Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zp16qXENMbJigi0Pwap4oiTVP5k.roa
File: zp16qXENMbJigi0Pwap4oiTVP5k.roa (raw, json)
Hash identifier: rhTIR88DNnoEhYWrNlhKY9U4dZe3aw0ydLkKdZuUjVg=
Subject key identifier: CE:9D:7A:A9:71:0D:31:B2:62:82:2D:0F:C1:AA:78:A2:24:D5:3F:99
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0193D242554D488EC4B258659532F8245AD7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zp16qXENMbJigi0Pwap4oiTVP5k.roa
Signing time: Tue 17 Dec 2024 01:36:22 +0000
ROA not before: Tue 17 Dec 2024 01:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:42:55:4d:48:8e:c4:b2:58:65:95:32:f8:24:5a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Dec 17 01:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9d7aa9710d31b262822d0fc1aa78a224d53f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:3d:3f:90:8c:77:32:13:61:e4:6a:7f:f7:
a8:ae:0b:32:3e:b3:6c:4e:20:5a:5b:9f:7d:45:75:
db:cd:dc:2b:3c:9a:16:b6:aa:74:de:77:5a:e9:27:
88:65:b5:90:b1:9a:31:d5:22:fc:4a:58:1b:28:6d:
31:50:ee:93:8a:b1:5c:7b:3f:4d:64:82:ec:11:8b:
74:bd:b7:3b:b8:0b:35:4e:4f:39:38:58:34:12:ed:
6a:8c:2a:a1:4e:1b:17:75:e9:7b:98:3f:d0:82:00:
25:e4:df:88:01:c8:97:f2:cd:91:08:a5:fb:db:bf:
16:db:80:8b:b7:21:ad:22:a3:5f:a9:96:da:8e:94:
68:f8:7d:e2:f7:65:ed:77:80:e6:ad:67:6d:72:53:
4f:ab:3c:98:2f:96:7a:f1:f9:74:fd:8d:37:e0:f4:
77:36:96:2c:fa:19:87:ae:a8:91:13:6f:bd:d2:24:
1d:32:c1:d0:dc:db:97:16:12:7e:70:87:36:23:e5:
71:84:43:81:29:44:dc:80:27:6b:0b:a6:53:e5:95:
d9:1b:92:c5:1f:1d:57:18:a5:6f:4c:cd:7f:b1:35:
43:ea:82:bf:8b:d6:98:0b:70:83:fc:cb:10:d1:05:
bb:14:82:c8:5d:95:41:48:50:bd:24:d7:9e:91:32:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:7A:A9:71:0D:31:B2:62:82:2D:0F:C1:AA:78:A2:24:D5:3F:99
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zp16qXENMbJigi0Pwap4oiTVP5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
31:da:95:05:a4:f2:0d:f6:79:e1:c0:57:6b:8c:8b:e3:70:02:
a2:c1:3e:a6:7d:ed:9a:76:0e:e6:af:b2:ac:b9:66:a6:cd:16:
5c:86:7c:eb:e5:f2:cc:ea:c4:0c:75:04:ba:a0:51:f9:07:25:
28:b1:76:c5:4e:c5:88:51:85:d8:44:8c:ef:f3:cd:ee:ec:31:
4e:2c:87:25:06:ff:1a:e2:c3:d7:a6:68:99:d4:e2:da:2e:44:
e4:60:f6:9e:ae:83:09:ed:9d:66:1c:2b:49:47:71:ee:a3:26:
f7:9a:0e:5f:48:1a:36:24:69:6d:81:60:00:24:94:e2:27:8f:
e4:95:1a:e6:00:b0:e6:87:87:cf:67:d7:57:b2:5e:ec:50:6f:
f3:da:24:c4:b0:91:85:c8:6d:53:1d:e7:68:57:8c:be:82:4a:
42:ff:26:4b:06:4f:0d:83:0b:ec:d5:22:d1:79:3b:12:07:8b:
bc:1b:72:ac:99:03:a4:5f:e7:1f:20:0a:86:69:50:e0:c8:d2:
3e:4c:78:4a:67:b0:2f:a3:d8:90:8d:be:c1:f7:e7:0b:73:53:
53:23:29:22:54:19:bf:65:43:06:14:36:01:c5:2a:aa:61:67:
37:bd:c9:5c:53:a8:ab:62:53:37:95:22:37:97:66:05:de:ec:
f6:df:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:13 2025 by rpki-client