Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-yRIsZBczziQ7aj7xV_GWGTNR28.roa
File: 1-yRIsZBczziQ7aj7xV_GWGTNR28.roa (raw, json)
Hash identifier: 8t3StJXjbFxxokv6Xza068Ue3vRB3Gu/9lDKwFgqVzI=
Subject key identifier: FB:24:48:B1:90:5C:CF:38:90:ED:A8:FB:C5:5F:C6:58:64:CD:47:6F
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019251658B8E24D5640D3D5E610D06771228
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-yRIsZBczziQ7aj7xV_GWGTNR28.roa
Signing time: Thu 03 Oct 2024 08:01:02 +0000
ROA not before: Thu 03 Oct 2024 08:01:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 62.77.196.0/22 maxlen: 24
62.77.240.0/23 maxlen: 24
62.77.248.0/21 maxlen: 24
62.165.192.0/18 maxlen: 24
77.234.64.0/19 maxlen: 24
79.120.160.0/21 maxlen: 24
79.120.170.0/23 maxlen: 24
79.120.172.0/22 maxlen: 24
79.120.248.0/23 maxlen: 24
79.120.252.0/22 maxlen: 24
81.0.82.0/23 maxlen: 24
81.0.84.0/22 maxlen: 24
81.0.90.0/23 maxlen: 24
81.0.92.0/22 maxlen: 24
81.0.98.0/23 maxlen: 24
81.0.108.0/23 maxlen: 24
81.0.122.0/23 maxlen: 24
81.0.126.0/23 maxlen: 24
82.144.164.0/22 maxlen: 24
82.144.172.0/22 maxlen: 24
82.144.176.0/23 maxlen: 24
82.144.188.0/23 maxlen: 24
89.147.64.0/20 maxlen: 24
89.147.96.0/22 maxlen: 24
89.147.112.0/21 maxlen: 24
89.186.96.0/23 maxlen: 24
89.186.102.0/23 maxlen: 24
89.186.106.0/23 maxlen: 24
89.186.108.0/22 maxlen: 24
89.186.112.0/22 maxlen: 24
89.186.118.0/23 maxlen: 24
89.186.120.0/21 maxlen: 24
91.82.0.0/21 maxlen: 24
91.82.24.0/21 maxlen: 24
91.82.32.0/21 maxlen: 24
91.82.56.0/23 maxlen: 24
91.82.60.0/23 maxlen: 24
91.82.64.0/21 maxlen: 24
91.82.82.0/23 maxlen: 24
91.82.130.0/23 maxlen: 24
91.82.132.0/22 maxlen: 24
91.82.144.0/22 maxlen: 24
91.82.168.0/22 maxlen: 24
91.82.172.0/23 maxlen: 24
91.82.176.0/21 maxlen: 24
91.82.188.0/22 maxlen: 24
91.82.210.0/23 maxlen: 24
91.82.212.0/22 maxlen: 24
91.82.228.0/22 maxlen: 24
91.82.232.0/22 maxlen: 24
91.82.240.0/22 maxlen: 24
91.82.250.0/23 maxlen: 24
91.83.0.0/19 maxlen: 24
91.83.32.0/21 maxlen: 24
91.83.52.0/22 maxlen: 24
91.83.94.0/23 maxlen: 24
91.83.102.0/23 maxlen: 24
91.83.110.0/23 maxlen: 24
91.83.120.0/23 maxlen: 24
91.83.136.0/21 maxlen: 24
91.83.144.0/23 maxlen: 24
91.83.154.0/23 maxlen: 24
91.83.180.0/22 maxlen: 24
91.83.184.0/21 maxlen: 24
91.83.192.0/20 maxlen: 24
91.83.252.0/23 maxlen: 24
94.247.88.0/21 maxlen: 24
185.29.80.0/22 maxlen: 24
185.62.128.0/22 maxlen: 24
193.110.56.0/21 maxlen: 24
193.226.192.0/23 maxlen: 24
193.226.212.0/22 maxlen: 24
193.226.226.0/23 maxlen: 24
193.226.232.0/23 maxlen: 24
193.226.238.0/23 maxlen: 24
193.226.240.0/23 maxlen: 24
193.226.244.0/22 maxlen: 24
193.226.248.0/23 maxlen: 24
212.40.72.0/21 maxlen: 24
212.40.80.0/20 maxlen: 24
213.197.72.0/21 maxlen: 24
213.197.80.0/20 maxlen: 24
217.197.176.0/20 maxlen: 24
2a01:368::/29 maxlen: 48
2a01:368::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Oct 2024 08:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:65:8b:8e:24:d5:64:0d:3d:5e:61:0d:06:77:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Oct 3 08:01:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2448b1905ccf3890eda8fbc55fc65864cd476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:f8:b9:34:73:eb:6e:a1:be:41:3c:a8:4e:
