Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Be6qzpUwa8qaWY9KPBJn6GloN4k.roa
File: Be6qzpUwa8qaWY9KPBJn6GloN4k.roa (raw, json)
Hash identifier: f3LGU8X7nfVV/+JeTjXDZFmxH4xr/nPEnilHtyj4sZc=
Subject key identifier: 05:EE:AA:CE:95:30:6B:CA:9A:59:8F:4A:3C:12:67:E8:69:68:37:89
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01921EB766573219E37B629035EC1C23F01B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Be6qzpUwa8qaWY9KPBJn6GloN4k.roa
Signing time: Mon 23 Sep 2024 11:49:48 +0000
ROA not before: Mon 23 Sep 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.62.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
192.253.210.0/24 maxlen: 24
192.253.211.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.166.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
203.188.182.0/24 maxlen: 24
203.188.183.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.32.75.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
212.56.52.0/24 maxlen: 24
212.56.53.0/24 maxlen: 24
212.56.54.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
213.254.160.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
213.254.162.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 05:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:b7:66:57:32:19:e3:7b:62:90:35:ec:1c:23:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 23 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05eeaace95306bca9a598f4a3c1267e869683789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:b7:df:a5:3f:45:b9:fe:bf:42:fe:ec:4d:
ff:6f:da:64:b5:17:c9:13:1b:7f:83:aa:f2:78:53:
8e:3a:21:e0:22:06:c9:fb:a8:03:7c:93:0d:d3:80:
6a:07:fc:69:de:a4:31:44:1b:04:c2:55:31:ee:3f:
95:63:03:c2:fc:5e:40:24:20:ce:a4:de:cf:5c:4c:
21:4f:23:47:26:98:a5:b4:34:69:e3:04:e7:4b:7a:
f3:1c:79:cd:59:0f:e7:d3:9e:fb:e9:69:fd:df:34:
0e:9d:e3:86:d2:03:f6:13:60:46:30:73:8a:f8:02:
a6:dc:d4:63:f7:cc:c8:d2:7d:33:72:6e:60:ea:17:
8a:c3:49:f0:f2:33:a1:ee:f9:3b:23:6f:bd:d1:95:
24:d9:07:98:37:d1:9f:b1:9c:83:53:9b:e6:5e:1a:
e0:24:b8:44:d3:47:2a:20:de:9c:0f:15:36:cc:01:
f8:2f:e7:d2:8a:35:d8:49:1e:67:d1:96:78:15:fe:
75:17:f2:90:81:7a:fd:a5:9b:58:2d:87:80:60:84:
47:14:9b:73:ee:36:49:8b:39:53:2e:96:6f:bc:49:
be:1f:19:9e:2b:80:18:bb:c4:0b:a4:8f:95:39:47:
00:d5:c0:c3:35:fa:f9:d3:91:87:f9:e3:5e:39:c1:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:AA:CE:95:30:6B:CA:9A:59:8F:4A:3C:12:67:E8:69:68:37:89
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Be6qzpUwa8qaWY9KPBJn6GloN4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.62.0/24
167.160.28.0/24
192.253.208.0/22
198.55.31.0/24
203.188.166.0/24
203.188.174.0-203.188.191.255
212.32.48.0/22
212.32.68.0-212.32.79.255
212.56.52.0/22
213.254.160.0/22
213.254.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:e3:89:9b:72:3b:f0:90:b8:b8:62:b0:d3:db:0f:52:d8:50:
02:b6:07:12:4c:bd:44:80:65:c9:96:82:f2:29:d0:1e:1d:da:
4c:ac:7e:6a:22:36:75:c7:23:6e:2d:29:7b:f5:47:81:bf:32:
56:56:84:23:d3:f7:43:a9:74:60:f5:41:32:3c:4e:a4:6f:1f:
2e:1f:9e:23:0f:6a:f9:5e:ba:11:e9:ac:41:6f:5c:11:d8:86:
88:e9:af:be:b7:7c:cd:b6:d8:36:0f:cf:ad:e9:15:ce:48:34:
d9:12:2e:bd:e6:ec:c5:ab:ab:d3:d9:be:09:47:b1:d9:0a:fb:
13:02:a3:05:0b:d5:b2:a3:a6:72:93:71:fa:53:10:17:28:23:
5e:d6:e1:91:b3:61:9f:d0:5c:74:e3:80:3f:cb:07:2f:9c:2a:
2c:47:33:d1:f5:19:35:0a:1a:a6:0f:6b:aa:db:33:1b:a0:b0:
49:35:e8:29:a9:6f:bc:48:be:3a:75:1e:ca:be:b8:89:b1:ce:
fb:a5:85:29:46:57:44:a2:ab:39:c3:4d:65:a2:40:fc:60:8d:
c5:cd:7c:07:71:9e:99:d2:44:aa:cb:86:8a:ae:1c:b2:58:30:
84:20:49:c2:bf:c3:f1:70:05:38:d5:4a:32:e7:a3:1a:36:0c:
0a:2f:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 07:38:54 2024 by rpki-client on console-fra.rpki-client.org