Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Q-cubsIUJhKmvBjfqjXHY9C6fUo.roa
File: Q-cubsIUJhKmvBjfqjXHY9C6fUo.roa (raw, json)
Hash identifier: ku6eefxEPQDhMDAenaMimNZrsK1AYoW0TyTvLCTo3o8=
Subject key identifier: 43:E7:2E:6E:C2:14:26:12:A6:BC:18:DF:AA:35:C7:63:D0:BA:7D:4A
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0191985DCD602D0FC0BE4501CA5311D71BBC
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Q-cubsIUJhKmvBjfqjXHY9C6fUo.roa
Signing time: Wed 28 Aug 2024 09:42:49 +0000
ROA not before: Wed 28 Aug 2024 09:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 2.104.0.0/14 maxlen: 14
2.108.0.0/15 maxlen: 15
2.111.0.0/16 maxlen: 16
62.135.128.0/17 maxlen: 17
62.242.0.0/15 maxlen: 15
80.62.0.0/15 maxlen: 15
80.160.0.0/13 maxlen: 13
80.196.0.0/14 maxlen: 14
81.31.80.0/20 maxlen: 20
83.88.0.0/13 maxlen: 13
85.129.0.0/17 maxlen: 17
87.48.0.0/13 maxlen: 13
87.56.0.0/18 maxlen: 18
87.56.128.0/17 maxlen: 17
87.57.0.0/16 maxlen: 16
87.58.0.0/18 maxlen: 18
87.58.128.0/17 maxlen: 17
87.59.0.0/16 maxlen: 16
87.60.0.0/14 maxlen: 14
93.160.0.0/13 maxlen: 13
93.178.128.0/18 maxlen: 18
94.189.0.0/17 maxlen: 17
95.166.64.0/18 maxlen: 18
95.166.128.0/17 maxlen: 17
128.76.0.0/16 maxlen: 16
128.77.128.0/17 maxlen: 17
131.164.0.0/16 maxlen: 16
176.20.0.0/17 maxlen: 17
176.20.192.0/18 maxlen: 18
176.21.0.0/16 maxlen: 16
176.22.0.0/15 maxlen: 15
188.176.0.0/13 maxlen: 13
192.66.25.0/24 maxlen: 24
192.66.33.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
193.3.224.0/22 maxlen: 22
193.39.139.0/24 maxlen: 24
193.88.0.0/15 maxlen: 15
193.162.32.0/23 maxlen: 23
193.162.98.0/23 maxlen: 23
193.162.145.0/24 maxlen: 24
193.162.146.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.163.10.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
193.163.158.0/23 maxlen: 23
193.163.160.0/21 maxlen: 21
194.182.128.0/20 maxlen: 20
194.182.144.0/21 maxlen: 21
194.182.232.0/21 maxlen: 21
194.182.240.0/20 maxlen: 20
194.192.0.0/16 maxlen: 16
194.239.0.0/16 maxlen: 16
194.247.188.0/23 maxlen: 23
195.41.0.0/16 maxlen: 16
195.95.181.0/24 maxlen: 24
195.97.128.0/18 maxlen: 18
195.184.32.0/19 maxlen: 19
195.215.0.0/16 maxlen: 16
195.249.0.0/16 maxlen: 16
212.130.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:5d:cd:60:2d:0f:c0:be:45:01:ca:53:11:d7:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Aug 28 09:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43e72e6ec2142612a6bc18dfaa35c763d0ba7d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:d0:0b:63:ab:27:9c:11:4c:84:47:e7:c6:
67:80:e3:c4:a9:36:b3:b5:86:7f:42:c8:62:38:72:
5e:96:35:b7:71:32:96:98:31:86:ee:0a:e7:86:35:
af:6a:ba:9f:00:e9:7a:3e:fc:87:ce:99:6e:14:69:
d5:06:6c:dd:fa:79:7a:6f:5a:d7:da:fe:74:cb:cd:
d5:d8:68:9c:14:3e:be:55:e6:da:cd:7f:ed:85:b6:
b0:3a:a0:3a:66:60:d9:d1:6e:f9:c3:e6:9c:c1:28:
2f:37:54:5c:30:47:39:d8:59:7a:55:1e:62:67:fa:
cd:9a:2d:a1:e9:40:55:c6:c5:08:0a:97:36:fa:93:
29:4c:30:8f:0e:25:1f:53:0f:02:b5:b5:2b:4c:12:
ac:72:60:ef:e8:14:eb:0a:a9:52:01:96:da:9f:2b:
59:fc:b3:dd:ce:f4:b6:95:6f:e0:8d:43:d9:c7:89:
83:af:ce:35:79:62:e9:19:fb:3f:e3:df:33:78:da:
34:ee:a1:b9:57:ab:4b:1c:ec:4b:ff:99:2e:b2:39:
76:1f:6b:90:05:c8:c5:0f:e9:08:bb:c6:86:68:fa:
e3:00:c0:65:60:40:bb:ff:48:23:1f:dc:40:1e:09:
2d:f2:6e:a5:c6:29:3a:56:f5:8d:1f:b4:80:e8:f7:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:2E:6E:C2:14:26:12:A6:BC:18:DF:AA:35:C7:63:D0:BA:7D:4A
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Q-cubsIUJhKmvBjfqjXHY9C6fUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0-2.109.255.255
2.111.0.0/16
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0-87.56.63.255
87.56.128.0-87.58.63.255
87.58.128.0-87.63.255.255
93.160.0.0/13
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/16
128.77.128.0/17
131.164.0.0/16
176.20.0.0/17
176.20.192.0-176.23.255.255
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
af:47:5c:6e:1b:14:6b:9f:6d:c5:06:3c:aa:7d:92:3e:2a:1d:
ee:9c:cf:7c:8a:d5:2c:a7:a5:0a:dd:9e:62:5f:a4:19:65:81:
9b:53:29:c1:e9:d0:9f:cb:09:46:ab:c5:d4:45:ee:7a:f0:ea:
6d:c8:30:65:c9:00:f1:ce:9c:fc:e8:89:71:0d:7c:8d:b2:7f:
f0:af:89:65:7e:ab:b0:2d:04:ef:16:14:26:56:64:45:fe:90:
7e:66:5a:d2:30:95:09:74:c6:41:39:cc:8d:9e:67:d6:14:81:
61:fc:3c:d1:43:e4:a8:e0:bc:a3:90:a1:7c:45:4d:7e:b3:a3:
b0:8b:96:8d:7c:1f:13:c6:2e:4f:22:e0:91:c0:46:0e:f0:38:
ce:64:58:c2:f2:e0:44:ee:22:d2:78:96:2a:01:87:51:77:1e:
c6:bc:f2:32:63:49:df:8c:1f:dc:53:e7:27:6b:e7:57:0c:53:
1f:4f:b0:b8:9d:41:74:b9:8b:b1:f8:b4:99:ad:1d:72:98:af:
23:9c:3f:26:e7:34:19:cd:e4:4d:9f:32:52:1a:0f:6b:b4:10:
f5:95:97:8f:fd:74:b1:f6:c3:65:13:da:9c:71:81:c3:1b:d8:
68:55:dc:23:79:31:fd:9f:fe:d3:47:95:b0:d0:4a:48:44:05:
02:f2:de:74
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgISAZGYXc1gLQ/AvkUBylMR1xu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjQwODI4MDk0MjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2U3MmU2ZWMyMTQyNjEyYTZiYzE4ZGZhYTM1Yzc2M2QwYmE3ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubzQC2OrJ5wRTIRH58ZngOPEqTaz
tYZ/QshiOHJeljW3cTKWmDGG7grnhjWvarqfAOl6PvyHzpluFGnVBmzd+nl6b1rX
2v50y83V2GicFD6+VebazX/thbawOqA6ZmDZ0W75w+acwSgvN1RcMEc52Fl6VR5i
Z/rNmi2h6UBVxsUICpc2+pMpTDCPDiUfUw8CtbUrTBKscmDv6BTrCqlSAZbanytZ
/LPdzvS2lW/gjUPZx4mDr841eWLpGfs/498zeNo07qG5V6tLHOxL/5kusjl2H2uQ
BcjFD+kIu8aGaPrjAMBlYEC7/0gjH9xAHgkt8m6lxik6VvWNH7SA6Pe22QIDAQAB
o4IDmjCCA5YwHQYDVR0OBBYEFEPnLm7CFCYSprwY36o1x2PQun1KMB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvUS1jdWJzSVVKaEttdkJqZnFqWEhZOUM2ZlVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBrgYIKwYBBQUHAQcBAf8EggGdMIIBmTCCAYYEAgABMIIB
fjAKAwMDAmgDAwECbAMDAAJvAwQHPoeAAwMBPvIDAwFQPgMDA1CgAwMCUMQDBARR
H1ADAwNTWAMEB1WBADALAwMEVzADBAZXOAAwDAMEB1c4gAMEBlc6ADALAwQHVzqA
AwMGVwADAwNdoAMEBl2ygAMEB169ADALAwQGX6ZAAwMAX6YDAwCATAMEB4BNgAMD
AIOkAwQHsBQAMAsDBAawFMADAwOwEAMDA7ywAwQAwEIZAwQAwEIhAwQAwEIkAwQA
wEImAwQAwEKvAwQBwEK0AwQBwQOCMAwDBALBA4wDBADBA44DBALBA+ADBADBJ4sD
AwHBWAMEAcGiIAMEAcGiYjAMAwQAwaKRAwQAwaKSAwQDwaKYAwQAwaMKAwQCwaMY
MAwDBAHBo54DBAPBo6AwDAMEB8K2gAMEA8K2kDALAwQDwrboAwMAwrYDAwDCwAMD
AMLvAwQBwve8AwMAwykDBADDX7UDBAbDYYADBAXDuCADAwDD1wMDAMP5AwMA1IIw
DQQCAAIwBwMFAyABBsgwDQYJKoZIhvcNAQELBQADggEBAK9HXG4bFGufbcUGPKp9
kj4qHe6cz3yK1SynpQrdnmJfpBllgZtTKcHp0J/LCUarxdRF7nrw6m3IMGXJAPHO
nPzoiXENfI2yf/CviWV+q7AtBO8WFCZWZEX+kH5mWtIwlQl0xkE5zI2eZ9YUgWH8
PNFD5KjgvKOQoXxFTX6zo7CLlo18HxPGLk8i4JHARg7wOM5kWMLy4ETuItJ4lioB
h1F3Hsa88jJjSd+MH9xT5ydr51cMUx9PsLidQXS5i7H4tJmtHXKYryOcPybnNBnN
5E2fMlIaD2u0EPWVl4/9dLH2w2UT2pxxgcMb2GhV3CN5Mf2f/tNHlbDQSkhEBQLy
3nQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:34 2025 by rpki-client