Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/oSQQz0kWQvqgSVdZfecesCy77S0.roa
File: oSQQz0kWQvqgSVdZfecesCy77S0.roa (raw, json)
Hash identifier: yz+Qsrp0oef/OR6G8cmqFJnD98CyMs1aaH7PACERi9E=
Subject key identifier: A1:24:10:CF:49:16:42:FA:A0:49:57:59:7D:E7:1E:B0:2C:BB:ED:2D
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 0195B339453D0178EDC757E206FCCD477E62
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/oSQQz0kWQvqgSVdZfecesCy77S0.roa
Signing time: Thu 20 Mar 2025 11:03:49 +0000
ROA not before: Thu 20 Mar 2025 11:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 13:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:39:45:3d:01:78:ed:c7:57:e2:06:fc:cd:47:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Mar 20 11:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a12410cf491642faa04957597de71eb02cbbed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:bf:7c:ff:25:e4:d3:b3:29:05:6f:ac:cb:
5d:d3:fd:d7:31:81:e0:a4:d5:60:58:ca:87:a6:ba:
99:74:14:b1:ba:8b:98:0c:59:a1:5f:9a:fd:f7:5a:
ee:c9:f4:00:ab:d9:b9:1e:b8:38:d8:eb:3d:35:d1:
65:73:47:83:13:6e:1a:e5:36:3b:6a:64:f0:0c:0c:
73:c3:5b:34:d5:31:cd:14:a8:6e:e7:6b:c6:c9:49:
c5:88:c3:4a:2b:f9:e1:80:82:5d:e1:6b:30:fd:f2:
f9:ad:dd:6d:c3:d6:ca:86:4c:0e:41:8c:f8:16:cd:
70:a7:97:92:0e:6a:25:49:96:0b:7f:90:32:9f:2d:
d6:59:b4:f9:b3:0c:22:ef:66:e1:9d:d7:9a:e4:92:
11:4e:f8:2a:3e:99:03:75:8e:f5:88:ca:dd:9a:2d:
07:d1:bb:b6:7c:90:cf:a1:72:8a:05:57:8b:07:1f:
f4:2d:52:d0:5b:35:69:c8:68:44:78:26:9a:c5:01:
2c:35:c3:a3:0b:fb:08:1e:6f:82:1f:aa:91:9d:0f:
63:81:be:31:2f:64:7c:27:3c:7d:78:4c:e2:65:10:
40:78:ae:ab:77:dc:86:c8:ce:5b:50:04:ca:0d:e3:
be:0b:d7:01:d5:70:63:43:75:64:5b:f6:2a:40:85:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:10:CF:49:16:42:FA:A0:49:57:59:7D:E7:1E:B0:2C:BB:ED:2D
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/oSQQz0kWQvqgSVdZfecesCy77S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
4f:83:5b:02:90:b2:d0:7e:c6:b7:67:22:55:f8:6c:30:51:19:
cc:51:2a:d4:e8:e6:13:2b:3b:60:23:8d:1c:99:42:ff:7c:9b:
fb:6b:a2:2f:8c:84:83:c4:40:a3:3a:10:4a:56:c7:fb:f2:aa:
fa:f3:0d:2b:bf:20:96:72:2a:9e:35:29:46:ae:3a:c8:82:85:
23:7f:90:8d:d4:30:18:ec:0c:95:eb:32:13:a8:d2:c9:79:20:
33:a8:0d:3e:5f:85:a1:ae:eb:af:85:81:ee:9c:87:eb:a8:e6:
cf:fb:f7:4d:81:be:aa:10:35:81:06:02:ee:ef:df:99:72:f3:
1b:41:ca:fa:1c:39:d0:76:15:20:b5:23:98:5d:61:1c:b3:6c:
40:e7:9d:b2:7c:c0:be:4e:85:e8:d9:2e:7c:82:d2:45:39:ff:
fe:69:fa:a2:2c:fa:37:e7:71:14:96:83:6c:6e:5c:a4:c8:55:
03:10:0a:fd:68:93:dd:c9:55:af:e3:47:85:50:c4:45:bd:70:
da:47:fb:6a:de:81:3d:a5:a0:44:c7:63:74:bb:72:7d:4d:f5:
93:a3:2d:79:0c:d4:6d:17:74:06:13:e8:aa:3d:2c:44:7a:63:
33:43:d2:7d:73:8a:d4:4c:ae:1c:16:a6:d6:b1:b4:eb:66:d8:
b9:bd:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:07 2025 by rpki-client