Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/sQoQxiJaFdKeYIjaslhOlPhwo9A.roa
File: sQoQxiJaFdKeYIjaslhOlPhwo9A.roa (raw, json)
Hash identifier: f2rcHMZc0Z9bjtspyhnCv7R4qEd3xkhXCWgaC+qMAtU=
Subject key identifier: B1:0A:10:C6:22:5A:15:D2:9E:60:88:DA:B2:58:4E:94:F8:70:A3:D0
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019638BECC6C0A337399CBD1C650E33F7058
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/sQoQxiJaFdKeYIjaslhOlPhwo9A.roa
Signing time: Tue 15 Apr 2025 09:19:10 +0000
ROA not before: Tue 15 Apr 2025 09:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: Failed, certificate revoked on Wed 16 Apr 2025 07:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:be:cc:6c:0a:33:73:99:cb:d1:c6:50:e3:3f:70:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 15 09:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10a10c6225a15d29e6088dab2584e94f870a3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:a4:2c:94:ed:5a:71:fd:6c:07:76:9a:b0:
f6:84:6d:c6:c9:99:64:20:5e:e6:86:ff:b9:2d:46:
e9:78:0f:aa:93:3a:2b:4f:98:d4:84:1a:cc:f2:77:
86:d4:2f:5c:5c:10:28:8b:02:f8:3d:73:5c:21:ea:
11:db:14:f1:92:d3:88:82:70:bb:0b:98:46:cb:27:
13:56:1c:ff:3c:95:35:9b:66:79:7b:dd:8a:8b:ac:
a5:34:b1:7e:ce:29:40:a6:86:f6:81:2d:f1:db:1d:
d6:59:21:49:cb:78:89:6f:39:77:63:1a:a9:37:9b:
cd:46:df:0a:99:ea:6b:0e:bd:42:e3:de:4a:81:29:
21:e6:c5:4f:34:57:87:14:99:61:cd:66:94:21:0f:
2a:e2:f1:4f:64:c9:17:25:81:af:6e:79:2e:a6:54:
99:bd:f4:fc:f3:b1:18:b9:d4:07:0f:b9:c8:e8:0c:
6c:99:ee:08:54:ca:72:84:db:5f:fc:8d:c8:03:b4:
fe:46:79:f6:49:e4:21:16:57:25:90:ad:7d:60:8c:
9c:86:16:47:de:4d:1f:62:dd:0e:bc:5a:72:02:52:
e2:31:a4:68:5e:ff:7f:b9:8f:f4:0d:be:9f:69:66:
c2:61:2d:4a:b0:b9:e4:59:c1:c9:e3:b6:04:38:75:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:10:C6:22:5A:15:D2:9E:60:88:DA:B2:58:4E:94:F8:70:A3:D0
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/sQoQxiJaFdKeYIjaslhOlPhwo9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
4a:0f:5a:aa:a1:4e:5a:98:59:bd:8c:29:f9:dd:5b:b6:7c:9e:
5e:9a:8d:b2:40:76:93:7f:75:a4:b0:42:56:c3:b4:99:62:2d:
48:92:3d:e5:bc:35:64:f4:46:f6:d6:e0:59:fa:88:48:cc:e8:
01:ee:52:09:9e:b2:25:18:36:8d:cc:66:50:8c:52:88:52:1e:
21:e7:35:fd:0e:52:25:9c:2e:f5:cb:80:62:32:08:cb:61:7e:
3a:d4:c4:ca:ba:dd:eb:16:df:d7:05:51:62:65:23:b4:ee:2a:
54:70:87:f0:28:71:e3:22:08:a3:f7:54:1a:c7:56:be:0e:0f:
d8:b8:59:87:75:98:bc:d9:9b:6d:70:29:1f:c8:fe:9f:2f:57:
2c:38:ec:15:e6:81:6e:31:20:d6:8a:ec:1d:f9:fc:83:ac:a1:
c5:94:38:f0:b1:52:02:c8:b3:bf:71:c0:93:81:6d:8c:e6:cf:
e3:4f:1d:83:11:19:b2:45:b6:16:63:4d:39:14:29:85:ef:37:
8b:6a:c1:79:9c:8e:1e:ae:71:f9:50:da:23:03:a0:13:3e:3e:
91:9a:4f:06:81:80:a2:20:0b:f9:11:9d:8b:03:1e:7f:18:a2:
fc:f1:aa:05:ac:64:6c:89:77:f9:72:13:ae:d3:89:0b:a4:23:
ff:1b:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:05:40 2025 by rpki-client