Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1cViVj0HgR-h2oMmBcEGASFdsJc.roa
File: 1cViVj0HgR-h2oMmBcEGASFdsJc.roa (raw, json)
Hash identifier: kTMChgfMfyKfx69sVzHo/FQJPaCv62gohJSwB/IHSpQ=
Subject key identifier: D5:C5:62:56:3D:07:81:1F:A1:DA:83:26:05:C1:06:01:21:5D:B0:97
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0193BAE27150BE0B48D8FFE202E4790B9970
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1cViVj0HgR-h2oMmBcEGASFdsJc.roa
Signing time: Thu 12 Dec 2024 12:40:22 +0000
ROA not before: Thu 12 Dec 2024 12:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 2.96.0.0/13 maxlen: 24
62.3.192.0/18 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/13 maxlen: 24
81.1.64.0/18 maxlen: 24
81.6.192.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.170.0.0/17 maxlen: 24
81.178.0.0/15 maxlen: 24
82.133.0.0/17 maxlen: 24
83.67.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
91.146.112.0/21 maxlen: 24
92.10.0.0/15 maxlen: 24
92.12.0.0/14 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
185.173.116.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
213.208.64.0/18 maxlen: 24
217.8.0.0/19 maxlen: 24
217.68.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:e2:71:50:be:0b:48:d8:ff:e2:02:e4:79:0b:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Dec 12 12:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5c562563d07811fa1da832605c10601215db097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:94:67:14:5a:d8:1f:61:92:aa:6b:4c:1c:
c9:67:1e:a9:97:44:99:34:ae:c5:f0:fc:c1:9c:31:
b8:c5:55:f0:81:86:98:08:35:60:b3:50:70:a8:19:
80:8a:34:00:01:26:56:ad:bb:10:28:30:00:d0:19:
96:6b:dc:c2:39:f2:6f:b9:98:ac:91:7c:c1:bb:93:
0b:c3:00:4b:92:2e:4c:d7:3b:8b:a2:9a:a5:54:67:
58:dc:79:2a:7e:f4:7b:9d:af:38:b0:4c:1b:61:20:
15:cc:8c:5c:31:64:52:c4:c7:87:44:b1:08:d4:2f:
9c:a4:6b:99:1b:9b:ed:57:0f:3d:1f:0b:b4:a6:cb:
5a:67:4f:62:27:9f:28:70:fc:f9:e9:e3:b7:52:30:
e2:0d:49:6f:c3:31:7a:dd:9c:f4:33:0d:77:9e:a0:
09:48:58:89:75:d8:bc:97:95:d3:32:66:7a:59:29:
5e:99:ce:19:2f:45:f3:a1:d4:db:7d:d7:96:65:a7:
45:5e:12:83:eb:28:85:7f:38:d1:d9:ca:9c:f8:b5:
4f:b9:34:e8:85:f0:12:96:c3:6c:cf:1f:4d:99:f3:
26:47:19:58:a7:72:23:1e:c5:db:18:97:44:14:24:
e9:2c:8d:40:d4:fc:fc:93:89:d1:08:84:53:e9:9c:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:62:56:3D:07:81:1F:A1:DA:83:26:05:C1:06:01:21:5D:B0:97
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1cViVj0HgR-h2oMmBcEGASFdsJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.10.0.0-92.31.255.255
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:96:73:5e:48:91:6c:5a:98:be:df:86:91:00:fa:52:91:8c:
89:aa:6d:ed:69:6d:12:2e:70:ff:26:f4:cc:0b:98:f9:e6:20:
dd:c9:88:14:36:94:d6:36:36:09:74:4d:f2:19:aa:cd:e8:2f:
28:4b:a9:a8:91:f2:3b:40:6f:9c:f5:1d:a6:aa:89:47:db:3e:
e1:f4:85:1b:ed:da:1a:3b:8d:91:a1:8d:98:e7:7b:33:f1:09:
8a:9d:d1:44:a4:71:ae:78:f9:b3:59:f9:8e:be:05:26:0e:9d:
67:84:70:9a:c8:d1:7d:83:2f:29:48:76:73:ba:96:26:82:ee:
b8:74:33:2b:67:c8:35:27:ed:ac:4b:9d:ac:96:3e:c6:fa:1d:
5d:c2:c3:91:d5:07:0d:1f:1e:1f:8d:7e:c3:a4:32:fd:34:f9:
3f:cb:ab:e5:74:c4:8f:1c:04:c5:2a:39:ba:6b:d9:59:b6:17:
5e:b2:a4:a5:80:db:d0:e4:aa:6f:df:bd:b6:f6:ff:8b:14:6e:
88:6b:c8:ca:6c:2b:7b:f8:da:db:fb:03:ac:d8:59:53:76:cb:
70:cc:99:53:b6:aa:12:da:8c:27:fc:89:9a:5f:6c:57:a6:62:
30:66:f5:34:c7:7c:aa:18:f9:71:16:c1:b6:99:8a:ec:50:35:
2b:a5:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:56:58 2025 by rpki-client