Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/XsG5u_34T18KHHwrgbA0QsD6ssw.roa
File: XsG5u_34T18KHHwrgbA0QsD6ssw.roa (raw, json)
Hash identifier: zF4iDVqjABzvH4viMfBZy+5zOU29YJDPnQ4Q6JRwIjk=
Subject key identifier: 5E:C1:B9:BB:FD:F8:4F:5F:0A:1C:7C:2B:81:B0:34:42:C0:FA:B2:CC
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295C676B7B08EA0D0C49DB21F7DD482
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/XsG5u_34T18KHHwrgbA0QsD6ssw.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12491
IP address blocks: 81.199.206.0/23 maxlen: 24
81.199.200.0/24 maxlen: 24
81.199.205.0/24 maxlen: 24
81.199.204.0/24 maxlen: 24
81.199.208.0/23 maxlen: 24
81.199.210.0/24 maxlen: 24
81.199.212.0/24 maxlen: 24
81.199.213.0/24 maxlen: 24
81.199.211.0/24 maxlen: 24
81.199.216.0/24 maxlen: 24
81.199.217.0/24 maxlen: 24
81.199.214.0/24 maxlen: 24
81.199.215.0/24 maxlen: 24
81.199.219.0/24 maxlen: 24
81.199.224.0/22 maxlen: 24
81.199.220.0/22 maxlen: 24
81.199.228.0/23 maxlen: 24
81.199.232.0/21 maxlen: 24
81.199.230.0/24 maxlen: 24
81.199.240.0/22 maxlen: 24
81.199.244.0/22 maxlen: 24
81.199.248.0/23 maxlen: 24
81.199.146.0/24 maxlen: 24
81.199.147.0/24 maxlen: 24
81.199.152.0/22 maxlen: 24
81.199.148.0/22 maxlen: 24
81.199.158.0/23 maxlen: 24
81.199.156.0/23 maxlen: 24
81.199.160.0/21 maxlen: 24
81.199.172.0/23 maxlen: 24
81.199.174.0/23 maxlen: 24
81.199.176.0/21 maxlen: 24
81.199.186.0/24 maxlen: 24
81.199.185.0/24 maxlen: 24
81.199.184.0/24 maxlen: 24
81.199.187.0/24 maxlen: 24
81.199.192.0/24 maxlen: 24
81.199.188.0/22 maxlen: 24
81.199.195.0/24 maxlen: 24
81.199.193.0/24 maxlen: 24
81.199.194.0/24 maxlen: 24
81.199.196.0/22 maxlen: 24
81.199.4.0/22 maxlen: 24
81.199.2.0/23 maxlen: 24
81.199.0.0/24 maxlen: 24
81.199.1.0/24 maxlen: 24
81.199.10.0/23 maxlen: 24
81.199.8.0/24 maxlen: 24
81.199.9.0/24 maxlen: 24
81.199.16.0/23 maxlen: 24
81.199.16.0/22 maxlen: 24
81.199.15.0/24 maxlen: 24
81.199.13.0/24 maxlen: 24
81.199.16.0/24 maxlen: 24
81.199.17.0/24 maxlen: 24
81.199.22.0/23 maxlen: 24
81.199.18.0/23 maxlen: 24
81.199.21.0/24 maxlen: 24
81.199.19.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.18.0/24 maxlen: 24
81.199.32.0/22 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.95.0/24 maxlen: 24
81.199.92.0/24 maxlen: 24
81.199.93.0/24 maxlen: 24
81.199.102.0/23 maxlen: 24
81.199.105.0/24 maxlen: 24
81.199.104.0/24 maxlen: 24
81.199.101.0/24 maxlen: 24
81.199.108.0/22 maxlen: 24
81.199.106.0/24 maxlen: 24
81.199.107.0/24 maxlen: 24
81.199.118.0/23 maxlen: 24
81.199.124.0/22 maxlen: 24
81.199.130.0/23 maxlen: 24
81.199.132.0/24 maxlen: 24
81.199.129.0/24 maxlen: 24
81.199.128.0/24 maxlen: 24
