Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/02eCZb4Xilkhrw6LXLoijL6XGJM.roa
File: 02eCZb4Xilkhrw6LXLoijL6XGJM.roa (raw, json)
Hash identifier: TjHuLGnZ8sf4BTXv1/efA8Uxx1FA1e3lwZ44+F3WPs8=
Subject key identifier: D3:67:82:65:BE:17:8A:59:21:AF:0E:8B:5C:BA:22:8C:BE:97:18:93
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0190044737C562DC8FE761FF310D73594451
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/02eCZb4Xilkhrw6LXLoijL6XGJM.roa
Signing time: Mon 10 Jun 2024 22:31:34 +0000
ROA not before: Mon 10 Jun 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 10 Jul 2024 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:04:47:37:c5:62:dc:8f:e7:61:ff:31:0d:73:59:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jun 10 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3678265be178a5921af0e8b5cba228cbe971893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:75:af:78:0e:a9:21:91:6a:6a:b6:72:af:
63:1f:78:a9:d4:70:76:94:94:3f:44:d9:06:11:41:
11:12:45:6b:0f:24:62:1f:54:d1:12:53:d5:50:c4:
3c:fe:9e:51:f5:3f:65:21:79:0c:06:d3:d7:26:5d:
e8:6f:8d:86:57:32:ea:ac:ff:b4:42:4d:eb:05:75:
03:dd:87:57:c1:76:8d:b2:95:28:e0:2c:a7:9b:14:
d9:df:0a:ca:fc:05:6e:89:ad:ea:d1:66:ee:23:d4:
f8:dc:23:4c:62:40:dc:4a:f3:8d:bb:0a:ec:50:72:
5a:a0:f6:7c:6e:1f:7f:78:5b:c7:8b:cf:93:d6:ed:
48:b2:53:b6:33:37:d2:e3:0b:02:b4:c6:9a:f6:39:
01:fb:00:b7:63:49:b1:d6:57:8b:1f:44:29:5f:65:
0f:de:4f:2f:fb:da:89:59:26:4d:05:22:03:3c:43:
41:6d:f8:7c:b2:9e:e8:f3:48:ee:6c:41:65:af:98:
d5:c6:a1:0b:51:c0:55:c6:df:a1:65:ea:ae:35:f1:
db:23:12:9a:83:3b:1f:aa:42:2e:16:3b:46:66:05:
2d:cb:3d:9a:77:2c:7a:5c:5e:07:7e:77:a2:b0:50:
a3:88:bb:78:e4:26:f9:7e:14:90:18:dd:ac:fc:bd:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:82:65:BE:17:8A:59:21:AF:0E:8B:5C:BA:22:8C:BE:97:18:93
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/02eCZb4Xilkhrw6LXLoijL6XGJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.208.0-86.48.212.255
86.48.216.0-86.48.224.255
86.48.240.0-86.48.242.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a0:50:97:40:c0:63:fc:6b:bc:ad:6f:6b:c8:e2:23:3b:4c:93:
48:0e:5b:6d:13:0b:22:2d:95:23:d2:6f:13:07:fc:16:dc:70:
c7:25:7a:dc:f8:4d:b0:94:0a:c1:56:9f:e9:9c:8b:9b:18:67:
37:c0:b3:1a:e8:b5:e4:50:80:ac:c2:fd:ec:1e:9f:ab:7a:f3:
5f:5d:95:e7:a1:df:34:21:06:0b:9e:af:55:49:6d:90:3f:e2:
70:ba:df:75:09:f2:95:33:8e:40:08:c6:54:58:e4:93:f2:22:
30:c6:a6:79:8a:34:e5:f0:e7:4c:3b:69:9c:1d:de:ee:a3:c0:
b5:e2:2f:e8:bf:ad:de:81:26:2c:d4:4c:73:ef:b0:98:84:46:
54:df:b3:82:64:bc:a6:72:59:e1:b8:85:5c:3b:b1:a4:9e:48:
43:4e:e5:3c:0c:91:a7:68:0c:3d:3a:b3:76:89:ad:2f:86:9b:
f2:6c:12:2a:18:c0:11:fb:81:ea:80:7f:d8:0a:4b:5c:42:78:
e1:1e:3a:a9:cc:7a:a1:76:d1:ff:71:32:9a:b7:02:b8:f4:b2:
33:a9:df:68:57:e3:2b:94:23:4a:ec:e2:23:3e:d9:04:69:3a:
b4:b7:e5:b9:fc:27:22:80:88:b2:80:af:10:01:d4:a5:4b:c8:
58:17:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 10:34:12 2024 by rpki-client on console-ams.rpki-client.org