Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ON8tVS0aMNpKdpA8gtSY6cCjKaQ.roa
File: ON8tVS0aMNpKdpA8gtSY6cCjKaQ.roa (raw, json)
Hash identifier: EcwBDODefAhCa8iEgG8WwWZ2NyOJOczRE/8Ut5maWBs=
Subject key identifier: 38:DF:2D:55:2D:1A:30:DA:4A:76:90:3C:82:D4:98:E9:C0:A3:29:A4
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 0194EAD3DC7BAD78285B12572F03B487177C
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ON8tVS0aMNpKdpA8gtSY6cCjKaQ.roa
Signing time: Sun 09 Feb 2025 13:09:00 +0000
ROA not before: Sun 09 Feb 2025 13:09:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57218
IP address blocks: 5.62.192.0/18 maxlen: 18
5.62.192.0/19 maxlen: 19
5.62.224.0/19 maxlen: 19
5.72.0.0/16 maxlen: 16
5.72.0.0/19 maxlen: 19
5.72.32.0/19 maxlen: 19
5.72.64.0/19 maxlen: 19
5.72.96.0/19 maxlen: 19
5.72.128.0/19 maxlen: 19
5.72.160.0/19 maxlen: 19
5.72.192.0/19 maxlen: 19
5.72.224.0/19 maxlen: 19
5.73.0.0/16 maxlen: 16
5.73.0.0/19 maxlen: 19
5.73.32.0/19 maxlen: 19
5.73.64.0/19 maxlen: 19
5.73.96.0/19 maxlen: 19
5.73.128.0/19 maxlen: 19
5.73.160.0/19 maxlen: 19
5.73.192.0/19 maxlen: 19
5.73.224.0/19 maxlen: 19
5.134.128.0/18 maxlen: 18
5.134.128.0/20 maxlen: 22
5.134.128.0/22 maxlen: 22
5.134.132.0/22 maxlen: 22
5.134.136.0/22 maxlen: 22
5.134.140.0/22 maxlen: 22
5.134.144.0/20 maxlen: 22
5.134.144.0/22 maxlen: 22
5.134.148.0/22 maxlen: 22
5.134.152.0/22 maxlen: 22
5.134.156.0/22 maxlen: 22
5.134.160.0/20 maxlen: 20
5.134.160.0/22 maxlen: 22
5.134.164.0/22 maxlen: 22
5.134.168.0/22 maxlen: 22
5.134.172.0/22 maxlen: 22
5.134.176.0/20 maxlen: 20
5.134.176.0/22 maxlen: 22
5.134.180.0/22 maxlen: 22
5.134.184.0/22 maxlen: 22
5.134.191.0/24 maxlen: 24
5.200.96.0/19 maxlen: 19
5.200.96.0/20 maxlen: 20
5.200.112.0/20 maxlen: 20
37.44.56.0/21 maxlen: 21
37.44.56.0/22 maxlen: 22
37.44.60.0/22 maxlen: 22
37.137.0.0/17 maxlen: 21
37.137.0.0/18 maxlen: 21
37.137.0.0/19 maxlen: 19
37.137.32.0/22 maxlen: 22
37.137.36.0/24 maxlen: 24
37.137.64.0/18 maxlen: 18
37.137.128.0/17 maxlen: 17
37.137.128.0/18 maxlen: 18
37.137.192.0/18 maxlen: 18
37.153.176.0/20 maxlen: 20
37.153.176.0/21 maxlen: 21
37.153.184.0/21 maxlen: 21
37.156.48.0/20 maxlen: 20
37.156.48.0/21 maxlen: 21
37.156.56.0/21 maxlen: 21
37.156.152.0/21 maxlen: 21
37.156.152.0/22 maxlen: 22
37.156.156.0/22 maxlen: 22
77.81.192.0/19 maxlen: 19
77.81.192.0/20 maxlen: 20
77.81.208.0/20 maxlen: 20
89.32.0.0/19 maxlen: 19
89.32.0.0/20 maxlen: 20
89.32.16.0/20 maxlen: 20
89.32.96.0/20 maxlen: 20
89.32.96.0/21 maxlen: 21
89.32.104.0/21 maxlen: 21
89.34.32.0/19 maxlen: 19
89.34.32.0/20 maxlen: 20
89.34.32.0/23 maxlen: 23
89.34.48.0/20 maxlen: 20
89.34.128.0/19 maxlen: 19
89.34.128.0/20 maxlen: 20
89.34.144.0/20 maxlen: 20
89.41.192.0/19 maxlen: 19
89.41.192.0/20 maxlen: 20
89.41.208.0/20 maxlen: 20
89.47.64.0/20 maxlen: 20
89.47.64.0/21 maxlen: 21
89.47.72.0/21 maxlen: 21
89.47.128.0/19 maxlen: 19
89.47.128.0/20 maxlen: 20
89.47.144.0/20 maxlen: 20
