Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CQKPB-GAHtLvAhRjTm0OlYVl22s.roa
File: CQKPB-GAHtLvAhRjTm0OlYVl22s.roa (raw, json)
Hash identifier: uNQTX31oczIuGvpn3h9CTpAmhMTPAoMyZIrYabdEmC4=
Subject key identifier: 09:02:8F:07:E1:80:1E:D2:EF:02:14:63:4E:6D:0E:95:85:65:DB:6B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01957F6962F95E363EAC86DDB9265D7EC8C2
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CQKPB-GAHtLvAhRjTm0OlYVl22s.roa
Signing time: Mon 10 Mar 2025 09:36:07 +0000
ROA not before: Mon 10 Mar 2025 09:36:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.13.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.25.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.140.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.229.0/24 maxlen: 24
37.230.230.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.150.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.167.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.175.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.190.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.247.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 08:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:69:62:f9:5e:36:3e:ac:86:dd:b9:26:5d:7e:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 10 09:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09028f07e1801ed2ef0214634e6d0e958565db6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:e1:00:ca:92:d2:09:1e:28:76:1a:ef:9b:
f2:f8:90:92:25:84:c5:80:03:50:62:8c:07:d5:7a:
36:f0:03:a6:ac:27:fe:50:7a:bd:af:35:02:91:34:
ae:db:af:75:84:81:5f:74:cd:56:be:48:78:84:50:
fe:7b:05:8b:64:b0:8d:23:35:54:77:e5:4e:81:60:
99:80:49:de:57:37:15:4f:30:13:42:ce:28:0d:d2:
67:f2:90:a6:f4:b2:06:c3:aa:6f:89:5a:da:27:57:
18:43:bc:bf:50:ab:9e:67:5d:ee:a1:0d:42:73:d5:
67:9e:15:54:49:3d:10:a5:40:51:2d:aa:99:8d:14:
fe:fe:f1:d0:2a:31:be:0d:1f:e0:c0:0e:59:e5:fd:
2c:65:88:3e:f6:dd:1b:99:2a:f3:59:2d:e5:53:c5:
9d:65:f1:bd:20:e8:12:23:5c:06:dd:f5:9b:ec:0d:
0b:b8:14:8c:00:09:02:13:a4:20:2c:f2:84:85:75:
9d:34:ba:9b:e6:10:37:3a:ca:bc:ea:93:fa:ac:09:
fc:3e:ec:d6:0d:01:bb:5a:a8:7b:b1:17:09:85:d6:
08:85:37:ef:6c:b8:c2:70:97:9b:d4:30:73:4a:74:
25:6e:3e:77:7f:3c:b9:c8:64:ce:0f:c8:69:4e:5f:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:8F:07:E1:80:1E:D2:EF:02:14:63:4E:6D:0E:95:85:65:DB:6B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CQKPB-GAHtLvAhRjTm0OlYVl22s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.13.0/24
37.18.23.0/24
37.18.25.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.140.0/24
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.229.0-37.230.231.255
37.230.238.0/24
37.230.254.0/23
46.243.137.0-46.243.140.255
46.243.148.0-46.243.150.255
46.243.163.0/24
46.243.167.0/24
46.243.173.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.175.255
141.101.179.0/24
141.101.189.0-141.101.191.255
141.101.198.0/23
141.101.209.0/24
141.101.216.0/24
141.101.230.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.248.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
178.170.247.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:87:4e:a9:e1:32:70:e0:21:7f:61:8a:8e:4c:30:ed:d8:f6:
7a:6d:11:df:79:a7:cc:c1:ae:de:97:ce:29:89:40:de:82:d3:
47:3b:6b:87:1b:99:01:f4:75:1b:0a:6c:28:18:e1:5d:4d:02:
68:28:6b:26:08:ab:8a:f9:23:5f:62:86:d0:e4:67:ea:54:7d:
05:40:21:2a:2d:da:45:97:00:7b:ad:b5:56:12:bf:36:a8:64:
06:27:92:f4:8f:f9:87:25:a9:5b:13:fc:90:52:57:37:12:a5:
44:26:b6:81:d0:ca:9d:3a:59:ba:0e:fd:26:6d:87:f2:b0:92:
5e:b4:d1:ef:47:01:46:57:d5:4f:29:6b:39:79:b3:75:f5:3e:
c6:e6:50:ff:a6:a2:6e:76:99:48:bb:fa:9f:17:13:3d:e9:da:
05:09:a4:ab:2e:d0:98:a7:3c:d2:c2:d0:a2:5a:21:06:92:56:
e4:16:7a:16:0e:17:07:a6:04:5d:f7:d3:84:39:8d:12:a4:d7:
c4:b4:48:7c:b9:49:8e:2e:01:35:2d:2a:32:60:01:e4:45:ee:
03:79:36:f0:c0:a3:f5:73:58:c7:51:df:ef:03:47:53:1a:c6:
46:e2:cd:ed:f8:94:3e:35:6e:0c:63:b9:30:e2:35:20:91:a1:
fe:15:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:18 2025 by rpki-client