Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/0nQQzEMA61o9Z_42RpdgOEUevh8.roa
File: 0nQQzEMA61o9Z_42RpdgOEUevh8.roa (raw, json)
Hash identifier: OgkrIQPtXkY48ODoWLYuUEQJ49nGjii9c/stIDXooEI=
Subject key identifier: D2:74:10:CC:43:00:EB:5A:3D:67:FE:36:46:97:60:38:45:1E:BE:1F
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 018CD40FB5A7FEA38D99B891F6FB64BCCEED
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/0nQQzEMA61o9Z_42RpdgOEUevh8.roa
Signing time: Thu 04 Jan 2024 10:40:48 +0000
ROA not before: Thu 04 Jan 2024 10:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 719
IP address blocks: 194.188.0.0/16 maxlen: 16
213.161.32.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
82.141.64.0/18 maxlen: 18
195.74.0.0/19 maxlen: 19
194.188.151.0/24 maxlen: 24
194.188.150.0/24 maxlen: 24
193.229.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
193.66.0.0/16 maxlen: 16
217.25.96.0/20 maxlen: 20
212.38.224.0/19 maxlen: 19
194.86.0.0/16 maxlen: 16
195.255.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
82.118.192.0/19 maxlen: 19
194.240.0.0/15 maxlen: 15
88.112.0.0/14 maxlen: 14
192.126.35.0/24 maxlen: 24
193.65.129.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
212.50.192.0/19 maxlen: 19
217.77.192.0/20 maxlen: 20
193.199.0.0/16 maxlen: 16
212.226.0.0/16 maxlen: 16
192.77.120.0/22 maxlen: 22
193.64.0.0/15 maxlen: 15
212.246.0.0/16 maxlen: 16
91.152.0.0/13 maxlen: 13
80.186.0.0/16 maxlen: 16
217.24.96.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
213.192.128.0/18 maxlen: 18
213.130.224.0/19 maxlen: 19
195.218.64.0/19 maxlen: 19
139.97.0.0/16 maxlen: 16
82.103.192.0/18 maxlen: 18
109.232.80.0/21 maxlen: 21
195.16.192.0/19 maxlen: 19
195.238.192.0/19 maxlen: 19
83.245.128.0/17 maxlen: 17
194.136.170.0/24 maxlen: 24
178.251.56.0/21 maxlen: 21
77.109.192.0/18 maxlen: 18
85.76.0.0/14 maxlen: 14
194.136.213.0/24 maxlen: 24
194.157.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
195.170.128.0/19 maxlen: 19
94.22.0.0/16 maxlen: 16
192.163.128.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
193.184.0.0/15 maxlen: 15
194.211.5.0/24 maxlen: 24
194.211.0.0/16 maxlen: 16
194.157.58.0/24 maxlen: 24
194.157.60.0/24 maxlen: 24
194.157.59.0/24 maxlen: 24
194.157.63.0/24 maxlen: 24
194.157.62.0/24 maxlen: 24
194.157.61.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.36.0/24 maxlen: 24
192.102.32.0/24 maxlen: 24
85.156.0.0/16 maxlen: 16
192.102.38.0/24 maxlen: 24
80.88.176.0/20 maxlen: 20
192.102.42.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
84.230.0.0/15 maxlen: 15
213.250.64.0/18 maxlen: 18
192.163.64.0/18 maxlen: 18
195.197.0.0/16 maxlen: 16
81.197.0.0/16 maxlen: 16
194.136.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
192.163.32.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
31.7.16.0/20 maxlen: 20
