Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/m85ZcnkS31Y5TrGPc38ChihHTVI.roa
File: m85ZcnkS31Y5TrGPc38ChihHTVI.roa (raw, json)
Hash identifier: 6aG0KcNoM4buBqpNN5czLpE16eANKPABWkAuVMCLVOU=
Subject key identifier: 9B:CE:59:72:79:12:DF:56:39:4E:B1:8F:73:7F:02:86:28:47:4D:52
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01928128908C499D4CCAB82E9D466A46E998
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/m85ZcnkS31Y5TrGPc38ChihHTVI.roa
Signing time: Sat 12 Oct 2024 14:36:12 +0000
ROA not before: Sat 12 Oct 2024 14:36:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 04 Nov 2024 07:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:28:90:8c:49:9d:4c:ca:b8:2e:9d:46:6a:46:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Oct 12 14:36:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bce59727912df56394eb18f737f028628474d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:22:95:be:36:0f:b8:cf:13:aa:3e:f8:23:
42:59:08:98:d9:23:06:f4:6d:ca:f2:4c:6e:68:68:
34:57:cc:08:41:6a:cd:d8:c0:a6:dc:51:c2:cf:51:
02:1d:0f:76:f1:08:42:fa:7c:d7:c1:d4:13:c0:7b:
57:90:af:e6:dd:53:3c:43:55:be:9a:f3:61:cf:ae:
33:45:d1:44:a0:ff:71:0e:1c:76:e1:9e:7d:24:33:
f8:04:05:8b:02:87:be:c4:96:ae:fd:0a:a3:ab:b1:
22:81:f8:93:ff:19:c9:96:a5:13:74:22:28:5b:44:
48:f6:09:76:5c:61:e1:e9:17:7f:2a:a3:10:3f:93:
fe:8b:72:c7:63:50:e0:f5:bc:e0:39:f2:52:ed:d3:
26:a2:aa:46:f6:ec:dd:0c:f1:7f:ff:f0:9f:8a:38:
e8:74:26:02:08:8d:3b:b2:75:16:45:65:02:86:cb:
40:4a:f8:6c:4c:84:ce:cb:76:3b:fa:c0:92:1e:64:
2e:0e:34:28:fe:aa:b5:27:8b:fd:21:20:9e:11:a9:
ee:e1:fe:90:ec:dd:23:0f:1d:34:6a:77:1b:3b:b3:
45:0f:a3:6e:a5:70:46:35:c7:a5:e1:4a:36:7c:75:
44:f3:70:a7:71:cd:20:ad:13:83:6a:90:14:c3:69:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:59:72:79:12:DF:56:39:4E:B1:8F:73:7F:02:86:28:47:4D:52
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/m85ZcnkS31Y5TrGPc38ChihHTVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0/22
86.48.208.0-86.48.212.255
86.48.214.0/24
86.48.216.0-86.48.225.255
86.48.240.0-86.48.242.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:4d:85:1d:8d:2f:5a:be:d6:96:b2:07:9b:2b:e5:f2:40:29:
86:23:09:ca:e5:11:17:0c:ec:51:04:35:fc:83:f5:3e:b7:5f:
d0:01:03:b6:ca:63:66:32:95:86:90:ec:b0:45:ed:59:45:d6:
db:d2:11:bf:ec:a4:69:81:4d:49:1a:db:5b:88:59:db:bb:78:
1a:7c:b0:c1:4e:ea:54:e0:41:de:a3:58:e6:8d:68:54:42:ac:
b3:18:9a:35:0f:f5:71:ce:a6:02:5b:0d:e5:70:2f:4a:27:75:
34:42:72:7b:88:31:b2:12:90:ae:a3:cb:6c:41:6b:e8:de:d0:
a1:e2:74:0c:bb:a1:93:f5:05:7f:c8:05:e1:ca:42:3f:41:7f:
d2:39:02:0c:69:1c:89:11:a3:96:21:ba:0c:41:19:a3:0a:7b:
36:9a:06:28:7b:c7:9b:bc:85:a0:bf:71:d0:32:02:38:0c:39:
0d:3a:44:48:d3:97:8c:fa:d6:d8:2b:20:4a:6b:6b:91:d5:e3:
fb:96:60:62:e4:89:27:f0:80:79:b2:4b:31:54:fe:61:c5:b2:
50:f9:3b:96:ca:be:32:81:e2:bc:90:79:0b:35:bd:be:e0:ec:
19:4b:4f:ae:a4:2c:cf:14:88:1d:5c:f1:e3:3f:31:76:25:ad:
bf:48:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:00 2024 by rpki-client on console-ams.rpki-client.org