Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Q7Cdubak1jbia5zdiyykBHfLkOg.roa
File: Q7Cdubak1jbia5zdiyykBHfLkOg.roa (raw, json)
Hash identifier: 7g49OSd0gcaiZbgEk4odFB4/rvs0Nxa9bh8U3dfS13Q=
Subject key identifier: 43:B0:9D:B9:B6:A4:D6:36:E2:6B:9C:DD:8B:2C:A4:04:77:CB:90:E8
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D7DD1771B5AA8ABF3EF480773EE841EBE
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Q7Cdubak1jbia5zdiyykBHfLkOg.roa
Signing time: Tue 06 Feb 2024 09:48:15 +0000
ROA not before: Tue 06 Feb 2024 09:48:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
5.56.72.0/24 maxlen: 24
5.56.73.0/24 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
46.55.0.0/18 maxlen: 18
46.55.64.0/18 maxlen: 18
46.55.111.0/24 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 20
86.106.213.0/24 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.114.128.0/18 maxlen: 18
92.114.144.0/20 maxlen: 20
92.114.160.0/20 maxlen: 20
92.114.176.0/20 maxlen: 20
92.114.192.0/18 maxlen: 18
92.114.192.0/20 maxlen: 20
92.115.0.0/16 maxlen: 24
92.115.0.0/18 maxlen: 18
92.115.64.0/18 maxlen: 18
92.115.128.0/18 maxlen: 18
92.115.192.0/18 maxlen: 18
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.116.0.0/18 maxlen: 18
93.116.64.0/18 maxlen: 18
93.116.128.0/18 maxlen: 18
93.116.192.0/18 maxlen: 24
93.117.48.0/20 maxlen: 20
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
188.237.0.0/18 maxlen: 18
188.237.24.0/22 maxlen: 24
188.237.64.0/18 maxlen: 18
188.237.128.0/18 maxlen: 18
188.237.168.0/24 maxlen: 24
188.237.192.0/18 maxlen: 18
212.0.192.0/19 maxlen: 32
212.0.192.0/22 maxlen: 22
212.0.193.0/24 maxlen: 24
212.0.195.0/24 maxlen: 24
212.0.196.0/24 maxlen: 24
212.0.198.0/24 maxlen: 24
212.0.199.0/24 maxlen: 24
212.0.200.0/21 maxlen: 24
212.0.203.0/24 maxlen: 24
212.0.208.0/20 maxlen: 24
212.0.210.0/24 maxlen: 24
212.0.215.0/24 maxlen: 24
212.0.219.0/24 maxlen: 24
2a02:a30::/32 maxlen: 32
2a02:a30:172::/48 maxlen: 48
2a02:a30:1600::/48 maxlen: 48
2a02:a30:6330:103::/64 maxlen: 64
2a02:a30:f090::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Feb 2024 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:d1:77:1b:5a:a8:ab:f3:ef:48:07:73:ee:84:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 6 09:48:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43b09db9b6a4d636e26b9cdd8b2ca40477cb90e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:4c:13:42:be:49:f6:00:51:58:47:8d:ba:
2a:13:b7:37:3a:87:3b:70:ad:20:53:c4:2d:2c:d6:
21:06:5c:5c:99:71:35:82:41:18:23:59:d9:84:52:
d1:8b:70:f4:e4:60:69:36:01:07:d8:b4:ba:89:96:
66:38:38:b8:99:89:8d:78:f5:7f:5e:f6:dc:a3:90:
56:99:a4:c5:6f:57:25:53:95:b8:30:f7:8f:8e:ea:
c7:d2:19:3a:1f:ad:aa:b3:68:7b:96:53:e9:21:43:
45:39:23:ca:25:dc:28:29:bd:5c:fd:36:d1:d2:80:
3f:42:cf:ab:b2:b7:65:16:84:2e:37:fe:83:96:29:
fa:a1:e3:1c:53:12:ab:9f:c8:61:9a:c7:05:a1:2e:
37:2f:67:ea:8b:48:18:bf:37:0e:5e:9d:d3:24:88:
99:b7:8b:8b:00:68:c5:1b:8f:b3:69:5a:d8:ff:ad:
c5:b7:0f:e8:1d:cf:d3:8a:a4:fe:33:18:86:77:30:
bc:11:d9:f2:1d:f7:27:59:7e:01:a8:7e:29:b4:37:
6d:87:a2:15:60:b1:fe:1a:5a:2d:b1:2f:59:0c:bf:
9a:34:39:55:d7:a9:2c:4d:8b:4a:f5:df:bd:28:3a:
0b:17:2a:05:4b:9a:bd:2b:e0:90:bd:1a:a7:24:a9:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:9D:B9:B6:A4:D6:36:E2:6B:9C:DD:8B:2C:A4:04:77:CB:90:E8
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Q7Cdubak1jbia5zdiyykBHfLkOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/32
Signature Algorithm: sha256WithRSAEncryption
33:4d:50:f2:e2:38:e9:45:3f:a0:8a:fb:84:bb:a8:77:5e:53:
1a:11:c0:8f:83:e9:04:c5:01:98:41:8c:8b:14:26:98:77:39:
66:d0:7d:dd:f2:95:16:65:33:50:3e:41:b8:95:84:ba:8d:6c:
a4:1f:93:7f:9b:db:3c:90:8c:a8:1a:39:20:d7:42:ec:04:d0:
2d:ce:90:73:0c:64:75:4b:7e:dc:e1:f4:23:98:0a:e9:50:92:
4b:85:77:e6:b9:79:8e:f1:7f:01:1a:83:3b:ac:49:b7:c7:f1:
bb:ea:d4:8c:ef:58:af:61:f3:fe:1e:c8:7a:e9:6f:97:2f:0f:
1f:59:cd:32:b0:98:91:bc:d7:1f:81:23:fc:05:70:1c:f4:98:
c9:6f:f3:d9:e9:6a:d6:31:06:62:39:3e:dc:42:e3:f1:e0:c0:
68:65:34:fc:76:14:d7:e4:54:b2:53:d9:7b:ed:29:56:64:c2:
5a:13:f8:75:f4:48:37:54:f3:ad:c4:f7:f9:46:a0:5d:9e:e8:
be:4b:30:aa:6d:e1:0a:31:31:21:32:2f:d3:8f:66:79:ff:ba:
e3:53:a2:71:a5:33:62:c5:5e:41:88:7e:c3:8a:14:63:c7:3f:
f3:53:1b:f9:f0:41:64:25:37:74:2c:75:bf:01:81:63:b3:54:
6f:cc:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:15:31 2025 by rpki-client