Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/JQfXKlN1iojXl4gF2UJe66NSBZ8.roa
File: JQfXKlN1iojXl4gF2UJe66NSBZ8.roa (raw, json)
Hash identifier: hzxCCytmvsVTmCRt4pODHbBSIplALKuJPFcIdx6fQRs=
Subject key identifier: 25:07:D7:2A:53:75:8A:88:D7:97:88:05:D9:42:5E:EB:A3:52:05:9F
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 01929486BF7BA77B070C84E948B082FD1332
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/JQfXKlN1iojXl4gF2UJe66NSBZ8.roa
Signing time: Wed 16 Oct 2024 08:51:51 +0000
ROA not before: Wed 16 Oct 2024 08:51:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15598
IP address blocks: 62.146.0.0/22 maxlen: 22
62.146.4.0/22 maxlen: 22
62.146.8.0/22 maxlen: 22
62.146.12.0/22 maxlen: 22
62.146.16.0/22 maxlen: 22
62.146.17.0/24 maxlen: 24
62.146.20.0/22 maxlen: 22
62.146.24.0/22 maxlen: 22
62.146.28.0/22 maxlen: 22
62.146.32.0/22 maxlen: 22
62.146.36.0/22 maxlen: 22
62.146.40.0/22 maxlen: 22
62.146.44.0/22 maxlen: 22
62.146.48.0/22 maxlen: 22
62.146.52.0/22 maxlen: 22
62.146.56.0/22 maxlen: 22
62.146.60.0/22 maxlen: 22
62.146.64.0/22 maxlen: 22
62.146.68.0/22 maxlen: 22
62.146.72.0/22 maxlen: 22
62.146.76.0/22 maxlen: 22
62.146.80.0/22 maxlen: 22
62.146.84.0/22 maxlen: 22
62.146.88.0/22 maxlen: 22
62.146.92.0/22 maxlen: 22
62.146.96.0/22 maxlen: 22
62.146.100.0/22 maxlen: 22
62.146.104.0/22 maxlen: 22
62.146.108.0/22 maxlen: 22
62.146.112.0/22 maxlen: 22
62.146.116.0/22 maxlen: 22
62.146.120.0/22 maxlen: 22
62.146.124.0/22 maxlen: 22
62.146.128.0/22 maxlen: 22
62.146.132.0/22 maxlen: 22
62.146.136.0/22 maxlen: 22
62.146.140.0/22 maxlen: 22
62.146.144.0/22 maxlen: 22
62.146.148.0/22 maxlen: 22
62.146.152.0/22 maxlen: 22
62.146.156.0/22 maxlen: 22
62.146.160.0/22 maxlen: 22
62.146.184.0/22 maxlen: 22
62.146.188.0/22 maxlen: 22
62.146.192.0/22 maxlen: 22
62.146.196.0/22 maxlen: 22
62.146.200.0/22 maxlen: 22
62.146.204.0/22 maxlen: 22
62.146.208.0/22 maxlen: 22
62.146.212.0/22 maxlen: 22
62.146.216.0/22 maxlen: 22
62.146.220.0/22 maxlen: 22
62.146.240.0/22 maxlen: 22
80.190.4.0/22 maxlen: 22
80.190.8.0/21 maxlen: 21
80.190.16.0/21 maxlen: 21
80.190.24.0/21 maxlen: 21
80.190.32.0/21 maxlen: 21
80.190.40.0/21 maxlen: 21
80.190.48.0/21 maxlen: 21
80.190.56.0/21 maxlen: 21
80.190.64.0/21 maxlen: 21
80.190.88.0/21 maxlen: 21
80.190.96.0/21 maxlen: 21
80.190.104.0/21 maxlen: 21
80.190.112.0/21 maxlen: 21
80.190.120.0/21 maxlen: 21
