Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dpVCdpjSgGgysQG-CfOIa50S5a0.roa
File: dpVCdpjSgGgysQG-CfOIa50S5a0.roa (raw, json)
Hash identifier: vuZNkKeUpf3P/NORuQD9iqfD4VvO2GMRbbYZ5KydLSc=
Subject key identifier: 76:95:42:76:98:D2:80:68:32:B1:01:BE:09:F3:88:6B:9D:12:E5:AD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0193BA4A7947BA67CA2F66846A9336BEEB22
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dpVCdpjSgGgysQG-CfOIa50S5a0.roa
Signing time: Thu 12 Dec 2024 09:54:23 +0000
ROA not before: Thu 12 Dec 2024 09:54:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 12:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:4a:79:47:ba:67:ca:2f:66:84:6a:93:36:be:eb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 12 09:54:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7695427698d2806832b101be09f3886b9d12e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:b2:94:8b:53:97:d8:8d:e6:36:17:1c:ab:
79:8a:79:5d:39:38:a9:9c:90:1e:ed:34:b1:c0:c0:
23:ec:fb:2c:1c:f1:78:de:f3:13:cb:1b:79:7e:fa:
23:bf:8b:b2:1d:04:86:aa:cf:d4:34:c2:6e:f5:64:
50:da:95:6e:28:b9:7e:ac:e9:8d:94:3b:66:8b:c5:
fc:6f:bb:35:e8:be:fd:24:d5:a8:42:f1:10:1d:ba:
16:b4:e0:99:51:18:70:4e:4f:62:f6:80:c0:3a:f6:
1e:c0:ea:b4:82:b8:10:18:20:cd:82:e5:0e:79:27:
39:30:aa:fe:9a:b9:da:b7:b2:7c:e4:68:46:9c:cf:
2a:3d:1a:e1:3b:41:9f:9a:95:fd:68:82:eb:3c:4a:
e0:05:fb:b6:89:85:16:79:bb:74:2c:20:cf:6b:9f:
a1:ef:96:43:4e:0a:3c:3a:63:71:19:da:d2:89:4e:
c1:8d:10:02:f1:80:61:a6:1e:09:cc:b4:77:f8:ac:
0f:74:0d:5b:16:99:79:54:fd:ba:35:86:28:cd:28:
b5:a0:93:df:1e:aa:1b:09:28:1f:f0:3d:3c:a1:ae:
c4:0e:06:9f:85:19:4e:26:19:f3:22:4c:7a:89:6c:
08:da:e8:bd:b5:e4:0f:1a:20:9d:f0:d9:b7:31:81:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:42:76:98:D2:80:68:32:B1:01:BE:09:F3:88:6B:9D:12:E5:AD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dpVCdpjSgGgysQG-CfOIa50S5a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.160.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
c2:88:f2:6f:32:88:9d:94:6f:20:b8:fa:21:8e:cf:88:86:34:
5c:0e:14:e4:cf:c5:a7:e8:2e:af:61:ae:94:b0:e9:0e:0b:c4:
d5:86:85:04:5b:d1:7e:59:7f:5d:3a:1f:ad:07:d8:8b:70:f6:
ec:90:7a:95:89:9a:df:22:5f:92:7b:27:00:fc:e3:27:7a:39:
eb:08:19:7c:33:26:4c:61:47:72:e8:44:54:12:1f:63:2a:d3:
1b:4f:18:04:fe:4b:fd:d6:5b:c7:36:ff:57:5b:a4:fe:a9:ce:
9d:60:3f:15:a5:0a:a3:7e:e1:da:6c:76:9e:d2:ce:5e:00:2f:
ab:63:c7:a9:e5:67:ba:2d:6e:65:5b:08:be:f2:da:c8:01:ea:
32:dd:93:b8:85:a8:f2:98:2a:2b:32:d1:dc:d2:7a:db:9e:df:
6f:7e:52:f1:1b:9b:ff:21:75:b2:f0:88:a0:62:50:a8:a4:f6:
ed:fc:f5:89:c2:8e:9d:50:6c:11:b5:19:56:d0:77:ec:6a:3c:
6d:e3:e1:55:c0:2e:fe:e8:01:6c:2f:9d:53:a3:d2:ba:44:51:
32:2a:fe:a9:d4:85:1b:54:97:d5:7c:09:53:a9:9a:d9:d1:17:
31:0d:ed:f8:61:68:a7:52:fa:7d:d1:ae:22:f2:ed:16:fa:b7:
01:99:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:03 2025 by rpki-client