Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OnhDcWUmCahAuk6EM1oTJ1Jwvfc.roa
File: OnhDcWUmCahAuk6EM1oTJ1Jwvfc.roa (raw, json)
Hash identifier: vLZ3/IOr82KsqiL2B1Cf9o/jbbftpfH7ziABYTQDZes=
Subject key identifier: 3A:78:43:71:65:26:09:A8:40:BA:4E:84:33:5A:13:27:52:70:BD:F7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01955C962B2D231DEBBABDFB8C70C9A6E58E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OnhDcWUmCahAuk6EM1oTJ1Jwvfc.roa
Signing time: Mon 03 Mar 2025 15:18:19 +0000
ROA not before: Mon 03 Mar 2025 15:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
103.138.78.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
192.253.211.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.166.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.182.0/24 maxlen: 24
203.188.183.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.75.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
212.56.52.0/24 maxlen: 24
212.56.53.0/24 maxlen: 24
212.56.54.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:96:2b:2d:23:1d:eb:ba:bd:fb:8c:70:c9:a6:e5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 3 15:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a784371652609a840ba4e84335a13275270bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:3f:a2:b0:12:76:0c:8d:52:3e:b9:66:7d:
7d:79:b4:4e:ca:40:39:3e:fe:95:7a:6c:2f:ae:6d:
17:ec:e8:fd:5a:d4:5a:08:17:72:63:dc:13:6c:f3:
9d:aa:15:cc:1c:c1:6b:6a:49:42:95:e5:e7:ae:b1:
31:76:47:20:b5:d5:f8:c9:e4:ad:95:d1:79:93:8e:
27:4a:ac:8b:1f:aa:95:63:02:58:3a:7e:a8:29:af:
ed:58:ed:b5:4d:46:ba:ca:ff:7e:91:93:a9:82:44:
a1:8a:78:00:0e:c1:bd:12:9c:72:fe:91:db:02:62:
01:f5:04:5a:85:7f:43:42:df:ef:8a:9f:04:09:48:
6b:91:74:2a:d7:de:ee:25:66:d5:42:82:64:ec:47:
e2:4b:58:e6:f2:23:78:b4:66:40:c6:30:f5:28:41:
e6:f3:e9:8b:8a:4d:79:bf:03:e0:42:c9:33:4c:18:
18:78:d3:69:e1:1c:03:c4:0b:a6:4f:91:35:43:f7:
af:9b:78:96:fc:b2:8b:58:3c:3c:de:9e:e2:7f:a8:
b2:67:49:62:ff:55:86:9b:16:5e:45:90:5d:b4:ef:
4a:cd:65:46:1d:f5:f6:3a:e0:65:5b:ec:41:b2:5f:
dd:07:93:9b:f1:67:78:01:3a:2f:02:ab:a0:73:c1:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:43:71:65:26:09:A8:40:BA:4E:84:33:5A:13:27:52:70:BD:F7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OnhDcWUmCahAuk6EM1oTJ1Jwvfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
62.169.128.0/24
103.61.196.0/24
103.138.78.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
192.253.211.0/24
198.55.31.0/24
203.188.166.0/24
203.188.174.0-203.188.180.255
203.188.182.0-203.188.191.255
212.32.48.0/22
212.32.70.0/23
212.32.73.0/24
212.32.75.0-212.32.79.255
212.56.52.0/22
213.254.163.0/24
213.254.172.0/23
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:06:53:47:98:c4:08:37:36:91:09:25:79:84:4f:d4:97:f9:
7e:38:15:f1:d4:c7:5a:ef:76:2c:99:42:3c:6d:76:10:94:42:
a9:3b:d4:36:23:2e:58:94:5c:72:05:29:1d:9c:fa:35:94:0e:
80:5f:87:87:36:8b:f9:9f:d3:25:d3:4e:b1:a1:1b:e3:27:b2:
1a:8c:cf:f9:93:4e:27:60:e5:e0:d4:18:b1:61:3b:d1:67:61:
f5:7a:8d:34:69:41:a8:8a:bc:c4:cc:a0:f3:ff:3b:fc:b2:91:
36:29:2d:e0:25:4f:44:82:be:fb:6b:7f:d7:40:af:25:0f:96:
80:45:c2:e5:b8:a2:88:b9:d1:4b:df:26:b1:7b:f6:39:61:b6:
a6:c5:b1:d3:a7:cd:43:7e:7b:c5:3f:9f:ef:7d:4a:6e:2e:10:
5b:a9:7f:14:80:4b:dd:b6:8e:79:16:a2:ca:33:6d:a2:08:d8:
27:6b:a4:d2:29:c5:e3:9a:45:d5:3b:dc:b4:b9:37:a0:26:9c:
d7:3b:c8:b2:6c:e7:03:7e:12:b7:cd:40:f3:69:14:f6:2d:2d:
1f:35:21:52:43:71:5e:65:ea:85:d5:89:d0:44:89:55:32:0a:
04:f2:29:8e:58:c9:29:f6:71:6b:e7:71:30:f5:4e:9f:be:f4:
ce:1c:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:27:21 2025 by rpki-client