Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mqga-66CGhKq_6lvXanoefiV-fM.roa
File: mqga-66CGhKq_6lvXanoefiV-fM.roa (raw, json)
Hash identifier: dtBacdz4QXg/8eKh/f9tk3rzLIzSfVRrpuVz4OcNrWc=
Subject key identifier: 9A:A8:1A:FB:AE:82:1A:12:AA:FF:A9:6F:5D:A9:E8:79:F8:95:F9:F3
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01954CB624C8C31ADEE86C8CB4634F9ADA5F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mqga-66CGhKq_6lvXanoefiV-fM.roa
Signing time: Fri 28 Feb 2025 13:19:20 +0000
ROA not before: Fri 28 Feb 2025 13:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 06:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:b6:24:c8:c3:1a:de:e8:6c:8c:b4:63:4f:9a:da:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 28 13:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa81afbae821a12aaffa96f5da9e879f895f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:37:b8:d4:09:fc:a3:f9:a4:73:c0:a6:0e:
a5:0c:36:ee:0c:8b:7d:c1:20:a6:f0:61:1d:f7:ba:
78:0f:91:db:9c:40:d3:56:2d:14:40:01:41:be:ca:
7a:9d:1f:7e:a4:91:c7:77:0d:0e:98:91:26:a0:54:
36:a7:71:a2:f3:ca:47:48:93:f6:ee:aa:ba:87:4c:
01:83:9a:05:40:34:2b:67:cc:12:06:50:6b:fb:c9:
ab:71:e9:76:6c:3e:fb:aa:b9:b4:9d:a9:c2:8b:1a:
ef:36:70:01:a1:4a:04:87:ed:5a:6d:e9:32:10:0a:
32:ba:28:8e:93:51:c8:61:12:bc:fe:bc:1d:e3:86:
21:30:33:55:88:be:bf:6e:0b:8b:09:a8:56:eb:20:
42:fd:85:2d:e0:12:80:8c:c0:30:96:2e:0c:15:ef:
4e:16:3e:88:aa:6c:59:14:68:ab:b8:6c:bf:92:49:
9f:db:77:d3:4f:2e:c5:19:45:39:7a:1b:a8:86:f9:
1c:13:d7:ca:b0:c9:97:33:73:21:69:ac:9c:e3:21:
d3:27:de:b5:c8:3c:7d:14:9f:48:7c:6b:6e:09:59:
07:97:23:a3:86:57:25:b5:9f:15:4c:2f:f8:21:ba:
ef:2f:57:6a:54:69:17:45:b8:23:79:fa:3f:d8:7e:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:1A:FB:AE:82:1A:12:AA:FF:A9:6F:5D:A9:E8:79:F8:95:F9:F3
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mqga-66CGhKq_6lvXanoefiV-fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e7:92:25:7c:63:29:a6:44:5a:c3:cf:d5:bf:32:0c:c0:8d:
ce:77:f0:c0:b3:0f:cd:63:49:e4:8c:d5:ab:03:18:22:84:3c:
51:fe:a3:7c:91:58:ce:52:55:ae:d9:9e:10:5a:2a:47:a4:e8:
be:cb:7e:27:ee:00:e7:1a:e4:8b:7c:db:e6:d8:15:14:38:d7:
eb:c6:2f:27:67:d1:18:79:5b:56:d0:1d:81:58:2d:5e:a4:9e:
b4:51:5b:d7:69:01:b0:07:c8:64:65:9d:09:47:0e:b7:5c:87:
0b:e5:39:74:65:1d:6c:a2:f5:bd:78:ac:06:70:0a:1f:47:02:
18:94:67:a9:57:51:07:24:37:03:9d:06:b4:ed:18:10:30:e4:
1c:bb:d6:4d:15:ce:3b:93:03:26:18:79:70:a3:cc:d4:23:18:
cf:4f:ef:91:8c:e5:c2:f4:f0:3f:bd:53:5e:a8:af:89:a6:40:
cc:ce:91:b6:ab:24:4e:6b:05:59:34:64:0a:a3:c0:72:0a:3c:
4a:e6:34:61:41:b8:8f:1b:63:d1:74:3a:dc:13:6b:a3:db:15:
9d:5c:27:a8:59:72:91:1f:a7:0f:58:19:36:bb:9e:11:10:24:
cd:fb:2c:6b:e8:37:54:aa:22:a4:b5:be:e5:d7:ab:5d:6a:d5:
18:ca:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:03 2025 by rpki-client