Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6XCjKLV4ClkpPbr6__oGOKtExrU.roa
File: 6XCjKLV4ClkpPbr6__oGOKtExrU.roa (raw, json)
Hash identifier: O/1mt8uWhaKiT8p7Uv7yUwQrZqULfQMmAtS48Z5q9mQ=
Subject key identifier: E9:70:A3:28:B5:78:0A:59:29:3D:BA:FA:FF:FA:06:38:AB:44:C6:B5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195F53FBDF5ADF4E5E5D6E2F489711032F5
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6XCjKLV4ClkpPbr6__oGOKtExrU.roa
Signing time: Wed 02 Apr 2025 06:45:49 +0000
ROA not before: Wed 02 Apr 2025 06:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 10:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:3f:bd:f5:ad:f4:e5:e5:d6:e2:f4:89:71:10:32:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 2 06:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e970a328b5780a59293dbafafffa0638ab44c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:88:ca:18:a0:a0:33:94:dc:12:92:97:ab:
11:b7:77:75:42:6d:18:ad:62:b8:81:f3:80:e7:6e:
a8:79:8f:22:1c:89:00:c8:ab:98:91:34:27:c9:f6:
91:9f:95:c0:72:c6:ee:d4:28:79:dc:b3:f7:15:d2:
36:e1:5b:47:ab:72:30:f8:03:37:dc:50:7d:ee:a7:
11:58:ad:94:f2:8a:0f:76:be:9a:40:82:f4:f4:58:
5e:8e:c4:3d:07:04:2d:5a:59:21:08:eb:e6:d2:31:
c5:f9:b3:1a:0b:69:92:94:1e:04:ef:74:69:94:c8:
01:61:a5:61:16:42:5a:ce:8c:3c:22:dd:e3:34:82:
ba:36:67:2f:97:0f:27:40:c0:b4:13:87:59:31:f8:
1e:da:62:11:58:80:75:9e:e7:9f:7b:87:97:15:9f:
80:fa:48:1a:8b:49:96:b1:e1:ff:ba:04:f8:12:b3:
f1:6e:55:90:f1:84:32:15:2c:42:13:f2:c2:73:a2:
ee:0f:d1:ab:f4:b1:87:ae:e7:61:fd:fb:d0:0e:6b:
b2:70:bc:5d:91:b8:40:20:60:f3:65:35:53:bb:8d:
56:f8:48:4a:ff:61:05:bc:89:09:15:43:2d:e6:25:
15:8b:7f:5a:45:70:fd:5f:92:a3:ea:72:d8:46:b3:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:A3:28:B5:78:0A:59:29:3D:BA:FA:FF:FA:06:38:AB:44:C6:B5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6XCjKLV4ClkpPbr6__oGOKtExrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bf:fc:47:10:97:82:ce:bd:c2:b5:93:99:d4:eb:4a:d8:40:
41:6d:f6:88:5c:6a:19:a1:65:12:8d:8d:e3:20:aa:39:9d:3b:
89:70:58:b1:7b:82:a7:bd:6f:8d:30:79:a8:73:e8:c2:70:ff:
00:bb:be:68:42:2e:9c:33:05:fe:86:7b:4f:3b:12:0e:c8:c8:
88:d0:5c:e0:af:81:1c:4e:c1:42:0b:2b:96:31:6e:84:ec:03:
6b:0f:f4:54:18:e2:dd:87:cc:6f:34:18:79:a1:f7:9b:03:73:
1c:fd:91:93:12:68:ee:45:3b:9d:58:73:d6:39:4e:5d:62:bb:
ee:23:e5:e0:5f:86:5b:65:7c:8a:9e:aa:9d:83:38:f4:83:1f:
8c:57:73:fa:0d:26:67:07:f7:c3:6e:af:4a:59:d5:62:0a:30:
a4:00:72:68:81:34:02:29:1a:38:f9:97:94:0c:bf:7a:78:1e:
fa:bc:3f:68:dd:19:55:d3:9d:f0:d9:77:e9:a2:20:05:90:f7:
94:aa:18:3b:17:47:1d:24:92:b0:a2:91:9f:70:3a:d8:7e:b5:
4e:d6:9e:cf:6b:ff:05:7e:b8:48:7e:3d:b5:42:aa:e9:a4:e8:
2c:90:16:f1:ac:ff:08:db:9d:17:3b:fc:44:bd:ee:6c:1e:f8:
d1:db:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:50 2025 by rpki-client