Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/7P_60xDHu2M6zcqD_-EsvmnlABU.roa
File: 7P_60xDHu2M6zcqD_-EsvmnlABU.roa (raw, json)
Hash identifier: KQ+K+UFDMlu9rr8bHNSaFiAxhpo3acnWaVbm+8zfG9g=
Subject key identifier: EC:FF:FA:D3:10:C7:BB:63:3A:CD:CA:83:FF:E1:2C:BE:69:E5:00:15
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 01942368C865AB07A3321DC67F919EBCAFC4
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/7P_60xDHu2M6zcqD_-EsvmnlABU.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6805
IP address blocks: 62.109.64.0/18 maxlen: 18
78.48.0.0/13 maxlen: 13
78.48.0.0/16 maxlen: 16
78.48.0.0/18 maxlen: 18
78.48.64.0/18 maxlen: 18
78.48.128.0/18 maxlen: 18
78.48.192.0/18 maxlen: 18
78.49.0.0/16 maxlen: 16
78.49.0.0/18 maxlen: 18
78.49.64.0/18 maxlen: 18
78.49.128.0/18 maxlen: 18
78.49.192.0/18 maxlen: 18
78.50.0.0/16 maxlen: 16
78.50.0.0/17 maxlen: 17
78.50.128.0/17 maxlen: 17
78.51.0.0/19 maxlen: 19
78.51.32.0/19 maxlen: 19
78.51.64.0/19 maxlen: 19
78.51.96.0/19 maxlen: 19
78.51.128.0/18 maxlen: 18
78.51.192.0/18 maxlen: 18
78.54.0.0/18 maxlen: 18
78.54.64.0/18 maxlen: 18
78.54.128.0/18 maxlen: 18
78.54.192.0/18 maxlen: 18
78.55.0.0/18 maxlen: 18
78.55.64.0/18 maxlen: 18
78.55.128.0/18 maxlen: 18
78.55.192.0/18 maxlen: 18
80.171.0.0/16 maxlen: 16
80.171.0.0/18 maxlen: 18
80.171.64.0/18 maxlen: 18
85.176.0.0/13 maxlen: 13
85.183.16.0/23 maxlen: 23
85.183.18.0/23 maxlen: 23
89.12.0.0/14 maxlen: 14
89.12.0.0/18 maxlen: 18
89.12.64.0/18 maxlen: 18
89.12.128.0/18 maxlen: 18
89.12.192.0/18 maxlen: 18
89.13.0.0/16 maxlen: 16
89.13.0.0/17 maxlen: 17
89.13.128.0/17 maxlen: 17
89.14.0.0/18 maxlen: 18
89.14.64.0/18 maxlen: 18
89.14.128.0/18 maxlen: 18
89.14.192.0/18 maxlen: 18
89.15.232.0/21 maxlen: 21
92.224.0.0/13 maxlen: 13
92.224.0.0/16 maxlen: 16
92.225.0.0/16 maxlen: 16
92.227.194.0/23 maxlen: 23
92.228.72.0/23 maxlen: 23
92.228.74.0/23 maxlen: 23
92.228.76.0/23 maxlen: 23
92.228.78.0/23 maxlen: 23
92.228.80.0/23 maxlen: 23
92.228.82.0/23 maxlen: 23
92.228.84.0/23 maxlen: 23
92.228.86.0/23 maxlen: 23
92.229.0.0/16 maxlen: 16
92.229.0.0/17 maxlen: 17
92.230.20.0/23 maxlen: 23
92.230.22.0/23 maxlen: 23
185.93.236.0/22 maxlen: 22
213.39.128.0/17 maxlen: 17
213.191.64.0/19 maxlen: 19
2a01:c00::/26 maxlen: 39
2a01:c08::/47 maxlen: 47
2a01:c20:7000::/39 maxlen: 39
2a01:c20:7200::/47 maxlen: 47
2a01:c22:1c00::/47 maxlen: 47
2a01:c22:1e00::/39 maxlen: 39
2a01:c22:3400::/39 maxlen: 39
2a01:c22:3600::/47 maxlen: 47
2a01:c22:6c00::/47 maxlen: 47
2a01:c22:6e00::/39 maxlen: 39
2a01:c22:7000::/47 maxlen: 47
2a01:c22:7200::/39 maxlen: 39
2a01:c22:7400::/47 maxlen: 47
2a01:c22:7600::/39 maxlen: 39
2a01:c22:7800::/47 maxlen: 47
2a01:c22:7a00::/39 maxlen: 39
2a01:c22:8400::/39 maxlen: 39
2a01:c22:8600::/47 maxlen: 47
2a01:c22:8800::/39 maxlen: 39
2a01:c22:8a00::/47 maxlen: 47
2a01:c22:8c00::/39 maxlen: 39
2a01:c22:8e00::/47 maxlen: 47
2a01:c22:a600::/47 maxlen: 47
2a01:c22:aa00::/47 maxlen: 47
2a01:c22:ae00::/47 maxlen: 47
2a01:c22:b200::/47 maxlen: 47
2a01:c22:b600::/47 maxlen: 47
