Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Gjhi4sCefXELwvoEU8aMTqbinGI.roa
File: Gjhi4sCefXELwvoEU8aMTqbinGI.roa (raw, json)
Hash identifier: SkFx6YSCTikXeIPMvR2Ciy88tzUh3ELNYI8cxiiCbYE=
Subject key identifier: 1A:38:62:E2:C0:9E:7D:71:0B:C2:FA:04:53:C6:8C:4E:A6:E2:9C:62
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0195224305801A91339BC7D0EF11D23292CC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Gjhi4sCefXELwvoEU8aMTqbinGI.roa
Signing time: Thu 20 Feb 2025 07:29:32 +0000
ROA not before: Thu 20 Feb 2025 07:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.92.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/22 maxlen: 22
85.174.132.0/23 maxlen: 23
85.174.134.0/24 maxlen: 24
85.174.136.0/24 maxlen: 24
85.174.138.0/23 maxlen: 23
85.174.143.0/24 maxlen: 24
85.174.190.0/23 maxlen: 23
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Mar 2025 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:43:05:80:1a:91:33:9b:c7:d0:ef:11:d2:32:92:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 20 07:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a3862e2c09e7d710bc2fa0453c68c4ea6e29c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:9d:32:a2:4f:b3:4b:bb:66:ad:60:b2:55:
7b:17:eb:f8:be:8b:a4:e1:89:4f:d0:60:23:27:5a:
18:0e:ca:1d:8a:c5:2d:3c:55:37:43:62:38:1e:9c:
2c:18:47:68:49:b4:71:bc:0b:ef:46:95:14:3a:fd:
31:e1:0a:ab:f2:ac:16:a7:bc:c8:0b:51:7f:d1:2e:
17:2b:90:13:ec:f2:47:27:ac:c8:f2:e1:fb:52:f3:
f1:aa:cf:79:2c:ef:d4:0b:62:bd:80:64:44:15:8e:
65:a9:e7:d9:73:f0:5a:67:d7:84:3a:59:2d:96:fe:
33:76:6c:7b:ce:93:54:31:1e:8f:98:5f:29:e7:0c:
1c:48:06:71:2a:67:c6:9d:67:b1:30:e3:f1:c6:fb:
2f:00:21:f4:fc:69:d9:6e:82:03:4e:eb:a5:df:cf:
d4:f9:b6:4d:e3:47:32:7e:52:99:91:e2:53:1b:e2:
1e:cc:cd:96:fc:63:67:36:b3:c0:7b:ff:73:ec:0a:
3e:f1:2f:a7:ab:88:12:2c:bd:12:0a:37:03:06:e2:
42:1a:73:3d:ac:c9:14:5a:2a:46:7a:ad:34:1d:c3:
93:db:4e:83:23:12:aa:f3:8c:e4:0b:26:9a:c2:12:
7f:c5:80:3a:5d:92:90:41:5d:8b:ae:2a:95:ba:ac:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:62:E2:C0:9E:7D:71:0B:C2:FA:04:53:C6:8C:4E:A6:E2:9C:62
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Gjhi4sCefXELwvoEU8aMTqbinGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0-85.174.134.255
85.174.136.0/24
85.174.138.0/23
85.174.143.0/24
85.174.190.0/23
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
66:2e:32:9c:27:c1:e7:d4:36:34:6d:6b:f6:b7:62:4b:02:f1:
26:d5:ad:e6:1f:4f:2d:fa:91:3c:69:07:08:8f:4e:7a:1c:79:
1a:0c:a2:5f:10:e2:b3:02:ca:91:ee:e9:4a:1d:29:da:af:45:
48:c2:72:1c:60:8a:26:9c:ef:b9:c9:12:c0:14:ec:3b:96:12:
b6:60:d1:6e:49:54:aa:e3:7d:04:3a:82:b9:63:5d:f6:4a:a1:
50:c9:3f:d2:89:c5:8a:b5:71:86:48:77:01:3c:55:71:76:81:
06:f5:5c:13:59:90:ab:a8:4a:7c:97:c3:45:8e:42:f3:4b:24:
27:0a:a7:61:8e:20:f2:a3:ad:7e:d1:7f:c9:c9:6a:8d:5a:58:
6c:25:41:c9:a2:74:e8:6f:d1:57:e9:1b:18:93:1f:82:93:30:
95:b0:6f:ae:0b:f3:6e:d5:d9:d7:32:8f:41:f7:3b:3c:83:d9:
32:af:c5:1e:4c:b4:d8:66:93:99:95:d3:46:37:e9:50:d4:b8:
18:29:db:44:d0:39:03:f3:54:07:d1:34:78:dc:9c:da:c6:76:
13:e7:b0:bd:6f:ab:d6:b6:d9:4b:1f:66:0e:2b:5c:c2:24:e8:
4f:7c:06:30:e6:b7:7c:df:09:0e:21:ff:05:4a:d9:d4:f4:d0:
14:8c:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:56 2025 by rpki-client