Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/5980H-I3BksXW-kS06Eu1X2XYyg.roa
File: 5980H-I3BksXW-kS06Eu1X2XYyg.roa (raw, json)
Hash identifier: KKMCgHeVbYXT86m8pXNv9Q5q52OjRPjGePS1qjOTpuk=
Subject key identifier: E7:DF:34:1F:E2:37:06:4B:17:5B:E9:12:D3:A1:2E:D5:7D:97:63:28
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01944A44A0653B29A183616E42E10DB82CAC
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/5980H-I3BksXW-kS06Eu1X2XYyg.roa
Signing time: Thu 09 Jan 2025 08:53:19 +0000
ROA not before: Thu 09 Jan 2025 08:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:44:a0:65:3b:29:a1:83:61:6e:42:e1:0d:b8:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 9 08:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7df341fe237064b175be912d3a12ed57d976328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:0c:a5:2c:98:67:0b:5e:fa:0e:e6:22:5f:
b6:33:a1:b4:f5:4e:14:b0:21:be:db:3f:bb:c3:6a:
f4:1e:06:e6:67:35:40:85:f5:e3:0b:be:b0:a0:ea:
0a:6d:c6:01:85:6a:43:c6:9a:48:9d:46:53:c7:0e:
71:3c:cb:22:69:58:5d:82:02:0f:20:03:ed:12:8c:
a2:4c:a3:b2:93:1c:d6:c5:05:03:f9:5c:e5:e4:a2:
84:bc:dd:1e:f0:08:89:92:5d:8a:53:2b:d3:21:bd:
84:81:8f:b8:f7:d0:c6:d3:68:d1:08:08:70:82:63:
83:6e:32:0a:e2:3f:85:d9:5c:98:a6:03:76:92:21:
a2:ed:6c:58:bd:4f:00:98:0c:d4:37:47:98:88:d4:
6c:0e:33:40:99:02:91:80:2c:4b:5d:2d:20:4c:61:
c5:f2:50:a3:b5:70:3b:1a:6b:a3:bf:ab:03:2e:58:
74:17:b9:e3:07:6b:e8:73:33:59:8f:8c:77:92:da:
46:d1:78:6e:c8:de:03:0d:73:f1:12:2b:69:05:7e:
29:db:2b:f0:3a:d7:a2:15:a8:ef:6b:a4:35:e5:81:
86:0f:ac:04:92:bc:79:27:7d:52:e2:75:85:82:11:
c1:4e:f0:b7:06:6f:d0:ac:f6:12:63:ba:bc:31:c5:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:34:1F:E2:37:06:4B:17:5B:E9:12:D3:A1:2E:D5:7D:97:63:28
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/5980H-I3BksXW-kS06Eu1X2XYyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
28:4f:0b:af:4c:0e:d5:a3:74:90:73:e1:8a:6d:4a:6b:03:73:
c8:03:17:1d:e6:fd:63:ad:78:9a:02:f0:47:68:f4:c3:cd:19:
d8:e1:8a:b7:fa:43:2f:8b:13:be:da:4b:ce:d9:3b:76:4b:5e:
c4:ac:94:44:46:85:5f:b4:b3:7f:78:dd:da:b8:71:a9:ce:67:
bb:30:d7:32:84:fc:71:ca:00:d6:6c:cc:84:44:96:62:16:74:
5b:b0:77:8d:92:68:62:e0:de:b7:0a:44:94:b0:da:c6:8f:bd:
09:15:39:82:4d:d9:5d:66:98:c3:a3:02:d7:10:e6:fa:80:33:
e7:f6:b1:25:28:14:b4:24:e1:b5:10:bc:d0:fa:3e:cd:3a:e1:
1e:3f:7d:7e:5b:50:d4:dd:03:d3:7c:49:5d:f5:02:36:e4:cc:
a8:88:c9:dc:5c:8f:96:ad:df:83:6b:94:01:dd:22:6b:a1:dc:
45:db:7b:d6:f7:a3:6e:e6:1a:4c:f3:ec:04:6a:56:a4:22:db:
de:13:64:16:55:77:37:22:b6:3e:02:49:40:04:43:04:ec:5a:
9d:46:79:d7:3d:13:35:ae:9b:45:24:ff:70:87:3e:90:a5:52:
6b:da:d2:53:3f:3e:95:ff:57:4e:14:af:ca:3c:e9:62:4c:7c:
db:bb:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:03:27 2025 by rpki-client