Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KBnoOVsfyccXAXDM6ciSnMfgWUI.roa
File: KBnoOVsfyccXAXDM6ciSnMfgWUI.roa (raw, json)
Hash identifier: /yDUcvJ12ICnNO6P4JhuiknJXcEOJ1De8CjUT15mexA=
Subject key identifier: 28:19:E8:39:5B:1F:C9:C7:17:01:70:CC:E9:C8:92:9C:C7:E0:59:42
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01956ACAA438C29B17904404517F5DB1176A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KBnoOVsfyccXAXDM6ciSnMfgWUI.roa
Signing time: Thu 06 Mar 2025 09:30:20 +0000
ROA not before: Thu 06 Mar 2025 09:30:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 19:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:ca:a4:38:c2:9b:17:90:44:04:51:7f:5d:b1:17:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 6 09:30:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2819e8395b1fc9c7170170cce9c8929cc7e05942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:f7:e2:db:5a:b9:40:1a:7a:0e:3d:9c:32:
17:35:c0:a0:97:a5:d4:71:67:7c:e5:f7:be:76:96:
d2:00:b4:0f:40:29:19:ff:56:ad:6d:59:e3:b2:2e:
6b:fc:64:30:0b:82:0d:48:f7:18:a4:fb:8b:61:05:
cd:2e:c6:dc:cd:82:f1:ad:08:c1:3d:0d:21:31:85:
70:19:ae:a5:f6:29:61:b2:1d:b1:59:e6:7b:2b:42:
6c:cd:17:fe:3c:bf:98:14:66:4e:ab:48:43:6b:4a:
ec:a9:46:bc:e0:c4:5d:ba:6c:36:a8:f7:74:24:f3:
11:03:fa:6b:6c:08:ac:db:a4:05:7f:67:9d:c3:f7:
c2:a7:89:34:2a:ae:fc:1c:3b:b2:45:ee:1c:ab:5e:
70:eb:a1:37:d4:a9:64:fa:ee:27:39:42:90:b2:4a:
d9:34:29:69:35:f5:84:a5:87:6b:a0:19:b3:05:a8:
df:f4:55:8d:02:1e:ea:29:0b:8a:3f:29:a3:d0:c2:
a3:fb:7d:23:f2:b7:a9:d6:18:3a:66:f3:d2:6f:bd:
e9:c9:b7:83:37:e1:8a:58:53:b1:22:fc:2c:74:1d:
2b:f8:25:1f:56:df:d8:b5:e4:f2:94:89:08:bf:cd:
b3:5c:f1:13:1e:f7:ac:21:70:0d:eb:c6:ab:36:e7:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:E8:39:5B:1F:C9:C7:17:01:70:CC:E9:C8:92:9C:C7:E0:59:42
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KBnoOVsfyccXAXDM6ciSnMfgWUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.212.0/24
155.2.215.0/24
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
84:77:91:62:56:fe:8d:6c:ee:ad:d7:94:09:d8:56:d8:d7:81:
56:58:e9:4b:85:2a:55:4a:72:bf:e7:5d:51:2e:45:9d:d7:8a:
37:c4:9a:f0:42:35:4b:a4:1f:29:6d:16:94:67:08:a2:1c:b3:
ad:c3:ea:d7:4c:01:25:21:cf:32:c1:45:f6:ba:f5:9a:81:b6:
66:61:9e:3f:87:6a:5c:48:e8:7c:dc:1c:1b:98:03:e5:dc:80:
04:f9:60:1d:94:07:72:50:c6:1f:22:e9:8f:74:ae:35:77:7b:
c2:d6:6f:33:12:95:ef:84:47:b4:21:62:82:9e:cb:c4:ba:0a:
46:d7:21:0d:73:10:17:fb:94:8e:57:9a:b1:e8:be:3b:8a:cd:
b7:a3:54:a1:9e:6b:6e:79:f3:e0:4d:a9:e1:77:fe:e0:73:a0:
69:6e:d2:e1:af:f4:2c:5f:f3:db:50:75:16:20:a9:b8:ae:b7:
65:ee:59:5e:a7:a2:a7:96:2f:e4:fd:f4:af:e3:e7:7d:17:71:
e7:0d:84:ac:77:cb:04:aa:29:93:01:4d:20:fa:05:82:ea:71:
45:21:27:ca:d9:7a:28:aa:e8:c4:6a:8b:a4:42:b9:0a:fb:e0:
d3:07:3b:f9:ed:9f:c4:f2:7c:9b:98:fb:6a:1c:af:4b:91:43:
4c:33:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:11 2025 by rpki-client