Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2AG8EgbSWuoA0mRw4Egll_CG8UE.roa
File: 2AG8EgbSWuoA0mRw4Egll_CG8UE.roa (raw, json)
Hash identifier: dNxxDk5uZrEPjEsxDGJI+mUPst4PCR+FcLVbDsm38cs=
Subject key identifier: D8:01:BC:12:06:D2:5A:EA:00:D2:64:70:E0:48:25:97:F0:86:F1:41
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0185D0B7FDD0F46D1629E0A8634C1B99308B
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2AG8EgbSWuoA0mRw4Egll_CG8UE.roa
Signing time: Fri 20 Jan 2023 19:46:37 +0000
ROA not before: Fri 20 Jan 2023 19:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12491
IP address blocks: 81.199.206.0/23 maxlen: 24
81.199.200.0/24 maxlen: 24
81.199.205.0/24 maxlen: 24
81.199.204.0/24 maxlen: 24
81.199.208.0/23 maxlen: 24
81.199.210.0/24 maxlen: 24
81.199.212.0/24 maxlen: 24
81.199.213.0/24 maxlen: 24
81.199.211.0/24 maxlen: 24
81.199.216.0/24 maxlen: 24
81.199.217.0/24 maxlen: 24
81.199.214.0/24 maxlen: 24
81.199.215.0/24 maxlen: 24
81.199.219.0/24 maxlen: 24
81.199.224.0/22 maxlen: 24
81.199.220.0/22 maxlen: 24
81.199.228.0/23 maxlen: 24
81.199.232.0/21 maxlen: 24
81.199.230.0/24 maxlen: 24
81.199.240.0/22 maxlen: 24
81.199.244.0/22 maxlen: 24
81.199.248.0/23 maxlen: 24
81.199.146.0/24 maxlen: 24
81.199.147.0/24 maxlen: 24
81.199.152.0/22 maxlen: 24
81.199.148.0/22 maxlen: 24
81.199.158.0/23 maxlen: 24
81.199.156.0/23 maxlen: 24
81.199.160.0/21 maxlen: 24
81.199.168.0/24 maxlen: 24
81.199.172.0/23 maxlen: 24
81.199.174.0/23 maxlen: 24
81.199.176.0/21 maxlen: 24
81.199.186.0/24 maxlen: 24
81.199.185.0/24 maxlen: 24
81.199.184.0/24 maxlen: 24
81.199.187.0/24 maxlen: 24
81.199.192.0/24 maxlen: 24
81.199.188.0/22 maxlen: 24
81.199.195.0/24 maxlen: 24
81.199.193.0/24 maxlen: 24
81.199.194.0/24 maxlen: 24
81.199.196.0/22 maxlen: 24
81.199.4.0/22 maxlen: 24
81.199.2.0/23 maxlen: 24
81.199.0.0/24 maxlen: 24
81.199.1.0/24 maxlen: 24
81.199.10.0/23 maxlen: 24
81.199.8.0/24 maxlen: 24
81.199.9.0/24 maxlen: 24
81.199.16.0/23 maxlen: 24
81.199.16.0/22 maxlen: 24
81.199.15.0/24 maxlen: 24
81.199.13.0/24 maxlen: 24
81.199.16.0/24 maxlen: 24
81.199.17.0/24 maxlen: 24
81.199.22.0/23 maxlen: 24
81.199.18.0/23 maxlen: 24
81.199.21.0/24 maxlen: 24
81.199.19.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.18.0/24 maxlen: 24
81.199.32.0/22 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.95.0/24 maxlen: 24
81.199.92.0/24 maxlen: 24
81.199.93.0/24 maxlen: 24
81.199.102.0/23 maxlen: 24
81.199.105.0/24 maxlen: 24
81.199.104.0/24 maxlen: 24
81.199.101.0/24 maxlen: 24
81.199.108.0/22 maxlen: 24
81.199.106.0/24 maxlen: 24
81.199.107.0/24 maxlen: 24
81.199.118.0/23 maxlen: 24
81.199.124.0/22 maxlen: 24
81.199.130.0/23 maxlen: 24
81.199.132.0/24 maxlen: 24
