Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-x1htdGjk5JWYTU3RCfyKJqjRj8.roa
File: 1-x1htdGjk5JWYTU3RCfyKJqjRj8.roa (raw, json)
Hash identifier: Ms5mDy7Y8J+OuGfoH9Wxa1GkpouAbB1qAWDbUXY4fmw=
Subject key identifier: FB:1D:61:B5:D1:A3:93:92:56:61:35:37:44:27:F2:28:9A:A3:46:3F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194FD094D658BA6177E2E6B7DF384264D5C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-x1htdGjk5JWYTU3RCfyKJqjRj8.roa
Signing time: Thu 13 Feb 2025 02:00:32 +0000
ROA not before: Thu 13 Feb 2025 02:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.92.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Feb 2025 04:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fd:09:4d:65:8b:a6:17:7e:2e:6b:7d:f3:84:26:4d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 13 02:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb1d61b5d1a39392566135374427f2289aa3463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:08:75:24:02:52:2d:e9:12:09:81:f5:17:
b9:c4:ed:77:2a:5d:29:d3:ab:39:a9:e1:1b:c6:51:
d8:00:4f:e9:38:27:94:e1:b8:be:0e:4f:33:15:59:
28:22:74:34:be:df:09:fa:47:b9:e0:93:85:18:99:
d8:6f:b9:ad:7d:28:ec:2e:17:92:23:86:de:78:21:
a7:e7:fb:fe:a0:39:5d:dc:84:80:13:79:a4:fe:96:
29:b8:e7:09:48:20:10:5c:78:7e:80:55:3f:a6:3a:
bf:a5:65:0b:26:d3:93:12:bc:74:a6:89:19:94:8a:
f0:d6:8d:45:59:7d:62:f2:64:37:5c:35:3e:9e:56:
4f:6d:8f:92:6a:c9:28:52:48:5d:1c:62:01:41:b3:
23:e1:63:ea:14:fd:6c:d7:0d:ae:76:f1:f9:eb:9d:
4e:3b:49:f8:5b:b8:ee:1a:30:d0:cb:70:ca:00:77:
46:fa:da:7b:e8:84:85:09:56:d0:22:2b:3b:e7:00:
94:4c:2e:63:e1:44:51:1f:fc:0f:25:23:e2:24:28:
a5:28:e6:6b:9a:b4:e8:47:fd:d6:48:9c:92:2f:27:
e2:18:29:0b:f5:1d:3f:26:80:c9:12:20:10:8e:e2:
da:fb:30:c5:43:36:02:35:eb:c4:f2:b0:94:23:0e:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:61:B5:D1:A3:93:92:56:61:35:37:44:27:F2:28:9A:A3:46:3F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-x1htdGjk5JWYTU3RCfyKJqjRj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
2b:de:e9:fe:45:e8:39:0b:3a:a3:29:eb:f4:ef:87:33:84:f8:
93:56:f2:ea:76:17:fe:70:c4:d9:4e:df:b9:6b:1e:32:95:ee:
56:5b:83:a3:69:04:a8:38:8a:29:0d:c0:9c:28:a9:70:28:e1:
74:73:a3:28:64:94:64:ca:d9:6e:42:2f:9c:1e:f1:18:8b:b8:
5f:43:72:a5:d4:a8:1b:12:97:04:73:18:dc:58:59:10:41:cb:
ca:3e:8e:22:23:9f:9d:19:3e:f1:51:00:0c:1e:3c:45:12:d5:
29:35:44:2c:7b:d2:f7:04:d9:bf:b1:4e:35:cb:e5:89:52:21:
42:6e:a8:4b:24:a5:ce:16:b7:f6:63:90:61:03:2f:c7:11:b6:
ba:52:1b:e1:94:c0:db:09:ac:27:7d:fb:6f:41:51:b2:99:17:
46:63:6e:7b:b4:e0:a7:87:e9:20:96:31:89:7e:94:a3:14:cf:
c0:f0:9c:8d:03:83:c7:f5:00:14:d2:46:6d:9d:c2:4e:ed:c4:
3e:61:40:c7:cf:0b:71:d6:97:2a:56:ba:93:61:ea:fe:48:28:
19:89:d4:ea:28:e6:51:4c:02:ed:7d:fa:37:7d:f8:66:3a:da:
25:fa:95:93:27:3b:82:e1:7c:a5:99:7d:37:57:22:c0:ea:ec:
7e:cd:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:34 2025 by rpki-client