Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lgOyzFRPTalx4g8EaTQ87cNxcTM.roa
File: lgOyzFRPTalx4g8EaTQ87cNxcTM.roa (raw, json)
Hash identifier: qYrGpuU+4QuxPiy2O9wzLsbffSZzBVmejlxN6ToeRxA=
Subject key identifier: 96:03:B2:CC:54:4F:4D:A9:71:E2:0F:04:69:34:3C:ED:C3:71:71:33
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DEBD9CF1035EB2FCC5F0FC8338466164C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lgOyzFRPTalx4g8EaTQ87cNxcTM.roa
Signing time: Tue 27 Feb 2024 18:35:36 +0000
ROA not before: Tue 27 Feb 2024 18:35:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:d9:cf:10:35:eb:2f:cc:5f:0f:c8:33:84:66:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 27 18:35:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9603b2cc544f4da971e20f0469343cedc3717133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:28:f8:6b:a7:3f:3a:68:b5:8a:42:3e:c6:
2d:41:31:5c:29:3b:33:65:96:e9:67:5e:ba:45:96:
34:55:0b:7e:c0:ee:b4:e5:e9:49:79:9f:d8:a7:19:
df:31:23:57:38:43:48:af:0e:bc:cb:e4:d4:1e:bb:
aa:e8:58:93:89:80:c3:08:07:f2:d9:66:96:b9:c2:
a4:d6:25:79:de:b6:17:30:bf:52:c9:b8:be:43:ea:
93:63:ac:c5:60:7b:42:e1:3e:28:10:e6:3c:da:d7:
c5:fb:94:b4:38:dc:28:5b:78:12:de:f8:d0:4f:eb:
c5:8a:4d:93:e1:a8:65:ba:7c:53:dd:74:f0:87:3f:
be:31:94:b4:5a:43:40:3d:e3:db:6b:a0:6d:13:af:
de:fb:76:5a:fc:1a:9a:57:23:47:7f:fc:c2:f0:6b:
43:c8:57:d3:10:16:52:bb:a6:d8:89:59:c4:80:12:
dd:6f:ea:5f:bc:2b:57:82:3c:fd:94:fb:16:50:3d:
fb:f1:e1:a7:dc:f0:5b:0a:13:c4:57:b5:6b:f9:28:
38:79:59:ee:1d:5b:ee:bd:1f:92:41:ad:03:b0:30:
ed:9c:72:b5:12:53:cd:7e:1d:7e:f2:78:c8:73:36:
b8:25:98:2f:a4:70:1b:1c:65:9c:21:dc:7b:af:a5:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:B2:CC:54:4F:4D:A9:71:E2:0F:04:69:34:3C:ED:C3:71:71:33
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lgOyzFRPTalx4g8EaTQ87cNxcTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
31.216.60.0/24
31.222.237.0/24
37.140.255.0/24
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.138.159.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.4.0/24
62.3.23.0/24
62.106.69.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
84.246.81.0/24
89.107.12.0/24
89.248.68.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
94.103.179.0/24
94.103.190.0/24
94.143.224.0/24
146.19.76.0/24
146.19.107.0/24
176.100.47.0/24
176.116.12.0/24
176.222.58.0/24
185.81.71.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0/24
193.163.18.0/24
193.201.127.0/24
194.104.142.0/24
194.104.238.0/24
195.225.99.0/24
212.52.31.0/24
Signature Algorithm: sha256WithRSAEncryption
41:68:d8:c8:0b:ba:9c:43:b4:8d:37:ac:06:74:4d:91:b7:3e:
d7:16:27:53:28:48:43:36:1a:e1:f7:06:8d:6c:c2:3b:0c:6b:
ad:11:b0:39:e2:cd:86:46:20:6d:44:c0:02:a8:67:70:bd:e5:
a5:90:2f:0b:1f:b9:5a:4d:3f:aa:04:86:64:1b:8f:a7:01:37:
4b:67:f1:3d:fc:6c:91:27:2e:01:ed:2d:4d:69:21:24:79:b9:
93:e2:8d:9e:8f:f1:f7:0f:8d:49:3a:52:30:03:02:b5:ad:58:
73:f0:5e:b8:c7:29:6a:9f:9e:e6:a6:4f:e0:93:f7:55:31:18:
6a:38:12:46:f2:63:d3:1e:7a:39:f6:d3:ff:e9:b1:aa:4e:83:
cf:ab:f1:96:bb:47:7f:ca:63:7a:79:5a:d2:be:e0:29:37:66:
01:40:c1:9c:ee:a2:55:d1:8a:f0:b7:68:dc:7a:1a:6f:b9:6f:
a9:b0:75:02:42:b0:26:d0:a8:1c:96:78:99:9d:9e:a4:25:7d:
6d:12:ea:7c:66:f1:2c:3b:2f:71:0b:25:8e:f1:44:4e:ca:2f:
b3:b9:e0:d3:8d:0f:50:5f:f7:d7:4e:bd:65:5a:09:93:b0:ec:
74:f8:d6:63:86:4c:00:26:7c:e5:cd:dc:59:77:b0:93:68:19:
44:21:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:49 2024 by rpki-client on console-ams.rpki-client.org