Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/dEYufqD4eMS4hpmom7FKZ0YDHH4.roa
File: dEYufqD4eMS4hpmom7FKZ0YDHH4.roa (raw, json)
Hash identifier: bndVrChsX8fJW1rBX0zaIgBAzdrSHrTm+oVdc7oxj3M=
Subject key identifier: 74:46:2E:7E:A0:F8:78:C4:B8:86:99:A8:9B:B1:4A:67:46:03:1C:7E
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D3634810C35035C107BC198C6E8A5
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/dEYufqD4eMS4hpmom7FKZ0YDHH4.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3326
IP address blocks: 5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
5.1.16.0/20 maxlen: 20
31.128.68.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
31.128.76.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.164.0/23 maxlen: 23
46.164.168.0/22 maxlen: 22
77.88.201.0/24 maxlen: 24
77.88.202.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.207.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.210.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.214.0/23 maxlen: 23
77.88.216.0/22 maxlen: 22
77.88.220.0/24 maxlen: 24
77.88.221.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
77.222.128.0/21 maxlen: 21
77.222.137.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
77.222.152.0/22 maxlen: 22
77.222.156.0/23 maxlen: 23
77.222.158.0/23 maxlen: 23
80.77.32.0/22 maxlen: 22
80.77.36.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.38.0/24 maxlen: 24
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
80.91.166.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.168.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.172.0/22 maxlen: 22
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.183.0/24 maxlen: 24
80.91.184.0/21 maxlen: 21
80.249.224.0/20 maxlen: 20
85.159.0.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
88.81.232.0/22 maxlen: 22
88.81.236.0/24 maxlen: 24
88.81.237.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
88.81.244.0/22 maxlen: 22
88.81.246.0/24 maxlen: 24
88.81.247.0/24 maxlen: 24
88.81.248.0/24 maxlen: 24
88.81.249.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
88.81.254.0/23 maxlen: 23
91.193.68.0/22 maxlen: 22
91.197.220.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.94.0/24 maxlen: 24
91.204.95.0/24 maxlen: 24
93.183.192.0/24 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.196.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.198.0/23 maxlen: 23
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.214.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.218.0/23 maxlen: 23
93.183.220.0/22 maxlen: 22
93.183.224.0/24 maxlen: 24
93.183.225.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.230.0/23 maxlen: 23
93.183.232.0/22 maxlen: 22
93.183.237.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
94.232.72.0/21 maxlen: 21
109.206.32.0/19 maxlen: 19
176.102.32.0/21 maxlen: 21
176.102.40.0/21 maxlen: 21
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
176.241.104.0/21 maxlen: 21
176.241.128.0/23 maxlen: 23
176.241.130.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.148.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
178.213.168.0/22 maxlen: 22
178.213.172.0/23 maxlen: 23
178.213.174.0/24 maxlen: 24
178.213.175.0/24 maxlen: 24
185.8.40.0/22 maxlen: 22
185.8.40.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
185.46.248.0/22 maxlen: 22
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
193.41.48.0/22 maxlen: 22
193.108.48.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.108.129.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
194.29.60.0/22 maxlen: 22
194.146.196.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
195.69.176.0/23 maxlen: 23
195.69.176.0/24 maxlen: 24
195.69.177.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.114.131.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
195.114.144.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.146.0/24 maxlen: 24
195.114.147.0/24 maxlen: 24
195.114.148.0/24 maxlen: 24
195.114.149.0/24 maxlen: 24
195.114.150.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
217.112.208.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a01:758:ffe1::/48 maxlen: 48
2a01:758:ffe2::/48 maxlen: 48
2a01:758:ffe3::/48 maxlen: 48
2a01:758:ffe4::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a01:758:fff3::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a02:70:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 25 Feb 2025 08:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:36:34:81:0c:35:03:5c:10:7b:c1:98:c6:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74462e7ea0f878c4b88699a89bb14a6746031c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:b9:75:02:20:3d:1b:02:95:d0:34:e7:58:
9c:c1:6e:40:b7:86:00:c1:0e:46:18:f4:ce:a1:06:
33:2c:b8:e5:1e:dc:45:1d:a5:f0:27:24:b3:6e:21:
3b:1e:6e:bb:cc:a3:b1:cd:b5:ac:79:56:8c:1d:7a:
8a:a9:40:ef:68:44:6a:3b:78:62:a1:88:a5:96:72:
4c:c5:61:ed:1d:32:09:74:89:2c:2e:6e:8a:10:1f:
b5:f5:6c:8b:c9:35:ef:f7:86:2f:a9:bf:db:56:56:
c5:ce:bd:32:cd:83:59:7f:09:13:5e:7a:23:f2:ac:
8c:bd:39:2d:2d:71:21:5d:81:40:d1:41:bc:5d:28:
98:c1:9e:be:9f:9d:f6:7f:7c:0c:40:fd:b3:6b:8f:
30:42:10:12:9c:a6:f1:70:97:c5:b5:e2:f9:ad:2f:
85:47:49:eb:f3:dc:99:70:c8:1a:21:4c:4d:59:e3:
9c:9c:eb:18:55:fa:e1:6c:cd:24:dd:38:c4:76:37:
b5:90:33:bb:39:49:51:d5:4e:94:4f:c7:7a:7f:74:
3c:b0:a6:fa:66:af:21:7d:d5:eb:8d:b9:44:3e:3e:
c8:19:9d:94:35:5b:a9:dd:5a:fd:97:44:f1:60:31:
75:4f:e8:77:37:23:45:9f:6c:8c:44:d3:fc:ee:c8:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:2E:7E:A0:F8:78:C4:B8:86:99:A8:9B:B1:4A:67:46:03:1C:7E
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/dEYufqD4eMS4hpmom7FKZ0YDHH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
46.164.164.0/23
46.164.168.0/22
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
2e:1b:9b:51:ad:ad:4b:31:87:74:c3:84:9d:7d:42:44:c4:0d:
1a:6f:3b:b3:28:f3:d2:52:cd:c0:99:ba:24:9e:e3:14:50:2a:
a5:ae:8b:00:9c:07:cd:d9:34:85:59:3e:b5:c9:38:ca:77:91:
14:0f:76:ca:ea:a5:23:d4:2f:e0:c5:c9:7e:4f:e8:1a:bc:b3:
78:6c:83:22:df:f3:7e:d5:49:af:aa:38:cf:ee:3c:ae:2a:be:
4a:a1:ef:a4:30:52:d9:cd:66:c8:28:3f:6b:f7:16:31:8a:05:
0f:1d:c8:f2:49:4b:9e:d0:65:ad:1e:93:18:83:d8:e9:d0:47:
ea:fc:fa:53:bd:5f:79:b6:7d:b4:a0:b4:89:d9:42:28:d4:bf:
e9:a1:25:b9:1d:c7:c5:6b:fe:24:72:15:4c:f4:83:83:79:80:
71:0e:08:98:57:48:ca:c5:e4:9b:59:4c:0d:0d:b5:07:80:52:
fe:c5:04:e5:e0:6a:f5:e0:13:26:e2:60:c2:02:1d:79:64:f0:
55:2b:69:0b:8e:96:e7:9f:f4:7f:54:13:f0:7e:b1:55:25:0d:
d3:7d:68:c0:db:ca:01:4a:5c:71:13:bd:1c:d8:af:ef:7f:20:
6c:5e:ed:7f:a6:de:d9:37:b4:04:6b:5a:50:43:0b:9b:93:9b:
9f:4a:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:07:02 2025 by rpki-client