Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/rjtODW5KAXUud3eaA3HCu-HfJWw.roa
File: rjtODW5KAXUud3eaA3HCu-HfJWw.roa (raw, json)
Hash identifier: MI+iR63NPmm/O+zknv5Dpwmz7dBr/VYiF4EG5Mlm0J4=
Subject key identifier: AE:3B:4E:0D:6E:4A:01:75:2E:77:77:9A:03:71:C2:BB:E1:DF:25:6C
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DEFF99713EE3747BB853DBE2F52295114
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/rjtODW5KAXUud3eaA3HCu-HfJWw.roa
Signing time: Wed 28 Feb 2024 13:48:48 +0000
ROA not before: Wed 28 Feb 2024 13:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 62.164.131.0/24 maxlen: 24
62.164.132.0/22 maxlen: 22
62.164.136.0/22 maxlen: 22
62.164.140.0/24 maxlen: 24
62.164.144.0/22 maxlen: 22
62.164.152.0/24 maxlen: 24
62.164.168.0/24 maxlen: 24
62.164.169.0/24 maxlen: 24
62.164.171.0/24 maxlen: 24
62.164.176.0/24 maxlen: 24
62.164.178.0/24 maxlen: 24
62.164.179.0/24 maxlen: 24
62.164.180.0/24 maxlen: 24
62.164.183.0/24 maxlen: 24
62.164.184.0/24 maxlen: 24
62.164.186.0/24 maxlen: 24
62.164.187.0/24 maxlen: 24
62.164.188.0/24 maxlen: 24
62.164.189.0/24 maxlen: 24
62.164.190.0/24 maxlen: 24
62.164.191.0/24 maxlen: 24
62.164.192.0/21 maxlen: 21
62.164.196.0/24 maxlen: 24
62.164.199.0/24 maxlen: 24
62.169.150.0/24 maxlen: 24
62.169.154.0/24 maxlen: 24
86.54.6.0/24 maxlen: 24
86.54.7.0/24 maxlen: 24
86.54.10.0/24 maxlen: 24
86.54.27.0/24 maxlen: 24
86.54.43.0/24 maxlen: 24
86.54.44.0/24 maxlen: 24
86.54.45.0/24 maxlen: 24
86.54.80.0/24 maxlen: 24
86.54.87.0/24 maxlen: 24
86.54.96.0/24 maxlen: 24
86.54.97.0/24 maxlen: 24
86.54.98.0/24 maxlen: 24
86.54.100.0/23 maxlen: 23
86.54.102.0/24 maxlen: 24
86.54.103.0/24 maxlen: 24
86.54.104.0/24 maxlen: 24
86.54.106.0/24 maxlen: 24
86.54.108.0/24 maxlen: 24
86.54.109.0/24 maxlen: 24
86.54.111.0/24 maxlen: 24
86.54.112.0/24 maxlen: 24
86.54.113.0/24 maxlen: 24
86.54.114.0/24 maxlen: 24
86.54.115.0/24 maxlen: 24
86.54.116.0/24 maxlen: 24
86.54.117.0/24 maxlen: 24
86.54.118.0/24 maxlen: 24
86.54.119.0/24 maxlen: 24
86.54.120.0/24 maxlen: 24
86.54.121.0/24 maxlen: 24
86.54.122.0/24 maxlen: 24
86.54.124.0/24 maxlen: 24
86.54.127.0/24 maxlen: 24
86.54.128.0/24 maxlen: 24
86.54.129.0/24 maxlen: 24
86.54.130.0/24 maxlen: 24
86.54.131.0/24 maxlen: 24
86.54.134.0/24 maxlen: 24
86.54.142.0/24 maxlen: 24
86.54.143.0/24 maxlen: 24
86.54.148.0/24 maxlen: 24
86.54.149.0/24 maxlen: 24
86.54.150.0/24 maxlen: 24
86.54.161.0/24 maxlen: 24
86.54.162.0/24 maxlen: 24
86.54.164.0/24 maxlen: 24
86.54.173.0/24 maxlen: 24
86.54.174.0/24 maxlen: 24
86.54.177.0/24 maxlen: 24
86.54.178.0/24 maxlen: 24
86.54.180.0/24 maxlen: 24
86.54.183.0/24 maxlen: 24
86.54.185.0/24 maxlen: 24
86.54.200.0/24 maxlen: 24
86.54.210.0/24 maxlen: 24
86.54.212.0/24 maxlen: 24
86.54.224.0/24 maxlen: 24
86.54.230.0/24 maxlen: 24
