Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/mSxWSsBrBnNYmjkOg8H5nbMLcOg.roa
File: mSxWSsBrBnNYmjkOg8H5nbMLcOg.roa (raw, json)
Hash identifier: 69Xrx86bNFIPJew2/+9JtezgoDtMXNVyxwn0OmQwfzo=
Subject key identifier: 99:2C:56:4A:C0:6B:06:73:58:9A:39:0E:83:C1:F9:9D:B3:0B:70:E8
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 0193BACB8DA17C2A5F1FA56B05E52DEA28B0
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/mSxWSsBrBnNYmjkOg8H5nbMLcOg.roa
Signing time: Thu 12 Dec 2024 12:15:22 +0000
ROA not before: Thu 12 Dec 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
89.110.88.0/24 maxlen: 24
89.110.89.0/24 maxlen: 24
89.110.90.0/24 maxlen: 24
89.110.91.0/24 maxlen: 24
89.110.92.0/24 maxlen: 24
89.110.93.0/24 maxlen: 24
89.110.94.0/24 maxlen: 24
89.110.95.0/24 maxlen: 24
89.110.96.0/24 maxlen: 24
89.110.97.0/24 maxlen: 24
89.110.98.0/24 maxlen: 24
89.110.99.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:cb:8d:a1:7c:2a:5f:1f:a5:6b:05:e5:2d:ea:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Dec 12 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=992c564ac06b0673589a390e83c1f99db30b70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:77:d5:0d:a5:63:54:41:8e:8b:38:fd:7e:
d3:67:d8:c6:e6:76:66:ae:5a:78:ed:81:d5:18:d1:
2a:58:8f:17:ac:40:f6:e1:3a:05:61:fc:c6:20:11:
e9:1f:9a:ac:ee:d8:8e:63:21:e2:e0:4c:0c:f1:6f:
cc:e8:07:75:fd:4c:3a:9b:05:73:67:04:f2:0d:01:
20:f2:37:c7:d1:f9:0b:0a:2a:14:89:df:73:b0:08:
69:9d:ec:e8:e6:18:48:72:c3:ea:b1:5b:96:d3:13:
e8:34:03:ba:36:ec:79:43:7d:8e:2f:95:53:ad:60:
d9:35:5e:d5:43:73:98:df:a0:c5:62:f2:48:3a:3a:
9c:48:63:e0:24:30:65:b0:05:7f:f9:d5:a6:ac:cb:
f4:db:d4:87:b5:56:a8:d2:58:cd:f9:8c:1b:30:9d:
3d:c3:af:73:0c:1b:db:72:39:21:ad:ba:85:bf:aa:
ab:33:2d:0b:90:f5:bb:b6:04:1a:c1:2b:6e:1f:d7:
ab:cc:8f:9b:f4:7b:b8:0b:57:e8:98:7d:a9:aa:2e:
3b:dc:5b:4c:65:1f:4d:8e:67:2d:25:4f:a7:1e:50:
b4:58:1c:41:27:30:9f:f9:9c:3d:12:c0:62:3b:b6:
c6:f5:c5:15:8f:6c:c7:8c:bf:c6:1d:2f:be:29:ba:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:56:4A:C0:6B:06:73:58:9A:39:0E:83:C1:F9:9D:B3:0B:70:E8
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/mSxWSsBrBnNYmjkOg8H5nbMLcOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/23
88.218.60.0/22
89.110.88.0-89.110.99.255
91.142.72.0/22
91.184.244.0/22
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
178.20.40.0/21
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:cc:ff:26:0a:96:e2:a1:b0:04:c8:88:66:2f:e2:1f:e4:23:
62:e8:d5:2c:67:4d:2f:ec:69:60:be:b4:40:e7:1a:06:fe:4d:
0f:39:e0:e4:03:18:34:a1:23:85:24:26:84:ce:60:28:6a:af:
0c:24:bb:ce:74:41:f2:98:77:44:d2:27:74:b0:87:49:a4:b4:
45:80:61:6f:d3:f7:2e:81:44:2b:40:d5:df:97:3f:68:a9:b9:
18:6a:eb:18:b0:1a:c5:bc:1d:7a:a1:54:6b:a9:86:3b:8a:27:
8e:44:ad:b9:a6:91:08:0e:14:b1:62:8f:8e:cb:5f:b7:7e:8f:
39:34:d2:8e:c6:d1:3a:50:ac:46:d4:9f:21:8c:77:24:37:ae:
0f:51:53:e3:f1:1a:dc:86:03:6f:ef:32:31:c9:1d:aa:02:52:
e8:7d:c8:96:5b:69:b2:63:e3:51:65:92:df:cc:67:be:d4:34:
29:90:9d:61:42:64:76:83:6c:7b:ff:59:2b:8a:63:6c:b2:9e:
88:78:74:79:02:e1:e6:1a:18:66:19:fb:9a:62:a0:1a:02:05:
29:ee:20:f3:92:9c:a7:bf:7e:bc:f1:09:c2:8a:f8:62:59:26:
e8:dd:0e:6d:c9:70:45:06:b4:78:8f:fa:2f:66:f6:6c:2c:39:
19:74:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:58:41 2025 by rpki-client