Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Dw1x46tSocT8nFL6gvDfNatKC8g.roa
File: Dw1x46tSocT8nFL6gvDfNatKC8g.roa (raw, json)
Hash identifier: 4iQDBJph7YOUdwM9NzH3u70ERWAHrMAIdLUOtPBk2yk=
Subject key identifier: 0F:0D:71:E3:AB:52:A1:C4:FC:9C:52:FA:82:F0:DF:35:AB:4A:0B:C8
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0192FFF0C2A9F78B90D44FEBA5D2255DE6DD
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Dw1x46tSocT8nFL6gvDfNatKC8g.roa
Signing time: Wed 06 Nov 2024 05:27:01 +0000
ROA not before: Wed 06 Nov 2024 05:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 05:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:f0:c2:a9:f7:8b:90:d4:4f:eb:a5:d2:25:5d:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Nov 6 05:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f0d71e3ab52a1c4fc9c52fa82f0df35ab4a0bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:90:5f:e7:40:bf:e6:05:7f:64:bc:ed:4d:
06:e8:70:7c:55:b3:de:7d:65:d9:c8:1e:04:24:18:
3a:b7:e7:cf:eb:eb:7b:c5:0b:e3:2a:f0:24:f2:f9:
36:82:d3:c3:dd:64:f3:91:0e:4d:b8:61:5c:05:39:
d5:80:95:ec:7f:b6:24:93:a4:99:d2:28:28:3e:7e:
e6:e5:a5:29:83:6a:d0:4c:87:2b:12:ca:ff:b3:0e:
5c:b7:c8:69:93:2f:09:2e:45:6b:58:08:01:f0:03:
2f:93:fa:01:04:c4:51:28:e4:0e:6a:8a:e8:1b:90:
33:2d:b3:1f:6c:19:43:4d:99:be:ef:44:2e:29:a0:
22:e4:38:fc:bd:c0:89:24:b8:b9:ae:31:1a:43:80:
44:58:40:21:cf:19:71:bc:81:9e:49:90:3c:70:94:
24:81:19:8e:61:c9:5f:a3:fe:67:a1:ee:eb:f3:f6:
ad:dd:85:6e:c2:e6:bd:2b:cf:62:9c:63:b8:58:72:
cf:a7:e4:bc:17:f9:e9:b1:50:05:14:10:49:15:39:
e4:b6:d2:51:e5:e1:14:01:12:64:c2:c8:90:a4:df:
8c:c3:61:c6:47:43:cf:ba:96:08:0d:25:cd:db:f7:
73:e5:d4:75:7a:44:70:07:4a:63:4d:5c:fd:71:ab:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:71:E3:AB:52:A1:C4:FC:9C:52:FA:82:F0:DF:35:AB:4A:0B:C8
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Dw1x46tSocT8nFL6gvDfNatKC8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
83.217.212.0/23
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.98.255
91.142.72.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:fb:06:81:a7:a0:4a:ae:1f:b0:9f:c6:9c:16:df:f8:67:79:
20:51:b1:f5:ad:a3:46:c2:ce:99:17:05:ef:09:30:26:fb:55:
ed:71:0e:93:c8:67:4e:27:f3:4a:77:f1:eb:07:28:70:19:d0:
d2:1c:c5:9f:f9:49:79:5b:54:2a:55:97:c5:44:fe:3a:39:d6:
d1:12:14:08:e0:85:fe:18:00:a5:45:aa:47:d7:0e:c9:88:e3:
47:54:03:95:49:1f:f1:5b:59:97:fd:27:3b:29:ec:92:e5:7b:
fa:e7:31:11:7b:ef:cd:16:cc:39:d4:a5:00:03:b3:0d:56:1e:
02:ff:9b:9a:81:ae:3c:1f:51:b0:06:e1:5f:1c:c9:39:92:d3:
d2:f7:a1:91:b9:a9:05:59:a2:c0:dd:86:5c:b8:d2:f2:8a:aa:
b8:e2:c1:a7:7a:6d:c1:37:d5:48:f3:3a:0b:fc:11:6b:ef:89:
2e:81:94:d3:16:7c:13:30:65:fc:c1:df:91:34:08:3f:00:d3:
f9:f5:fc:b6:99:4c:65:d7:68:bd:65:2d:99:9d:ab:e3:33:68:
7a:a2:56:31:5b:39:f6:ca:ad:a7:19:e2:b3:2a:cd:24:c2:a1:
57:ca:e3:4a:53:6f:fb:d4:54:82:d6:d1:75:55:a0:7c:f0:e1:
b6:cb:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 07:17:13 2024 by rpki-client on console-ams.rpki-client.org