80.190.128.0/21 maxlen: 21
80.190.136.0/21 maxlen: 21
80.190.144.0/21 maxlen: 21
80.190.152.0/21 maxlen: 21
80.190.160.0/21 maxlen: 21
80.190.168.0/21 maxlen: 21
80.190.176.0/21 maxlen: 21
80.190.184.0/21 maxlen: 21
80.190.192.0/21 maxlen: 21
80.190.200.0/21 maxlen: 21
80.190.208.0/21 maxlen: 21
80.190.216.0/21 maxlen: 21
80.190.224.0/21 maxlen: 21
80.190.232.0/21 maxlen: 21
80.190.240.0/21 maxlen: 21
80.190.248.0/21 maxlen: 21
81.17.104.0/22 maxlen: 22
81.17.108.0/22 maxlen: 22
81.17.112.0/22 maxlen: 22
81.17.116.0/22 maxlen: 22
82.149.64.0/22 maxlen: 22
82.149.68.0/22 maxlen: 22
82.149.84.0/22 maxlen: 22
82.149.88.0/22 maxlen: 22
82.149.92.0/22 maxlen: 22
185.234.108.0/24 maxlen: 24
212.112.224.0/19 maxlen: 19
212.123.96.0/19 maxlen: 19
2a01:138::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:86:bf:7b:a7:7b:07:0c:84:e9:48:b0:82:fd:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Oct 16 08:51:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2507d72a53758a88d7978805d9425eeba352059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:a0:f7:29:41:7b:57:5b:03:d8:d7:84:29:
14:1e:8f:4c:a5:7d:4e:79:3b:b0:10:68:be:63:b8:
35:4e:a7:5e:d0:45:86:c6:26:24:5f:d4:2e:e1:22:
f0:71:23:1c:3e:94:7a:60:2d:da:6a:13:a4:41:9e:
1c:67:eb:35:ee:ea:87:05:f7:51:08:d3:b9:fe:fb:
a0:cd:f0:40:a3:61:f1:5c:9e:65:eb:f0:d7:7d:bd:
ad:3e:40:a5:23:3d:8c:c5:fa:50:cc:66:60:72:f6:
e3:a8:f8:88:12:be:cb:d7:19:39:c2:f8:c7:4e:bc:
95:fa:4e:f8:21:a3:af:b4:cf:99:b9:89:cd:f8:e3:
7b:90:b8:da:89:13:b0:dd:ac:14:02:9e:a4:a5:a6:
9b:b6:95:ee:e2:75:e9:7e:9b:31:bd:57:d4:07:2f:
52:83:b8:d1:fe:9a:5a:e5:18:a7:02:ec:94:5f:7f:
b4:90:4b:44:07:39:5e:17:3f:82:84:ed:e9:53:7d:
14:21:b8:e1:11:5d:5e:5d:6c:11:79:2f:85:d7:57:
f2:c0:42:70:4f:07:73:8d:9f:e6:62:7d:c3:4e:9d:
94:5a:08:c9:fa:4a:b3:db:c5:de:19:0e:68:fc:b2:
38:82:10:3a:2d:ec:a7:aa:a8:9f:7b:2c:20:08:04:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:D7:2A:53:75:8A:88:D7:97:88:05:D9:42:5E:EB:A3:52:05:9F
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/JQfXKlN1iojXl4gF2UJe66NSBZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.0.0-62.146.163.255
62.146.184.0-62.146.223.255
62.146.240.0/22
80.190.4.0-80.190.71.255
80.190.88.0-80.190.255.255
81.17.104.0-81.17.119.255
82.149.64.0/21
82.149.84.0-82.149.95.255
185.234.108.0/24
212.112.224.0/19
212.123.96.0/19
IPv6:
2a01:138::/32
Signature Algorithm: sha256WithRSAEncryption
