Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-CwCG74CP0-bY-kxKSbPZxcttn0.roa
File: 1-CwCG74CP0-bY-kxKSbPZxcttn0.roa (raw, json)
Hash identifier: +U2k/bLWZSC22v23CFwa+0YydRr/sF4dsUKKCCvMl2w=
Subject key identifier: F8:2C:02:1B:BE:02:3F:4F:9B:63:E9:31:29:26:CF:67:17:2D:B6:7D
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01916F3A14D26A2C4B763B10EBD2FDE5C3E7
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-CwCG74CP0-bY-kxKSbPZxcttn0.roa
Signing time: Tue 20 Aug 2024 09:59:22 +0000
ROA not before: Tue 20 Aug 2024 09:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:1438:1::/48 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, certificate revoked on Tue 20 Aug 2024 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:3a:14:d2:6a:2c:4b:76:3b:10:eb:d2:fd:e5:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Aug 20 09:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82c021bbe023f4f9b63e9312926cf67172db67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:bf:98:8b:98:4d:91:1d:71:ad:b7:22:5c:
a4:96:a1:45:cc:6e:50:19:61:83:57:3f:5a:c8:73:
48:b7:db:80:69:56:cc:64:6a:c4:9c:09:05:42:c8:
09:f5:86:34:6d:55:b4:ca:29:c0:e5:b1:c8:2f:a8:
5f:40:4f:78:e9:aa:40:59:1d:67:9f:15:1a:03:8e:
93:4f:55:6e:bc:dc:b5:e3:8e:fa:c2:7d:d7:5e:5c:
64:13:23:ce:bd:66:4d:d0:9d:12:c3:1c:9d:7e:c0:
04:13:e7:96:2c:8f:59:54:05:85:9c:7c:42:ec:26:
49:f3:13:5d:71:28:79:ee:91:d1:d5:58:1e:73:a2:
9c:74:1a:f6:a4:3b:8b:f5:61:6f:a5:f0:c7:0e:13:
14:3b:6c:b4:ed:aa:0a:69:63:0d:00:1c:fe:f4:d7:
47:33:8a:ab:be:c3:bb:76:9a:91:10:49:dd:e2:bf:
56:42:fc:2d:8f:fa:59:7b:ae:e6:a6:c6:6a:cc:ec:
a3:b8:22:5b:e3:ab:72:6f:d0:e7:ea:60:02:84:91:
6a:c5:8a:26:f0:49:0a:1a:34:fe:51:93:b2:a2:c1:
7f:84:4f:7d:2a:91:e7:11:e2:5e:cb:89:d9:c9:71:
4e:cf:4e:87:a3:ea:43:42:00:d5:70:21:ce:a1:b4:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2C:02:1B:BE:02:3F:4F:9B:63:E9:31:29:26:CF:67:17:2D:B6:7D
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-CwCG74CP0-bY-kxKSbPZxcttn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
76:48:34:fa:75:b7:9e:7a:f9:1d:2f:e9:51:27:e8:5c:ef:12:
29:a7:09:dc:bc:b1:4c:22:57:0c:52:10:92:e0:8f:e8:f5:50:
52:95:8c:96:00:a0:dd:09:f3:2c:78:f8:95:58:50:f1:96:49:
5a:11:32:7a:ba:0d:96:b3:05:57:0c:b7:af:92:c2:a9:a1:c5:
5c:ed:37:21:76:25:8e:ef:d9:eb:49:9e:ec:d6:22:ca:d5:38:
28:4d:cb:bc:3b:53:c3:05:53:40:b9:06:2c:1c:2c:6a:5c:3f:
ec:ed:23:91:28:a0:13:16:ab:15:cd:cd:59:95:2e:48:ee:6b:
a2:48:e7:86:f7:4c:c6:31:3d:4f:97:22:25:d0:05:6e:b7:36:
1c:bd:cf:c9:62:8b:63:f4:1e:68:fb:17:8e:11:e1:11:5c:9f:
45:7c:51:04:98:1f:0a:0c:90:52:bf:9d:7f:ff:40:4d:d9:65:
d7:96:5f:c4:9b:f6:68:99:f8:0a:03:41:2c:72:d4:45:9f:ce:
65:6f:23:04:9e:6f:c5:d5:8e:bd:1d:1d:36:2f:2b:f8:b8:15:
be:55:52:1d:2b:3f:1c:95:8b:e1:91:bf:b0:cd:c5:a6:30:b0:
73:12:9d:99:d6:50:5f:6f:e1:61:5d:5b:01:1b:3e:49:ec:17:
f8:91:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:05:54 2025 by rpki-client