Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CPgB1tz26qFr2BlixudU9ZW7K7Q.roa
File: CPgB1tz26qFr2BlixudU9ZW7K7Q.roa (raw, json)
Hash identifier: fck/XpALfIfHLtWfGqTyDEqFaoJ3t7qC2lLTP8cP5tE=
Subject key identifier: 08:F8:01:D6:DC:F6:EA:A1:6B:D8:19:62:C6:E7:54:F5:95:BB:2B:B4
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01920EB0ED85BFAA7EB5B4B1830C5F12E876
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CPgB1tz26qFr2BlixudU9ZW7K7Q.roa
Signing time: Fri 20 Sep 2024 09:08:49 +0000
ROA not before: Fri 20 Sep 2024 09:08:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216071
IP address blocks: 5.35.32.0/24 maxlen: 24
5.35.33.0/24 maxlen: 24
5.35.34.0/24 maxlen: 24
5.35.36.0/24 maxlen: 24
5.35.37.0/24 maxlen: 24
5.35.38.0/24 maxlen: 24
5.35.39.0/24 maxlen: 24
5.35.44.0/24 maxlen: 24
5.35.45.0/24 maxlen: 24
5.35.46.0/24 maxlen: 24
5.35.47.0/24 maxlen: 24
5.35.68.0/24 maxlen: 24
5.35.69.0/24 maxlen: 24
5.35.70.0/24 maxlen: 24
5.35.71.0/24 maxlen: 24
46.149.72.0/24 maxlen: 24
46.149.73.0/24 maxlen: 24
46.149.74.0/24 maxlen: 24
46.149.75.0/24 maxlen: 24
46.149.76.0/24 maxlen: 24
46.149.77.0/24 maxlen: 24
46.149.78.0/24 maxlen: 24
46.149.79.0/24 maxlen: 24
46.151.24.0/24 maxlen: 24
46.151.25.0/24 maxlen: 24
46.151.26.0/24 maxlen: 24
46.151.27.0/24 maxlen: 24
46.151.28.0/24 maxlen: 24
46.151.29.0/24 maxlen: 24
46.151.30.0/24 maxlen: 24
46.151.31.0/24 maxlen: 24
62.84.96.0/24 maxlen: 24
62.84.97.0/24 maxlen: 24
62.84.98.0/24 maxlen: 24
62.84.99.0/24 maxlen: 24
62.84.100.0/24 maxlen: 24
62.84.101.0/24 maxlen: 24
62.84.102.0/24 maxlen: 24
62.84.103.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.138.0/24 maxlen: 24
77.105.139.0/24 maxlen: 24
77.105.140.0/24 maxlen: 24
77.105.141.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.246.96.0/24 maxlen: 24
77.246.97.0/24 maxlen: 24
77.246.98.0/24 maxlen: 24
77.246.99.0/24 maxlen: 24
77.246.100.0/24 maxlen: 24
77.246.101.0/24 maxlen: 24
77.246.102.0/24 maxlen: 24
77.246.103.0/24 maxlen: 24
77.246.104.0/24 maxlen: 24
77.246.105.0/24 maxlen: 24
77.246.106.0/24 maxlen: 24
77.246.107.0/24 maxlen: 24
77.246.108.0/24 maxlen: 24
77.246.109.0/24 maxlen: 24
77.246.110.0/24 maxlen: 24
77.246.111.0/24 maxlen: 24
88.210.3.0/24 maxlen: 24
88.210.6.0/24 maxlen: 24
88.210.9.0/24 maxlen: 24
88.210.10.0/24 maxlen: 24
88.210.11.0/24 maxlen: 24
88.210.12.0/24 maxlen: 24
88.210.13.0/24 maxlen: 24
88.210.14.0/24 maxlen: 24
89.110.64.0/24 maxlen: 24
89.110.65.0/24 maxlen: 24
89.110.66.0/24 maxlen: 24
89.110.67.0/24 maxlen: 24
89.110.68.0/24 maxlen: 24
89.110.69.0/24 maxlen: 24
89.110.70.0/24 maxlen: 24
89.110.71.0/24 maxlen: 24