91.229.214.0/23 maxlen: 24
91.229.214.0/24 maxlen: 24
91.229.215.0/24 maxlen: 24
92.114.64.0/20 maxlen: 20
92.114.64.0/21 maxlen: 21
92.114.72.0/21 maxlen: 21
93.114.16.0/20 maxlen: 20
93.114.16.0/21 maxlen: 21
93.114.24.0/21 maxlen: 21
94.24.0.0/20 maxlen: 20
94.24.0.0/21 maxlen: 21
94.24.8.0/21 maxlen: 21
94.24.16.0/21 maxlen: 21
94.24.16.0/22 maxlen: 22
94.24.20.0/22 maxlen: 22
94.24.80.0/20 maxlen: 20
94.24.80.0/21 maxlen: 21
94.24.88.0/21 maxlen: 21
94.24.96.0/21 maxlen: 21
94.24.96.0/22 maxlen: 22
94.24.100.0/22 maxlen: 22
95.162.0.0/16 maxlen: 17
95.162.0.0/17 maxlen: 17
95.162.0.0/19 maxlen: 19
95.162.0.0/20 maxlen: 20
95.162.16.0/20 maxlen: 20
95.162.32.0/19 maxlen: 19
95.162.32.0/20 maxlen: 20
95.162.48.0/20 maxlen: 20
95.162.64.0/19 maxlen: 19
95.162.64.0/20 maxlen: 20
95.162.80.0/20 maxlen: 20
95.162.96.0/19 maxlen: 19
95.162.96.0/20 maxlen: 20
95.162.112.0/20 maxlen: 20
95.162.128.0/17 maxlen: 17
95.162.128.0/19 maxlen: 21
95.162.128.0/20 maxlen: 21
95.162.128.0/21 maxlen: 21
95.162.144.0/20 maxlen: 21
95.162.152.0/21 maxlen: 21
95.162.160.0/19 maxlen: 21
95.162.160.0/20 maxlen: 21
95.162.160.0/21 maxlen: 21
95.162.168.0/21 maxlen: 21
95.162.176.0/20 maxlen: 21
95.162.176.0/21 maxlen: 21
95.162.192.0/19 maxlen: 19
95.162.192.0/20 maxlen: 20
95.162.208.0/20 maxlen: 20
95.162.224.0/19 maxlen: 24
95.162.224.0/20 maxlen: 20
95.162.224.0/22 maxlen: 22
95.162.228.0/22 maxlen: 22
95.162.232.0/22 maxlen: 22
95.162.236.0/22 maxlen: 22
95.162.240.0/20 maxlen: 20
95.162.248.0/24 maxlen: 24
185.24.136.0/23 maxlen: 23
185.24.136.0/24 maxlen: 24
185.24.137.0/24 maxlen: 24
185.24.228.0/22 maxlen: 22
185.24.228.0/23 maxlen: 23
185.24.230.0/23 maxlen: 23
188.208.64.0/19 maxlen: 19
188.208.64.0/20 maxlen: 20
188.208.80.0/20 maxlen: 20
188.208.144.0/20 maxlen: 20
188.208.144.0/21 maxlen: 21
188.208.152.0/21 maxlen: 21
188.208.156.0/24 maxlen: 24
188.208.160.0/19 maxlen: 19
188.208.160.0/20 maxlen: 20
188.208.176.0/20 maxlen: 20
188.208.224.0/19 maxlen: 19
188.208.224.0/20 maxlen: 20
188.208.240.0/20 maxlen: 20
188.208.243.0/24 maxlen: 24
188.214.4.0/22 maxlen: 22
188.214.4.0/23 maxlen: 23
188.214.6.0/23 maxlen: 23
188.214.84.0/22 maxlen: 22
188.214.84.0/23 maxlen: 23
188.214.86.0/23 maxlen: 23
188.215.24.0/22 maxlen: 22
188.215.24.0/23 maxlen: 23
188.215.26.0/23 maxlen: 23
188.215.88.0/22 maxlen: 22
188.215.88.0/23 maxlen: 23
188.215.90.0/23 maxlen: 23
213.195.32.0/20 maxlen: 20
213.195.32.0/21 maxlen: 21
213.195.40.0/21 maxlen: 21
213.195.48.0/22 maxlen: 22
213.195.48.0/23 maxlen: 23
213.195.50.0/23 maxlen: 23
2a03:ef40::/128 maxlen: 128
2a03:ef42::/34 maxlen: 34
2a03:ef42:4000::/34 maxlen: 34
2a03:ef42:8000::/34 maxlen: 34
2a03:ef42:c000::/34 maxlen: 34
2a03:ef42:c000::/128 maxlen: 128
2a03:ef42:c000::1/128 maxlen: 128
2a03:ef43::/34 maxlen: 34
2a03:ef43::/43 maxlen: 43
2a03:ef43:3::/48 maxlen: 48
2a03:ef43:3:8000::/49 maxlen: 49
2a03:ef43:c000::/48 maxlen: 48
2a03:ef44::/34 maxlen: 34
