Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECXv5LVxJJSyT2FB2pCEsyBKgAc.roa
File: ECXv5LVxJJSyT2FB2pCEsyBKgAc.roa (raw, json)
Hash identifier: NPzN5yUM2FQQivNJ6JzDvuoA7Ns9xj24fITFrGSTMTI=
Subject key identifier: 10:25:EF:E4:B5:71:24:94:B2:4F:61:41:DA:90:84:B3:20:4A:80:07
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01928F8F149320D7CC1BB3EA099018C25EEE
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECXv5LVxJJSyT2FB2pCEsyBKgAc.roa
Signing time: Tue 15 Oct 2024 09:42:51 +0000
ROA not before: Tue 15 Oct 2024 09:42:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 16:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:8f:14:93:20:d7:cc:1b:b3:ea:09:90:18:c2:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 15 09:42:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1025efe4b5712494b24f6141da9084b3204a8007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:ab:5c:20:b9:1b:84:2a:5a:b3:c8:e9:d0:
ce:bf:b9:93:8e:2a:ea:27:a4:67:e1:cf:e3:69:13:
82:c4:a6:35:b6:52:e7:f0:f9:20:8e:25:a0:9c:ac:
1d:cf:fe:c4:8d:3e:ff:3c:90:7a:96:66:29:30:76:
d0:84:de:60:3f:cd:f9:52:80:fb:27:05:7e:89:d7:
b9:48:fd:3e:3b:66:60:26:0a:f8:14:39:74:cf:dc:
fd:ac:37:fd:e6:b9:73:d6:4f:51:53:ee:29:31:60:
19:3c:0b:c2:ed:7f:db:3c:25:8c:e8:9d:61:a1:d9:
79:d8:7f:8c:35:65:9e:82:89:a4:ea:8e:ef:5a:e7:
f0:7a:2b:08:16:f5:99:6f:fb:64:fa:f1:bc:ce:f4:
47:1f:e1:21:9e:8c:c9:19:17:8a:66:4f:af:2e:c3:
63:15:16:fc:82:6d:d3:37:d8:9f:50:e6:85:1c:21:
30:cd:26:d8:8b:78:14:f4:37:23:3f:44:72:8c:5c:
6e:3b:68:9d:38:5e:aa:46:42:af:56:d1:6a:e5:15:
2d:15:64:40:c3:79:48:32:69:f8:b5:09:6f:f5:00:
97:df:ea:fd:77:d9:d7:5b:ff:31:0b:43:74:1e:6f:
69:bc:4f:7f:9a:1f:b1:ae:7e:44:af:29:e6:85:f4:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:EF:E4:B5:71:24:94:B2:4F:61:41:DA:90:84:B3:20:4A:80:07
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECXv5LVxJJSyT2FB2pCEsyBKgAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
92.51.232.0/23
92.51.238.0/23
103.125.77.0-103.125.79.255
103.210.198.0/23
103.255.76.0/24
167.160.16.0/23
167.160.29.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0-203.188.173.255
212.56.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:db:8b:72:a4:4c:a8:5e:d2:a7:03:b4:20:f5:6d:4d:7b:7c:
ef:36:5a:23:84:40:9e:1a:bb:e7:13:3b:b7:46:9d:2c:01:c0:
f7:87:d9:0f:ca:3f:ec:7e:12:f6:7c:f4:93:04:13:0e:48:1d:
3e:6d:b6:e5:9b:f8:15:0c:65:0a:e6:59:25:f4:ec:61:eb:09:
d9:46:b6:17:ee:f0:8d:ba:8f:a5:c7:3f:f2:ad:54:ba:d0:8d:
bd:f1:d9:7c:30:9b:91:76:c4:51:7d:39:84:5c:bf:68:5a:9e:
3e:d8:83:8e:e2:b7:e4:b5:b2:4d:b1:a3:a1:16:7b:a8:44:75:
ae:e5:98:59:8d:eb:51:ea:7f:ff:35:d4:30:db:34:63:2f:05:
51:f3:93:b7:0a:52:53:87:7f:85:d0:7e:3d:ce:75:30:1e:08:
9e:65:bf:64:3b:6c:27:83:34:5d:43:b2:7a:4b:4c:a1:a1:34:
ee:2f:cf:e5:6d:d6:ed:cc:3d:f5:de:61:f2:e3:10:b7:fc:8e:
a8:e1:ea:1c:71:95:4f:27:52:db:2d:10:26:3c:af:27:9b:48:
da:7d:28:e3:31:cd:51:ce:21:8c:38:4c:41:a1:6b:a0:49:31:
74:44:09:1e:2d:86:e1:4e:e1:7e:2e:7f:a4:39:27:de:4c:96:
9b:f6:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:53 2024 by rpki-client on console-ams.rpki-client.org