2a01:c22:ba00::/47 maxlen: 47
2a01:c22:be00::/47 maxlen: 47
2a01:c22:c200::/47 maxlen: 47
2a01:c22:ca00::/47 maxlen: 47
2a01:c22:ce00::/47 maxlen: 47
2a01:c22:d200::/47 maxlen: 47
2a01:c22:d600::/47 maxlen: 47
2a01:c23:5e00::/47 maxlen: 47
2a01:c23:6200::/47 maxlen: 47
2a01:c23:6600::/47 maxlen: 47
2a01:c23:6a00::/47 maxlen: 47
2a01:c23:6e00::/47 maxlen: 47
2a01:c23:7200::/47 maxlen: 47
2a01:c23:7600::/47 maxlen: 47
2a01:c23:8a00::/47 maxlen: 47
2a01:c23:8e00::/47 maxlen: 47
2a01:c23:9200::/47 maxlen: 47
2a01:c23:9600::/47 maxlen: 47
2a01:c23:ba00::/47 maxlen: 47
2a01:c23:be00::/47 maxlen: 47
2a01:c23:c200::/47 maxlen: 47
2a01:c23:c600::/47 maxlen: 47
Validation: Failed, certificate revoked on Tue 14 Jan 2025 11:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c8:65:ab:07:a3:32:1d:c6:7f:91:9e:bc:af:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecfffad310c7bb633acdca83ffe12cbe69e50015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:ed:e9:dc:f4:d8:33:94:67:42:36:02:ea:
44:61:6d:cc:b7:24:32:d6:58:2d:e2:3b:ef:a6:d9:
d6:53:f5:60:83:b8:00:3b:f6:f3:ea:c5:ad:a7:7a:
71:97:35:37:e7:ad:0f:d2:14:2b:0a:01:ee:eb:17:
99:35:89:f4:c6:25:9d:7b:19:71:a6:94:af:b6:8c:
e7:2d:cd:68:bb:71:0a:88:97:e1:04:99:88:b7:b9:
63:38:eb:4c:ec:e2:7a:81:c8:20:4a:63:43:e5:7e:
85:f1:57:22:c1:78:82:ef:28:b7:2e:1e:71:23:74:
8a:fb:dc:a3:54:ac:26:ec:5a:73:77:75:77:b8:07:
84:6b:19:da:45:16:08:a4:6a:e7:15:ff:db:12:f7:
ca:4c:21:e1:5b:6a:de:4f:29:96:54:a8:21:86:e9:
0f:a0:97:65:f5:be:93:69:68:44:55:e1:b0:9b:fa:
79:e6:0b:80:2b:03:4b:34:b0:37:f1:58:9e:7e:7c:
b7:b0:b0:bf:b8:4e:58:c5:ef:10:e8:c4:8c:8c:07:
7c:b9:81:66:a8:42:a4:ca:f0:d4:f9:c7:34:62:c0:
1b:be:c3:a6:78:e8:28:2a:2a:b2:e2:ce:10:cf:63:
ca:0d:c7:e7:c0:f2:2b:8d:f6:35:50:cc:c1:bb:4e:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:FA:D3:10:C7:BB:63:3A:CD:CA:83:FF:E1:2C:BE:69:E5:00:15
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/7P_60xDHu2M6zcqD_-EsvmnlABU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.109.64.0/18
78.48.0.0/13
80.171.0.0/16
85.176.0.0/13
89.12.0.0/14
92.224.0.0/13
185.93.236.0/22
213.39.128.0/17
213.191.64.0/19
IPv6:
2a01:c00::/26
Signature Algorithm: sha256WithRSAEncryption
c1:d9:e7:5d:2d:3c:62:69:4e:9c:44:34:87:3c:ef:11:49:49:
06:9b:5e:f6:de:51:d7:7a:a1:13:2c:e8:28:5d:69:fd:78:b8:
22:f1:f5:24:9f:b8:f6:55:12:a7:fc:cb:f6:72:26:e3:b7:f4:
a8:bb:1b:16:d1:35:b1:f9:44:e7:cc:6c:ed:07:96:99:dc:82:
2d:bb:71:19:1c:c4:31:52:1a:07:ac:3a:2d:2d:56:0f:cb:08:
a0:c1:80:55:af:59:f8:e5:91:1f:3f:64:ed:a8:fd:d2:2c:49:
f0:1d:cc:68:76:cd:6b:24:14:0e:b1:87:38:39:49:5e:7c:b0:
f6:ce:8b:7c:fc:9c:42:94:31:9a:9f:8b:26:a9:f8:5d:66:b8:
88:e5:49:3c:5c:3b:1b:b8:3c:d0:ce:4d:d6:92:76:e2:11:d3:
80:17:43:f3:5b:9a:b6:dc:a0:2f:a1:d7:ed:ea:c6:c7:27:fa:
17:44:56:87:f5:22:d2:c8:76:9b:a6:c3:89:17:b4:24:79:3e:
9e:a9:d2:73:ca:b6:14:a9:1d:b0:02:7e:01:2a:69:27:2f:f4:
22:ee:f0:e6:57:8f:93:65:35:da:17:b8:d3:d2:3b:3f:a2:d7:
03:54:65:7a:6d:e8:3d:c4:0e:57:b0:79:3e:78:1a:a4:bc:f5:
2e:b1:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:22 2025 by rpki-client