Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Zc-oJS2NV0ZVOUOgubW15kAvW_4.roa
File: Zc-oJS2NV0ZVOUOgubW15kAvW_4.roa (raw, json)
Hash identifier: RQsx09KQhtI+Aro5/eQGB9CdpAtMyG7V+byU7H0trRE=
Subject key identifier: 65:CF:A8:25:2D:8D:57:46:55:39:43:A0:B9:B5:B5:E6:40:2F:5B:FE
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019010D7770145E0DF039A40105285A166EA
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Zc-oJS2NV0ZVOUOgubW15kAvW_4.roa
Signing time: Thu 13 Jun 2024 09:04:34 +0000
ROA not before: Thu 13 Jun 2024 09:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
80.255.192.0/19 maxlen: 19
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/11 maxlen: 11
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/13 maxlen: 13
82.16.0.0/14 maxlen: 14
82.20.0.0/14 maxlen: 14
82.24.0.0/13 maxlen: 13
82.24.0.0/14 maxlen: 14
82.28.0.0/14 maxlen: 14
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.32.0/20 maxlen: 20
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.96.0/20 maxlen: 20
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: Failed, certificate revoked on Thu 01 Aug 2024 10:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:d7:77:01:45:e0:df:03:9a:40:10:52:85:a1:66:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jun 13 09:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cfa8252d8d5746553943a0b9b5b5e6402f5bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:58:c3:65:90:92:f4:b1:df:97:38:c6:f9:
2b:ef:21:c1:0c:35:f0:fd:6b:4a:1e:50:c1:4c:d9:
66:dd:23:22:3c:95:e1:48:fd:1f:12:c4:c4:6d:5b:
b4:f4:86:ca:02:90:6c:bb:9c:9d:73:eb:ea:3b:7d:
18:92:74:c6:d0:5b:02:7c:5a:b4:e0:c0:bd:07:9d:
e6:c2:95:e5:c1:c4:dd:e5:de:eb:a3:57:d4:db:d7:
54:d9:82:54:9a:b5:58:38:b6:4f:54:e7:a9:95:d5:
ca:73:44:8d:e1:1f:c8:8e:43:fd:7e:5a:43:98:a6:
1a:87:d4:b8:22:ec:ca:e1:f9:63:f2:1a:49:9c:d7:
71:61:5b:c8:68:c3:61:d3:f1:e0:b3:40:a4:c2:cf:
18:9f:24:d8:05:6d:90:45:83:f1:55:94:58:98:83:
06:e6:bd:a3:35:07:c5:d5:91:f8:6a:f1:70:93:fa:
78:e6:57:79:78:26:bc:1f:64:5d:be:c1:73:62:63:
2f:29:b4:d3:7c:e2:31:7c:6d:b1:b8:a1:6d:2e:51:
15:7c:1e:05:6f:e1:6c:0b:01:27:9a:d1:ba:0d:94:
ed:55:aa:20:e5:bb:e4:8e:79:cd:1f:18:3f:93:46:
07:c4:f7:55:85:f7:2a:ff:6f:de:60:93:af:5d:47:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:A8:25:2D:8D:57:46:55:39:43:A0:B9:B5:B5:E6:40:2F:5B:FE
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/Zc-oJS2NV0ZVOUOgubW15kAvW_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
c9:84:be:89:0b:a8:8f:00:a4:5b:af:14:2c:74:38:0d:c0:9a:
6a:4a:f4:d2:22:15:ed:7c:ff:5a:77:1f:8f:0f:55:a3:ef:de:
d5:71:6c:ec:c7:48:53:0f:ff:4f:75:be:53:7e:28:5d:b6:1b:
97:15:eb:b7:96:d0:11:24:0d:4c:90:15:1d:79:d6:c2:ba:19:
85:88:29:56:4f:01:bd:45:86:2a:d8:93:6a:21:12:57:dc:18:
d3:4a:f6:fd:31:34:7c:cd:8e:d1:ff:89:6e:33:24:79:58:4c:
0e:f0:d3:26:bb:e0:c9:d9:5b:5c:dd:30:cb:62:9b:47:a4:c7:
49:c9:8b:75:65:6b:13:34:74:c3:c1:59:9f:85:b1:ee:d2:ce:
f7:48:eb:4b:f2:d9:6d:2e:8a:75:c3:e3:60:67:9a:55:bf:b6:
fe:f8:56:64:de:05:e4:9e:42:6a:04:52:7f:33:32:69:37:26:
98:2d:2d:26:05:6a:2e:16:81:4c:7c:a1:9c:2b:b9:b5:60:11:
df:c2:39:66:96:40:e0:44:01:99:9a:1c:88:51:96:2a:86:fb:
3e:1d:da:ea:eb:14:45:30:f3:5f:38:77:b7:25:ab:9f:31:53:
67:dc:9b:c1:92:48:08:37:97:44:a8:b0:a4:cc:5c:93:fe:87:
1e:d9:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 14:00:10 2024 by rpki-client on console-fra.rpki-client.org