86.54.234.0/24 maxlen: 24
86.54.248.0/24 maxlen: 24
193.108.169.0/24 maxlen: 24
194.164.2.0/24 maxlen: 24
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.100.0/24 maxlen: 24
194.164.104.0/24 maxlen: 24
194.164.106.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.144.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.228.0/24 maxlen: 24
195.26.236.0/24 maxlen: 24
195.184.228.0/23 maxlen: 23
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
195.200.22.0/24 maxlen: 24
195.200.27.0/24 maxlen: 24
212.32.28.0/24 maxlen: 24
212.32.42.0/24 maxlen: 24
212.32.44.0/24 maxlen: 24
212.32.55.0/24 maxlen: 24
212.32.66.0/24 maxlen: 24
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
212.56.57.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.12.0/24 maxlen: 24
217.154.25.0/24 maxlen: 24
217.154.28.0/24 maxlen: 24
217.154.30.0/24 maxlen: 24
217.154.31.0/24 maxlen: 24
217.154.39.0/24 maxlen: 24
217.154.46.0/24 maxlen: 24
217.154.49.0/24 maxlen: 24
217.154.72.0/23 maxlen: 23
217.154.90.0/24 maxlen: 24
217.154.96.0/24 maxlen: 24
217.154.103.0/24 maxlen: 24
217.154.104.0/24 maxlen: 24
217.154.109.0/24 maxlen: 24
217.154.110.0/23 maxlen: 23
217.154.122.0/23 maxlen: 23
217.154.127.0/24 maxlen: 24
217.154.131.0/24 maxlen: 24
217.154.132.0/22 maxlen: 22
217.154.137.0/24 maxlen: 24
217.154.138.0/24 maxlen: 24
217.154.141.0/24 maxlen: 24
217.154.151.0/24 maxlen: 24
217.154.157.0/24 maxlen: 24
217.154.158.0/24 maxlen: 24
217.154.176.0/24 maxlen: 24
217.154.187.0/24 maxlen: 24
217.154.209.0/24 maxlen: 24
217.154.219.0/24 maxlen: 24
217.154.221.0/24 maxlen: 24
217.154.230.0/24 maxlen: 24
217.154.236.0/24 maxlen: 24
217.154.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:f9:97:13:ee:37:47:bb:85:3d:be:2f:52:29:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 28 13:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae3b4e0d6e4a01752e77779a0371c2bbe1df256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:59:88:87:b8:63:4d:5b:43:01:fe:a8:02:34:
4a:7a:e9:8b:a6:98:49:3f:11:12:12:22:aa:98:de:
df:39:2e:35:de:ad:97:3e:44:5f:9e:3a:bd:0b:20:
86:36:a8:cd:ca:62:03:ae:b0:02:31:06:48:24:47:
6c:29:f2:ce:3b:92:d6:ab:5b:6c:c6:d4:66:6d:cd:
73:04:f0:1f:82:b9:95:49:cf:1e:af:a2:9d:b5:d5:
1c:a9:4b:4f:8d:9f:af:21:16:c0:22:cf:b4:8f:68:
ec:3b:d3:6f:75:17:15:92:ac:0d:a7:48:ae:8a:75:
96:2d:be:71:73:d9:e0:c4:07:f7:ad:13:19:6c:d1:
52:94:e1:4a:e4:dd:fd:fc:bd:99:82:e0:71:27:12:
ae:ee:8e:56:e1:41:d9:58:0b:c7:7e:e3:c5:e1:51:
6e:d2:09:84:c3:af:33:5c:a2:af:2b:70:74:7f:f8:
19:01:41:c6:f5:21:ba:bd:79:26:65:ae:b1:a1:ec:
bd:77:ca:5f:34:cc:25:95:fe:21:86:bc:1f:c8:05:
3e:7c:74:15:4e:7d:39:c8:c6:b3:14:e7:2b:50:ff:
9c:7f:76:13:da:88:97:f0:20:8a:a8:f1:1e:b7:ef:
b1:b3:53:ae:9d:a5:59:a7:03:99:78:d6:0d:e0:dd:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:4E:0D:6E:4A:01:75:2E:77:77:9A:03:71:C2:BB:E1:DF:25:6C
