Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/fpkVIaZTfiCqMW2ckIIACODzSNQ.roa
File: fpkVIaZTfiCqMW2ckIIACODzSNQ.roa (raw, json)
Hash identifier: 4iSFkWktrtBgiRumlyuPeXhk3lwc3AOk/XdZxJtBUVg=
Subject key identifier: 7E:99:15:21:A6:53:7E:20:AA:31:6D:9C:90:82:00:08:E0:F3:48:D4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01909BA97C98C7F8EA98E8DCB91238A6CAB3
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/fpkVIaZTfiCqMW2ckIIACODzSNQ.roa
Signing time: Wed 10 Jul 2024 08:01:34 +0000
ROA not before: Wed 10 Jul 2024 08:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 16 Sep 2024 07:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:a9:7c:98:c7:f8:ea:98:e8:dc:b9:12:38:a6:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jul 10 08:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e991521a6537e20aa316d9c90820008e0f348d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e2:90:a2:74:e4:15:c5:5f:d0:94:bc:32:a0:
e8:6f:d1:6d:f9:4b:3f:34:d2:01:59:9f:36:3b:67:
06:c4:5f:f6:91:a6:0b:fb:46:55:6c:1e:60:42:81:
79:6c:50:9b:0d:90:7f:0d:4f:b0:1d:ce:97:51:47:
30:82:cd:7c:d1:52:ce:2b:b6:8a:b9:4f:6d:5a:ca:
8f:03:e5:54:0e:20:4d:eb:91:94:05:c4:ba:1e:a4:
82:79:82:15:23:a2:56:22:84:dd:3a:43:7a:c5:c0:
32:50:28:fd:97:89:89:00:fa:63:15:a4:6c:34:50:
03:76:6e:3b:5b:63:47:73:31:ee:6e:da:9a:8b:a3:
62:20:06:fa:1b:17:7c:7d:15:68:cf:fc:67:65:ca:
e0:99:62:ee:3d:79:7f:a8:ef:54:b0:bc:94:3f:73:
63:b4:82:bd:6f:9c:03:ea:31:70:a8:88:9b:cb:f8:
1f:28:5f:d7:d6:5c:d4:7e:76:0d:72:16:3f:a7:f4:
8d:ac:9b:11:60:d7:4e:00:c1:e7:31:25:92:4e:7e:
31:8b:0b:86:b8:5e:65:e4:ba:b4:0c:6c:2c:c0:6d:
e2:e5:16:ab:37:87:23:4f:9c:b0:56:75:66:61:3f:
bc:0f:22:39:9e:58:4b:9a:a5:36:63:b4:97:87:de:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:99:15:21:A6:53:7E:20:AA:31:6D:9C:90:82:00:08:E0:F3:48:D4
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/fpkVIaZTfiCqMW2ckIIACODzSNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0/24
86.48.208.0-86.48.212.255
86.48.214.0/24
86.48.216.0-86.48.224.255
86.48.240.0-86.48.242.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:fa:c0:6d:31:2a:0f:f0:2b:66:f7:1f:ac:79:77:f5:06:be:
8b:83:2b:27:13:70:6d:06:06:15:b8:19:89:0c:5c:e6:3f:87:
62:c6:6f:f9:d6:09:5e:e0:de:8e:7b:19:bd:51:45:cb:ff:cb:
f1:dc:c9:a2:88:51:1c:42:e3:fd:c6:d1:70:b4:12:c6:35:a3:
e8:02:c2:e4:c0:c0:4f:b4:fc:97:8b:8e:bd:9e:64:d1:ac:6c:
c0:2a:4f:64:ce:fd:74:85:66:56:40:6c:54:67:36:01:52:bd:
fd:59:57:c2:23:53:d2:5e:66:2a:d1:84:cd:6f:79:7e:f8:e1:
b4:24:fd:e1:12:ed:e3:58:66:2a:0c:bd:a8:48:f9:b2:16:38:
60:95:ec:28:72:a4:e9:36:da:38:e6:f1:74:72:c4:2c:ad:fc:
83:7e:7a:b3:87:1b:f7:be:88:81:9a:93:58:b3:ff:ef:a4:31:
0f:ee:01:84:e0:36:52:70:bd:93:5e:72:2a:cf:68:1b:2f:40:
2b:db:5e:8c:78:30:b6:cb:fd:88:f4:9d:ad:14:e0:e2:dc:01:
7f:e4:7c:89:10:0b:c3:07:e7:61:8c:f1:16:45:1f:84:71:f6:
6e:2c:8c:96:f7:fd:8d:1e:ab:3d:66:fe:79:90:ec:45:26:de:
df:a9:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 09:12:51 2024 by rpki-client on console-fra.rpki-client.org