9c:f2:ba:a6:2f:59:1a:38:90:56:1d:ac:e8:a5:f1:f8:3f:43:
f4:21:8e:5e:89:80:e9:3d:99:b1:b4:13:2c:02:72:d8:2f:27:
8e:90:1f:a0:f9:be:41:d4:b1:5d:9d:35:3d:68:7a:72:fe:ea:
9d:3f:eb:e7:23:f2:47:15:0c:7a:20:b5:d9:56:3d:ad:dd:00:
4e:71:75:42:70:68:4e:a4:89:78:fd:01:d7:12:00:58:51:2b:
e9:0f:8f:2a:d5:a8:cf:c8:9d:d2:1e:e7:cf:ad:81:16:91:42:
3d:d3:c2:16:68:95:f5:e9:c4:d9:19:0b:a5:73:02:2e:b2:bc:
2c:1f:15:e9:49:d6:4d:f2:00:9a:bd:e7:fd:d3:19:f3:bf:b7:
d6:d4:d8:1f:a7:af:d0:de:cf:55:2e:62:50:ed:2f:32:e2:9a:
e0:58:a9:7e:8d:bb:f2:52:59:81:69:8b:71:05:95:f1:11:e8:
5b:4c:6a:06:c2:ac:7c:e1:90:b3:09:a6:28:b7:8a:40:b6:e0:
31:cb:61:33:71:68:59:cc:8c:c5:68:18:c1:d1:b1:9c:98:39:
60:b0:43:34:f8:7a:93:48:c0:d4:b0:12:96:32:19:b8:10:d3:
49:ae:f5:b5:40:41:48:17:9b:ef:1b:de:45:39:73:9a:1e:86:
ee:d1:f9:7a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZKUhr97p3sHDITpSLCC/RMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4
ODg4YzEwHhcNMjQxMDE2MDg1MTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTA3ZDcyYTUzNzU4YTg4ZDc5Nzg4MDVkOTQyNWVlYmEzNTIwNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruqg9ylBe1dbA9jXhCkUHo9MpX1O
eTuwEGi+Y7g1Tqde0EWGxiYkX9Qu4SLwcSMcPpR6YC3aahOkQZ4cZ+s17uqHBfdR
CNO5/vugzfBAo2HxXJ5l6/DXfb2tPkClIz2MxfpQzGZgcvbjqPiIEr7L1xk5wvjH
TryV+k74IaOvtM+ZuYnN+ON7kLjaiROw3awUAp6kpaabtpXu4nXpfpsxvVfUBy9S
g7jR/ppa5RinAuyUX3+0kEtEBzleFz+ChO3pU30UIbjhEV1eXWwReS+F11fywEJw
TwdzjZ/mYn3DTp2UWgjJ+kqz28XeGQ5o/LI4ghA6LeynqqifeywgCAScPwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFCUH1ypTdYqI15eIBdlCXuujUgWfMB8GA1UdIwQY
MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt
NTZmNmVjYzFjMTIxLzEvSlFmWEtsTjFpb2pYbDRnRjJVSmU2Nk5TQlo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx
LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwMAsDAwE+
kgMEAj6SoDAMAwQDPpK4AwQFPpLAAwQCPpLwMAwDBAJQvgQDBANQvkAwCwMEA1C+
WAMDAFC+MAwDBANREWgDBANREXADBANSlUAwDAMEAlKVVAMEBVKVQAMEALnqbAME
BdRw4AMEBdR7YDANBAIAAjAHAwUAKgEBODANBgkqhkiG9w0BAQsFAAOCAQEAnPK6
pi9ZGjiQVh2s6KXx+D9D9CGOXomA6T2ZsbQTLAJy2C8njpAfoPm+QdSxXZ01PWh6
cv7qnT/r5yPyRxUMeiC12VY9rd0ATnF1QnBoTqSJeP0B1xIAWFEr6Q+PKtWoz8id
0h7nz62BFpFCPdPCFmiV9enE2RkLpXMCLrK8LB8V6UnWTfIAmr3n/dMZ87+31tTY
H6ev0N7PVS5iUO0vMuKa4Fipfo278lJZgWmLcQWV8RHoW0xqBsKsfOGQswmmKLeK
QLbgMcthM3FoWcyMxWgYwdGxnJg5YLBDNPh6k0jA1LASljIZuBDTSa71tUBBSBeb
7xveRTlzmh6G7tH5eg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:56 2025 by rpki-client