Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/lg7KRagFnZgD9eQy-uXUF-y4I40.roa
File: lg7KRagFnZgD9eQy-uXUF-y4I40.roa (raw, json)
Hash identifier: hPEy4/HQviQHM8C0Mf5ZFKA7sYIPYr42TqCNsFRwOjI=
Subject key identifier: 96:0E:CA:45:A8:05:9D:98:03:F5:E4:32:FA:E5:D4:17:EC:B8:23:8D
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0193670AA1849ADD49F4B391E80354CD53DC
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/lg7KRagFnZgD9eQy-uXUF-y4I40.roa
Signing time: Tue 26 Nov 2024 05:56:10 +0000
ROA not before: Tue 26 Nov 2024 05:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
89.110.99.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 12:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:0a:a1:84:9a:dd:49:f4:b3:91:e8:03:54:cd:53:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Nov 26 05:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=960eca45a8059d9803f5e432fae5d417ecb8238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:bf:73:1a:db:99:24:fa:da:06:41:a6:c7:
16:20:42:90:ce:e2:f3:e8:1a:1e:d4:fb:10:87:e3:
02:fa:bd:ba:a3:07:0c:0e:4a:99:20:0f:23:8b:99:
31:58:2e:03:82:c7:d8:95:a6:84:0a:48:2c:45:0c:
ae:f0:ab:63:87:3c:c3:e1:ac:59:a5:8f:2f:04:6a:
63:52:4f:d0:78:68:de:c8:7b:87:be:84:4d:b5:df:
70:79:27:88:0b:aa:be:a6:29:4b:50:f2:4f:b4:43:
d1:2f:1d:45:6c:1f:72:1f:42:ca:40:9f:9f:9b:e1:
e4:f9:67:9e:6d:86:18:52:47:c3:1e:b8:4d:d3:f3:
61:fa:63:bd:ee:2c:67:26:3c:43:08:4e:63:d2:86:
5a:ac:70:5a:41:58:35:38:f2:bb:e0:29:8a:f2:b0:
ac:f2:3a:24:22:a9:99:fd:3f:95:f0:e7:61:d8:b2:
22:7e:a2:13:70:47:f5:45:b0:41:4e:ff:92:4f:ce:
41:c9:4a:ec:d5:86:33:b6:9d:8e:4b:79:43:8f:3b:
ea:f4:db:81:c3:c7:f6:1d:fc:6e:21:e2:98:ae:8d:
c8:2a:57:fc:b8:02:18:d6:0d:28:9e:b6:73:35:4b:
6c:4a:cd:c8:8b:de:8c:a4:ed:93:07:43:00:0e:60:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:CA:45:A8:05:9D:98:03:F5:E4:32:FA:E5:D4:17:EC:B8:23:8D
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/lg7KRagFnZgD9eQy-uXUF-y4I40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.218.60.0/22
89.110.88.0-89.110.99.255
91.142.72.0/22
91.184.244.0/23
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:29:79:80:26:00:8a:b0:cd:c0:a3:46:fa:37:59:9d:5c:a5:
e4:fb:c3:65:2c:3a:e3:80:c6:96:6a:a3:7b:d5:6e:92:60:e5:
e8:e9:a3:9c:5c:c1:dc:bd:3c:9d:8d:a6:eb:54:08:ea:bf:58:
9a:e8:41:30:25:e2:63:9b:62:9b:57:63:58:7f:d4:17:44:fb:
da:f6:73:c8:95:3a:f2:5f:30:09:7c:f4:2d:a1:e2:61:e4:24:
67:f6:e2:97:29:60:8b:fa:e9:1b:a8:e1:6d:e6:f0:64:ba:6d:
2c:d9:a3:69:c2:3d:2f:c3:e4:d1:c9:65:b9:ef:dc:88:29:ec:
61:7a:84:d3:59:b5:22:43:3d:08:50:d3:a1:06:22:55:3b:70:
86:9f:39:f1:0a:99:a1:9e:f0:94:e9:39:91:56:c2:d1:6b:65:
da:d8:2d:d3:85:e1:7b:8d:23:12:a4:e0:9d:d4:bb:fb:88:62:
54:24:71:fa:e8:5b:9a:3c:3f:56:c4:3d:9d:06:d9:98:d7:54:
cb:f0:64:9c:2d:86:0b:08:78:4d:c3:e8:87:94:42:a1:d0:54:
52:59:14:45:b0:82:27:ab:85:37:f1:f7:39:9f:99:b2:da:dc:
71:56:ca:12:0f:87:6e:f4:5d:cc:86:8f:e8:8a:6a:12:b3:13:
32:f4:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:30 2025 by rpki-client