89.110.72.0/24 maxlen: 24
89.110.73.0/24 maxlen: 24
89.110.74.0/24 maxlen: 24
89.110.75.0/24 maxlen: 24
89.110.76.0/24 maxlen: 24
89.110.77.0/24 maxlen: 24
89.110.78.0/24 maxlen: 24
89.110.79.0/24 maxlen: 24
89.110.80.0/24 maxlen: 24
89.110.81.0/24 maxlen: 24
89.110.82.0/24 maxlen: 24
89.110.83.0/24 maxlen: 24
89.110.84.0/24 maxlen: 24
89.110.85.0/24 maxlen: 24
89.110.86.0/24 maxlen: 24
89.110.87.0/24 maxlen: 24
89.110.100.0/24 maxlen: 24
89.110.101.0/24 maxlen: 24
89.110.102.0/24 maxlen: 24
89.110.103.0/24 maxlen: 24
89.110.104.0/24 maxlen: 24
89.110.105.0/24 maxlen: 24
89.110.106.0/24 maxlen: 24
89.110.107.0/24 maxlen: 24
89.110.108.0/24 maxlen: 24
89.110.109.0/24 maxlen: 24
89.110.110.0/24 maxlen: 24
89.110.111.0/24 maxlen: 24
89.110.112.0/24 maxlen: 24
89.110.113.0/24 maxlen: 24
89.110.114.0/24 maxlen: 24
89.110.115.0/24 maxlen: 24
89.110.116.0/24 maxlen: 24
89.110.117.0/24 maxlen: 24
89.110.118.0/24 maxlen: 24
89.110.119.0/24 maxlen: 24
89.110.120.0/24 maxlen: 24
89.110.121.0/24 maxlen: 24
89.110.122.0/24 maxlen: 24
89.110.123.0/24 maxlen: 24
89.110.124.0/24 maxlen: 24
89.110.125.0/24 maxlen: 24
89.110.126.0/24 maxlen: 24
89.110.127.0/24 maxlen: 24
91.201.112.0/24 maxlen: 24
91.201.113.0/24 maxlen: 24
91.201.114.0/24 maxlen: 24
91.201.115.0/24 maxlen: 24
93.183.88.0/24 maxlen: 24
93.183.89.0/24 maxlen: 24
93.183.90.0/24 maxlen: 24
93.183.91.0/24 maxlen: 24
109.107.164.0/24 maxlen: 24
109.107.165.0/24 maxlen: 24
109.107.166.0/24 maxlen: 24
109.107.167.0/24 maxlen: 24
109.107.172.0/24 maxlen: 24
109.107.173.0/24 maxlen: 24
109.107.174.0/24 maxlen: 24
109.107.175.0/24 maxlen: 24
109.107.176.0/24 maxlen: 24
109.107.177.0/24 maxlen: 24
109.107.178.0/24 maxlen: 24
109.107.179.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
178.130.40.0/24 maxlen: 24
178.130.41.0/24 maxlen: 24
178.130.42.0/24 maxlen: 24
178.130.43.0/24 maxlen: 24
193.33.194.0/24 maxlen: 24
193.33.195.0/24 maxlen: 24
194.60.132.0/24 maxlen: 24
194.60.133.0/24 maxlen: 24
194.60.134.0/24 maxlen: 24
194.60.135.0/24 maxlen: 24
212.111.80.0/24 maxlen: 24
212.111.81.0/24 maxlen: 24
212.111.82.0/24 maxlen: 24
212.111.88.0/24 maxlen: 24
212.111.89.0/24 maxlen: 24
212.118.36.0/24 maxlen: 24
212.118.37.0/24 maxlen: 24
212.118.38.0/24 maxlen: 24
212.118.39.0/24 maxlen: 24
212.118.40.0/24 maxlen: 24
212.118.41.0/24 maxlen: 24
212.118.42.0/24 maxlen: 24
212.118.43.0/24 maxlen: 24
212.118.52.0/24 maxlen: 24
212.118.53.0/24 maxlen: 24
212.118.54.0/24 maxlen: 24
