Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/4mVvnwubcwOIry3gg37W2ZBlkio.roa
File: 4mVvnwubcwOIry3gg37W2ZBlkio.roa (raw, json)
Hash identifier: J7rp3Kq1JOGQsBuyUx03UGD6ad8CEiibUiUP5ktMihc=
Subject key identifier: E2:65:6F:9F:0B:9B:73:03:88:AF:2D:E0:83:7E:D6:D9:90:65:92:2A
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0192E14189218CC860D96289E566B83790C8
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/4mVvnwubcwOIry3gg37W2ZBlkio.roa
Signing time: Thu 31 Oct 2024 06:27:01 +0000
ROA not before: Thu 31 Oct 2024 06:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 05:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:41:89:21:8c:c8:60:d9:62:89:e5:66:b8:37:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Oct 31 06:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2656f9f0b9b730388af2de0837ed6d99065922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ea:0f:b9:9d:40:ec:8f:a2:e6:0a:dc:ef:f6:
da:44:89:75:f5:98:48:14:1e:94:1d:22:41:80:78:
ff:8a:ad:8c:a4:af:7c:bb:10:3f:83:53:5b:c8:38:
fb:a2:3b:23:1d:a1:40:0e:51:e2:6f:27:14:8d:e5:
d5:67:02:30:21:c0:29:fc:5d:66:55:37:54:81:51:
28:25:83:96:dd:b0:16:6b:f7:c5:de:d8:cc:5a:21:
dd:58:18:5e:0e:05:94:99:2e:c9:a7:d1:dd:f8:a4:
93:f2:db:b9:8c:05:ed:69:bc:31:dc:0e:bb:a8:65:
d2:56:d8:d6:89:47:b1:14:99:cb:da:8e:cc:b2:2c:
30:d4:7c:38:05:1e:49:d0:5e:c7:3d:36:b6:c1:c4:
a3:d8:6a:2b:2e:de:79:0a:14:2e:4c:75:cc:26:00:
d7:ee:d0:a8:90:bc:24:a7:a0:08:9d:a9:5a:7d:9c:
ab:af:75:a3:be:e0:50:58:b8:d1:8d:b0:04:84:c8:
90:e6:98:e1:99:ee:c3:4d:af:27:af:06:55:1b:be:
8d:a8:a8:78:b9:f2:51:81:11:ee:91:84:17:12:89:
d8:c3:62:9e:c3:dc:4f:0e:cf:6b:f5:5e:7c:d1:18:
e8:65:a0:d8:93:d8:00:fb:bc:9d:cd:4a:c4:4e:a1:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:65:6F:9F:0B:9B:73:03:88:AF:2D:E0:83:7E:D6:D9:90:65:92:2A
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/4mVvnwubcwOIry3gg37W2ZBlkio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.98.255
91.142.72.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:93:05:f4:a9:78:e0:6f:31:63:f0:01:cc:dc:0f:12:37:0b:
b5:1c:56:fd:da:80:db:4c:78:c4:f5:44:4b:18:33:48:78:9a:
da:15:dc:a7:cb:e4:83:58:ae:68:7f:3f:a9:13:c1:99:ef:af:
6f:b6:e8:cb:6b:2f:06:3d:55:49:26:b7:24:a2:ec:9e:0f:69:
36:c7:c7:da:95:a2:da:71:65:b8:14:23:e5:7e:7e:0d:0a:af:
0a:96:2c:1e:e6:7b:d9:c5:63:d4:3b:50:61:c4:5e:f0:db:e2:
45:06:9f:15:23:bb:b8:78:44:3b:9c:fc:5a:f4:9f:0a:b6:6b:
77:be:e9:e0:e2:5b:79:fc:64:a4:74:5f:96:03:8a:9d:7e:80:
d0:da:e0:b6:8f:10:b9:1d:9d:c9:33:77:84:79:26:47:fa:ea:
99:4f:56:12:ab:7a:58:72:7e:3b:95:42:88:52:cd:34:cf:58:
ea:81:bd:57:68:a9:24:11:0a:ed:50:4e:72:3b:ec:a6:f9:93:
1d:40:96:10:55:88:43:97:55:e1:7d:a0:57:49:15:4c:b1:02:
29:a8:0f:85:79:4d:7b:cd:40:2e:bd:10:27:7b:dd:a0:3e:18:
7d:e5:7b:6b:c2:8d:53:75:ef:2e:7c:aa:f3:94:e0:ce:29:80:
26:0f:24:d8
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZLhQYkhjMhg2WKJ5Wa4N5DIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjQxMDMxMDYyNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjY1NmY5ZjBiOWI3MzAzODhhZjJkZTA4MzdlZDZkOTkwNjU5MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+oPuZ1A7I+i5grc7/baRIl19ZhI
FB6UHSJBgHj/iq2MpK98uxA/g1NbyDj7ojsjHaFADlHibycUjeXVZwIwIcAp/F1m
VTdUgVEoJYOW3bAWa/fF3tjMWiHdWBheDgWUmS7Jp9Hd+KST8tu5jAXtabwx3A67
qGXSVtjWiUexFJnL2o7Msiww1Hw4BR5J0F7HPTa2wcSj2GorLt55ChQuTHXMJgDX
7tCokLwkp6AInalafZyrr3WjvuBQWLjRjbAEhMiQ5pjhme7DTa8nrwZVG76NqKh4
ufJRgRHukYQXEonYw2Kew9xPDs9r9V580RjoZaDYk9gA+7ydzUrETqG7jQIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFOJlb58Lm3MDiK8t4IN+1tmQZZIqMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvNG1Wdm53dWJjd09JcnkzZ2czN1cyWkJsa2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAM+
cXADBABUNiwDBABUNi8DBAJVxmwDBAJY2jwwDAMEA1luWAMEAFluYgMEAluOSAME
Al23XDAMAwQAXmdTAwQBXmdcMAwDBABfjiEDBABfjiIwDAMEAF+OLQMEBF+OIDAM
AwQCbaxUAwQCbaxYAwQDshQoAwQCudEcAwQCueeYAwQAwbKqAwQBwwJCAwQBwwJG
MAwDBADDAkkDBADDAkwwDAMEAcMCTgMEAcMCUAMEAcMCVDANBgkqhkiG9w0BAQsF
AAOCAQEAfpMF9Kl44G8xY/ABzNwPEjcLtRxW/dqA20x4xPVESxgzSHia2hXcp8vk
g1iuaH8/qRPBme+vb7boy2svBj1VSSa3JKLsng9pNsfH2pWi2nFluBQj5X5+DQqv
CpYsHuZ72cVj1DtQYcRe8NviRQafFSO7uHhEO5z8WvSfCrZrd77p4OJbefxkpHRf
lgOKnX6A0Nrgto8QuR2dyTN3hHkmR/rqmU9WEqt6WHJ+O5VCiFLNNM9Y6oG9V2ip
JBEK7VBOcjvspvmTHUCWEFWIQ5dV4X2gV0kVTLECKagPhXlNe81ALr0QJ3vdoD4Y
feV7a8KNU3XvLnyq85TgzimAJg8k2A==
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:56 2024 by rpki-client on console-ams.rpki-client.org