Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FVRqmg4TAf5NRVx-4Iozuf-ZpCw.roa
File: FVRqmg4TAf5NRVx-4Iozuf-ZpCw.roa (raw, json)
Hash identifier: /o3Bjp4g6Xhhu4zhSAdBJf+NQJRHgbujBAHFxv5w9uU=
Subject key identifier: 15:54:6A:9A:0E:13:01:FE:4D:45:5C:7E:E0:8A:33:B9:FF:99:A4:2C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191A208FDD3F186E787D72DD1DAD5FF3D3C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FVRqmg4TAf5NRVx-4Iozuf-ZpCw.roa
Signing time: Fri 30 Aug 2024 06:46:23 +0000
ROA not before: Fri 30 Aug 2024 06:46:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.42.218.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.129.198.0/24 maxlen: 24
45.150.112.0/24 maxlen: 24
62.3.7.0/24 maxlen: 24
62.3.31.0/24 maxlen: 24
77.72.83.0/24 maxlen: 24
77.72.84.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
88.151.112.0/24 maxlen: 24
88.151.115.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
91.209.31.0/24 maxlen: 24
91.210.68.0/24 maxlen: 24
91.210.69.0/24 maxlen: 24
91.210.71.0/24 maxlen: 24
91.212.169.0/24 maxlen: 24
91.228.215.0/24 maxlen: 24
91.239.212.0/24 maxlen: 24
91.239.213.0/24 maxlen: 24
94.143.230.0/24 maxlen: 24
109.205.62.0/24 maxlen: 24
146.19.51.0/24 maxlen: 24
146.19.111.0/24 maxlen: 24
146.19.120.0/24 maxlen: 24
146.255.186.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.118.38.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.94.67.0/24 maxlen: 24
185.109.236.0/24 maxlen: 24
185.109.237.0/24 maxlen: 24
185.109.238.0/24 maxlen: 24
185.109.239.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
185.128.42.0/24 maxlen: 24
185.128.43.0/24 maxlen: 24
185.128.224.0/24 maxlen: 24
185.209.50.0/24 maxlen: 24
185.211.168.0/24 maxlen: 24
185.211.169.0/24 maxlen: 24
185.211.171.0/24 maxlen: 24
185.214.164.0/24 maxlen: 24
185.214.165.0/24 maxlen: 24
185.214.167.0/24 maxlen: 24
185.244.161.0/24 maxlen: 24
193.0.62.0/24 maxlen: 24
193.17.65.0/24 maxlen: 24
193.33.188.0/24 maxlen: 24
193.104.177.0/24 maxlen: 24
193.200.61.0/24 maxlen: 24
193.228.129.0/24 maxlen: 24
193.228.131.0/24 maxlen: 24
194.59.222.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
194.110.251.0/24 maxlen: 24
195.35.105.0/24 maxlen: 24
195.64.103.0/24 maxlen: 24
195.69.161.0/24 maxlen: 24
195.69.162.0/24 maxlen: 24
195.211.164.0/24 maxlen: 24
