Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/4kk3WoLlmtI7_i16euXXEZwZXvk.roa
File: 4kk3WoLlmtI7_i16euXXEZwZXvk.roa (raw, json)
Hash identifier: F9XAf7jXTi8yHX/s5pTgDd+wh8cTopkcZOrRZqwTvFs=
Subject key identifier: E2:49:37:5A:82:E5:9A:D2:3B:FE:2D:7A:7A:E5:D7:11:9C:19:5E:F9
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 018F8548635F3B0B2E0C9FA46A9C659119C0
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/4kk3WoLlmtI7_i16euXXEZwZXvk.roa
Signing time: Fri 17 May 2024 06:41:04 +0000
ROA not before: Fri 17 May 2024 06:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:3001::/48 maxlen: 48
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:5001::/48 maxlen: 48
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:8001::/48 maxlen: 48
2a0c:5900:8002::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 03:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:48:63:5f:3b:0b:2e:0c:9f:a4:6a:9c:65:91:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: May 17 06:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e249375a82e59ad23bfe2d7a7ae5d7119c195ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:cf:22:7a:77:59:35:7c:93:db:63:4a:3b:
80:4e:6b:25:0b:4e:a0:b8:a9:3c:d7:b3:04:32:1b:
08:8e:8a:25:df:3c:d8:83:a2:8c:38:38:68:6b:1a:
8b:9b:3e:ee:21:ae:10:09:5d:13:d7:34:46:ec:48:
f9:3b:a1:86:df:97:07:bc:3d:15:19:b5:d6:76:dd:
09:46:1f:a7:90:06:6d:ed:09:d5:88:18:c9:e0:64:
f8:5d:82:e6:aa:dd:43:11:44:9f:a9:02:bd:1b:f0:
b4:ad:92:07:21:24:ed:bb:cf:f0:f1:f6:c7:24:fc:
24:7f:78:95:c5:4e:c1:32:39:f4:2f:ae:94:8b:fd:
1a:ea:2a:d9:0a:26:04:e5:64:9d:7c:f7:4b:2c:be:
c8:0f:f7:2e:e8:92:fc:17:48:fc:3b:3b:c0:ad:7a:
ed:68:5a:39:8e:fe:9c:44:b7:38:4f:fc:b8:e6:67:
49:c8:2e:79:ef:54:ca:e2:fa:94:2a:b7:71:6b:80:
a4:3d:7f:8a:22:e6:56:75:80:d3:e1:0e:b9:5f:25:
ab:b4:96:45:dd:72:84:f2:96:72:b0:56:47:52:37:
3e:35:ed:f2:78:53:80:34:5f:ee:2e:13:f6:ea:8d:
4b:36:53:3b:4b:71:dd:e8:20:9c:d9:a4:35:7c:a8:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:37:5A:82:E5:9A:D2:3B:FE:2D:7A:7A:E5:D7:11:9C:19:5E:F9
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/4kk3WoLlmtI7_i16euXXEZwZXvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.208.0/22
86.48.216.0-86.48.224.255
86.48.240.0-86.48.242.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:3000::/36
2a0c:5900:5000::/36
2a0c:5900:8000::/36
Signature Algorithm: sha256WithRSAEncryption
81:90:03:e2:c4:29:fc:e8:c2:70:2f:be:b4:d8:22:4a:b7:b3:
55:d0:f3:62:4c:98:56:27:55:97:70:6d:81:19:31:ac:8e:3e:
53:d7:1b:89:2b:06:3d:49:b3:9e:d0:9e:32:ef:44:f1:2e:0a:
7a:75:7a:65:99:55:70:31:d6:74:90:c9:6e:42:bc:25:6e:c9:
fb:ee:00:cf:0e:4b:91:15:9e:10:2e:ee:e0:a7:ad:35:e9:01:
61:dd:60:bb:f8:4a:f0:f3:b4:3d:94:99:cc:b6:ca:88:4d:5f:
75:c0:a0:46:a5:64:f2:4c:65:cc:a4:e5:4e:d2:98:ea:da:8d:
93:1e:17:a6:6f:b7:1d:ef:c4:02:99:ff:2c:96:68:40:18:7b:
33:93:dc:84:d5:31:8a:3c:42:05:0b:f3:0e:44:a0:b3:1d:73:
d9:34:9c:eb:01:f2:90:1a:f0:18:30:b4:4f:db:a6:2b:11:73:
52:00:ec:0e:35:86:22:5f:c2:38:f1:a3:66:39:05:86:93:2d:
4b:cd:bd:29:2e:fe:4b:f3:ec:71:ed:48:7f:3b:19:46:fb:5e:
25:24:f6:c0:3c:e3:67:1a:55:00:8e:12:98:47:26:b0:3d:34:
40:60:4a:61:9a:07:af:9f:89:02:ee:26:a2:39:32:26:2b:21:
0b:e4:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:42:19 2024 by rpki-client on console-ams.rpki-client.org