:be:d1:1b:
3f:91:62:82:ab:0b:1c:03:9a:fc:04:8b:f8:b4:86:d6:e3:8e:
a9:26:34:41:18:ed:aa:9f:bc:d6:85:3a:d7:45:e9:43:ea:5e:
52:c6:cf:00:5f:90:7a:fe:41:80:cd:08:cd:b0:d2:73:1f:d7:
f5:df:cd:42:4e:dc:3c:78:66:89:84:36:fc:22:3c:d6:02:7b:
66:cf:37:69:fe:d4:cc:f0:8c:07:e7:e9:45:34:1d:81:e8:db:
d8:76:2d:81:64:24:d3:29:39:42:74:b5:66:dc:87:94:bf:d7:
b0:a0:67:2f:25:d9:1d:15:62:75:2b:bc:35:01:23:6e:b1:14:
0b:f6:90:83:9d:bd:16:37:2e:e8:35:46:7b:83:f4:4b:bd:f5:
f0:5a:fa:ef:fc:ce:39:9f:57:88:d3:d2:4f:5d:e0:eb:5d:81:
8f:8e:e7:89:b5:c1:3e:b4:0f:9a:62:b2:e8:2d:9c:e9:13:9b:
ac:aa:9f:a4:95:ca:71:89:70:3e:ff:69:0c:ee:cf:4b:26:4d:
39:71:3d:dd:ca:e7:08:26:c0:c0:67:6a:70:b6:f7:2f:a9:81:
49:8d:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 00:38:54 2024 by rpki-client on console-fra.rpki-client.org