212.6.36.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:08:fd:d3:f1:86:e7:87:d7:2d:d1:da:d5:ff:3d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 30 06:46:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15546a9a0e1301fe4d455c7ee08a33b9ff99a42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:eb:81:4e:3e:d5:02:13:ea:a8:e6:0b:36:
1e:30:e2:19:10:59:38:2e:df:96:62:f7:11:88:0d:
ba:fb:cc:13:1b:14:1d:29:8a:93:4f:a9:c0:be:58:
b4:04:a5:7b:73:e4:18:cc:28:d6:39:83:44:61:94:
ce:d3:a7:4e:1e:6b:47:24:21:96:b9:9c:3d:82:9e:
3b:a9:91:47:16:de:c3:d9:cd:2a:f3:62:d1:8b:aa:
f1:e8:14:f5:ae:10:94:2c:69:dc:82:a6:1e:88:d3:
ef:50:8f:57:c4:db:3a:af:e4:a0:9f:20:78:18:c3:
0e:1f:58:6d:44:a4:30:cd:a6:15:84:27:be:07:d3:
ff:d9:42:7a:98:ff:54:6f:33:7b:30:76:12:d6:f0:
85:3d:92:12:0c:cb:05:98:1d:47:f7:6c:c5:11:7c:
0e:55:df:32:bb:55:00:0b:8a:27:a4:ad:3d:0b:d4:
c9:63:74:39:2b:89:95:18:0f:8a:66:bb:53:39:8e:
62:1a:3f:de:0b:40:bc:63:f9:5f:7b:58:1f:0a:35:
63:89:7c:a4:80:b8:a5:ec:08:2a:7b:ec:7e:66:9c:
e3:45:46:1f:7f:0d:69:8e:e2:ef:8e:51:fd:59:12:
d4:64:f0:29:eb:b9:72:a2:4a:eb:11:80:93:72:44:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:6A:9A:0E:13:01:FE:4D:45:5C:7E:E0:8A:33:B9:FF:99:A4:2C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FVRqmg4TAf5NRVx-4Iozuf-ZpCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
31.41.253.0/24
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
45.128.128.0/24
45.129.198.0/24
45.150.112.0/24
62.3.7.0/24
62.3.31.0/24
77.72.83.0-77.72.84.255
84.252.69.0/24
88.151.11.0/24
88.151.112.0/24
88.151.115.0/24
88.218.184.0/22
91.190.158.0/24
91.209.31.0/24
91.210.68.0/23
91.210.71.0/24
91.212.169.0/24
91.228.215.0/24
91.239.212.0/23
94.143.230.0/24
109.205.62.0/24
146.19.51.0/24
146.19.111.0/24
146.19.120.0/24
146.255.186.0/24
176.116.17.0/24
176.118.38.0/24
176.126.98.0/24
176.126.102.0/24
185.94.67.0/24
185.109.236.0/22
185.128.41.0-185.128.43.255
185.128.224.0/24
185.209.50.0/24
185.211.168.0/23
185.211.171.0/24
185.214.164.0/23
185.214.167.0/24
185.244.161.0/24
193.0.62.0/24
193.17.65.0/24
193.33.188.0/24
193.104.177.0/24
193.200.61.0/24
193.228.129.0/24
193.228.131.0/24
194.59.222.0/24
194.60.76.0/24
194.110.251.0/24
195.35.105.0/24
195.64.103.0/24
195.69.161.0-195.69.162.255
195.211.164.0/24
212.6.36.0/24
212.107.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:00:bd:9f:cf:83:ef:1f:e0:87:22:52:e9:71:9b:d8:8e:9d:
f8:22:df:da:a3:c1:1e:af:e3:5a:37:8e:67:94:f8:07:e4:58:
21:4c:46:59:98:f6:39:20:c9:9d:ae:57:df:ec:57:73:0c:cb:
2c:a9:57:5e:30:4f:5c:3f:f7:e0:8d:0e:15:94:c0:76:4a:7e:
1e:cc:e1:82:6d:a4:d8:8d:3d:36:50:81:74:b0:1d:c8:83:22:
98:2c:17:ac:62:41:f4:1a:7e:22:ee:50:77:29:51:fd:54:8e:
f2:b9:93:ac:3b:dc:42:5e:b5:01:02:cd:f6:bc:e2:63:a4:c7:
7f:72:4a:cd:04:69:9d:54:4c:d2:91:6f:64:43:73:19:ca:1c:
e5:c3:0a:f4:b0:c2:d4:ca:f3:97:91:c8:18:7f:00:aa:fe:dc:
f5:18:01:f3:3a:fb:9a:eb:b0:c0:37:38:73:e8:f5:f5:37:e3:
f1:7b:59:b4:44:f9:35:bb:aa:27:bc:d0:a9:3b:c2:16:f5:a6:
b8:f6:54:37:c7:ce:3e:d8:25:02:53:2a:df:85:ba:90:62:25:
82:d2:68:c4:ac:d9:02:d5:b2:c1:04:ca:dc:23:32:a3:44:ce:
0f:1b:17:9e:e1:03:8e:26:1d:ab:5e:79:5f:af:13:2c:a5:d0:
49:b0:1f:00
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgISAZGiCP3T8Ybnh9ct0drV/z08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODMwMDY0NjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU0NmE5YTBlMTMwMWZlNGQ0NTVjN2VlMDhhMzNiOWZmOTlhNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXrgU4+1QIT6qjmCzYeMOIZEFk4
Lt+WYvcRiA26+8wTGxQdKYqTT6nAvli0BKV7c+QYzCjWOYNEYZTO06dOHmtHJCGW
uZw9gp47qZFHFt7D2c0q82LRi6rx6BT1rhCULGncgqYeiNPvUI9XxNs6r+SgnyB4
GMMOH1htRKQwzaYVhCe+B9P/2UJ6mP9UbzN7MHYS1vCFPZISDMsFmB1H92zFEXwO
Vd8yu1UAC4onpK09C9TJY3Q5K4mVGA+KZrtTOY5iGj/eC0C8Y/lfe1gfCjVjiXyk
gLil7Agqe+x+ZpzjRUYffw1pjuLvjlH9WRLUZPAp67lyokrrEYCTckR6HwIDAQAB
o4IDhzCCA4MwHQYDVR0OBBYEFBVUapoOEwH+TUVcfuCKM7n/maQsMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRlZScW1nNFRBZjVOUlZ4LTRJb3p1Zi1acEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAYIEAgABMIIB
egMEAAUq2gMEAB8p/QMEAS1XfAMEAC1XfwMEAC2AfAMEAC2AgAMEAC2BxgMEAC2W
cAMEAD4DBwMEAD4DHzAMAwQATUhTAwQATUhUAwQAVPxFAwQAWJcLAwQAWJdwAwQA
WJdzAwQCWNq4AwQAW76eAwQAW9EfAwQBW9JEAwQAW9JHAwQAW9SpAwQAW+TXAwQB
W+/UAwQAXo/mAwQAbc0+AwQAkhMzAwQAkhNvAwQAkhN4AwQAkv+6AwQAsHQRAwQA
sHYmAwQAsH5iAwQAsH5mAwQAuV5DAwQCuW3sMAwDBAC5gCkDBAK5gCgDBAC5gOAD
BAC50TIDBAG506gDBAC506sDBAG51qQDBAC51qcDBAC59KEDBADBAD4DBADBEUED
BADBIbwDBADBaLEDBADByD0DBADB5IEDBADB5IMDBADCO94DBADCPEwDBADCbvsD
BADDI2kDBADDQGcwDAMEAMNFoQMEAMNFogMEAMPTpAMEANQGJAMEANRrGTANBgkq
hkiG9w0BAQsFAAOCAQEAQwC9n8+D7x/ghyJS6XGb2I6d+CLf2qPBHq/jWjeOZ5T4
B+RYIUxGWZj2OSDJna5X3+xXcwzLLKlXXjBPXD/34I0OFZTAdkp+Hszhgm2k2I09
NlCBdLAdyIMimCwXrGJB9Bp+Iu5QdylR/VSO8rmTrDvcQl61AQLN9rziY6THf3JK
zQRpnVRM0pFvZENzGcoc5cMK9LDC1Mrzl5HIGH8Aqv7c9RgB8zr7muuwwDc4c+j1
9Tfj8XtZtET5NbuqJ7zQqTvCFvWmuPZUN8fOPtglAlMq34W6kGIlgtJoxKzZAtWy
wQTK3CMyo0TODxsXnuEDjiYdq155X68TLKXQSbAfAA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:27:02 2025 by rpki-client