Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUR7QyDlrip2V0MMtyHXsDcbAoc.roa
File: EUR7QyDlrip2V0MMtyHXsDcbAoc.roa (raw, json)
Hash identifier: WCkbiyUeMDrzg3JNZvZR9/bKVEG/vlg2tGe06/N4zy0=
Subject key identifier: 11:44:7B:43:20:E5:AE:2A:76:57:43:0C:B7:21:D7:B0:37:1B:02:87
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01912243A8E9FB25F188FAD164477F349065
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUR7QyDlrip2V0MMtyHXsDcbAoc.roa
Signing time: Mon 05 Aug 2024 11:19:05 +0000
ROA not before: Mon 05 Aug 2024 11:19:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.42.218.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.129.198.0/24 maxlen: 24
62.3.7.0/24 maxlen: 24
62.3.31.0/24 maxlen: 24
77.72.83.0/24 maxlen: 24
77.72.84.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
91.209.31.0/24 maxlen: 24
91.212.169.0/24 maxlen: 24
91.228.215.0/24 maxlen: 24
91.239.212.0/24 maxlen: 24
91.239.213.0/24 maxlen: 24
146.19.120.0/24 maxlen: 24
146.255.186.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.109.236.0/24 maxlen: 24
185.128.224.0/24 maxlen: 24
185.209.50.0/24 maxlen: 24
185.211.168.0/24 maxlen: 24
185.211.171.0/24 maxlen: 24
185.214.164.0/24 maxlen: 24
185.214.165.0/24 maxlen: 24
185.214.167.0/24 maxlen: 24
193.0.62.0/24 maxlen: 24
193.17.65.0/24 maxlen: 24
193.228.129.0/24 maxlen: 24
194.59.222.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
195.64.103.0/24 maxlen: 24
195.69.161.0/24 maxlen: 24
195.211.164.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 15:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:43:a8:e9:fb:25:f1:88:fa:d1:64:47:7f:34:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 5 11:19:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11447b4320e5ae2a7657430cb721d7b0371b0287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:3d:b9:45:d2:d7:c8:0b:a4:c6:55:1d:0e:
64:0b:5a:4e:19:9e:9c:cf:6c:04:4f:7d:f7:a7:15:
e7:6c:05:58:17:2b:f2:03:7a:d7:88:ec:8c:69:98:
b5:99:c5:78:09:77:fa:98:e0:7b:fc:38:8c:4a:bc:
ab:35:d5:0d:5b:f3:69:2a:92:c9:f6:7b:c5:f1:45:
13:f8:d3:86:6b:57:ae:4d:68:c1:7c:c8:50:c3:66:
f2:96:f1:9c:0f:f0:c5:86:7b:2a:8f:64:23:af:3e:
e9:0a:10:98:56:57:5e:04:b0:3f:b2:fb:83:b2:24:
11:6f:1e:1f:12:ae:9d:80:15:be:28:dc:66:9e:29:
d2:d0:ce:8a:66:05:d5:da:6e:79:e0:7d:4e:9b:c0:
e8:cf:29:ac:89:24:cf:22:c0:1f:be:99:39:76:67:
52:4d:b3:04:c1:41:2a:8f:be:23:6e:53:ca:ea:a0:
a9:15:1e:aa:40:4c:9e:4b:09:9d:73:a2:8e:b6:02:
4e:82:51:68:c0:5e:8b:2d:45:1f:13:08:78:ea:0a:
90:74:a9:9a:70:18:ca:65:4a:8d:8e:12:5a:d6:74:
c4:a7:73:45:f2:13:72:40:7c:c1:a2:8f:53:2a:da:
17:ef:40:07:4e:e4:e2:60:77:34:75:be:f8:06:66:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:7B:43:20:E5:AE:2A:76:57:43:0C:B7:21:D7:B0:37:1B:02:87
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUR7QyDlrip2V0MMtyHXsDcbAoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
31.41.253.0/24
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
45.128.128.0/24
45.129.198.0/24
62.3.7.0/24
62.3.31.0/24
77.72.83.0-77.72.84.255
84.252.69.0/24
88.218.184.0/22
91.190.158.0/24
91.209.31.0/24
91.212.169.0/24
91.228.215.0/24
91.239.212.0/23
146.19.120.0/24
146.255.186.0/24
176.116.17.0/24
176.126.102.0/24
185.109.236.0/24
185.128.224.0/24
185.209.50.0/24
185.211.168.0/24
185.211.171.0/24
185.214.164.0/23
185.214.167.0/24
193.0.62.0/24
193.17.65.0/24
193.228.129.0/24
194.59.222.0/24
194.60.76.0/24
195.64.103.0/24
195.69.161.0/24
195.211.164.0/24
212.107.25.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4d:70:a6:d3:ec:87:d5:09:66:52:39:56:1b:ac:03:75:bd:
61:23:18:e2:31:fb:35:b0:6e:de:c6:86:9d:79:58:52:84:05:
5d:3b:19:1c:1a:ec:c4:74:70:f3:e5:dd:ef:af:41:32:ea:c0:
36:b5:de:35:d3:96:ce:ad:bf:11:26:d5:99:b8:3b:bd:f7:ea:
96:4d:39:a1:5c:45:c4:b8:e9:2b:be:12:e8:a3:be:0f:ea:f8:
9c:29:16:70:2f:73:54:bb:51:a2:b8:8b:0d:b5:9e:ca:c9:fb:
a8:4f:bd:a5:ca:20:58:c9:85:fe:9b:e3:37:92:7d:a5:4b:1f:
a5:95:9a:ed:23:fc:13:3c:c3:3a:e7:5c:f7:20:7e:9f:1a:ef:
c6:ae:10:a8:5e:10:5a:d4:38:60:0b:92:ed:54:6a:37:ed:ef:
b7:a2:b7:6a:d5:34:1f:3f:96:c3:90:1d:d6:2c:dd:f0:99:9b:
0a:d4:c5:aa:5d:a8:cc:af:dd:0d:1e:cb:53:2d:ca:4e:e2:b0:
5e:10:30:a4:c2:ac:70:4f:27:e7:de:78:df:ec:dc:aa:54:29:
7e:0b:02:30:03:7c:b2:67:89:62:31:3b:53:0d:47:3e:8e:2a:
e1:67:3f:80:ca:db:65:88:35:23:52:9b:b1:6a:6f:54:5e:2f:
ad:4c:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 18:36:43 2024 by rpki-client on console-fra.rpki-client.org