212.54.0.0/19 maxlen: 19
81.209.0.0/17 maxlen: 17
82.215.192.0/18 maxlen: 18
193.142.51.0/24 maxlen: 24
80.81.160.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.148.192.0/19 maxlen: 19
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
213.169.0.0/19 maxlen: 19
2a00:1dd0::/29 maxlen: 32
2001:670::/29 maxlen: 32
2001:1658::/29 maxlen: 32
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 10:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:0f:b5:a7:fe:a3:8d:99:b8:91:f6:fb:64:bc:ce:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 4 10:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27410cc4300eb5a3d67fe3646976038451ebe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:ff:b3:a0:93:31:62:f8:e9:47:64:bb:bd:
24:89:e1:c3:27:68:da:48:fb:09:0b:c8:0f:d8:cf:
85:40:95:3b:fa:35:ed:5a:b2:18:58:a2:c5:2c:77:
07:4c:54:f9:b4:e4:b3:2b:96:b0:03:84:e4:33:90:
50:8c:94:32:6f:dc:32:9a:c3:bf:dc:d8:14:b6:ce:
a1:cd:d2:4a:90:be:f6:0b:ba:d6:63:e8:78:9e:53:
b6:9f:48:f7:c7:69:67:af:16:4a:3d:33:8f:78:7a:
10:d3:45:46:9d:de:74:bc:9e:fd:8d:42:62:cc:35:
e9:33:a3:ec:bd:be:0b:a2:a9:29:21:fa:f2:aa:ed:
4b:43:cc:d1:33:a3:49:cd:a6:65:c0:ae:fc:4d:d0:
54:a0:ff:49:65:66:96:74:b6:f1:75:97:a0:40:ca:
fc:58:b5:a1:80:65:1f:e1:12:7f:33:b5:3b:13:94:
8a:2a:99:fc:5d:80:cd:44:cd:34:ba:c4:a1:3d:bd:
ed:12:33:e5:79:76:28:21:04:7b:75:7b:58:25:d0:
3c:8a:9f:6b:75:be:a8:90:92:90:e7:07:36:32:93:
33:3f:08:29:e2:32:92:a3:e9:c2:0b:64:14:50:d0:
28:e8:54:d0:8a:05:33:7d:ce:22:1a:f3:74:42:24:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:10:CC:43:00:EB:5A:3D:67:FE:36:46:97:60:38:45:1E:BE:1F
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/0nQQzEMA61o9Z_42RpdgOEUevh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.32.0/24
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
193.64.0.0-193.66.255.255
193.94.0.0/16
193.142.51.0/24
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:670::/29
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
32:fe:30:37:d6:4a:59:94:3a:8e:2f:b4:29:65:15:de:c8:80:
78:c1:2b:b7:b5:06:1a:42:25:6a:4b:ce:87:d7:d3:4e:d4:87:
67:31:e0:94:1c:f6:43:4e:90:ba:72:79:28:3a:c4:e8:84:ba:
61:61:a6:ff:30:f1:a8:3c:cc:30:e9:3a:5c:44:ec:ee:ec:42:
5f:72:f5:87:12:f7:a0:9d:d4:d5:b2:cf:1d:3b:96:a1:3c:0a:
33:2e:46:21:bb:ff:ef:35:0d:77:3e:df:de:cf:28:ad:98:e7:
27:f6:38:7b:dd:24:d1:ea:60:d8:d9:c6:3d:ca:4b:57:34:99:
90:f1:46:90:ff:28:4c:04:fd:d3:a7:2b:e8:ce:23:78:0c:1b:
b1:95:2f:c5:98:a1:13:24:6c:35:cb:2a:fb:07:e1:20:c0:f9:
ae:4f:7f:46:2c:a6:1a:6f:8f:2c:3c:48:df:1a:25:ea:f4:70:
06:f6:c0:61:78:09:dc:52:a7:20:b2:69:30:26:15:66:09:ef:
14:05:f4:34:c3:ae:d4:be:36:2c:be:23:94:b5:38:54:b4:2d:
e8:17:0b:22:0c:2e:e4:73:e8:91:1e:3f:2a:dc:db:e4:7a:d2:
ac:1a:0b:3a:46:c6:d0:6b:ac:d2:30:98:26:45:ec:89:6d:5a:
da:94:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:22 2025 by rpki-client