Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KsJDzJmOd-h547dClAW75JWuRao.roa
File: KsJDzJmOd-h547dClAW75JWuRao.roa (raw, json)
Hash identifier: BR1lUPZ5MAWukLh1npxPXBilP5ZP95S+TTO2HiDzDP8=
Subject key identifier: 2A:C2:43:CC:99:8E:77:E8:79:E3:B7:42:94:05:BB:E4:95:AE:45:AA
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018D8904DC9E6E8FEAA0B40BFDDCF42523A1
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KsJDzJmOd-h547dClAW75JWuRao.roa
Signing time: Thu 08 Feb 2024 14:00:13 +0000
ROA not before: Thu 08 Feb 2024 14:00:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.160.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Mar 2024 07:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:04:dc:9e:6e:8f:ea:a0:b4:0b:fd:dc:f4:25:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Feb 8 14:00:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ac243cc998e77e879e3b7429405bbe495ae45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:8e:2e:8a:23:95:e3:6f:99:49:39:8e:e6:
e7:9a:6c:0e:41:3e:40:e8:8a:b4:be:f3:f3:36:99:
6c:d4:b4:0c:58:f3:49:95:d8:3c:70:44:7d:1d:a0:
af:0b:20:81:3e:ff:e9:01:80:bf:dc:07:fb:d4:36:
26:c3:e2:00:fc:57:de:ce:0f:83:75:7c:7f:1d:4e:
42:de:45:01:77:cc:84:ef:ec:cb:36:7e:61:a4:90:
64:4c:11:80:71:4b:82:fe:38:34:d4:b1:46:18:2e:
6d:ba:74:47:58:04:67:45:f7:fd:eb:73:d8:3a:d4:
8a:a8:ac:e6:30:e4:60:1f:d3:fa:61:c0:81:c6:a1:
45:65:be:42:51:aa:a6:68:63:d6:79:ab:b0:13:dc:
03:35:fb:84:5e:78:6f:b5:7a:10:4d:6f:ce:8c:dc:
2b:15:71:8e:eb:c0:61:cc:b4:5c:b2:0a:70:39:b4:
3e:a5:59:6e:88:b3:a1:f7:e3:40:14:7c:c0:e9:1b:
94:01:37:be:5e:40:a6:d9:ee:4f:f7:a5:a4:51:f2:
f8:cf:fe:24:aa:f1:1f:da:4e:f7:1f:f1:f5:b1:d5:
5e:34:3e:5b:cb:01:39:30:13:ed:dc:7a:5b:b2:10:
fb:80:f7:17:5b:64:64:11:83:e6:e2:90:a8:b1:48:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:43:CC:99:8E:77:E8:79:E3:B7:42:94:05:BB:E4:95:AE:45:AA
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KsJDzJmOd-h547dClAW75JWuRao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
7b:a5:60:31:53:e0:a5:1b:94:c1:25:90:33:c8:ce:bd:f0:45:
73:ec:ef:93:e0:ae:fc:16:10:e8:12:8a:2c:75:eb:ea:2d:f5:
5e:66:21:50:f4:fe:fe:e3:f3:16:de:2e:89:32:f2:5e:e9:3e:
a1:d3:b0:18:d3:39:6f:24:10:1e:dc:a2:7f:bd:31:64:9c:44:
26:0e:bd:e8:74:56:d5:bd:8c:9c:31:b2:e7:ea:34:13:a8:eb:
38:72:38:42:b3:7c:1b:a7:a1:1a:8b:1b:ee:55:cc:e7:05:48:
5f:b6:17:e6:3b:37:a0:7f:69:40:9a:01:b2:04:bb:d3:fb:94:
ba:aa:68:7f:91:65:bd:08:a7:79:30:d5:e0:32:06:6e:a2:02:
4f:90:8d:fc:19:63:88:43:01:db:45:89:4f:9b:f6:7a:7c:ba:
a1:6e:1c:e0:65:ad:ca:e3:84:fa:a9:eb:bf:70:52:db:b0:2d:
28:2f:e1:b2:fa:4e:1a:b2:62:be:ec:53:9b:d8:00:5a:f3:05:
7c:b8:cb:ce:d7:0a:69:3c:50:fc:fe:c5:e8:e3:00:6c:2a:40:
71:c0:e4:bf:08:da:31:52:81:01:e4:24:77:72:f5:fc:65:62:
0a:d5:8e:35:7b:a3:bb:aa:ec:40:50:c6:c4:12:0a:a2:92:15:
0e:c6:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 09:29:43 2024 by rpki-client on console-fra.rpki-client.org