Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0CGnm5p_AwJv3pZHkUoy8LdVJik.roa
File: 0CGnm5p_AwJv3pZHkUoy8LdVJik.roa (raw, json)
Hash identifier: MBCVOOLuHJak1KduKS41ZNVQ8lkOyr5ckTKCyUUheCM=
Subject key identifier: D0:21:A7:9B:9A:7F:03:02:6F:DE:96:47:91:4A:32:F0:B7:55:26:29
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019548F794E75CF6CB57AE1F9A8E735D8E14
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0CGnm5p_AwJv3pZHkUoy8LdVJik.roa
Signing time: Thu 27 Feb 2025 19:52:19 +0000
ROA not before: Thu 27 Feb 2025 19:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 09:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:f7:94:e7:5c:f6:cb:57:ae:1f:9a:8e:73:5d:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 27 19:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d021a79b9a7f03026fde9647914a32f0b7552629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:f7:10:f1:78:bc:b8:7c:b8:3c:fe:d7:e4:
9f:73:39:a8:16:77:8a:00:1f:1f:40:d7:ae:3b:4c:
70:ca:02:c7:1e:f5:24:9b:c3:76:e8:1e:c8:a5:dd:
cc:8d:78:77:2c:d6:77:ec:bc:1e:70:c6:7a:7e:a8:
43:c4:88:fa:ee:f8:43:46:48:08:db:d8:49:6b:82:
d7:ee:93:a3:17:a7:8f:69:d3:d8:4a:86:55:36:fa:
c6:05:80:1f:21:3d:6d:f7:7b:15:a5:33:00:0f:d7:
4c:7f:f3:91:ff:ff:0b:29:ac:b1:a7:75:c9:50:5b:
2b:01:a5:6f:b5:ad:27:ec:19:c3:bb:4d:15:41:54:
27:35:83:08:84:17:c8:3c:eb:ac:6b:eb:3f:49:20:
b4:bc:ed:4c:3a:b3:bc:c0:32:82:53:2d:c4:44:1d:
86:e8:5a:70:55:79:ac:c5:ac:c5:62:5e:a9:56:9b:
46:ed:0d:87:e7:57:24:7f:54:c4:64:bb:4b:30:b5:
97:3b:5a:8d:b3:6f:9e:39:e5:2d:dd:be:81:36:7d:
4d:49:38:0a:8f:9e:2a:2e:12:4a:a0:fb:11:3a:a8:
30:d3:b0:ce:f8:ba:86:cf:98:ce:be:29:0f:0c:9e:
0f:09:54:d5:58:c0:13:df:66:ac:65:2a:2e:8f:a6:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:A7:9B:9A:7F:03:02:6F:DE:96:47:91:4A:32:F0:B7:55:26:29
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0CGnm5p_AwJv3pZHkUoy8LdVJik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6d:4f:27:6e:f9:9b:85:e8:c6:6e:b3:a1:e0:18:18:52:33:
eb:7d:82:da:e9:e7:08:2a:a2:19:7a:0b:70:49:ae:b7:a2:2c:
7d:79:43:51:11:c1:e2:79:c2:aa:08:4a:67:45:ec:4d:c1:4b:
1c:5b:5b:7a:68:d5:d2:0f:b5:04:ed:5b:36:84:52:9a:74:db:
7c:68:b8:4e:a5:a6:42:16:af:20:3b:b2:8a:f3:b1:ae:28:2f:
5b:a5:eb:e2:f4:33:6f:24:fa:36:82:5e:8f:a5:a0:b1:55:3e:
4b:19:be:60:1a:03:f6:79:8c:fc:51:da:89:c0:25:d5:ff:66:
90:2a:a4:a0:23:ef:0c:b4:9d:e3:da:10:bb:c2:8e:11:e5:59:
a6:e2:5d:c4:b7:ad:0f:87:d5:7b:47:04:0c:b7:a0:5e:93:bf:
43:7f:8a:79:f3:e0:e1:4e:d4:9a:af:d5:6a:43:a9:a4:d7:2f:
0f:8f:6e:f7:02:d5:1a:74:00:f5:78:31:a6:9f:67:0c:16:8c:
69:77:ac:89:9c:ad:f2:ac:1b:ae:da:d4:f1:6a:70:e9:1c:e4:
f2:23:c7:3c:97:6f:9a:57:05:f0:e8:8e:57:83:65:c3:86:e6:
2d:2e:4e:3e:7e:3e:fd:22:84:39:a5:2e:51:9b:a7:49:3a:62:
ad:16:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:11 2025 by rpki-client