Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gmhzX658z80By_9n-9OCDkOel-c.roa
File: gmhzX658z80By_9n-9OCDkOel-c.roa (raw, json)
Hash identifier: i0Hnv4H0iZf6pgdRYvwYF5PrF1olXbKzuzBDJtQhmLo=
Subject key identifier: 82:68:73:5F:AE:7C:CF:CD:01:CB:FF:67:FB:D3:82:0E:43:9E:97:E7
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0192704A04C30F08B4EDDE12F40CAAB143E3
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gmhzX658z80By_9n-9OCDkOel-c.roa
Signing time: Wed 09 Oct 2024 07:59:11 +0000
ROA not before: Wed 09 Oct 2024 07:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 12 Oct 2024 14:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:4a:04:c3:0f:08:b4:ed:de:12:f4:0c:aa:b1:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Oct 9 07:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8268735fae7ccfcd01cbff67fbd3820e439e97e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:8f:41:bb:dd:99:3b:1a:be:cd:8f:69:23:
e4:05:da:8c:3d:cc:02:35:e9:12:04:40:e8:2a:14:
32:10:62:f6:d6:9c:e9:7e:ec:3f:54:c8:dc:91:bc:
f7:55:6f:33:5d:7b:01:0b:1c:39:ef:88:57:a4:06:
29:42:86:ab:fc:cd:8c:55:15:53:67:2c:33:d8:52:
2b:8a:32:28:9a:57:a5:4e:bd:3f:54:85:a8:17:18:
5f:ce:49:77:18:9f:18:7b:4f:93:27:db:ea:33:20:
51:73:98:14:13:0f:c9:ab:59:c8:3a:97:a1:78:be:
82:aa:84:40:ae:c9:92:d2:14:a1:e0:ab:38:46:45:
84:2a:4f:ae:63:07:0a:87:5c:f3:d3:0f:6a:34:57:
ff:d8:52:4b:e9:1e:48:bd:f8:3b:04:83:53:0f:bf:
68:98:06:fa:61:bc:da:42:c2:2c:5b:b4:60:59:33:
e7:b1:d5:9a:05:0a:83:44:b6:f8:97:cc:b3:c6:0e:
11:8f:c2:50:ff:71:86:07:67:14:15:b1:d8:cb:00:
ad:70:69:e2:f7:00:05:f4:4a:7f:6e:7d:17:8e:31:
68:9c:a0:ff:9f:89:4f:32:62:2f:16:12:dc:ed:01:
e6:a7:d7:11:58:f5:ef:7f:6a:6c:4d:91:2e:60:88:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:73:5F:AE:7C:CF:CD:01:CB:FF:67:FB:D3:82:0E:43:9E:97:E7
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gmhzX658z80By_9n-9OCDkOel-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0/22
86.48.208.0-86.48.212.255
86.48.214.0/24
86.48.216.0-86.48.224.255
86.48.240.0-86.48.242.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:29:67:cb:a9:55:53:35:47:90:4b:80:79:00:56:63:0a:e7:
ef:47:63:a5:9c:a5:8d:50:78:d1:35:27:84:b5:71:db:c8:81:
8f:5e:a0:0d:bb:6b:c1:fc:47:e8:95:74:2c:47:54:69:1b:1e:
77:90:1d:11:9f:60:5d:bd:9e:6b:40:6a:70:97:e5:f9:8e:40:
9a:c0:dd:6e:2f:4e:6f:37:b5:ab:71:92:e3:f1:4d:f6:c4:ce:
cf:fa:cc:13:19:b1:73:9c:b1:56:0d:2c:9d:7d:3b:b4:7d:d0:
21:4e:1e:e9:77:19:00:6b:07:dc:c2:bd:b5:07:05:ce:78:9e:
24:ce:ef:8a:76:10:86:98:32:51:25:38:0f:19:06:12:02:f3:
a5:89:c3:bb:6e:ea:6e:7e:62:31:55:1b:ed:26:fa:bf:1e:8a:
20:bc:d1:1e:b2:76:f2:2d:e1:f8:7e:8e:4f:d9:cd:d0:5b:5c:
e4:52:6b:be:1a:a9:67:d7:9b:d1:41:9b:ee:39:c2:e0:4b:a1:
84:d8:46:c5:a3:f6:10:98:ec:b9:8c:87:74:d2:a7:32:d3:cb:
91:c0:46:fa:15:75:5f:41:33:b5:60:fa:77:00:38:6d:ae:4f:
c8:57:39:bf:12:18:3c:ed:e4:d1:6b:de:12:61:2f:02:95:e1:
78:0d:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 19:35:31 2024 by rpki-client on console-fra.rpki-client.org