81.199.138.0/23 maxlen: 24
81.199.136.0/22 maxlen: 24
81.199.136.0/23 maxlen: 24
81.199.134.0/23 maxlen: 24
81.199.139.0/24 maxlen: 24
81.199.138.0/24 maxlen: 24
81.199.136.0/24 maxlen: 24
81.199.137.0/24 maxlen: 24
81.199.140.0/23 maxlen: 24
81.199.142.0/23 maxlen: 24
81.199.44.0/24 maxlen: 24
81.199.40.0/22 maxlen: 24
81.199.49.0/24 maxlen: 24
81.199.50.0/24 maxlen: 24
81.199.47.0/24 maxlen: 24
81.199.48.0/24 maxlen: 24
81.199.46.0/24 maxlen: 24
81.199.45.0/24 maxlen: 24
81.199.51.0/24 maxlen: 24
81.199.58.0/24 maxlen: 24
81.199.54.0/24 maxlen: 24
81.199.56.0/23 maxlen: 24
81.199.52.0/22 maxlen: 24
81.199.63.0/24 maxlen: 24
81.199.61.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.59.0/24 maxlen: 24
81.199.60.0/24 maxlen: 24
81.199.84.0/24 maxlen: 24
81.199.85.0/24 maxlen: 24
81.199.82.0/24 maxlen: 24
81.199.83.0/24 maxlen: 24
81.199.80.0/24 maxlen: 24
81.199.81.0/24 maxlen: 24
81.199.88.0/23 maxlen: 24
81.199.86.0/23 maxlen: 24
81.199.91.0/24 maxlen: 24
81.199.90.0/24 maxlen: 24
62.56.165.0/24 maxlen: 24
62.56.166.0/24 maxlen: 24
62.56.164.0/24 maxlen: 24
62.56.160.0/22 maxlen: 24
62.56.171.0/24 maxlen: 24
62.56.172.0/24 maxlen: 24
62.56.170.0/24 maxlen: 24
62.56.169.0/24 maxlen: 24
62.56.167.0/24 maxlen: 24
62.56.168.0/24 maxlen: 24
62.56.170.0/23 maxlen: 24
62.56.168.0/22 maxlen: 24
62.56.168.0/23 maxlen: 24
62.56.175.0/24 maxlen: 24
62.56.173.0/24 maxlen: 24
62.56.174.0/23 maxlen: 24
62.56.128.0/23 maxlen: 24
62.56.132.0/24 maxlen: 24
62.56.130.0/24 maxlen: 24
62.56.131.0/24 maxlen: 24
62.56.134.0/23 maxlen: 24
62.56.133.0/24 maxlen: 24
62.56.139.0/24 maxlen: 24
62.56.137.0/24 maxlen: 24
62.56.136.0/24 maxlen: 24
62.56.140.0/22 maxlen: 24
62.56.144.0/22 maxlen: 24
62.56.151.0/24 maxlen: 24
62.56.152.0/24 maxlen: 24
62.56.150.0/24 maxlen: 24
62.56.148.0/23 maxlen: 24
62.56.153.0/24 maxlen: 24
62.56.154.0/24 maxlen: 24
62.56.156.0/22 maxlen: 24
62.56.218.0/23 maxlen: 24
62.56.216.0/24 maxlen: 24
62.56.224.0/22 maxlen: 24
62.56.220.0/23 maxlen: 24
62.56.232.0/21 maxlen: 24
62.56.228.0/23 maxlen: 24
62.56.231.0/24 maxlen: 24
62.56.230.0/24 maxlen: 24
62.56.240.0/22 maxlen: 24
62.56.244.0/23 maxlen: 24
62.56.246.0/24 maxlen: 24
62.56.250.0/23 maxlen: 24
62.56.248.0/22 maxlen: 24
62.56.248.0/23 maxlen: 24
62.56.250.0/24 maxlen: 24
62.56.251.0/24 maxlen: 24
62.56.249.0/24 maxlen: 24
62.56.247.0/24 maxlen: 24
62.56.248.0/24 maxlen: 24
91.203.121.0/24 maxlen: 24
91.203.122.0/23 maxlen: 23
2a02:ba0:1::/48 maxlen: 48
2a02:ba0:1000::/36 maxlen: 36
