Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OEpp4Pumdzxu5xvavOzIy1x8Apg.roa
File: OEpp4Pumdzxu5xvavOzIy1x8Apg.roa (raw, json)
Hash identifier: AUsFCzt3m7fm1usLsu3eo9+DTfKvMov6dhwL45JqyJA=
Subject key identifier: 38:4A:69:E0:FB:A6:77:3C:6E:E7:1B:DA:BC:EC:C8:CB:5C:7C:02:98
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01954BCE1D98D70DF2FF59ADB6247AECE0EF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OEpp4Pumdzxu5xvavOzIy1x8Apg.roa
Signing time: Fri 28 Feb 2025 09:05:53 +0000
ROA not before: Fri 28 Feb 2025 09:05:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 13:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:ce:1d:98:d7:0d:f2:ff:59:ad:b6:24:7a:ec:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 28 09:05:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384a69e0fba6773c6ee71bdabcecc8cb5c7c0298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:db:22:3b:05:12:8e:a0:b0:71:b4:5b:26:
3e:d9:3a:eb:5a:98:9e:01:30:bd:eb:1b:4f:de:db:
c6:40:ba:63:43:e9:1c:16:e3:a3:6c:5f:97:aa:36:
01:91:59:33:1f:5b:d4:e5:20:02:1e:5d:33:04:28:
a6:19:d5:36:93:0f:f2:1b:4c:21:8f:8e:55:2f:92:
75:ac:42:d0:10:b1:05:10:a8:4d:a7:43:5f:19:3e:
1c:fa:e8:82:40:b3:94:8f:b6:cb:e5:07:25:04:70:
ab:e4:d0:a4:62:81:a4:fb:c6:4c:f3:ae:a7:2d:e4:
7b:f6:00:09:c0:41:59:eb:47:b4:aa:5d:08:56:c2:
51:0e:12:62:be:d6:9e:1d:80:25:11:e9:da:6c:91:
2c:70:e7:24:92:eb:6a:55:96:52:08:12:8d:27:d3:
c2:32:a5:a3:60:de:c9:6b:de:bd:3c:55:86:8d:ca:
cb:3c:59:ec:4e:7a:08:cc:ee:85:83:a9:26:4b:89:
36:a5:04:15:29:5b:37:f3:4e:b6:bd:53:d0:20:e5:
0d:79:0d:13:7d:2c:ef:b3:58:e9:19:8a:7e:2b:a4:
ab:9d:dc:66:d6:2d:6c:07:3c:6b:a3:4f:60:2a:c0:
f0:36:20:0b:fe:88:d5:d4:4a:ab:ce:04:9c:8f:b9:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:69:E0:FB:A6:77:3C:6E:E7:1B:DA:BC:EC:C8:CB:5C:7C:02:98
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OEpp4Pumdzxu5xvavOzIy1x8Apg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8c:76:38:88:4e:c7:2f:4a:d5:4e:75:58:b2:5b:67:6f:48:
52:63:76:a8:86:84:45:95:48:3a:2c:60:a5:86:a3:0a:a2:dd:
8c:ea:3d:15:cb:44:f2:da:5b:5d:80:93:e6:0b:62:5d:e5:24:
b0:7c:1d:98:92:d0:d8:0d:52:f3:53:dc:87:ed:83:85:bf:20:
1a:bb:c8:c9:08:c2:6f:87:16:b9:c9:1d:c1:fe:f4:9b:13:df:
80:d2:6f:0f:b5:42:d0:cf:80:c0:9a:cb:d7:f2:a1:4a:e7:a6:
7a:a0:29:e2:57:be:e1:54:5a:66:86:6e:49:b3:1a:ca:2e:5f:
b6:af:39:45:8d:46:45:bf:08:e1:a3:92:58:67:3b:e8:14:52:
a1:7b:27:46:44:07:14:9d:4d:eb:9d:3b:20:7b:2c:aa:93:d3:
b3:d2:3d:f3:13:76:9a:95:3b:3d:c1:04:90:10:30:a1:90:73:
55:bd:5a:b8:8e:96:38:88:02:41:43:6e:1c:89:8b:fe:7a:45:
3c:72:42:f8:8f:c8:65:d0:c2:ee:70:5e:ca:13:2a:00:48:32:
8e:6e:a2:35:84:8e:70:84:51:fa:8c:72:0d:32:a2:2f:3c:ff:
be:5a:91:25:c8:4b:f8:14:eb:02:33:08:6b:05:f2:26:b9:d0:
ec:ce:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:28:00 2025 by rpki-client