81.199.129.0/24 maxlen: 24
81.199.128.0/24 maxlen: 24
81.199.138.0/23 maxlen: 24
81.199.136.0/22 maxlen: 24
81.199.136.0/23 maxlen: 24
81.199.134.0/23 maxlen: 24
81.199.139.0/24 maxlen: 24
81.199.138.0/24 maxlen: 24
81.199.136.0/24 maxlen: 24
81.199.137.0/24 maxlen: 24
81.199.140.0/23 maxlen: 24
81.199.142.0/23 maxlen: 24
81.199.44.0/24 maxlen: 24
81.199.40.0/22 maxlen: 24
81.199.49.0/24 maxlen: 24
81.199.50.0/24 maxlen: 24
81.199.47.0/24 maxlen: 24
81.199.48.0/24 maxlen: 24
81.199.46.0/24 maxlen: 24
81.199.45.0/24 maxlen: 24
81.199.51.0/24 maxlen: 24
81.199.58.0/24 maxlen: 24
81.199.54.0/24 maxlen: 24
81.199.56.0/23 maxlen: 24
81.199.52.0/22 maxlen: 24
81.199.63.0/24 maxlen: 24
81.199.61.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.59.0/24 maxlen: 24
81.199.60.0/24 maxlen: 24
81.199.84.0/24 maxlen: 24
81.199.85.0/24 maxlen: 24
81.199.82.0/24 maxlen: 24
81.199.83.0/24 maxlen: 24
81.199.80.0/24 maxlen: 24
81.199.81.0/24 maxlen: 24
81.199.88.0/23 maxlen: 24
81.199.86.0/23 maxlen: 24
81.199.91.0/24 maxlen: 24
81.199.90.0/24 maxlen: 24
62.56.165.0/24 maxlen: 24
62.56.166.0/24 maxlen: 24
62.56.164.0/24 maxlen: 24
62.56.160.0/22 maxlen: 24
62.56.171.0/24 maxlen: 24
62.56.172.0/24 maxlen: 24
62.56.170.0/24 maxlen: 24
62.56.169.0/24 maxlen: 24
62.56.167.0/24 maxlen: 24
62.56.168.0/24 maxlen: 24
62.56.170.0/23 maxlen: 24
62.56.168.0/22 maxlen: 24
62.56.168.0/23 maxlen: 24
62.56.175.0/24 maxlen: 24
62.56.173.0/24 maxlen: 24
62.56.174.0/23 maxlen: 24
62.56.128.0/23 maxlen: 24
62.56.132.0/24 maxlen: 24
62.56.130.0/24 maxlen: 24
62.56.131.0/24 maxlen: 24
62.56.134.0/23 maxlen: 24
62.56.133.0/24 maxlen: 24
62.56.139.0/24 maxlen: 24
62.56.137.0/24 maxlen: 24
62.56.136.0/24 maxlen: 24
62.56.140.0/22 maxlen: 24
62.56.144.0/22 maxlen: 24
62.56.151.0/24 maxlen: 24
62.56.152.0/24 maxlen: 24
62.56.150.0/24 maxlen: 24
62.56.148.0/23 maxlen: 24
62.56.153.0/24 maxlen: 24
62.56.154.0/24 maxlen: 24
62.56.156.0/22 maxlen: 24
62.56.218.0/23 maxlen: 24
62.56.216.0/24 maxlen: 24
62.56.224.0/22 maxlen: 24
62.56.220.0/23 maxlen: 24
62.56.232.0/21 maxlen: 24
62.56.228.0/23 maxlen: 24
62.56.231.0/24 maxlen: 24
62.56.230.0/24 maxlen: 24
62.56.240.0/22 maxlen: 24
62.56.244.0/23 maxlen: 24
62.56.246.0/24 maxlen: 24
62.56.250.0/23 maxlen: 24
62.56.248.0/22 maxlen: 24
62.56.248.0/23 maxlen: 24
62.56.250.0/24 maxlen: 24
62.56.251.0/24 maxlen: 24
62.56.249.0/24 maxlen: 24
62.56.247.0/24 maxlen: 24
62.56.248.0/24 maxlen: 24
91.203.121.0/24 maxlen: 24
91.203.122.0/23 maxlen: 23
2a02:ba0:1::/48 maxlen: 48
2a02:ba0:1000::/36 maxlen: 36
2a02:ba0::/32 maxlen: 32
