Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/L9K2lGTVjc6mFcGfudvAlUyeDak.roa
File: L9K2lGTVjc6mFcGfudvAlUyeDak.roa (raw, json)
Hash identifier: NRr6CN7wGHDNbd5hYQL2ikIw42aMtvQY6DoPUdy/jrw=
Subject key identifier: 2F:D2:B6:94:64:D5:8D:CE:A6:15:C1:9F:B9:DB:C0:95:4C:9E:0D:A9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01913826FC368EE6DF7C411BF7C4E893BE83
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/L9K2lGTVjc6mFcGfudvAlUyeDak.roa
Signing time: Fri 09 Aug 2024 17:19:24 +0000
ROA not before: Fri 09 Aug 2024 17:19:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
45.81.127.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.145.132.0/22 maxlen: 22
45.145.132.0/23 maxlen: 23
45.145.132.0/24 maxlen: 24
45.145.133.0/24 maxlen: 24
45.145.134.0/23 maxlen: 23
45.145.134.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/22 maxlen: 22
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
178.19.43.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.218.0/24 maxlen: 24
185.229.219.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 14:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:26:fc:36:8e:e6:df:7c:41:1b:f7:c4:e8:93:be:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 9 17:19:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd2b69464d58dcea615c19fb9dbc0954c9e0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:b7:16:f6:4c:a9:dc:a1:79:04:c2:a6:a0:
00:6f:03:15:e0:7d:4f:9b:70:15:6a:9a:b1:d8:e0:
50:cd:11:ce:13:d5:12:81:17:ac:eb:16:44:cc:2e:
46:43:94:c4:86:29:79:3c:1a:02:89:a6:ca:cd:1e:
b9:ad:53:b1:3d:51:23:7f:e9:0b:0f:7e:76:56:8a:
bc:9f:d7:e4:c1:5a:8a:0d:c7:4a:c4:e2:a1:b5:0a:
04:3b:34:35:5d:3b:a4:4f:b5:36:05:bb:85:57:48:
22:d7:c1:43:7d:b8:11:a0:03:dd:c4:90:ef:6e:8b:
c9:6e:34:f3:15:c8:8e:e6:d5:b5:58:76:a0:ef:78:
21:d6:8a:58:ec:d4:0f:07:8a:fc:8b:b3:37:e3:d0:
2c:8a:70:93:1e:e9:68:d8:07:cc:90:67:6a:24:06:
40:30:e3:e3:61:c1:48:20:41:f5:57:ec:c7:51:71:
2f:17:85:b0:25:de:cf:be:f9:ff:93:ef:36:65:25:
f2:5e:17:ba:3e:81:ac:7b:6d:56:f2:58:ee:0a:11:
65:07:7e:80:71:b5:a6:9b:41:e4:63:3b:54:6c:d7:
ac:7c:e0:c0:66:85:8b:c0:0c:ae:2f:25:0f:76:1f:
35:6d:52:ad:08:7d:5b:77:ea:b8:77:b8:76:d7:69:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D2:B6:94:64:D5:8D:CE:A6:15:C1:9F:B9:DB:C0:95:4C:9E:0D:A9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/L9K2lGTVjc6mFcGfudvAlUyeDak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0/22
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
61:8e:12:d5:d0:b0:6d:7a:f5:46:e0:cf:0f:2f:f1:59:eb:f1:
93:98:64:21:90:4b:9c:53:11:da:51:e9:33:e2:a0:b3:49:86:
da:7e:95:98:04:35:d2:87:2b:c4:74:7b:58:f0:98:c2:c6:40:
5d:4c:ad:8e:39:c1:50:88:2a:44:54:a7:66:72:6c:18:06:01:
37:b7:15:98:57:44:70:47:45:e7:df:d5:7f:90:1d:4c:27:0a:
44:ae:80:1c:7e:24:a2:34:1a:e3:64:6c:1d:03:08:7b:f3:f5:
d8:77:6f:03:44:16:61:60:09:f6:89:0b:89:0c:9c:88:4a:51:
74:04:80:22:7e:9e:f9:62:dd:a8:8c:4a:f1:db:37:5c:91:d3:
a6:60:fb:ba:65:a9:34:40:07:03:5f:92:65:06:76:e3:96:4c:
66:ad:af:c9:7b:5f:16:55:46:f2:33:9f:e0:22:ec:25:1a:b6:
9e:49:1e:0b:3d:a4:16:12:99:55:ea:ef:ad:ef:e0:d8:0e:6a:
63:20:68:9b:41:b2:3e:59:e3:55:6f:0f:72:93:ef:cb:ca:43:
6d:b6:be:8f:9b:18:dc:64:9f:9f:f5:f3:fa:15:6d:06:46:7a:
f2:ae:b9:24:88:97:59:68:b5:10:4f:26:f4:4f:94:77:82:6c:
02:51:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:53:12 2024 by rpki-client on console-ams.rpki-client.org