Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Hkil2S9ue3C93C4UCzOZGyTy7Wg.roa
File: Hkil2S9ue3C93C4UCzOZGyTy7Wg.roa (raw, json)
Hash identifier: oAZtXL8+6h7CQi2xgJ/AtenhjCThwsOFychSjAqA7A8=
Subject key identifier: 1E:48:A5:D9:2F:6E:7B:70:BD:DC:2E:14:0B:33:99:1B:24:F2:ED:68
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01910D9269E28C78FF67D4E16F1D9AECB8BC
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Hkil2S9ue3C93C4UCzOZGyTy7Wg.roa
Signing time: Thu 01 Aug 2024 10:53:04 +0000
ROA not before: Thu 01 Aug 2024 10:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
80.255.192.0/19 maxlen: 19
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/11 maxlen: 11
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/13 maxlen: 13
82.16.0.0/14 maxlen: 14
82.20.0.0/14 maxlen: 14
82.20.0.0/16 maxlen: 16
82.24.0.0/13 maxlen: 13
82.24.0.0/14 maxlen: 14
82.28.0.0/14 maxlen: 14
82.28.0.0/16 maxlen: 16
82.30.0.0/15 maxlen: 15
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.32.0/20 maxlen: 20
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.96.0/20 maxlen: 20
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: Failed, certificate revoked on Thu 01 Aug 2024 13:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:92:69:e2:8c:78:ff:67:d4:e1:6f:1d:9a:ec:b8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Aug 1 10:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e48a5d92f6e7b70bddc2e140b33991b24f2ed68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:5f:ae:ae:db:68:84:96:f0:9a:ca:f6:2b:
76:c8:81:2c:fa:3a:b2:86:36:6f:e8:1e:7f:c3:7e:
7c:f0:01:01:c2:31:ec:14:31:af:14:a9:69:64:47:
fa:0d:d2:3b:66:c8:36:07:b0:c6:51:2b:47:a7:5d:
b2:95:08:f4:fb:19:b9:72:ba:9c:1e:59:ad:74:24:
bc:d6:03:ff:78:fb:26:0c:9b:66:70:d9:1f:e8:73:
89:05:a0:17:1f:e5:98:3b:87:3e:9e:c3:63:4d:59:
6d:f2:48:ec:78:c7:ed:4d:ca:46:18:f2:78:ce:50:
69:4d:ab:96:1d:70:1c:f5:17:50:65:87:88:3a:6e:
04:18:76:12:29:32:65:d4:db:f0:41:63:b8:98:03:
a6:a4:8f:10:dd:df:cd:e4:8a:bd:d7:3c:5f:97:0e:
9e:c7:e5:d8:03:9f:3b:70:91:6d:c6:b5:10:3c:09:
88:57:bb:dc:bd:a5:b2:58:42:c9:89:98:a9:ce:be:
b1:77:d9:6a:84:83:6e:15:53:ac:e5:c7:28:b4:e6:
3e:80:54:e4:f1:15:06:d4:34:57:c1:21:6b:c1:4f:
65:36:65:e1:dd:1d:3d:ec:15:70:42:2e:6f:03:4e:
9f:df:37:ed:8f:57:2e:29:8c:bc:ca:9a:3d:94:2f:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:A5:D9:2F:6E:7B:70:BD:DC:2E:14:0B:33:99:1B:24:F2:ED:68
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Hkil2S9ue3C93C4UCzOZGyTy7Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
55:99:f2:db:c8:41:0b:7f:8b:9f:63:c3:25:f7:48:bc:6f:37:
c4:b7:f9:1e:90:37:65:d5:0f:f2:90:dd:8f:40:54:7f:69:db:
db:bb:92:2d:8d:ea:b8:df:ab:dc:94:ba:fc:fd:4e:86:bd:9c:
16:ab:57:d3:67:32:f5:88:75:13:30:76:f3:d3:be:f3:4f:9d:
6d:93:b1:0e:67:78:67:3f:be:b5:17:46:c5:8f:62:b4:c9:fb:
b3:c7:4d:31:9b:25:65:92:de:38:96:e8:d7:bc:9f:8a:28:8d:
e1:55:96:d7:f2:eb:1c:1f:6b:b8:29:d2:89:a6:3b:6e:54:9f:
a5:42:fd:54:7d:0d:56:78:6e:92:cc:47:24:98:c8:0e:78:69:
af:8a:02:76:45:01:e9:ad:ed:3c:90:86:ca:cf:76:ce:e0:8e:
bf:3d:36:37:f3:c0:cd:c9:f8:f2:07:f5:a7:0d:c0:28:96:d1:
18:f1:db:5b:35:92:84:94:b3:c0:e4:dc:fc:f9:9d:78:31:62:
39:de:26:32:6d:81:0b:2d:c7:2c:6d:b6:f4:47:26:89:4c:58:
1a:9f:46:47:6f:80:d9:d6:49:0e:d7:b3:98:6f:a3:76:dc:8e:
e9:17:eb:e1:be:0e:0f:38:a8:5f:ab:29:c6:75:f3:2d:a0:59:
0e:1e:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:11:53 2024 by rpki-client on console-fra.rpki-client.org