Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xmiAf4gWTlXpXcd9cngbtzbsGjU.roa
File: xmiAf4gWTlXpXcd9cngbtzbsGjU.roa (raw, json)
Hash identifier: 862Sg0qlfZov+MntZQE3+VtOQ+IvsFFqt/gWMp4L7hY=
Subject key identifier: C6:68:80:7F:88:16:4E:55:E9:5D:C7:7D:72:78:1B:B7:36:EC:1A:35
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0192426A329DE941B0A2E9A4A1A9BA66275E
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xmiAf4gWTlXpXcd9cngbtzbsGjU.roa
Signing time: Mon 30 Sep 2024 10:11:48 +0000
ROA not before: Mon 30 Sep 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
80.255.192.0/19 maxlen: 19
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/11 maxlen: 11
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/13 maxlen: 13
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.24.0.0/13 maxlen: 13
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.32.0/20 maxlen: 20
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.96.0/20 maxlen: 20
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 30 Sep 2024 13:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:6a:32:9d:e9:41:b0:a2:e9:a4:a1:a9:ba:66:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Sep 30 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c668807f88164e55e95dc77d72781bb736ec1a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:21:ec:5b:e2:e3:84:dc:07:3b:1f:18:29:
3b:79:72:52:72:70:3f:ed:d0:dd:1d:09:dc:ea:db:
26:0f:3d:dc:14:42:ec:11:99:78:2f:8d:47:ce:06:
9b:cb:19:76:59:6f:92:ca:b8:da:ff:6d:e5:02:69:
4b:b2:12:18:7e:fd:f3:c7:4f:b3:83:1e:44:b3:4e:
32:dc:e8:07:a6:07:e0:98:c0:6b:00:e3:09:d2:ac:
bf:34:06:59:03:fb:6c:33:ca:25:8c:45:11:65:bd:
08:d4:02:94:41:58:0d:2e:9b:ab:cd:bc:bf:bd:1f:
05:cd:35:e2:e8:22:e3:e2:ec:88:94:2f:13:e8:2f:
0c:8f:de:99:e0:53:ab:39:9a:89:d7:74:da:01:6a:
57:93:da:35:a3:b1:7b:1d:aa:30:04:19:e3:49:60:
ee:3c:fd:d2:7c:0d:31:e7:7a:5d:ba:e8:51:6d:e8:
31:14:08:4d:ed:8a:36:a5:c8:6d:90:28:2f:1e:7a:
c5:65:79:f1:8b:50:e9:cf:26:80:5c:e1:1c:52:ef:
2e:2b:42:1b:62:95:ac:ca:9e:a3:4e:6f:68:3b:28:
bb:d5:ff:b6:a7:8e:cc:46:72:f5:bb:b9:c1:e9:c2:
e8:c8:2b:2f:9b:00:45:76:12:53:75:5f:79:59:03:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:80:7F:88:16:4E:55:E9:5D:C7:7D:72:78:1B:B7:36:EC:1A:35
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/xmiAf4gWTlXpXcd9cngbtzbsGjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
c2:91:9c:9b:cc:fb:97:d1:d7:8f:f9:29:b0:6a:42:5f:ae:68:
26:5d:16:ad:7e:b9:b1:25:45:32:0e:89:06:03:33:90:25:9b:
4c:cc:a1:7b:9d:2e:24:a3:13:5b:02:f0:89:6b:5b:e4:d8:dd:
80:f8:3b:bd:17:86:c9:88:e6:54:4a:d9:ec:1f:3c:eb:42:76:
4b:bb:aa:cf:12:46:4a:2b:2e:c8:cb:e3:25:b5:f8:91:2a:6b:
47:37:83:76:43:2c:45:db:25:86:b8:2a:2a:09:56:79:56:04:
1c:93:fc:49:81:6d:a9:45:2e:39:a5:69:f6:a7:20:e8:d0:ce:
9e:b0:d9:c6:21:6b:2e:fe:a7:6b:df:bd:0b:ac:16:95:86:b0:
ee:21:7f:d3:45:c0:05:b8:5b:35:ca:30:51:65:37:96:e3:de:
1b:b9:cf:f9:99:14:1e:46:b5:3f:aa:94:cd:7e:53:4a:61:70:
be:91:f4:5f:a0:9d:5e:d6:1a:47:12:e7:70:eb:ee:6d:f7:b8:
ee:7f:c6:16:05:f1:f4:5c:73:8f:8d:33:0f:ec:29:a6:c0:6c:
57:c3:ff:99:2b:bd:8f:a2:45:e7:65:96:c2:b7:a9:4b:bd:b2:
a9:f5:6b:1e:2d:9d:c0:c3:74:da:ee:e5:39:dd:89:85:39:7c:
34:f4:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 18:08:11 2024 by rpki-client on console-fra.rpki-client.org