Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HAbT88sefMu4e7tmLw2sMCegGuU.roa
File: HAbT88sefMu4e7tmLw2sMCegGuU.roa (raw, json)
Hash identifier: pDInnwBEJM8RlArr0iXibzeAw0CuGDrF3YM3zlnnju4=
Subject key identifier: 1C:06:D3:F3:CB:1E:7C:CB:B8:7B:BB:66:2F:0D:AC:30:27:A0:1A:E5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195CC2FA6E8AB3EC1DD2FC18F8F81399CD7
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HAbT88sefMu4e7tmLw2sMCegGuU.roa
Signing time: Tue 25 Mar 2025 07:23:49 +0000
ROA not before: Tue 25 Mar 2025 07:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 10:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:2f:a6:e8:ab:3e:c1:dd:2f:c1:8f:8f:81:39:9c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 25 07:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c06d3f3cb1e7ccbb87bbb662f0dac3027a01ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:93:cd:c0:b7:1f:38:88:0a:85:d3:94:b1:
6a:8f:18:5b:9d:28:ed:1a:92:2e:5a:13:26:6f:12:
ec:d7:29:5c:dc:b1:f1:ee:c0:05:9e:bc:31:f7:77:
6f:1c:82:75:23:a9:8b:46:6c:db:41:56:8e:15:e7:
68:28:00:e4:dc:a9:bc:8f:ac:ae:e2:3e:20:8f:e8:
3e:bc:82:f8:2f:df:21:a6:f9:43:d0:6c:54:cd:e4:
eb:0a:f0:58:0f:da:44:70:42:5d:1c:08:3f:dd:0d:
74:d3:c1:39:b8:2b:7e:df:1b:cc:2d:2f:11:6c:1e:
9a:24:9f:41:32:16:04:2b:35:b3:fe:27:fd:9b:6f:
35:99:fd:92:dc:8e:c2:7f:9a:79:a4:94:b6:d3:28:
c3:79:1f:53:85:52:c1:6e:15:60:99:84:fe:22:bf:
fa:4c:17:77:ee:39:fe:73:89:5b:01:ea:35:18:ab:
f4:54:91:82:bb:a7:c5:53:a1:19:57:d0:cd:41:89:
cb:59:2f:d5:f0:7d:c2:5c:1d:8d:7d:1f:3b:36:71:
5a:d2:1b:1f:31:2c:f9:1a:56:c5:26:b3:83:c1:bd:
16:ad:ea:eb:ef:5e:d4:06:54:d3:58:a6:c5:57:39:
72:49:45:e2:74:98:17:df:31:d5:b3:27:39:a4:06:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:06:D3:F3:CB:1E:7C:CB:B8:7B:BB:66:2F:0D:AC:30:27:A0:1A:E5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HAbT88sefMu4e7tmLw2sMCegGuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0/24
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:07:41:5d:a5:62:b9:64:cd:09:6a:cc:bc:75:b4:67:d1:55:
f9:48:70:63:8d:60:1e:64:be:f6:b2:5b:cb:96:a4:6e:15:97:
b5:4a:d6:bd:59:05:60:cf:90:8e:7a:cd:95:e3:a9:6f:7a:cb:
24:9e:33:72:0f:d2:ff:11:1a:34:21:70:39:3a:76:ae:3c:d1:
3d:c7:59:49:8e:ff:bb:07:d7:37:54:3f:a5:9c:7d:1a:7d:1a:
7d:cc:ec:c0:38:76:26:0b:23:b7:e5:62:82:f1:da:b0:36:5e:
65:b8:76:0f:56:80:2f:80:18:4f:c2:2a:26:96:09:80:67:0a:
7b:37:f2:01:e5:5e:a6:d4:37:a9:f5:73:d8:be:c5:16:a5:81:
4d:79:e6:fe:33:05:4c:2e:99:19:81:0f:ca:9b:cf:6d:39:9d:
60:01:49:1d:83:9f:7a:fe:fa:5c:9a:c5:0d:29:62:94:54:bb:
c7:c9:6b:c9:88:08:d8:8f:d0:ee:cc:60:39:f7:55:28:b8:46:
57:a9:6e:ea:18:6c:3a:b7:4b:d6:06:d5:2a:3c:9c:5c:e8:23:
d8:34:3c:fc:e0:75:da:fd:5a:2e:93:b8:36:97:76:b1:16:38:
7a:b8:2c:08:77:79:85:a4:5d:60:ce:88:52:10:b4:77:a6:7f:
dd:2c:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:13 2025 by rpki-client