Validation: Failed, certificate revoked on Sun 09 Feb 2025 13:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:d3:dc:7b:ad:78:28:5b:12:57:2f:03:b4:87:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Feb 9 13:09:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38df2d552d1a30da4a76903c82d498e9c0a329a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:f4:05:5e:82:b6:30:c6:a2:31:12:e6:34:
e2:20:18:46:64:bb:72:da:28:3a:f4:b6:57:d6:2d:
0e:8d:ea:48:14:70:8d:66:7e:19:49:c2:9f:68:3f:
a8:b9:50:fa:fc:50:e8:0b:d1:fd:4e:12:32:91:dd:
93:9f:23:60:14:91:d1:6a:61:ba:0e:ce:b4:64:18:
d4:f3:eb:2e:22:3a:b1:a5:fc:da:b5:3a:d6:50:05:
a6:76:80:c9:bd:f5:06:a8:a1:40:e6:17:4b:77:72:
4a:19:8a:af:2c:17:bb:fe:c3:ba:76:68:fc:8a:09:
44:81:bd:a9:e7:79:54:a5:8f:55:d6:cb:e4:72:aa:
60:f6:5d:7e:cd:eb:4f:40:ba:e2:63:40:27:f9:0b:
f0:39:a0:40:cb:f8:de:1d:f9:72:0b:81:c5:d5:48:
5a:1c:ce:da:34:7d:ce:58:70:b3:18:e8:3c:a2:45:
fe:a8:33:07:cf:a5:72:ee:34:3e:d2:6d:f1:1c:a4:
ce:91:d5:14:57:aa:c4:36:5b:84:6e:37:f9:65:f5:
26:e3:48:40:4b:c2:b8:6e:62:6d:a2:20:da:77:97:
c5:56:e3:48:2a:fe:ee:5b:83:4f:34:20:3c:7d:25:
da:d4:36:ee:5e:3f:51:91:3b:3d:25:3a:21:e7:e1:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:2D:55:2D:1A:30:DA:4A:76:90:3C:82:D4:98:E9:C0:A3:29:A4
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ON8tVS0aMNpKdpA8gtSY6cCjKaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.192.0/18
5.72.0.0/15
5.134.128.0/18
5.200.96.0/19
37.44.56.0/21
37.137.0.0/16
37.153.176.0/20
37.156.48.0/20
37.156.152.0/21
77.81.192.0/19
89.32.0.0/19
89.32.96.0/20
89.34.32.0/19
89.34.128.0/19
89.41.192.0/19
89.47.64.0/20
89.47.128.0/19
91.229.214.0/23
92.114.64.0/20
93.114.16.0/20
94.24.0.0-94.24.23.255
94.24.80.0-94.24.103.255
95.162.0.0/16
185.24.136.0/23
185.24.228.0/22
188.208.64.0/19
188.208.144.0-188.208.191.255
188.208.224.0/19
188.214.4.0/22
188.214.84.0/22
188.215.24.0/22
188.215.88.0/22
213.195.32.0-213.195.51.255
IPv6:
2a03:ef40::/128
2a03:ef42::-2a03:ef43:3fff:ffff:ffff:ffff:ffff:ffff
2a03:ef43:c000::/48
2a03:ef44::/34
Signature Algorithm: sha256WithRSAEncryption
47:ee:e4:b4:5c:0e:5a:98:97:c8:98:90:44:a1:e6:ec:b8:b6:
79:05:0f:bd:f8:42:2a:30:f3:4a:cc:2c:c1:cf:b1:a6:5f:e0:
61:9c:e0:ab:55:25:b9:c8:91:d4:5b:e9:13:eb:4e:99:6a:f7:
f3:b1:b9:6d:7a:18:5a:0f:87:a0:4e:fc:77:43:38:4e:3a:d4:
cb:79:4a:dc:c1:ff:69:87:55:38:b7:67:50:5d:ad:0c:7d:8c:
89:82:ca:f9:8a:1d:08:33:e3:8e:af:50:d4:37:62:0f:cd:7d:
e5:55:0c:7b:c7:9b:d2:0d:1c:cc:ef:e5:5a:7a:04:88:63:31:
a6:be:5f:4d:95:de:93:49:e6:59:b4:d7:1d:2d:dc:5c:0b:9a:
46:ca:8e:b2:21:75:b8:48:67:f5:93:d3:33:b7:9b:55:d5:94:
58:03:76:07:da:20:fe:46:25:4f:92:2f:4e:62:54:d0:44:b5:
dd:b1:fc:1d:6f:aa:61:c0:d6:bd:2d:b1:2f:2a:ac:31:01:f7:
08:dd:8a:2e:d4:21:26:8a:4d:45:eb:74:ff:7c:14:16:ff:9c:
99:3c:e8:63:49:b9:a9:52:c3:b0:61:ce:6c:3a:6a:b1:3b:5c:
ab:88:5a:01:09:63:d3:67:c8:1e:0d:61:03:62:6d:09:f2:86:
60:c7:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:43 2025 by rpki-client