73:57:cb:94:f7:41:47:20:a3:49:3a:b8:67:74:43:
4b:f9:3b:a6:35:89:b5:4d:f5:46:3e:31:7d:66:d5:
88:c3:06:f8:75:87:e9:23:de:45:78:23:7b:d9:26:
96:05:ff:f9:ff:2c:97:98:51:ce:78:43:a6:64:33:
35:28:90:59:50:75:e6:6f:3c:fe:0d:6e:a3:64:e7:
54:fe:06:4b:82:72:55:a9:b8:c6:52:4b:4b:b9:ca:
86:10:c5:c6:15:92:ad:e4:2e:ff:28:59:6b:b8:d9:
5b:2f:9f:61:44:0a:a4:f9:cb:cc:99:c7:34:f4:7d:
a0:07:61:03:5f:c3:9a:56:1a:e2:a1:aa:dc:0b:d4:
f1:74:d7:29:95:09:bf:86:db:df:79:80:bf:21:bb:
08:89:57:16:85:c2:d1:51:cc:15:6d:c5:66:8a:a0:
81:e7:6e:2a:60:67:42:66:d4:c1:8a:ef:8f:5f:0f:
47:cb:94:ff:a4:f0:f1:ad:a1:52:a4:b1:f3:44:d4:
5c:94:63:33:5c:11:84:97:2e:54:4d:7b:b0:11:92:
8f:64:c0:41:b2:2d:65:a1:74:1c:3b:af:38:02:89:
7a:5d:06:cb:65:f6:49:5e:6e:75:b8:ff:26:f2:8a:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:48:B1:90:5C:CF:38:90:ED:A8:FB:C5:5F:C6:58:64:CD:47:6F
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-yRIsZBczziQ7aj7xV_GWGTNR28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.196.0/22
62.77.240.0/23
62.77.248.0/21
62.165.192.0/18
77.234.64.0/19
79.120.160.0/21
79.120.170.0-79.120.175.255
79.120.248.0/23
79.120.252.0/22
81.0.82.0-81.0.87.255
81.0.90.0-81.0.95.255
81.0.98.0/23
81.0.108.0/23
81.0.122.0/23
81.0.126.0/23
82.144.164.0/22
82.144.172.0-82.144.177.255
82.144.188.0/23
89.147.64.0/20
89.147.96.0/22
89.147.112.0/21
89.186.96.0/23
89.186.102.0/23
89.186.106.0-89.186.115.255
89.186.118.0-89.186.127.255
91.82.0.0/21
91.82.24.0-91.82.39.255
91.82.56.0/23
91.82.60.0/23
91.82.64.0/21
91.82.82.0/23
91.82.130.0-91.82.135.255
91.82.144.0/22
91.82.168.0-91.82.173.255
91.82.176.0/21
91.82.188.0/22
91.82.210.0-91.82.215.255
91.82.228.0-91.82.235.255
91.82.240.0/22
91.82.250.0/23
91.83.0.0-91.83.39.255
91.83.52.0/22
91.83.94.0/23
91.83.102.0/23
91.83.110.0/23
91.83.120.0/23
91.83.136.0-91.83.145.255
91.83.154.0/23
91.83.180.0-91.83.207.255
91.83.252.0/23
94.247.88.0/21
185.29.80.0/22
185.62.128.0/22
193.110.56.0/21
193.226.192.0/23
193.226.212.0/22
193.226.226.0/23
193.226.232.0/23
193.226.238.0-193.226.241.255
193.226.244.0-193.226.249.255
212.40.72.0-212.40.95.255
213.197.72.0-213.197.95.255
217.197.176.0/20
IPv6:
2a01:368::/29
Signature Algorithm: sha256WithRSAEncryption
25:69:2b:65:47:96:31:aa:b7:fb:19:e5:23:17:36:cf:58:e7:
bf:0c:07:6f:93:ad:5a:15:79:51:65:e3:0c:5e:0a:0d:78:85:
1d:cb:a2:78:15:02:77:4b:a8:82:d3:e3:aa:30:85:19:31:c9:
28:0d:42:c2:c1:01:59:0d:12:eb:4c:ae:2a:ee:39:3d:fc:48:
a1:30:d5:c5:d6:35:a2:9a:9c:5a:8e:36:12:56:22:05:2a:fb:
50:8a:30:75:dc:ff:80:a8:98:15:b3:c5:a9:92:b2:86:2c:26:
f9:d4:fd:54:71:b2:06:51:f2:bc:8f:bc:c5:17:7d:c5:c4:88:
14:9d:01:2f:07:0e:4f:98:6d:2a:eb:f5:ef:3e:6c:42:81:24:
d4:a9:fd:1b:7c:92:13:b4:e4:8b:15:02:d7:29:29:e4:d6:ec:
30:fd:66:d2:92:41:a8:8b:9c:8b:d1:21:1c:8a:4f:32:7b:99:
dd:46:49:86:b9:35:48:7a:c0:0b:38:4e:1b:f0:87:2d:92:87:
98:ac:bb:80:d7:b1:12:0f:0c:36:05:01:8a:4e:af:71:74:f1:
5d:cb:60:8f:3a:c3:32:ab:68:34:5b:d8:46:db:fc:47:a3:9b:
63:df:35:b1:55:94:3f:c6:37:4a:d0:d5:cb:7b:b2:d2:a4:75:
b7:5c:2e:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:23 2025 by rpki-client