2a02:ba0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Feb 2023 14:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:b7:fd:d0:f4:6d:16:29:e0:a8:63:4c:1b:99:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 20 19:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d801bc1206d25aea00d26470e0482597f086f141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:f6:a1:15:fe:d9:78:0a:82:b1:b7:05:65:
be:7f:21:e5:d2:fa:71:b9:3c:3b:c5:1b:8f:31:35:
52:e3:cc:0c:58:72:ae:01:79:55:a6:ab:f6:cd:05:
a9:a3:82:75:5e:14:89:e5:f8:35:02:db:29:ae:2e:
27:83:d5:44:7a:93:4c:04:f0:35:e7:c0:ff:5c:94:
63:08:07:51:50:dc:ca:54:3f:75:32:d9:57:c8:af:
de:42:77:43:b8:e2:48:b6:f5:94:f6:ad:87:e9:09:
23:08:eb:90:9f:46:f4:ee:6e:72:e2:67:f6:cf:b7:
47:70:c2:6a:c8:ca:7e:e8:9b:25:ba:c9:99:9f:61:
60:73:de:93:90:ef:ee:b9:02:35:bd:58:56:99:15:
42:cf:ff:8d:fa:49:03:e3:c6:de:dd:7f:dc:32:7f:
0f:35:7f:20:cb:1e:9e:11:51:89:8c:3c:ba:44:dc:
ca:26:ef:a1:54:c3:43:a4:3a:b9:54:5d:48:11:52:
3f:d2:a5:66:03:08:0d:25:38:1c:33:60:c6:c1:d9:
16:37:22:c7:dd:03:c4:05:d8:1a:33:35:26:fc:0b:
3e:72:41:c8:65:d6:7c:54:7a:c1:c3:11:0c:5e:47:
83:ca:c8:0b:9d:3c:e3:39:e5:94:fa:60:8e:2f:d4:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:BC:12:06:D2:5A:EA:00:D2:64:70:E0:48:25:97:F0:86:F1:41
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2AG8EgbSWuoA0mRw4Egll_CG8UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.128.0-62.56.137.255
62.56.139.0-62.56.154.255
62.56.156.0-62.56.175.255
62.56.216.0/24
62.56.218.0-62.56.221.255
62.56.224.0-62.56.251.255
81.199.0.0-81.199.11.255
81.199.13.0/24
81.199.15.0-81.199.23.255
81.199.32.0/22
81.199.40.0-81.199.63.255
81.199.80.0/20
81.199.101.0-81.199.111.255
81.199.118.0/23
81.199.124.0-81.199.132.255
81.199.134.0-81.199.143.255
81.199.146.0-81.199.168.255
81.199.172.0-81.199.200.255
81.199.204.0-81.199.217.255
81.199.219.0-81.199.230.255
81.199.232.0-81.199.249.255
91.203.121.0-91.203.123.255
IPv6:
2a02:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:6d:f1:ad:cf:cc:11:d1:86:aa:7a:cb:2e:71:64:c0:25:3e:
dd:de:39:44:95:ba:92:fa:9d:9b:a2:2e:c7:26:57:d0:db:5b:
43:f5:66:53:9f:a2:ba:d7:c3:0f:fa:79:e3:6a:48:12:c8:e8:
81:b1:92:e4:fc:f3:87:2d:d6:73:ea:d9:2a:cc:03:89:eb:b5:
e0:7d:d1:0c:b8:de:91:a4:c0:84:e7:24:be:c2:f0:a6:d3:d7:
a0:e2:cf:1c:df:79:96:a6:f2:28:f1:be:4b:ee:4f:1f:76:f7:
96:21:6b:a2:7d:02:7b:e7:62:b2:be:f0:e8:24:21:92:ee:ee:
68:69:36:7e:47:6d:d7:cd:c7:4d:a8:1c:69:91:6f:f4:43:ce:
d9:a6:df:85:41:ad:71:0e:13:84:df:34:83:7f:b8:35:05:ad:
a5:68:f4:36:33:6d:43:65:05:b9:e3:67:f7:4c:70:be:90:0a:
7d:0f:c8:57:01:6b:b6:9d:1f:5b:fb:17:ec:0a:73:9a:2d:4e:
37:e1:bc:d1:e2:0e:41:e2:d9:30:93:92:42:76:fd:9d:7c:fa:
a3:bb:42:d2:11:74:10:14:27:a3:5c:10:46:21:45:fc:45:2f:
34:d0:27:d8:12:8e:83:2c:b1:9b:b3:75:d5:19:99:3e:13:42:
f7:f5:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org