Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7Q5_87_bdjQQYIvDbQ2eyCfNN_k.roa
File: 7Q5_87_bdjQQYIvDbQ2eyCfNN_k.roa (raw, json)
Hash identifier: PD38cNf4Qj8u8D81Dn2Aq2QuE6AtC9beGD2qEWtxPhQ=
Subject key identifier: ED:0E:7F:F3:BF:DB:76:34:10:60:8B:C3:6D:0D:9E:C8:27:CD:37:F9
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01946EA618DF6B16443370144B3224D01358
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7Q5_87_bdjQQYIvDbQ2eyCfNN_k.roa
Signing time: Thu 16 Jan 2025 10:26:06 +0000
ROA not before: Thu 16 Jan 2025 10:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 12:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:a6:18:df:6b:16:44:33:70:14:4b:32:24:d0:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 16 10:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0e7ff3bfdb763410608bc36d0d9ec827cd37f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:73:ad:97:8b:64:28:f8:ba:a1:37:8e:fb:
5e:a9:20:63:d9:be:0d:d6:f2:dd:dc:be:7b:51:2a:
53:13:39:b8:c3:f5:01:30:43:4d:d2:ae:f7:27:52:
f5:23:e0:d1:9b:fd:bc:50:21:01:86:58:32:8e:21:
95:ea:ba:da:93:9a:67:5e:74:88:41:95:c2:00:77:
06:42:44:6d:80:65:c8:c6:a5:3b:f0:6e:c7:69:b6:
25:d0:5e:98:82:0c:73:0d:62:8d:48:c5:a3:55:8f:
b9:8e:3d:df:3c:75:32:40:32:49:14:0b:c1:d5:4e:
72:0f:18:36:7f:f8:58:10:f6:0c:b3:b3:1a:f8:55:
a7:37:79:27:f6:e1:5a:22:df:b9:67:8d:25:be:9d:
45:a7:77:8c:0c:f8:1b:ca:1a:80:c4:89:0a:b7:e3:
10:76:77:bd:bf:60:d2:6d:65:d7:90:fb:6a:45:fb:
33:09:ff:99:77:55:34:37:3a:d0:82:42:5a:76:f9:
01:f4:82:73:f1:c2:cf:bc:d5:b9:79:2b:8d:d0:bf:
b9:b1:30:fe:ab:b6:bd:52:9a:e9:b5:51:af:a5:2e:
67:1a:bc:6b:35:3a:94:d0:ab:58:c6:53:88:44:a9:
cf:16:25:bc:e2:0d:55:f5:48:b6:8b:1a:51:01:81:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:7F:F3:BF:DB:76:34:10:60:8B:C3:6D:0D:9E:C8:27:CD:37:F9
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7Q5_87_bdjQQYIvDbQ2eyCfNN_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0-62.169.133.255
62.169.135.0/24
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
2f:d6:68:55:be:21:df:9d:a8:48:98:be:d7:7e:4d:3a:8e:7e:
68:75:c4:57:64:ba:b6:00:68:11:cd:48:22:2f:df:51:fa:42:
cc:8b:89:e8:18:cd:00:89:27:b9:25:f0:b3:bf:c9:65:61:55:
7f:8c:31:9d:51:1f:6b:11:d9:50:d8:ea:ae:8a:9f:fa:0c:57:
6c:0d:f1:e8:f6:03:3d:f5:8d:59:0a:bb:1f:ce:74:2c:8a:13:
44:c7:d5:e8:8b:34:98:8a:a0:47:6f:8b:ef:12:f0:69:bb:64:
ae:87:46:91:90:df:b2:ac:d1:a7:7e:59:78:3f:7f:77:1c:03:
d4:60:05:f1:da:56:0a:e1:ac:81:91:da:01:63:b7:c0:28:3b:
68:6a:49:b9:f5:42:81:86:5c:8e:72:91:f0:17:41:09:96:97:
f4:5c:61:0f:07:40:8d:a8:43:30:2f:29:d5:e8:d2:af:3a:47:
ab:d9:b5:e1:a4:74:59:f1:8b:bb:c3:79:bf:4e:ca:ed:64:28:
67:99:90:da:75:6c:5e:d4:4a:b1:6b:aa:f1:99:d5:24:77:2d:
45:98:6b:d3:0a:1e:4b:88:0f:04:46:c0:21:a6:71:fd:c2:2e:
d5:20:35:4b:69:b3:99:0d:4c:dc:24:5a:51:3e:89:a6:59:f0:
fb:91:c5:05
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAZRuphjfaxZEM3AUSzIk0BNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMTE2MTAyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDBlN2ZmM2JmZGI3NjM0MTA2MDhiYzM2ZDBkOWVjODI3Y2QzN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqNzrZeLZCj4uqE3jvteqSBj2b4N
1vLd3L57USpTEzm4w/UBMENN0q73J1L1I+DRm/28UCEBhlgyjiGV6rrak5pnXnSI
QZXCAHcGQkRtgGXIxqU78G7HabYl0F6YggxzDWKNSMWjVY+5jj3fPHUyQDJJFAvB
1U5yDxg2f/hYEPYMs7Ma+FWnN3kn9uFaIt+5Z40lvp1Fp3eMDPgbyhqAxIkKt+MQ
dne9v2DSbWXXkPtqRfszCf+Zd1U0NzrQgkJadvkB9IJz8cLPvNW5eSuN0L+5sTD+
q7a9UprptVGvpS5nGrxrNTqU0KtYxlOIRKnPFiW84g1V9Ui2ixpRAYEW6QIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFO0Of/O/23Y0EGCLw20NnsgnzTf5MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvN1E1Xzg3X2JkalFRWUl2RGJRMmV5Q2ZOTl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8
AwQCDmY0AwQADmY/AwQCDmZUMAwDBAc+qYADBAE+qYQDBAA+qYcDBAFUM+oDBAFc
M+gDBAFcM+4wDAMEA1wz+AMEAFwz/jAMAwQAZz3FAwQDZz3AMAwDBABnfU0DBARn
fUADBAFn0sYDBAJn1dQDBAFn/0wDBAGnoBADBACnoB0wDAMEAKo+WQMEBao+QAME
AKo+ZAMEAao+ZjAMAwQBqj5qAwQAqj5sAwQBqj5uAwQAqj6gMAwDBAWqPuADBAKq
PugDBAHGNxwDBADLvKQDBADLvKcwDAMEAMu8qQMEAcu8rAMEANQgSgMEAtQ4MDAM
AwQA1E71AwQC1E74MA0GCSqGSIb3DQEBCwUAA4IBAQAv1mhVviHfnahImL7Xfk06
jn5odcRXZLq2AGgRzUgiL99R+kLMi4noGM0AiSe5JfCzv8llYVV/jDGdUR9rEdlQ
2Oquip/6DFdsDfHo9gM99Y1ZCrsfznQsihNEx9XoizSYiqBHb4vvEvBpu2Suh0aR
kN+yrNGnfll4P393HAPUYAXx2lYK4ayBkdoBY7fAKDtoakm59UKBhlyOcpHwF0EJ
lpf0XGEPB0CNqEMwLynV6NKvOker2bXhpHRZ8Yu7w3m/TsrtZChnmZDadWxe1Eqx
a6rxmdUkdy1FmGvTCh5LiA8ERsAhpnH9wi7VIDVLabOZDUzcJFpRPommWfD7kcUF
-----END CERTIFICATE-----
Generated at Mon Jan 20 19:38:49 2025 by rpki-client on console.sobornost.net