Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h_z_05KBUp93zrXUgrMWWR4raNY.roa
File: h_z_05KBUp93zrXUgrMWWR4raNY.roa (raw, json)
Hash identifier: 0vIi6GbQLtB3dMWuq5G7w1HbxW44gcjwkgQq9J9Jc9k=
Subject key identifier: 87:FC:FF:D3:92:81:52:9F:77:CE:B5:D4:82:B3:16:59:1E:2B:68:D6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0193AA47F6081A5B0D7A3206F2F75D834F3C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h_z_05KBUp93zrXUgrMWWR4raNY.roa
Signing time: Mon 09 Dec 2024 07:17:42 +0000
ROA not before: Mon 09 Dec 2024 07:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/20 maxlen: 20
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 20
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Dec 2024 08:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:47:f6:08:1a:5b:0d:7a:32:06:f2:f7:5d:83:4f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Dec 9 07:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87fcffd39281529f77ceb5d482b316591e2b68d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:f0:32:80:14:3e:49:b5:fe:cc:e0:5c:4c:
9d:86:98:59:df:1a:9b:77:46:c6:e4:2b:8e:96:74:
6b:83:4d:f3:75:eb:0e:3b:ca:e0:aa:34:60:e7:5c:
d8:76:f9:6c:3d:a8:dd:9d:6e:08:76:c7:e6:ac:b4:
f9:5e:db:6e:6e:00:d2:79:ea:bf:62:33:4b:ab:ea:
83:52:dd:c6:01:e4:52:0d:9b:0a:55:65:73:08:67:
8f:8d:32:af:43:a8:55:10:f7:e8:3e:60:b7:22:d2:
c5:12:dd:ee:90:96:4b:a5:22:d6:d7:fd:f0:69:67:
a9:ef:08:9a:c8:b7:47:21:55:d4:dd:66:d1:d4:73:
bd:30:e2:bf:e6:a3:5f:35:12:f7:b5:d1:f7:3a:4f:
b0:52:87:c8:ed:c2:45:f5:cc:3f:2e:3b:1f:c4:96:
bd:af:5b:d8:97:43:04:75:c8:01:bd:33:6c:a1:ae:
84:1d:1d:14:52:fc:7f:50:d1:45:7e:65:c2:0f:45:
37:b7:cc:df:dd:79:b9:fa:39:2c:24:9b:63:a6:8c:
28:fa:e7:b2:fa:fb:8e:43:09:8e:02:c2:98:c0:d4:
bc:79:c5:da:85:ff:71:b6:6d:cc:1e:ba:c4:89:a2:
08:6d:8d:bb:bb:48:b1:e4:70:cd:b4:88:8e:2e:d6:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:FF:D3:92:81:52:9F:77:CE:B5:D4:82:B3:16:59:1E:2B:68:D6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h_z_05KBUp93zrXUgrMWWR4raNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
92:00:ce:cb:c5:70:5d:b9:d7:1f:49:03:98:b5:3c:d3:cb:85:
05:49:b6:83:a6:a2:3c:60:da:20:38:17:2f:f6:9b:19:a5:9d:
95:b8:d3:55:c8:01:0d:f3:53:4b:3d:6b:30:02:71:82:e3:0b:
c9:56:a9:dd:bf:c1:05:a5:e9:b7:6f:e6:e0:4a:8b:52:14:9f:
85:e1:06:2d:7a:f3:7d:ef:6b:dc:d2:af:9f:f4:d7:1b:8a:3a:
ed:92:72:cd:9f:05:c3:c6:aa:52:17:4a:04:27:bd:80:63:44:
ae:2e:17:fb:fa:7b:24:df:9b:8c:48:d7:ab:38:8e:93:20:80:
41:a0:b0:d4:75:e8:24:06:55:56:0e:39:b4:08:37:2a:a7:70:
27:aa:78:62:c6:9f:a8:a2:c1:7c:f6:c3:e9:7f:05:6d:db:30:
57:ad:49:6e:77:d4:97:6d:5f:54:62:9d:87:6f:e6:d2:15:38:
de:9e:0a:3b:2b:f9:a1:33:8b:4c:fd:df:89:a1:3f:e9:c5:b5:
77:38:87:90:43:f7:3a:ce:58:7f:29:cb:d7:78:de:26:f1:97:
ad:b0:84:0a:fd:77:89:13:75:83:db:fd:cf:af:59:2a:ff:09:
c5:1d:a9:65:38:ff:96:dd:87:fa:33:4a:92:05:74:20:55:99:
65:47:60:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZOqR/YIGlsNejIG8vddg088MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQxMjA5MDcxNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ZjZmZkMzkyODE1MjlmNzdjZWI1ZDQ4MmIzMTY1OTFlMmI2OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHwMoAUPkm1/szgXEydhphZ3xqb
d0bG5CuOlnRrg03zdesOO8rgqjRg51zYdvlsPajdnW4IdsfmrLT5XttubgDSeeq/
YjNLq+qDUt3GAeRSDZsKVWVzCGePjTKvQ6hVEPfoPmC3ItLFEt3ukJZLpSLW1/3w
aWep7wiayLdHIVXU3WbR1HO9MOK/5qNfNRL3tdH3Ok+wUofI7cJF9cw/LjsfxJa9
r1vYl0MEdcgBvTNsoa6EHR0UUvx/UNFFfmXCD0U3t8zf3Xm5+jksJJtjpowo+uey
+vuOQwmOAsKYwNS8ecXahf9xtm3MHrrEiaIIbY27u0ix5HDNtIiOLtYvBwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFIf8/9OSgVKfd8611IKzFlkeK2jWMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvaF96XzA1S0JVcDkzenJYVWdyTVdXUjRyYU5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBkgQCAAEwgYsDBAc+
twAwCwMDAFPvAwQEU+9gAwQDU+/IMAwDBAVT7+ADBANT7/AwCwMDAlWsAwQCVaxI
AwQAVaxPMAwDBAFVrFIDBANVrFADBARVrGADBANVrKADBAJVrQQDBARVrZADBAZV
roAwCwMEBVWu4AMDBFWgAwQDXumQAwQEXumgAwQAbaxIAwQHsiIAMA0EAgACMAcD
BQAqAoBAMA0GCSqGSIb3DQEBCwUAA4IBAQCSAM7LxXBdudcfSQOYtTzTy4UFSbaD
pqI8YNogOBcv9psZpZ2VuNNVyAEN81NLPWswAnGC4wvJVqndv8EFpem3b+bgSotS
FJ+F4QYtevN972vc0q+f9NcbijrtknLNnwXDxqpSF0oEJ72AY0SuLhf7+nsk35uM
SNerOI6TIIBBoLDUdegkBlVWDjm0CDcqp3Anqnhixp+oosF89sPpfwVt2zBXrUlu
d9SXbV9UYp2Hb+bSFTjengo7K/mhM4tM/d+JoT/pxbV3OIeQQ/c6zlh/KcvXeN4m
8ZetsIQK/XeJE3WD2/3Pr1kq/wnFHallOP+W3Yf6M0qSBXQgVZllR2D4
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:07:26 2025 by rpki-client