Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/CzwXOczv17IHKMPD2T6x7PnVRUc.roa
File: CzwXOczv17IHKMPD2T6x7PnVRUc.roa (raw, json)
Hash identifier: 4Eo3gMRWdjp6Tnuk+R9Uuv5IYWgeJCFzWhkNdDePpkA=
Subject key identifier: 0B:3C:17:39:CC:EF:D7:B2:07:28:C3:C3:D9:3E:B1:EC:F9:D5:45:47
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195A3559FD12C3AB0A4FD14940D7C649D80
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/CzwXOczv17IHKMPD2T6x7PnVRUc.roa
Signing time: Mon 17 Mar 2025 09:00:52 +0000
ROA not before: Mon 17 Mar 2025 09:00:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 13:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:55:9f:d1:2c:3a:b0:a4:fd:14:94:0d:7c:64:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 17 09:00:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b3c1739ccefd7b20728c3c3d93eb1ecf9d54547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:d5:18:1d:f9:d9:b5:d9:f1:13:04:4e:de:
1a:81:22:3f:00:26:07:72:d9:55:33:a6:57:cf:c7:
b4:d8:3e:22:dc:67:53:4e:58:1a:e3:c9:25:a6:86:
7c:95:90:7b:4e:07:37:98:c6:1b:9b:fc:ae:92:76:
0b:8c:0c:35:a3:3e:6b:15:b9:c5:dc:96:69:77:01:
c7:8d:db:36:2a:90:0c:7c:c4:47:79:fe:d9:a5:98:
6b:cc:8b:a3:11:f2:cb:d5:25:80:a6:1a:2e:89:11:
cc:f4:0b:24:c2:8c:3e:bc:21:04:fb:14:e0:70:1e:
4a:39:d7:f0:91:7f:fc:c6:f7:7b:43:d8:d4:82:0d:
ac:e5:99:16:ab:10:d1:39:e6:70:b1:6e:33:ef:e3:
0c:07:2d:2a:99:a1:f9:d0:d3:d9:9f:a2:47:06:cb:
00:17:56:7b:f3:bd:be:f5:43:d5:1c:f9:df:dc:72:
86:75:07:ae:b7:b2:12:4a:02:84:fb:56:e3:78:1e:
9c:3a:5a:96:ba:96:0c:0b:1e:77:6f:dc:89:6a:72:
db:f6:12:61:10:93:00:04:b0:c8:1d:fa:c0:e0:a5:
3f:7f:94:04:8a:7c:40:18:86:3b:55:89:33:6c:5c:
ad:9e:54:8a:ab:05:20:f3:88:46:3d:33:47:43:a1:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:17:39:CC:EF:D7:B2:07:28:C3:C3:D9:3E:B1:EC:F9:D5:45:47
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/CzwXOczv17IHKMPD2T6x7PnVRUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5a:6f:38:8f:65:f4:a3:f2:17:6d:8c:ef:f5:c4:98:05:c0:
4c:d8:01:38:7e:f5:58:e6:16:f2:24:5a:45:0a:bf:bc:96:4e:
96:af:ea:e9:08:ab:13:0e:c4:4b:13:4a:f0:d9:8a:55:3d:82:
e3:60:ca:3e:e1:e7:63:3a:79:4b:99:af:ab:28:ad:ec:d1:12:
4f:72:1c:d3:91:e2:ed:e2:5d:9a:89:4e:fd:46:53:e4:6c:a9:
95:47:da:4c:48:6c:b5:78:35:1b:f5:72:74:07:32:ae:8b:93:
70:87:13:ff:42:d5:c7:6a:16:e6:95:32:53:34:06:b7:11:ac:
3a:68:81:df:30:ae:74:e0:f4:3e:9c:80:ab:2f:bf:06:8b:c0:
44:29:e7:0f:22:94:4e:8e:de:09:03:6f:ad:f3:2c:15:53:97:
29:a0:2a:68:14:44:07:96:b7:eb:00:7a:d9:89:95:e7:0b:f1:
19:15:b6:2f:89:96:13:83:8d:e9:03:ba:4f:00:f7:a6:aa:e0:
22:7a:d5:34:e3:95:cf:ef:31:03:c5:27:58:1a:64:66:59:8a:
0f:24:bf:66:69:42:77:48:3e:dd:e3:7d:98:51:7b:1b:39:b3:
f4:17:1c:08:f9:78:39:fa:15:78:19:02:83:c3:1c:36:bd:49:
c7:67:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:27 2025 by rpki-client