Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qMysVYCMZ1vqGzRRXHOiIvoAx5w.roa
File: qMysVYCMZ1vqGzRRXHOiIvoAx5w.roa (raw, json)
Hash identifier: ZZZsD1bbZkmkvRvA7uvIS0hZj8e27hVYeyw5h8PXmEA=
Subject key identifier: A8:CC:AC:55:80:8C:67:5B:EA:1B:34:51:5C:73:A2:22:FA:00:C7:9C
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAE86F8ADEF64247C50066AD977BF
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qMysVYCMZ1vqGzRRXHOiIvoAx5w.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
84.252.64.0/22 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 15:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ae:86:f8:ad:ef:64:24:7c:50:06:6a:d9:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8ccac55808c675bea1b34515c73a222fa00c79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:12:64:6a:45:43:1b:5d:7f:d3:40:18:b3:
73:09:e7:9e:30:81:e8:69:0e:c0:a6:a9:8a:3b:93:
c9:f0:f9:53:bf:6e:13:aa:7c:cb:09:32:d9:9a:eb:
d6:dc:eb:93:79:07:7a:19:90:63:ca:8c:0e:a7:5d:
50:da:25:fe:67:c7:b1:96:ca:00:3a:ef:84:f8:02:
8c:3b:44:5a:6a:93:fb:47:1e:24:d9:70:3e:a7:c9:
de:24:f4:19:14:ad:7d:b2:2f:02:5d:64:04:87:5b:
21:2b:d6:31:7d:92:c7:5a:95:95:fa:e0:5c:aa:d0:
7e:6b:a8:93:14:de:63:ac:29:e3:14:36:57:5a:72:
49:9c:ed:37:f9:fe:40:e5:ad:89:37:e1:23:0d:f9:
3d:1f:e1:0c:62:b4:ef:d0:a4:85:0d:31:2b:19:a1:
37:f4:3d:b2:0c:3a:9b:34:0c:3e:c1:f9:17:cd:92:
3c:bc:2e:bf:4c:1b:31:a0:ff:be:4a:c6:a1:94:8a:
60:e9:5d:e6:1a:91:ec:81:44:e7:96:f2:b7:96:15:
3a:ec:00:b1:c9:e6:50:07:23:af:5a:00:31:64:ae:
f6:a8:a6:8a:44:9a:fb:c4:32:2f:5c:ee:16:ee:ae:
60:72:aa:b8:7b:61:88:74:3d:5c:14:bc:d4:1c:e0:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:AC:55:80:8C:67:5B:EA:1B:34:51:5C:73:A2:22:FA:00:C7:9C
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qMysVYCMZ1vqGzRRXHOiIvoAx5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/24
45.130.184.0-45.130.186.255
45.140.4.0/24
45.140.6.0/23
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
88.218.239.0/24
91.132.126.0/24
91.245.239.0/24
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1a:e8:35:e3:63:73:25:ed:3f:8c:ed:ce:9c:01:07:f0:91:
11:c6:07:f1:e9:9a:8c:0f:19:18:2e:7c:32:4e:90:36:76:66:
d9:fa:e2:18:29:2c:37:51:d1:1b:24:57:ec:bd:57:d0:5a:22:
a6:26:af:b6:69:eb:a4:03:23:f6:b4:7c:bd:c3:ac:2b:3e:81:
fa:f8:4b:d6:72:21:a2:b8:f9:97:6e:b9:8e:77:85:e1:f7:32:
62:d0:77:57:8f:27:21:9a:6a:af:22:e8:7c:cc:6f:6b:57:7b:
f4:f1:a4:83:f6:a5:b1:7f:83:3d:e8:38:db:6d:e9:b9:48:b9:
b3:e5:cc:6a:d9:65:a2:95:6e:a2:57:f0:1d:d2:f8:ac:6b:9f:
b1:87:45:d6:6a:f3:a8:c4:ee:29:2c:7d:1e:4a:ad:b1:59:3d:
49:d7:d8:96:ef:39:28:15:31:3a:be:bf:6c:bd:41:71:2d:9e:
90:98:95:5c:c1:e4:10:66:83:ac:28:15:43:0e:9b:99:1c:2f:
c0:c5:33:ce:39:5e:95:83:6a:1f:72:5e:5e:33:68:b5:b0:5f:
0f:c9:fc:ab:ee:31:cf:f6:6d:e0:d6:eb:b2:f5:a5:d7:b6:ca:
ce:e9:b0:b5:da:00:41:32:b5:89:77:55:84:c3:91:7e:e9:10:
7e:84:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:37:30 2025 by rpki-client