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/rjtODW5KAXUud3eaA3HCu-HfJWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.131.0-62.164.140.255
62.164.144.0/22
62.164.152.0/24
62.164.168.0/23
62.164.171.0/24
62.164.176.0/24
62.164.178.0-62.164.180.255
62.164.183.0-62.164.184.255
62.164.186.0-62.164.199.255
62.169.150.0/24
62.169.154.0/24
86.54.6.0/23
86.54.10.0/24
86.54.27.0/24
86.54.43.0-86.54.45.255
86.54.80.0/24
86.54.87.0/24
86.54.96.0-86.54.98.255
86.54.100.0-86.54.104.255
86.54.106.0/24
86.54.108.0/23
86.54.111.0-86.54.122.255
86.54.124.0/24
86.54.127.0-86.54.131.255
86.54.134.0/24
86.54.142.0/23
86.54.148.0-86.54.150.255
86.54.161.0-86.54.162.255
86.54.164.0/24
86.54.173.0-86.54.174.255
86.54.177.0-86.54.178.255
86.54.180.0/24
86.54.183.0/24
86.54.185.0/24
86.54.200.0/24
86.54.210.0/24
86.54.212.0/24
86.54.224.0/24
86.54.230.0/24
86.54.234.0/24
86.54.248.0/24
193.108.169.0/24
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.100.0/24
194.164.104.0/24
194.164.106.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.228.0/24
195.26.236.0/24
195.184.228.0/23
195.184.236.0/24
195.184.245.0/24
195.200.0.0/19
212.32.28.0/24
212.32.42.0/24
212.32.44.0/24
212.32.55.0/24
212.32.66.0/24
212.47.80.0/23
212.47.84.0/24
212.56.57.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.12.0/24
217.154.25.0/24
217.154.28.0/24
217.154.30.0/23
217.154.39.0/24
217.154.46.0/24
217.154.49.0/24
217.154.72.0/23
217.154.90.0/24
217.154.96.0/24
217.154.103.0-217.154.104.255
217.154.109.0-217.154.111.255
217.154.122.0/23
217.154.127.0/24
217.154.131.0-217.154.135.255
217.154.137.0-217.154.138.255
217.154.141.0/24
217.154.151.0/24
217.154.157.0-217.154.158.255
217.154.176.0/24
217.154.187.0/24
217.154.209.0/24
217.154.219.0/24
217.154.221.0/24
217.154.230.0/24
217.154.236.0/24
217.154.246.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6b:2f:a5:2c:7c:78:fc:ca:80:66:c1:73:bb:bf:2f:9c:56:
69:72:a6:17:a9:30:e6:8c:d8:58:54:06:33:62:96:a2:f4:0b:
24:1d:3a:e1:8e:15:20:68:eb:c8:eb:54:9e:7d:9f:83:86:90:
b2:9e:5e:82:37:ea:83:62:42:63:6a:49:af:48:a8:d0:a0:2a:
31:be:b7:2c:9b:34:10:5e:20:cc:2f:0b:bd:20:5c:77:92:85:
e5:e6:77:48:07:f7:aa:ed:b3:f0:eb:bf:2a:fd:ad:97:45:26:
2a:ef:a7:f8:86:82:85:d6:80:7b:65:9a:ab:ae:90:0a:c1:94:
8d:72:5b:74:39:17:a0:8b:7c:a8:64:fc:e8:43:72:30:b2:1a:
d4:99:22:6b:7e:e5:a1:ec:21:af:f5:3f:90:00:41:27:ac:3f:
d4:96:c1:29:b4:d4:7f:ce:fd:77:32:2a:bc:5f:70:7f:bb:cc:
2d:8e:20:83:29:42:e1:ec:f0:1a:23:02:ed:24:8e:2d:29:f2:
73:ed:4f:d4:1b:af:12:55:98:5e:9e:73:9c:22:30:87:af:14:
ce:0f:37:94:5c:c9:91:d2:d4:f9:51:03:68:8f:cc:8c:b8:02:
e2:b2:fe:b8:42:cd:f7:2b:57:ed:48:9a:12:ab:62:15:eb:e2:
3e:f9:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 18:42:10 2024 by rpki-client on console-fra.rpki-client.org