Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IGVdi8-Lk7J5QsTENCtnlNiI71I.roa
File: IGVdi8-Lk7J5QsTENCtnlNiI71I.roa (raw, json)
Hash identifier: panmq6J05xtdPvdkDQXxIASt+dYNDxuEjH8hQWT+e0k=
Subject key identifier: 20:65:5D:8B:CF:8B:93:B2:79:42:C4:C4:34:2B:67:94:D8:88:EF:52
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DA7D9BF84EAB8C280CFD8C843CE2D8394
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IGVdi8-Lk7J5QsTENCtnlNiI71I.roa
Signing time: Wed 14 Feb 2024 13:41:21 +0000
ROA not before: Wed 14 Feb 2024 13:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 62.164.128.0/18 maxlen: 18
62.164.144.0/21 maxlen: 21
62.164.192.0/21 maxlen: 21
62.169.150.0/24 maxlen: 24
62.169.154.0/24 maxlen: 24
62.169.156.0/24 maxlen: 24
86.54.0.0/16 maxlen: 16
193.108.169.0/24 maxlen: 24
194.62.44.0/22 maxlen: 22
194.164.2.0/24 maxlen: 24
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.100.0/24 maxlen: 24
194.164.104.0/24 maxlen: 24
194.164.106.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.144.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.224.0/19 maxlen: 19
195.26.228.0/24 maxlen: 24
195.26.236.0/24 maxlen: 24
195.184.228.0/23 maxlen: 23
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
195.200.22.0/24 maxlen: 24
195.200.27.0/24 maxlen: 24
212.32.28.0/24 maxlen: 24
212.32.42.0/24 maxlen: 24
212.32.44.0/23 maxlen: 23
212.32.44.0/24 maxlen: 24
212.32.55.0/24 maxlen: 24
212.32.66.0/24 maxlen: 24
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
212.56.57.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.0.0/16 maxlen: 16
217.154.12.0/24 maxlen: 24
217.154.25.0/24 maxlen: 24
217.154.28.0/24 maxlen: 24
217.154.30.0/24 maxlen: 24
217.154.31.0/24 maxlen: 24
217.154.39.0/24 maxlen: 24
217.154.46.0/24 maxlen: 24
217.154.49.0/24 maxlen: 24
217.154.72.0/23 maxlen: 23
217.154.90.0/24 maxlen: 24
217.154.96.0/24 maxlen: 24
217.154.103.0/24 maxlen: 24
217.154.104.0/24 maxlen: 24
217.154.109.0/24 maxlen: 24
217.154.110.0/23 maxlen: 23
217.154.122.0/23 maxlen: 23
217.154.127.0/24 maxlen: 24
217.154.132.0/22 maxlen: 22
217.154.137.0/24 maxlen: 24
217.154.138.0/24 maxlen: 24
217.154.141.0/24 maxlen: 24
217.154.151.0/24 maxlen: 24
217.154.157.0/24 maxlen: 24
217.154.158.0/24 maxlen: 24
217.154.176.0/24 maxlen: 24
217.154.187.0/24 maxlen: 24
217.154.209.0/24 maxlen: 24
217.154.219.0/24 maxlen: 24
217.154.221.0/24 maxlen: 24
217.154.230.0/24 maxlen: 24
217.154.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:d9:bf:84:ea:b8:c2:80:cf:d8:c8:43:ce:2d:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 14 13:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20655d8bcf8b93b27942c4c4342b6794d888ef52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:2e:d3:e5:d6:53:81:c7:b2:b8:33:73:19:
2d:0d:6f:37:e7:ee:c6:a3:b3:50:09:4a:0a:30:6b:
6a:ea:3e:65:8b:d6:af:b6:d2:bc:06:4b:c9:5b:fc:
f8:18:41:d7:a6:f3:d7:25:89:d0:58:e2:4a:a1:1c:
8c:b7:e1:c1:02:39:67:d3:89:3b:d1:9c:fc:87:42:
73:77:79:ba:02:c1:06:5f:f4:df:f5:a5:12:3b:3d:
fc:61:c7:18:6a:ec:39:9f:fa:66:b9:0a:8f:8c:87:
75:5e:18:95:20:40:e6:cc:3e:67:4f:9c:12:c8:df:
f5:82:37:f7:c7:39:96:e6:20:e4:0d:65:0c:2c:c6:
5d:8a:c5:76:8c:9f:6b:d6:5a:8f:8f:8c:dc:cd:e9:
7d:a6:fa:4e:11:c7:f0:cd:21:de:68:d6:d7:4d:99:
ec:c4:02:a5:0c:fa:58:3d:c6:eb:86:dd:4c:11:4f:
ed:d6:49:d4:4e:b8:e6:d9:60:30:d3:91:30:21:a3:
df:1f:9b:63:8a:65:93:c2:82:d7:84:0e:e8:95:3a:
45:6f:58:46:b3:62:53:3e:1e:81:32:4d:e8:fe:aa:
80:0f:6f:4f:dd:40:6f:92:39:df:ba:53:5a:07:01:
0a:3a:bb:99:76:81:c4:dc:37:0c:9b:3a:dd:48:7e:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:5D:8B:CF:8B:93:B2:79:42:C4:C4:34:2B:67:94:D8:88:EF:52
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IGVdi8-Lk7J5QsTENCtnlNiI71I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0-62.164.199.255
62.169.150.0/24
62.169.154.0/24
62.169.156.0/24
86.54.0.0/16
193.108.169.0/24
194.62.44.0/22
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.100.0/24
194.164.104.0/24
194.164.106.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.224.0/19
195.184.228.0/23
195.184.236.0/24
195.184.245.0/24
195.200.0.0/19
212.32.28.0/24
212.32.42.0/24
212.32.44.0/23
212.32.55.0/24
212.32.66.0/24
212.47.80.0/23
212.47.84.0/24
212.56.57.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:23:c2:08:08:dc:45:3f:d3:c5:2f:3c:21:8f:1f:58:0c:3c:
c7:54:65:7d:47:75:96:65:79:4d:1e:d1:5d:4a:15:c4:41:53:
ef:ee:14:95:98:12:f2:ed:ab:77:59:5b:45:9c:6e:6b:b3:75:
27:fc:a7:a2:ec:0f:4e:fe:3e:43:ef:50:5f:64:01:13:c4:52:
f8:53:4b:09:52:64:d1:d0:00:02:54:22:b5:80:90:cf:d8:de:
62:b9:3d:b8:56:a1:02:e1:85:6f:63:b0:bb:bf:56:0b:0c:75:
4f:51:b2:b3:8f:12:02:95:bc:06:7d:fb:34:32:62:1b:8e:43:
39:aa:db:bf:42:a9:f4:5b:cf:03:3e:fa:d9:0c:62:8d:82:50:
4f:54:5a:a1:43:25:39:25:e8:f9:12:28:74:f3:10:54:f1:b2:
9a:0c:45:9a:b2:72:82:65:4e:77:c6:9e:e0:56:a5:6d:8a:a7:
a0:27:7f:45:82:94:03:15:7d:0f:7d:50:52:e5:d2:70:a9:09:
af:05:4a:df:0b:bb:87:94:61:1f:00:4d:63:d1:06:b7:7d:a6:
1e:03:c3:fa:f2:2e:78:71:4b:42:36:11:11:7c:21:73:ba:88:
1e:b9:b2:66:58:09:31:1c:42:9d:a7:43:3f:97:d9:06:93:59:
b5:80:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:04:28 2024 by rpki-client on console-fra.rpki-client.org