Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/pqqQ2ioHD0-b1AHx_1UUwYVdI3w.roa
File: pqqQ2ioHD0-b1AHx_1UUwYVdI3w.roa (raw, json)
Hash identifier: SF0r/XxO3OyC0Pvvu2BZpgVPYjslP38K3vZM4YCntX0=
Subject key identifier: A6:AA:90:DA:2A:07:0F:4F:9B:D4:01:F1:FF:55:14:C1:85:5D:23:7C
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01933ED388260C37A456FE96830F56895ADA
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/pqqQ2ioHD0-b1AHx_1UUwYVdI3w.roa
Signing time: Mon 18 Nov 2024 10:31:10 +0000
ROA not before: Mon 18 Nov 2024 10:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.90.7.0/24 maxlen: 24
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:2000:4000::/56 maxlen: 56
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d3:88:26:0c:37:a4:56:fe:96:83:0f:56:89:5a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Nov 18 10:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6aa90da2a070f4f9bd401f1ff5514c1855d237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:30:2b:ac:f9:05:6a:39:24:5f:be:80:96:
b2:79:ab:7c:9f:12:77:88:77:1f:f6:b4:3f:55:dc:
ac:0a:bb:b1:4a:77:94:be:70:85:79:34:d0:24:6e:
3f:f8:c2:b8:94:9a:b7:fe:14:fc:20:37:ee:b8:3a:
72:ce:0a:3d:e1:43:6a:9e:33:3a:dc:ee:e2:41:f4:
14:93:8b:56:9c:cd:6d:e8:fe:01:b0:4c:2e:9b:d2:
6d:b9:8d:dd:56:53:e2:13:3a:1c:83:b4:21:1b:a6:
67:cc:be:cf:87:38:62:38:73:34:24:ca:43:25:74:
7d:5f:6c:82:f3:d6:c0:f3:b1:2f:ac:04:a2:ed:71:
8b:72:46:09:49:67:39:42:94:46:c4:d0:76:b8:cd:
78:cf:54:bc:77:72:0c:4e:aa:b3:6a:d6:b3:ae:02:
07:89:7c:eb:1f:0e:1f:19:00:72:60:21:4e:a6:3e:
db:84:9c:72:ad:ce:0e:70:38:25:4a:6c:b8:93:16:
9a:4e:ad:1c:89:b9:44:5e:50:0c:cd:1b:7a:91:e5:
dc:76:ba:d5:30:e3:ec:97:49:8f:1f:e9:78:0a:ac:
5c:a3:7d:a3:0d:d0:b4:42:a4:d2:f6:95:ac:df:31:
27:b5:24:6f:51:06:6d:0f:b8:13:82:08:54:79:05:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:90:DA:2A:07:0F:4F:9B:D4:01:F1:FF:55:14:C1:85:5D:23:7C
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/pqqQ2ioHD0-b1AHx_1UUwYVdI3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:2000:4000::/56
Signature Algorithm: sha256WithRSAEncryption
7f:77:c0:76:b9:4f:a4:d2:65:8c:ec:6a:da:4c:10:c4:08:fa:
26:8a:dc:2f:0f:87:f2:93:9b:f0:20:a5:be:4b:c6:62:be:d5:
a0:47:0d:71:2c:d2:1a:72:18:a4:00:e4:b2:f3:97:d1:39:c7:
7a:6b:a6:a1:10:d4:cc:db:fb:70:0f:a1:9a:69:d2:56:9f:ff:
67:67:59:be:5c:b8:1d:6c:87:bc:38:5a:1b:f4:db:35:14:3e:
40:a4:51:46:9e:44:42:d4:85:3b:e4:37:cd:f6:1f:7c:71:f0:
a8:2e:85:60:12:a8:44:32:2b:60:5f:4c:4c:38:33:70:d7:85:
0b:a5:40:06:9b:04:79:2b:03:03:55:ee:08:06:c0:48:7d:62:
c4:7b:5c:94:f9:9b:a5:e9:0d:39:cd:70:e9:38:15:ee:32:de:
82:bc:06:84:07:67:cc:f0:ef:04:fa:de:62:8d:2a:75:f4:58:
c2:f4:6b:78:85:c4:5f:77:5a:94:bf:11:22:9f:ef:ca:71:8b:
c0:43:47:98:64:f5:f9:00:43:2e:be:86:08:d3:c7:ea:08:f2:
d6:3e:89:ca:54:09:cd:af:b7:98:91:c9:68:63:51:fa:66:4a:
9c:db:eb:d6:78:95:e4:fe:fd:3d:ab:a0:51:5a:bd:73:e9:86:
e0:68:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:55 2025 by rpki-client