2a02:ba0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Jan 2023 19:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c6:76:b7:b0:8e:a0:d0:c4:9d:b2:1f:7d:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ec1b9bbfdf84f5f0a1c7c2b81b03442c0fab2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:79:14:dc:52:72:1d:18:7b:d2:f2:19:0f:
5f:04:cd:bc:1f:97:55:62:ec:e1:11:79:c4:ec:55:
24:6b:90:c4:0d:7e:4a:f1:6f:cf:7a:8e:e3:23:4a:
93:bb:da:ac:43:1b:7d:21:8c:64:8f:c9:dc:9d:c6:
82:8a:73:87:50:30:e0:be:7c:2c:e6:c2:23:10:4d:
d1:e2:58:e3:27:00:19:b1:ff:49:b8:9d:40:f2:15:
8e:8e:7d:84:a2:7d:6c:92:ba:05:76:8d:7c:33:3e:
c2:60:ee:6f:0d:69:2d:4f:28:ce:89:e5:f0:85:4f:
3a:b7:35:63:21:90:20:25:f1:a7:24:ee:68:64:91:
d0:fa:46:19:9f:ad:e6:1e:3a:fd:41:b0:29:b8:97:
69:3d:46:9c:c9:12:a4:83:2d:89:a7:74:b9:63:47:
73:d9:55:04:bd:ec:65:f6:6d:30:86:c8:15:4b:2d:
fa:f6:fd:b3:53:07:79:10:a6:a4:38:6a:5d:29:23:
a2:22:a8:6c:86:96:62:ed:f9:28:5a:43:f5:b9:ca:
78:42:25:b9:fa:e1:90:a3:37:18:91:97:4b:b2:6c:
6a:c5:c9:2d:e9:56:11:b8:7f:7e:17:3b:d4:44:91:
6a:31:aa:d6:2e:a0:ef:41:32:cb:17:e4:64:c2:d4:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:B9:BB:FD:F8:4F:5F:0A:1C:7C:2B:81:B0:34:42:C0:FA:B2:CC
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/XsG5u_34T18KHHwrgbA0QsD6ssw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.128.0-62.56.137.255
62.56.139.0-62.56.154.255
62.56.156.0-62.56.175.255
62.56.216.0/24
62.56.218.0-62.56.221.255
62.56.224.0-62.56.251.255
81.199.0.0-81.199.11.255
81.199.13.0/24
81.199.15.0-81.199.23.255
81.199.32.0/22
81.199.40.0-81.199.63.255
81.199.80.0/20
81.199.101.0-81.199.111.255
81.199.118.0/23
81.199.124.0-81.199.132.255
81.199.134.0-81.199.143.255
81.199.146.0-81.199.167.255
81.199.172.0-81.199.200.255
81.199.204.0-81.199.217.255
81.199.219.0-81.199.230.255
81.199.232.0-81.199.249.255
91.203.121.0-91.203.123.255
IPv6:
2a02:ba0::/47
2a02:ba0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:2b:65:ef:73:ef:d4:2d:a7:5b:6f:77:22:3e:b7:96:be:34:
50:44:19:8b:98:29:4a:a8:da:8d:b7:78:d9:5f:57:01:35:9c:
ef:83:1e:e7:78:61:02:c2:b2:af:bc:fb:d8:07:ab:c6:3a:8f:
04:1e:23:75:e4:c1:29:72:1b:09:99:60:bd:1c:65:66:9e:bb:
53:94:c2:ba:8e:5f:9d:1d:b8:de:25:e2:e9:ef:2f:b9:1a:0c:
f4:1d:e6:5c:64:5c:a1:2c:6b:9d:09:30:6e:87:03:47:0f:db:
89:44:1a:1a:34:8d:c3:41:40:fc:b1:bf:bd:12:de:b8:17:84:
85:a4:5b:32:72:c0:ef:2d:46:8b:21:55:a3:ba:eb:7c:6c:9d:
b5:d6:78:43:06:80:39:06:9e:36:4d:47:4b:57:90:53:66:49:
2b:0e:e8:ce:5a:81:aa:5e:02:ad:88:95:d1:47:2f:38:de:7d:
f4:7d:d9:94:3b:cf:43:ff:d9:e3:cc:17:5e:fb:5c:df:87:16:
54:fc:3e:e9:41:9f:9c:ec:82:b6:46:9a:4d:de:13:ed:00:75:
b9:24:bf:18:cd:cc:58:7d:d4:26:0a:3f:0b:73:7e:51:bf:6a:
b4:c4:59:2b:2f:81:64:4e:38:e7:bf:62:f7:8b:ec:95:2c:aa:
ee:2d:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org