Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ssKpCUJXgCh4xs6po2QTYCw7r60.roa
File: ssKpCUJXgCh4xs6po2QTYCw7r60.roa (raw, json)
Hash identifier: BnXysn1IUcqYDSCvETt3DnpExWuIoPFIfbz3+dWnTdA=
Subject key identifier: B2:C2:A9:09:42:57:80:28:78:C6:CE:A9:A3:64:13:60:2C:3B:AF:AD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01917622E81FCF139E40C057C51DA6025659
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ssKpCUJXgCh4xs6po2QTYCw7r60.roa
Signing time: Wed 21 Aug 2024 18:11:24 +0000
ROA not before: Wed 21 Aug 2024 18:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.42.218.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.129.198.0/24 maxlen: 24
62.3.7.0/24 maxlen: 24
62.3.31.0/24 maxlen: 24
77.72.83.0/24 maxlen: 24
77.72.84.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
88.151.112.0/24 maxlen: 24
88.151.115.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
91.209.31.0/24 maxlen: 24
91.210.68.0/24 maxlen: 24
91.210.71.0/24 maxlen: 24
91.212.169.0/24 maxlen: 24
91.228.215.0/24 maxlen: 24
91.239.212.0/24 maxlen: 24
91.239.213.0/24 maxlen: 24
94.143.230.0/24 maxlen: 24
109.205.62.0/24 maxlen: 24
146.19.51.0/24 maxlen: 24
146.19.111.0/24 maxlen: 24
146.19.120.0/24 maxlen: 24
146.255.186.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.118.38.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.94.67.0/24 maxlen: 24
185.109.236.0/24 maxlen: 24
185.109.237.0/24 maxlen: 24
185.109.239.0/24 maxlen: 24
185.128.42.0/24 maxlen: 24
185.128.43.0/24 maxlen: 24
185.128.224.0/24 maxlen: 24
185.209.50.0/24 maxlen: 24
185.211.168.0/24 maxlen: 24
185.211.169.0/24 maxlen: 24
185.211.171.0/24 maxlen: 24
185.214.164.0/24 maxlen: 24
185.214.165.0/24 maxlen: 24
185.214.167.0/24 maxlen: 24
185.244.161.0/24 maxlen: 24
193.0.62.0/24 maxlen: 24
193.17.65.0/24 maxlen: 24
193.33.188.0/24 maxlen: 24
193.104.177.0/24 maxlen: 24
193.200.61.0/24 maxlen: 24
193.228.129.0/24 maxlen: 24
193.228.131.0/24 maxlen: 24
194.59.222.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
194.110.251.0/24 maxlen: 24
195.35.105.0/24 maxlen: 24
195.64.103.0/24 maxlen: 24
195.69.161.0/24 maxlen: 24
195.69.162.0/24 maxlen: 24
195.211.164.0/24 maxlen: 24
212.6.36.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:22:e8:1f:cf:13:9e:40:c0:57:c5:1d:a6:02:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 21 18:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c2a9094257802878c6cea9a36413602c3bafad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:8c:62:90:5f:92:a4:52:a4:9c:83:8c:0f:
ad:40:df:91:42:a7:b0:e0:87:05:e9:47:45:7b:1b:
3f:bd:aa:06:08:61:95:f6:a1:91:29:33:9a:bc:00:
76:57:8c:32:e0:aa:b7:a3:e8:33:ec:22:be:55:e1:
a3:9e:96:a0:f9:a4:b1:0e:79:b2:a1:ac:56:b2:9e:
b2:94:67:fc:c4:63:d5:c8:c5:00:92:2d:b5:42:68:
24:79:1e:8b:24:84:ac:ab:e7:79:8b:9d:9a:a7:80:
ee:f6:8c:7f:be:17:d8:07:83:5b:e8:db:b2:9c:20:
75:db:b3:fd:02:ca:10:1c:88:06:45:84:f5:e8:a7:
0b:f1:fe:d3:73:8e:e3:7d:d3:3a:bd:71:99:8e:43:
09:46:64:86:ab:97:8a:94:5a:3a:45:fc:e2:58:63:
b0:94:a0:42:ac:0c:42:2d:df:1b:32:04:fc:30:24:
0a:e5:65:10:94:9b:46:c7:bf:ef:d0:4b:18:b9:e4:
da:6a:94:4c:9c:ba:25:83:15:d5:fa:70:e3:94:4f:
a1:09:44:8e:4d:36:91:ae:93:2d:c0:f3:9e:5c:96:
e1:ee:9c:8a:bf:1f:28:92:f9:21:a8:e2:fc:4b:ff:
b3:ce:42:04:d4:0a:fe:f9:a1:49:23:1f:b1:d2:7b:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:A9:09:42:57:80:28:78:C6:CE:A9:A3:64:13:60:2C:3B:AF:AD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ssKpCUJXgCh4xs6po2QTYCw7r60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
31.41.253.0/24
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
45.128.128.0/24
45.129.198.0/24
62.3.7.0/24
62.3.31.0/24
77.72.83.0-77.72.84.255
84.252.69.0/24
88.151.11.0/24
88.151.112.0/24
88.151.115.0/24
88.218.184.0/22
91.190.158.0/24
91.209.31.0/24
91.210.68.0/24
91.210.71.0/24
91.212.169.0/24
91.228.215.0/24
91.239.212.0/23
94.143.230.0/24
109.205.62.0/24
146.19.51.0/24
146.19.111.0/24
146.19.120.0/24
146.255.186.0/24
176.116.17.0/24
176.118.38.0/24
176.126.98.0/24
176.126.102.0/24
185.94.67.0/24
185.109.236.0/23
185.109.239.0/24
185.128.42.0/23
185.128.224.0/24
185.209.50.0/24
185.211.168.0/23
185.211.171.0/24
185.214.164.0/23
185.214.167.0/24
185.244.161.0/24
193.0.62.0/24
193.17.65.0/24
193.33.188.0/24
193.104.177.0/24
193.200.61.0/24
193.228.129.0/24
193.228.131.0/24
194.59.222.0/24
194.60.76.0/24
194.110.251.0/24
195.35.105.0/24
195.64.103.0/24
195.69.161.0-195.69.162.255
195.211.164.0/24
212.6.36.0/24
212.107.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:39:ac:c9:7c:9d:3f:39:72:18:b7:cd:18:47:75:55:fc:fa:
77:af:95:78:14:48:56:1d:c4:55:8c:a1:df:f1:f8:88:37:54:
3c:da:08:03:59:d5:37:d5:ee:b2:69:22:76:c6:76:40:67:1a:
3a:53:bb:f5:0e:5a:74:c9:bf:5a:01:a1:c5:c4:47:cc:1e:20:
7a:e2:de:75:f3:73:9d:9b:d8:8b:eb:86:52:bd:bb:4e:ca:c5:
86:3f:ad:68:dd:02:18:ce:68:36:e6:ec:32:fe:9c:ac:98:5f:
d7:26:62:c4:ba:d0:ad:5c:49:fe:cf:1c:fe:d4:84:80:b3:03:
4d:47:b5:39:aa:98:96:ba:0a:84:2f:29:54:cb:5d:0b:2e:a9:
9c:d2:9e:0c:1f:a3:fb:f1:55:35:6c:e0:60:e2:50:eb:bb:0a:
ff:8a:be:9d:38:bc:31:38:ce:1b:8e:b0:8c:bc:03:d7:9f:b9:
0d:0d:a8:20:01:4f:c8:6a:8a:53:8f:19:66:e0:fe:8b:9d:3b:
68:1d:5a:61:a1:85:fb:41:f5:97:12:0b:12:7d:5a:52:02:3a:
51:88:51:8b:17:6b:50:05:7e:73:5d:5a:4f:f7:6e:2e:67:1d:
bc:44:4b:05:ae:2d:da:3c:af:84:54:86:26:b4:6a:b2:ad:c1:
95:97:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 11:52:36 2024 by rpki-client on console-fra.rpki-client.org