Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XcVcs8uIfSdj7hlA6N2ltmVW2Xk.roa
File: XcVcs8uIfSdj7hlA6N2ltmVW2Xk.roa (raw, json)
Hash identifier: 5bD0vEZx5b9O46BvrDXX2DPMfImmY38WCET5WkHknpo=
Subject key identifier: 5D:C5:5C:B3:CB:88:7D:27:63:EE:19:40:E8:DD:A5:B6:65:56:D9:79
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0192BD278779A96A9531796E0D47ED3D1EC9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XcVcs8uIfSdj7hlA6N2ltmVW2Xk.roa
Signing time: Thu 24 Oct 2024 06:12:17 +0000
ROA not before: Thu 24 Oct 2024 06:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 20:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:27:87:79:a9:6a:95:31:79:6e:0d:47:ed:3d:1e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 24 06:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dc55cb3cb887d2763ee1940e8dda5b66556d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:38:8f:c2:ab:8b:d4:f0:a9:4e:df:a3:48:
de:a1:6d:bf:1a:b2:d9:d1:ed:88:ad:cc:43:73:9d:
31:2d:ca:dd:a6:71:a1:11:d3:53:62:09:d9:e4:1b:
82:57:2a:9a:e8:30:b5:c1:04:62:4e:62:e5:60:15:
49:f9:17:49:92:e2:1d:9d:ab:03:9b:8e:31:94:50:
e4:4f:60:65:fd:83:81:5c:10:ca:a6:d8:db:d7:0f:
58:99:43:aa:8d:68:b2:f3:81:7c:42:3f:44:d8:9d:
d6:f4:5e:e5:31:86:72:44:ac:ad:46:e4:a4:0c:b8:
8e:0a:da:63:1e:2e:ef:82:c1:a4:0c:a1:c6:9d:db:
b7:5d:b6:ef:b0:a1:b2:39:99:94:84:3c:8c:1e:30:
d2:4f:20:e6:9d:a9:77:a7:81:e0:21:32:94:27:22:
73:ad:17:5d:b8:4c:f8:d7:a2:4b:fa:b3:af:a4:7e:
b5:60:6e:ad:62:f5:d5:fe:0c:e5:f5:80:7b:10:e5:
49:71:f6:48:54:18:5b:bb:46:6f:a6:40:66:13:ad:
5e:b6:f0:d5:62:1c:95:fb:76:0f:30:db:e0:f4:e5:
eb:0a:85:ab:f4:fa:61:d8:b1:9d:e9:c7:12:d0:a8:
01:f7:1f:eb:1d:31:4c:9f:36:3e:1c:77:34:2b:2d:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:5C:B3:CB:88:7D:27:63:EE:19:40:E8:DD:A5:B6:65:56:D9:79
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XcVcs8uIfSdj7hlA6N2ltmVW2Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0-203.188.173.255
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
43:e1:07:1e:a2:5e:6e:2a:c5:0a:e5:73:e5:cc:a1:e1:b5:fa:
c7:42:aa:84:a9:e4:ef:38:1c:63:6f:17:08:31:65:b0:9c:dc:
37:01:f9:c7:46:b3:77:3b:18:42:81:79:71:0f:3a:b4:e1:a7:
e5:3b:fb:27:28:1b:ea:36:09:d5:b6:31:ff:72:27:db:9a:43:
84:7b:cd:d1:f2:08:5b:5d:98:36:92:74:20:dc:36:71:49:56:
f7:c8:64:7d:b7:c7:c4:cd:70:32:b5:94:94:0f:ce:3a:de:53:
00:94:c1:9a:a9:b0:bf:c4:a6:10:6e:30:9b:57:52:86:01:6d:
20:9b:30:e3:f9:89:e7:f0:55:21:41:f3:db:e6:03:81:54:8e:
96:37:cf:4e:29:ec:ea:0b:83:98:99:45:75:5d:ed:ef:18:11:
19:20:a3:3e:f0:05:ac:1c:f4:15:07:95:5d:87:c8:f7:48:50:
0d:23:f3:2c:26:87:89:82:04:c1:09:f6:d0:eb:6e:53:17:07:
73:e9:22:e7:90:55:f8:56:96:61:a2:f6:e3:89:98:1b:67:0d:
39:b1:c1:71:fd:35:c6:99:b2:a4:74:9f:aa:60:10:be:e2:ea:
d1:27:3f:7b:54:c3:e8:12:68:43:50:75:51:44:43:d8:c2:b7:
51:17:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org