Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HNFo5cxzNpj58yAztASwrvXMYqM.roa
File: HNFo5cxzNpj58yAztASwrvXMYqM.roa (raw, json)
Hash identifier: J/9icm+l465hhSi6Y212HjS1mhekPtRX7m00eIOysvA=
Subject key identifier: 1C:D1:68:E5:CC:73:36:98:F9:F3:20:33:B4:04:B0:AE:F5:CC:62:A3
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282425702ED658869804AC6C6E15BC1C
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HNFo5cxzNpj58yAztASwrvXMYqM.roa
Signing time: Thu 02 Jan 2025 17:50:45 +0000
ROA not before: Thu 02 Jan 2025 17:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
217.174.148.0/23 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:25:70:2e:d6:58:86:98:04:ac:6c:6e:15:bc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cd168e5cc733698f9f32033b404b0aef5cc62a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:0a:5d:c2:cb:6d:c1:be:1d:af:af:7c:81:
9a:2a:3a:c3:ec:1c:17:73:86:21:54:59:4b:29:71:
56:9c:49:6d:9f:15:96:45:85:11:33:b3:62:62:a0:
20:bc:8e:83:72:0b:f6:05:3c:54:67:3a:03:8f:1d:
f5:2e:4f:b3:98:6a:9e:23:80:24:33:3a:7c:ef:95:
90:b7:c3:01:9e:e1:15:2a:a2:af:84:01:94:a0:44:
21:8b:78:bd:44:fd:4a:a6:eb:10:21:8b:8f:ac:f8:
05:1e:82:f6:f8:39:e0:84:fb:12:80:42:c3:0b:51:
f7:63:be:e6:49:56:1a:71:d8:26:ad:b3:aa:d1:ae:
a8:85:89:5f:df:ab:23:ea:52:d3:1e:54:2f:04:6a:
12:49:94:30:ab:28:b8:d3:34:4a:e6:d8:3a:5c:cf:
c0:3d:d7:d6:79:2e:19:8c:07:7d:6e:6a:f5:df:75:
1d:51:27:53:1c:0e:ec:03:eb:8f:7e:f4:a0:a6:d6:
b8:37:98:3f:14:7c:5c:6d:9e:c8:d1:c5:0f:99:88:
36:e6:70:ef:59:91:b5:bd:28:cb:68:6a:9a:d0:0b:
4b:53:2c:66:1b:80:f2:de:6e:13:5d:59:d4:68:a0:
7b:4e:14:16:71:c4:af:c9:9e:6e:31:3e:f2:9b:46:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:68:E5:CC:73:36:98:F9:F3:20:33:B4:04:B0:AE:F5:CC:62:A3
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HNFo5cxzNpj58yAztASwrvXMYqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
91.148.168.0/24
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
12:cd:ce:51:ef:90:e5:4a:5e:24:6f:bd:a9:35:cd:04:68:df:
11:8d:32:b3:72:0b:14:9e:05:49:43:a1:8c:8f:a4:48:54:3c:
38:75:6c:4f:c9:4e:3f:b2:51:5d:fe:ea:d2:96:96:ba:e8:df:
22:51:c3:20:6a:e7:af:70:b1:ef:08:36:d9:6a:06:4d:4e:fd:
35:79:1a:c7:08:83:82:66:7e:f7:bd:c7:9c:ae:67:65:67:ad:
a4:0f:06:d9:e4:7c:b2:40:31:37:da:74:52:5b:5d:d1:45:df:
a2:87:b8:59:b8:89:ea:e4:3a:de:39:4d:20:3e:c1:28:b9:a3:
0a:4a:60:ff:11:df:80:7a:7e:cf:93:35:fe:e4:a6:7f:b6:71:
b5:35:aa:f8:89:b0:80:a6:10:a5:1b:17:d0:1c:f0:d5:59:8d:
1c:5f:2f:2a:dc:82:fc:39:d4:5a:c6:c7:af:ac:6e:20:95:a0:
1f:05:17:f9:7e:4c:65:72:15:52:16:28:f5:e0:15:9e:ea:bb:
51:25:60:5d:b9:2b:c2:57:ba:93:dc:b6:6a:06:4a:86:ce:38:
8f:7f:5a:10:3c:a0:02:f4:2d:ec:17:ff:b2:8d:0a:2a:ff:53:
6c:80:fc:dc:a3:d4:6b:72:08:79:0d:d2:5b:f3:c3:8f:05:14:
d3:33:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:21:25 2025 by rpki-client