Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oCMyeE0M57PGiElPmoGkHC9PlM0.roa
File: oCMyeE0M57PGiElPmoGkHC9PlM0.roa (raw, json)
Hash identifier: tcn+JAnnIWrbWu8M2ipO9FV25TYDTYFAjn8g0W7tMtA=
Subject key identifier: A0:23:32:78:4D:0C:E7:B3:C6:88:49:4F:9A:81:A4:1C:2F:4F:94:CD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C683E9CB73EF6E944CB24D9665A52
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oCMyeE0M57PGiElPmoGkHC9PlM0.roa
Signing time: Thu 02 Jan 2025 09:50:26 +0000
ROA not before: Thu 02 Jan 2025 09:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Feb 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:68:3e:9c:b7:3e:f6:e9:44:cb:24:d9:66:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a02332784d0ce7b3c688494f9a81a41c2f4f94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:57:fd:d0:54:4a:9c:72:c8:21:ab:f2:06:
11:e3:bb:87:40:2f:1a:91:62:d5:fb:7a:2a:c2:29:
87:86:2f:33:e0:86:fb:4c:82:87:ad:06:f7:10:e5:
b3:ed:7c:0e:fd:6f:51:b8:bc:d2:5c:fb:d6:ba:e4:
02:da:0c:f7:40:81:5f:14:ea:ae:d0:60:cf:53:0b:
32:23:cf:20:11:33:dc:1f:e5:d4:36:08:6e:ab:9a:
35:ed:9d:8f:98:3c:84:04:54:92:07:ae:65:18:ab:
15:38:94:86:4c:f5:f7:08:e3:72:31:5a:8d:b7:50:
d4:6a:5c:ba:f2:df:8c:86:f4:be:5a:4a:53:24:66:
45:5d:6d:30:d7:a0:76:97:4c:a5:4c:75:10:4d:37:
bf:94:3f:04:47:07:91:49:0c:ef:b1:d2:4f:36:25:
60:2b:51:5b:22:e7:6d:59:b5:0e:b9:98:57:82:05:
8f:79:9c:87:6a:fb:2a:db:33:5f:68:2d:b3:33:a9:
3c:4c:90:5c:4e:00:42:d1:e8:42:c8:1d:d7:52:a8:
5b:81:64:cf:f7:68:02:69:73:79:df:47:96:9d:e7:
4d:ae:8b:cc:a4:46:08:37:7a:ca:4f:eb:0f:8d:c9:
2c:4a:11:ce:cd:b8:e8:30:a7:7c:60:1f:d4:e2:e7:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:32:78:4D:0C:E7:B3:C6:88:49:4F:9A:81:A4:1C:2F:4F:94:CD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oCMyeE0M57PGiElPmoGkHC9PlM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
4b:af:e1:ab:33:df:ab:46:df:b4:94:bf:72:79:9d:8c:fb:e0:
9e:0e:bc:f4:9d:dc:9a:94:d8:5a:9c:ed:ed:56:ea:d5:4f:68:
52:45:de:b4:59:4c:1e:9d:c1:39:99:36:63:20:53:e7:81:98:
1b:d1:72:6d:b9:3d:c3:fd:d6:2e:d7:f3:57:38:c5:76:bb:16:
fd:6f:23:5b:ef:55:a3:c2:6d:0a:93:f0:5c:4e:77:de:5a:9f:
89:5e:61:e5:89:e9:d4:1b:01:2c:89:99:81:2e:d1:a6:48:ce:
4e:bc:1c:83:37:9b:9b:f9:8b:6a:5c:15:27:af:da:37:cd:bd:
22:2d:0e:9a:ae:9c:a8:6e:47:c6:f2:7d:9d:ef:c5:c9:d7:91:
e3:37:ab:87:e2:19:e3:74:eb:7b:ce:a6:5a:7e:b9:b8:b8:4b:
83:ad:cb:eb:38:84:b8:dc:e1:c4:a3:f0:96:4a:53:ee:c9:f9:
78:c0:6d:7e:89:26:a2:06:7b:2a:56:7f:60:12:01:48:19:df:
5d:3b:12:35:90:69:1f:16:94:ec:6a:27:eb:c1:e4:02:ab:da:
01:05:51:27:e7:be:f5:2f:86:62:e7:4f:11:09:34:fc:9d:4d:
07:12:e8:a3:68:ea:3c:91:ea:3a:f6:62:98:14:f3:c9:e6:99:
5a:14:5f:07
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZQmbGg+nLc+9ulEyyTZZlpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMTAyMDk1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDIzMzI3ODRkMGNlN2IzYzY4ODQ5NGY5YTgxYTQxYzJmNGY5NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE1X/dBUSpxyyCGr8gYR47uHQC8a
kWLV+3oqwimHhi8z4Ib7TIKHrQb3EOWz7XwO/W9RuLzSXPvWuuQC2gz3QIFfFOqu
0GDPUwsyI88gETPcH+XUNghuq5o17Z2PmDyEBFSSB65lGKsVOJSGTPX3CONyMVqN
t1DUaly68t+MhvS+WkpTJGZFXW0w16B2l0ylTHUQTTe/lD8ERweRSQzvsdJPNiVg
K1FbIudtWbUOuZhXggWPeZyHavsq2zNfaC2zM6k8TJBcTgBC0ehCyB3XUqhbgWTP
92gCaXN530eWnedNrovMpEYIN3rKT+sPjcksShHOzbjoMKd8YB/U4ucwvwIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFKAjMnhNDOezxohJT5qBpBwvT5TNMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvb0NNeWVFME01N1BHaUVsUG1vR2tIQzlQbE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBmgQCAAEwgZMDBAc+
twAwCwMDAFPvAwQEU+9gAwQDU+/IMAwDBAVT7+ADBANT7/AwCwMDAlWsAwQCVaxI
AwQAVaxPMAwDBAFVrFIDBANVrFAwDAMEBVWsYAMEAVWsbAMEA1WsoAMEAlWtBAME
BFWtkAMEBlWugDALAwQFVa7gAwMEVaADBANe6ZADBARe6aADBABtrEgDBAeyIgAw
DQQCAAIwBwMFACoCgEAwDQYJKoZIhvcNAQELBQADggEBAEuv4asz36tG37SUv3J5
nYz74J4OvPSd3JqU2Fqc7e1W6tVPaFJF3rRZTB6dwTmZNmMgU+eBmBvRcm25PcP9
1i7X81c4xXa7Fv1vI1vvVaPCbQqT8FxOd95an4leYeWJ6dQbASyJmYEu0aZIzk68
HIM3m5v5i2pcFSev2jfNvSItDpqunKhuR8byfZ3vxcnXkeM3q4fiGeN063vOplp+
ubi4S4Oty+s4hLjc4cSj8JZKU+7J+XjAbX6JJqIGeypWf2ASAUgZ3107EjWQaR8W
lOxqJ+vB5AKr2gEFUSfnvvUvhmLnTxEJNPydTQcS6KNo6jyR6jr2YpgU88nmmVoU
Xwc=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:12:06 2025 by rpki-client