212.118.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 23:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:b0:ed:85:bf:aa:7e:b5:b4:b1:83:0c:5f:12:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Sep 20 09:08:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08f801d6dcf6eaa16bd81962c6e754f595bb2bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:7d:f1:d7:fb:ce:3c:99:77:85:fe:ea:c4:
0f:24:21:e7:1a:e3:06:27:25:5d:d4:98:15:cd:3d:
80:87:c8:de:4a:bc:e0:64:ae:af:0b:38:f6:45:f1:
e3:0f:78:e8:40:1e:c5:b2:ed:96:7c:cb:d9:41:ac:
f6:81:57:44:37:27:13:05:12:aa:a1:32:69:98:0e:
ec:99:b7:03:70:b4:29:f7:a4:26:76:ff:33:ca:f8:
88:77:b6:5a:b2:6d:a5:20:de:d7:41:fb:bf:a3:40:
77:2e:b2:8e:bf:27:ed:76:b6:e0:0a:c1:9d:23:a3:
39:47:50:2d:40:ad:d6:b6:b4:0e:3d:2e:2c:16:ad:
b1:91:cc:b3:10:6a:d3:24:0f:b7:f2:30:ec:b6:a9:
98:bd:69:3b:25:da:95:ec:12:5c:01:cb:05:7f:8b:
a7:c4:24:65:8e:d2:b2:9a:b0:72:0c:11:21:44:1e:
ed:19:5b:3b:ff:96:d0:10:6e:d5:1e:d5:86:e4:fc:
38:ea:67:b7:73:f8:1a:f4:bd:50:82:fd:6b:cd:fc:
2b:ce:4e:d4:40:51:f5:d1:ea:93:10:42:4a:9f:bb:
c9:f4:c8:23:bf:3c:d1:dd:7e:ab:23:a9:4d:c1:50:
bf:4e:82:c3:10:d7:36:d0:46:49:e6:dd:2b:de:0e:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F8:01:D6:DC:F6:EA:A1:6B:D8:19:62:C6:E7:54:F5:95:BB:2B:B4
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/CPgB1tz26qFr2BlixudU9ZW7K7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.32.0-5.35.34.255
5.35.36.0/22
5.35.44.0/22
5.35.68.0/22
46.149.72.0/21
46.151.24.0/21
62.84.96.0/21
77.105.136.0/21
77.246.96.0/20
88.210.3.0/24
88.210.6.0/24
88.210.9.0-88.210.14.255
89.110.64.0-89.110.87.255
89.110.100.0-89.110.127.255
91.201.112.0/22
93.183.88.0/22
109.107.164.0/22
109.107.172.0-109.107.179.255
109.107.184.0/22
178.130.40.0/22
193.33.194.0/23
194.60.132.0/22
212.111.80.0-212.111.82.255
212.111.88.0/23
212.118.36.0-212.118.43.255
212.118.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:3b:81:7a:63:80:88:3d:39:7a:c8:f6:d5:f3:24:b4:80:4b:
de:d1:ca:9d:06:33:72:67:bb:fc:93:99:58:32:c4:b0:6c:97:
07:61:8c:c9:6e:a9:cc:73:01:10:f7:4f:74:ae:0c:93:7a:87:
21:43:21:63:33:c2:81:dd:d0:a6:7b:f2:07:a1:08:ca:68:f8:
a4:88:2b:97:0a:ba:84:6d:3a:85:9e:25:c6:3f:cc:6d:93:a1:
c0:4c:8c:a4:89:16:92:98:6f:dd:c1:6c:d5:41:a8:e1:5a:e5:
a1:c0:1a:12:64:ba:9e:bf:70:e7:61:42:77:0e:be:6f:8c:f3:
09:6a:af:16:1a:05:a0:43:98:d1:4c:35:c9:b8:f0:da:24:15:
57:58:b1:ac:e8:ea:2a:6d:b6:2e:90:2d:d3:eb:b8:56:be:ec:
42:ae:38:e3:dd:1f:4c:3f:56:f1:f3:62:3d:b3:b9:3c:70:22:
1d:ea:bf:86:2a:9b:8e:a9:93:64:3d:e6:20:75:05:ef:f2:40:
6a:de:51:df:ee:e8:3f:42:d4:81:da:45:8c:7a:1c:d7:ef:a2:
97:e3:7d:a2:56:8c:36:bd:94:93:98:e0:05:dc:d9:c8:88:c3:
a5:de:5b:bc:94:22:18:6e:52:a6:de:44:d3:dc:73:a6:c4:15:
34:d4:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 02:52:41 2024 by rpki-client on console-fra.rpki-client.org