Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1aSqH1C_y52nR8ipoBj9v752P4.roa
File: M1aSqH1C_y52nR8ipoBj9v752P4.roa (raw, json)
Hash identifier: 8SXPmkdF8Hz3KrTYnFhh9rugkq75bAZMy73c1pjPeOQ=
Subject key identifier: 33:56:92:A8:7D:42:FF:2E:76:9D:1F:22:A6:80:63:F6:FE:F9:D8:FE
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019496E0DD3B1294F579E94418C0922D9BB8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1aSqH1C_y52nR8ipoBj9v752P4.roa
Signing time: Fri 24 Jan 2025 05:55:06 +0000
ROA not before: Fri 24 Jan 2025 05:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.62.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
103.138.78.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
192.253.210.0/24 maxlen: 24
192.253.211.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.166.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.182.0/24 maxlen: 24
203.188.183.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.68.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.75.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
212.56.52.0/24 maxlen: 24
212.56.53.0/24 maxlen: 24
212.56.54.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 08:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:96:e0:dd:3b:12:94:f5:79:e9:44:18:c0:92:2d:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 24 05:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335692a87d42ff2e769d1f22a68063f6fef9d8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:8e:f5:f5:39:90:75:a2:ed:8f:8c:fb:36:
2a:2d:52:52:c4:9b:cc:4a:cc:65:23:2b:6a:8e:e4:
83:8a:9d:37:ca:45:23:83:12:db:5d:60:f0:90:b5:
a6:6c:52:a4:e4:19:85:33:4b:7d:ea:34:f9:3e:99:
f1:b0:9d:f8:7d:8c:cf:f4:a0:93:ff:6c:23:05:0f:
42:06:c6:62:07:c5:e0:13:d5:bd:20:30:e0:c0:1c:
23:28:23:c3:a7:f5:15:72:bb:eb:13:65:3f:db:b9:
32:92:da:43:19:6c:82:21:a5:98:ef:f4:35:a2:ed:
7f:ac:7a:03:95:97:74:14:b3:50:e2:a5:3f:a2:f0:
b1:14:8e:f5:33:ab:b9:ab:12:60:98:47:07:dc:1a:
97:b7:cb:4b:25:8b:ab:81:55:21:e9:7c:a6:da:cb:
70:6b:dc:41:2e:64:6b:b7:88:b6:bb:63:09:86:22:
f4:70:5a:8c:39:6d:45:c0:8b:51:9d:f5:dd:47:2f:
9a:74:21:5d:a0:76:f3:f3:79:37:4b:79:22:68:a0:
ad:35:c1:a9:fb:4a:4d:3e:8b:0a:0c:91:49:a9:54:
cd:20:60:37:0b:69:24:36:ea:b4:03:84:b4:df:d6:
7f:c2:21:f7:d6:da:5a:5c:c3:e9:66:b8:e9:0a:74:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:92:A8:7D:42:FF:2E:76:9D:1F:22:A6:80:63:F6:FE:F9:D8:FE
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1aSqH1C_y52nR8ipoBj9v752P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.62.0/24
62.169.134.0/24
103.61.196.0/24
103.138.78.0/24
167.160.28.0/24
192.253.208.0/22
198.55.31.0/24
203.188.166.0/24
203.188.174.0-203.188.180.255
203.188.182.0-203.188.191.255
212.32.48.0/22
212.32.68.0/24
212.32.70.0-212.32.73.255
212.32.75.0-212.32.79.255
212.56.52.0/22
213.254.163.0/24
213.254.172.0/22
Signature Algorithm: sha256WithRSAEncryption
78:a8:2a:ab:55:e9:72:f3:16:d4:c7:2e:2c:22:b4:f3:81:9e:
e2:10:53:82:00:6b:11:4c:36:6b:85:1b:ef:6b:be:57:63:36:
6c:8b:97:87:c1:a5:a3:98:fb:7f:f5:61:58:f9:be:09:6d:5b:
e4:0b:14:3a:40:53:2a:9b:59:0e:66:40:7b:12:02:ae:e9:07:
ec:20:83:b5:59:6d:d7:10:5d:67:6f:20:fe:79:50:77:f9:90:
88:e4:f0:b9:e7:9e:43:95:6a:23:f2:49:53:50:80:8f:50:a6:
d0:06:c7:ae:77:c6:fb:35:9d:05:4d:60:c2:03:ce:a8:e0:fb:
97:21:35:82:46:e6:d3:b5:d3:29:4a:b3:d3:a0:92:36:98:14:
34:85:23:aa:55:1a:5e:60:69:ef:8b:18:08:c3:62:05:2e:08:
12:03:82:a9:f2:93:2b:19:c0:03:fd:1d:c3:86:61:6f:b9:24:
3e:dc:ef:0c:2c:cb:8b:5b:78:21:ec:b5:70:59:2e:c4:38:97:
b9:e6:d9:48:7e:cf:06:e2:fd:8b:94:92:10:6c:12:6c:56:1b:
a8:9d:58:d7:1a:39:8d:0a:28:ea:5c:04:8e:b5:42:19:79:ce:
a5:90:a3:88:a9:f2:44:ec:8b:31:fe:e8:57:2f:9a:2d:3d:3b:
79:7d:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:40 2025 by rpki-client