Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Iqdhck29kSnKurhAstpEjlJkgmM.roa
File: Iqdhck29kSnKurhAstpEjlJkgmM.roa (raw, json)
Hash identifier: d2Q9Mt9qKDriYGznbxN0PDc26rqnRivspDIjzFx1N+E=
Subject key identifier: 22:A7:61:72:4D:BD:91:29:CA:BA:B8:40:B2:DA:44:8E:52:64:82:63
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195CCE645BC640301C42DAA6976E9D9714E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Iqdhck29kSnKurhAstpEjlJkgmM.roa
Signing time: Tue 25 Mar 2025 10:43:17 +0000
ROA not before: Tue 25 Mar 2025 10:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 12:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:e6:45:bc:64:03:01:c4:2d:aa:69:76:e9:d9:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 25 10:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22a761724dbd9129cabab840b2da448e52648263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:89:17:8d:98:9f:62:10:11:ab:28:1b:8e:
fa:d1:ec:f6:19:b2:36:62:f1:bd:89:03:ca:24:fd:
8d:e3:a5:5c:7d:65:66:ba:ec:70:7e:78:d6:be:28:
5d:d9:2b:43:e0:ae:15:68:96:1b:7b:58:92:2d:cc:
31:83:c6:26:06:26:f2:4d:4c:63:cc:ff:f8:6a:2d:
5c:ef:d5:ca:a0:12:95:d7:ac:2d:ad:9f:73:df:17:
a8:f2:98:4a:8c:96:4d:12:1f:fb:3f:d8:d6:dd:c7:
a9:7c:d7:70:ff:69:ca:e4:4b:a8:d4:bb:34:79:54:
73:45:f4:3b:b0:31:e9:12:74:c9:e1:de:49:e2:91:
97:19:6a:8d:2e:05:44:b1:fb:6d:ff:f6:09:c8:1e:
cb:8c:66:f4:07:fb:06:38:7f:be:eb:64:32:ce:d2:
26:9b:88:0a:4b:e8:87:6b:19:69:4a:ca:45:1f:f4:
76:cb:6c:79:6d:fe:43:a9:2c:a6:d4:c2:31:1a:a3:
ca:e2:1d:f7:09:02:ba:f0:cc:0e:4e:ae:fc:79:4a:
cc:60:66:f2:c3:d7:4a:97:5f:0e:35:06:f3:ff:65:
3f:f5:07:a7:75:d4:c7:52:28:5c:e7:83:da:20:01:
96:4f:08:4d:34:a6:72:f5:31:9e:35:d9:9f:d8:77:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:61:72:4D:BD:91:29:CA:BA:B8:40:B2:DA:44:8E:52:64:82:63
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Iqdhck29kSnKurhAstpEjlJkgmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
06:94:0b:6b:0b:77:78:75:9d:94:fc:c1:5a:18:22:84:0d:0b:
b9:45:59:a9:4e:09:9e:15:ee:0e:c9:e9:95:86:b9:39:11:31:
cc:75:f9:19:27:27:91:14:9d:be:59:04:2a:09:47:01:71:51:
d2:3a:98:c0:3e:e2:31:94:73:ac:03:58:7c:61:c9:b0:7b:16:
34:85:07:ac:4a:3b:65:14:9c:96:aa:14:68:d7:0a:f0:c0:18:
8e:9b:de:68:ef:4a:5d:dc:27:30:1a:2b:2a:19:c0:9e:ee:08:
37:23:31:2c:11:91:11:5b:28:2e:9b:a9:2d:4e:12:4a:bc:dc:
55:66:8f:40:dc:ce:54:7a:51:cb:72:53:18:be:f9:7b:1a:6e:
25:81:0b:98:c4:0e:61:b2:47:03:6e:0e:4e:1d:72:ca:8e:2c:
8b:3b:b1:61:52:ba:ce:ae:20:3d:29:63:28:d4:6d:9f:86:2e:
32:12:e2:51:6c:3f:a8:11:fa:15:1b:81:5f:7d:f9:a5:0e:42:
08:1e:ec:19:92:07:18:86:71:71:00:8b:16:01:e1:fe:d5:e5:
59:72:a6:e9:39:85:e8:c8:ef:4e:a1:0a:f8:43:16:95:ce:49:
e4:cb:91:0e:62:c2:84:9d:f6:ff:9d:63:4e:86:43:07:6b:ed:
1b:69:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:42 2025 by rpki-client