Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tG5mOavaGIPEC5uKUBoZxlqIBQ0.roa
File: tG5mOavaGIPEC5uKUBoZxlqIBQ0.roa (raw, json)
Hash identifier: lIowM3rdTrC3X8EXe4AefOlT2BPAhU2W+Ji6XBKMJUE=
Subject key identifier: B4:6E:66:39:AB:DA:18:83:C4:0B:9B:8A:50:1A:19:C6:5A:88:05:0D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369CA207AE1FC5D88FF013F92E7DAE0
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tG5mOavaGIPEC5uKUBoZxlqIBQ0.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 09:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ca:20:7a:e1:fc:5d:88:ff:01:3f:92:e7:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b46e6639abda1883c40b9b8a501a19c65a88050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:d1:b7:af:3e:bf:66:3c:9e:48:e7:7b:bf:
9a:89:86:d9:0e:73:d1:e0:f2:74:09:46:bc:12:40:
22:89:2a:31:50:8b:3c:72:d3:67:3d:7b:0d:47:af:
ab:4f:4d:d2:dc:ff:21:f8:99:80:b4:0b:0d:9e:d7:
e0:e4:99:df:90:65:77:0b:fa:79:24:fb:4f:bf:8e:
47:58:19:1d:2c:c5:ba:25:c9:b4:b1:a7:6d:d8:d2:
e5:7c:b9:a4:77:6d:eb:91:df:97:7d:c6:46:cb:93:
d0:3d:0d:80:65:cb:f0:23:aa:2a:0a:54:9b:5c:44:
fc:b9:7d:2a:81:32:8f:dc:0b:22:c0:88:df:16:41:
5d:38:de:82:18:51:08:4b:65:af:af:3e:1b:a1:be:
fb:da:52:f4:94:50:24:07:2d:aa:0a:5d:f6:54:6a:
a3:f6:1f:7b:f9:64:79:ac:ac:3a:a7:b2:60:9c:06:
47:56:27:49:c3:95:1b:86:f1:ed:6a:8f:69:c8:ed:
db:4e:3a:00:ec:94:01:64:41:11:26:4c:86:1c:2f:
c8:58:87:42:1d:3d:85:f8:24:05:2f:96:8c:10:b7:
2a:41:41:0f:cb:05:75:f8:11:d6:80:f8:ad:8c:97:
cf:fc:2a:df:d5:f1:fc:40:6c:8a:6c:1e:ef:f4:06:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:66:39:AB:DA:18:83:C4:0B:9B:8A:50:1A:19:C6:5A:88:05:0D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tG5mOavaGIPEC5uKUBoZxlqIBQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.160.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
dc:9b:fb:49:c9:81:a6:0a:51:a4:68:3f:6b:21:dd:bd:bc:e9:
98:00:93:80:d5:fe:fc:29:f3:5e:73:9e:9c:c7:e2:c5:d0:69:
d5:9f:13:cc:c0:9e:1a:4a:4f:06:f0:b4:2b:c7:66:9a:40:61:
fb:1d:e1:ac:cd:99:c3:33:06:83:dd:fa:aa:72:a0:18:03:ee:
d1:63:36:fb:80:af:b8:da:b0:26:21:40:b6:f2:58:15:34:c0:
6f:cb:90:43:bb:95:ba:fe:5c:cb:5c:6a:de:70:72:6e:94:35:
0b:50:a5:d1:b9:3f:25:35:c9:50:c6:b6:d8:da:33:89:f9:f5:
d3:de:36:ca:75:a8:4c:59:6a:1c:4e:02:f0:d6:89:6a:ba:35:
79:00:9a:99:63:3c:ce:9d:70:93:41:28:63:48:61:ee:8e:05:
58:c0:f6:d8:1f:8c:05:3b:9f:90:58:12:09:92:cd:47:fa:30:
03:65:9e:c7:22:4e:16:5d:1a:d8:2d:43:b5:3d:9f:b2:7c:9d:
5e:d4:16:f6:45:f3:14:0a:e1:22:03:14:c8:b3:26:dd:16:ce:
cd:c9:8a:f8:60:65:e6:e3:95:e1:6a:b9:44:86:b7:ab:db:37:
50:5d:df:0a:f3:73:b4:82:26:ae:63:5f:44:c6:e3:b2:35:fa:
21:90:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:53 2025 by rpki-client