Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QDXAF8LTVGtsEZZpBxKDvzF_sts.roa
File: QDXAF8LTVGtsEZZpBxKDvzF_sts.roa (raw, json)
Hash identifier: NUXE5gTq9GHp7xkZ1eV+LVFpE8LL3iP1ZwX0pV0jjSU=
Subject key identifier: 40:35:C0:17:C2:D3:54:6B:6C:11:96:69:07:12:83:BF:31:7F:B2:DB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0194700869E34DCAB11BB197E183D929FC72
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QDXAF8LTVGtsEZZpBxKDvzF_sts.roa
Signing time: Thu 16 Jan 2025 16:53:07 +0000
ROA not before: Thu 16 Jan 2025 16:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.13.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.25.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.140.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.229.0/24 maxlen: 24
37.230.230.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.150.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.167.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.175.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.197.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.247.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 11:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:08:69:e3:4d:ca:b1:1b:b1:97:e1:83:d9:29:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 16 16:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4035c017c2d3546b6c119669071283bf317fb2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:fb:47:e2:c2:42:74:5e:9a:bf:d2:a6:7a:
15:03:1c:e2:e4:67:99:dd:50:6e:b9:18:80:fb:df:
5f:dd:0c:3b:8f:cb:22:22:c8:02:10:79:b6:0f:68:
6d:eb:aa:a5:95:0e:01:b2:4d:1d:f2:fe:ba:fa:b5:
57:e4:36:b3:7e:f7:cb:d5:7a:1f:1b:28:a6:86:a8:
a8:7e:c0:e8:d8:e8:32:8f:31:5e:92:1f:ed:19:3d:
40:24:bf:c9:29:79:d2:b0:22:0a:05:e5:3d:80:02:
0e:95:1e:04:ff:55:a8:f4:bc:69:82:5f:57:1e:b1:
de:e0:00:cf:49:88:cd:97:9e:44:ed:d6:49:67:6b:
24:ab:df:79:0f:26:0b:e7:a7:2e:d6:db:5e:1f:49:
bb:62:45:56:b2:ab:b6:e3:10:bd:0b:d5:68:61:61:
a8:40:77:3d:39:7c:de:f6:fe:59:c8:c0:36:7d:50:
7c:30:fb:a0:dd:7b:ca:91:09:af:81:32:3c:e4:c7:
9f:ed:7e:18:b0:b2:72:ca:9b:1b:a2:6f:40:bf:5d:
64:86:8b:1f:f7:16:c3:38:22:3c:7b:07:cd:20:a8:
99:ad:de:7d:16:84:26:57:22:45:b5:67:5a:b5:95:
b6:14:35:c9:2b:42:d9:c3:a7:fe:9c:92:e1:c3:dc:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:35:C0:17:C2:D3:54:6B:6C:11:96:69:07:12:83:BF:31:7F:B2:DB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QDXAF8LTVGtsEZZpBxKDvzF_sts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.13.0/24
37.18.23.0/24
37.18.25.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.140.0/24
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.229.0-37.230.231.255
37.230.238.0/24
37.230.254.0/23
46.243.137.0-46.243.140.255
46.243.148.0-46.243.150.255
46.243.163.0/24
46.243.167.0/24
46.243.173.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.175.255
141.101.179.0/24
141.101.189.0/24
141.101.191.0/24
141.101.197.0-141.101.199.255
141.101.209.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.248.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
178.170.247.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:de:4c:07:f0:21:e5:0e:09:78:3e:f7:af:04:b9:a0:89:8e:
64:e2:11:40:6e:2a:52:ca:26:e3:57:73:31:4f:96:d1:94:60:
15:70:ed:5c:b4:dc:d2:ab:c5:c0:52:ea:b5:fa:f0:8a:58:2f:
19:a3:55:88:51:6e:1e:b2:b4:b9:69:a6:7c:11:bc:7f:a3:72:
80:1d:f2:e6:05:5d:e4:3d:3f:d3:0b:62:91:7b:0f:04:8d:a4:
24:6e:3b:ee:03:d5:36:84:bd:12:4e:3a:e9:75:ea:2a:ba:15:
81:48:07:35:bf:83:33:90:a5:94:b1:b5:bc:86:93:87:14:96:
56:67:e6:23:25:fd:14:85:d2:b7:61:87:55:e8:26:67:20:20:
44:a3:6c:03:fd:08:67:fc:19:86:09:4e:a1:3a:bb:6a:ea:f3:
d5:04:78:0a:b5:9a:b9:77:5e:e6:3e:a6:43:d0:aa:2b:b4:5d:
61:45:83:01:54:f2:60:81:7b:e0:7d:17:23:3b:a4:b0:bd:f7:
90:9e:87:f6:f2:6e:ec:76:75:77:a4:9c:f5:58:18:8c:e3:4c:
47:63:20:da:fd:32:23:55:a6:d8:9b:77:30:5e:22:09:19:5b:
75:10:99:f1:62:6d:56:9a:16:e4:28:6b:c6:d8:a8:89:af:12:
40:5d:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:31 2025 by rpki-client