Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/goRvGlFswUFCyGAeGx1_hf7aoaM.roa
File: goRvGlFswUFCyGAeGx1_hf7aoaM.roa (raw, json)
Hash identifier: AdkMBEoY4jfHh4mM/zmDOHieUnD33yh1a5mWmZbo6JM=
Subject key identifier: 82:84:6F:1A:51:6C:C1:41:42:C8:60:1E:1B:1D:7F:85:FE:DA:A1:A3
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01920EB0ECC96B37290C5D3FFEB6C7FA7BC4
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/goRvGlFswUFCyGAeGx1_hf7aoaM.roa
Signing time: Fri 20 Sep 2024 09:08:48 +0000
ROA not before: Fri 20 Sep 2024 09:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 11:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:b0:ec:c9:6b:37:29:0c:5d:3f:fe:b6:c7:fa:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Sep 20 09:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82846f1a516cc14142c8601e1b1d7f85fedaa1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:b1:e9:bd:76:d5:3f:54:3f:74:94:d5:d5:
36:87:fa:6e:d0:22:f5:79:17:b4:7b:91:fc:64:1c:
e4:d7:e1:05:df:47:5c:72:02:33:9e:f1:3f:d8:6b:
c8:df:ab:30:44:d3:77:ac:ed:e4:6e:15:29:23:67:
78:6b:08:35:88:aa:6d:6c:ac:89:7e:9a:9a:97:1d:
e9:0a:9e:8f:2d:07:eb:51:81:14:ba:93:8b:7a:b2:
e2:03:f3:89:75:c8:35:74:bb:ad:11:0c:c5:ea:65:
26:d4:7d:d4:25:55:de:ac:77:30:e2:89:3d:b1:e0:
0c:0e:bd:5b:a6:07:55:a6:79:dd:d2:97:a3:cd:4a:
32:96:96:f6:72:f7:a4:55:59:00:17:93:7b:07:13:
f7:0c:52:dd:2b:5f:65:47:2a:63:12:d8:b1:c4:79:
81:a4:bb:ba:40:3e:0e:69:ea:d7:24:e9:b7:f6:29:
35:4d:cc:a7:c2:dd:7d:ba:8d:8f:9f:a7:b5:4a:7b:
9b:03:5b:91:8e:db:1b:e4:ca:07:58:4f:b5:11:c6:
83:43:c1:33:df:10:c1:c8:24:3f:d6:ac:ce:15:61:
86:16:ba:4d:d6:af:23:e2:76:89:ed:1e:49:77:3e:
c9:b6:46:4c:24:95:da:09:18:16:fc:1c:78:06:f8:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:6F:1A:51:6C:C1:41:42:C8:60:1E:1B:1D:7F:85:FE:DA:A1:A3
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/goRvGlFswUFCyGAeGx1_hf7aoaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.98.255
91.142.72.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0/22
178.20.40.0/21
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
19:95:ac:c1:bc:73:e4:f1:d2:45:da:00:9b:c6:03:b3:95:b6:
6b:50:c7:c4:77:c1:7e:42:4e:1c:f4:e2:36:6b:0c:6a:0b:4e:
c4:23:1e:9d:bd:e9:16:7e:02:9c:3b:9b:c2:67:70:b9:64:b1:
d2:e3:66:0a:3f:34:84:5d:72:d3:e6:33:e8:32:d6:2f:26:f5:
74:c4:00:ab:a8:8d:5d:9a:6a:cf:43:9f:b4:c6:d8:bc:a1:8b:
14:8f:5e:df:94:11:17:3c:c2:4e:92:90:13:a4:0a:76:61:6b:
19:a5:55:d7:f1:c9:57:ed:3f:bd:88:90:7e:46:b7:77:99:29:
0f:d5:f9:e6:32:4b:45:e5:6f:1a:60:63:98:ef:47:7e:ad:65:
b7:63:26:a6:c2:d6:1b:32:5f:be:b2:01:fc:24:42:74:a2:c3:
71:f4:92:6c:ef:3f:e7:d6:06:ad:4a:51:a3:42:56:ba:a6:bf:
8b:6d:37:1a:33:ab:c7:6e:50:54:e0:c9:e4:56:53:63:99:0c:
99:75:e4:02:fb:dd:01:ea:72:f4:67:c9:26:c5:c8:f6:6f:04:
57:88:40:75:c7:2e:3b:4c:da:6e:13:62:09:c5:85:df:c9:05:
8e:0e:40:c3:e2:af:76:20:09:48:d7:41:84:9f:19:8d:29:eb:
4e:52:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org