Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/0FCn3k8-XYc7tJ9vxsBWlEmg2c8.roa
File: 0FCn3k8-XYc7tJ9vxsBWlEmg2c8.roa (raw, json)
Hash identifier: loT73oT/FQQ66TddB3MXqIhjdF1G9W9+5ecuG8bIbJw=
Subject key identifier: D0:50:A7:DE:4F:3E:5D:87:3B:B4:9F:6F:C6:C0:56:94:49:A0:D9:CF
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 0186A23EC9EA8FE855486588E170E30AE087
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/0FCn3k8-XYc7tJ9vxsBWlEmg2c8.roa
Signing time: Thu 02 Mar 2023 12:14:29 +0000
ROA not before: Thu 02 Mar 2023 12:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198589
IP address blocks: 37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:1::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 04 Mar 2023 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:3e:c9:ea:8f:e8:55:48:65:88:e1:70:e3:0a:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Mar 2 12:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d050a7de4f3e5d873bb49f6fc6c0569449a0d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:49:88:e1:13:48:3a:04:2f:38:30:ba:66:
1b:03:8d:78:a9:f2:16:6f:fa:fd:6f:9c:d2:05:82:
23:92:84:e0:e1:55:34:17:ee:8a:96:77:aa:ac:69:
3e:e6:d2:fd:4d:71:61:62:4f:4a:27:87:83:e0:01:
b7:ce:7d:8c:8a:d3:28:8c:e7:bf:ba:41:ab:be:3a:
3a:56:cf:b2:80:fc:eb:d7:82:ce:e6:d0:da:ef:d2:
06:3a:8d:5d:7f:92:8b:f4:92:b5:5f:0f:9c:78:74:
fd:f0:eb:b2:ba:05:f0:98:21:9f:34:93:41:39:ef:
ee:b0:23:5e:cf:30:96:d7:73:1e:d9:c0:eb:9b:20:
84:b6:f8:ce:41:1b:c8:33:1e:f4:64:eb:12:15:00:
27:a9:44:53:b1:29:3c:99:2a:c4:f7:83:61:96:eb:
61:91:86:7e:66:26:f5:3b:8f:ce:fa:de:6c:cc:4f:
9c:63:47:01:f7:d3:ba:a8:91:ae:51:9f:a9:ee:69:
3f:92:cf:e4:89:8b:2d:55:c7:28:11:0e:1d:eb:81:
e3:e5:0e:7c:90:01:13:0b:fe:34:b6:60:87:1d:0c:
0b:6e:7f:e2:da:85:0b:80:ad:13:9b:26:62:55:ca:
a9:34:01:3a:f9:b8:92:5b:6a:59:62:e7:2a:30:eb:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:A7:DE:4F:3E:5D:87:3B:B4:9F:6F:C6:C0:56:94:49:A0:D9:CF
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/0FCn3k8-XYc7tJ9vxsBWlEmg2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
34:2c:c1:50:5d:b3:e7:71:33:c2:94:be:fd:e5:c2:ae:65:9c:
21:6e:d4:28:bd:e9:5b:a1:05:a2:ef:16:0a:06:49:5c:09:c1:
04:05:87:7f:f7:2f:c9:28:81:80:f9:9e:82:33:a6:09:0b:92:
60:ef:a1:31:c3:c2:1d:7b:34:b3:d6:e4:d4:33:c4:59:26:0b:
ed:7e:16:7e:93:ed:9d:5a:60:23:9b:49:5b:79:1b:35:a7:84:
98:0d:de:c8:95:87:52:97:97:e1:5a:54:d1:67:8f:df:fa:bc:
6e:a2:3d:40:e4:45:94:6d:68:0a:7c:e2:2e:12:d2:88:e8:f5:
02:ed:22:9b:e3:bc:37:c5:6c:78:b2:d4:54:9f:6f:a0:d9:6c:
92:05:c8:c2:43:08:f5:07:32:ad:e7:e9:98:8c:c8:b8:97:7e:
c1:64:8e:b5:9a:46:16:50:cf:50:0b:78:2a:97:7c:c8:24:be:
51:e7:b0:c3:8a:60:9b:81:44:df:b9:a1:ac:cc:f7:17:4d:ef:
99:6b:84:07:9a:3a:36:64:24:08:dd:cf:61:52:2e:7f:e2:b6:
1f:cc:b5:00:8f:fc:e5:46:da:d5:b3:8a:da:e8:0d:48:f8:3b:
45:68:7c:ff:93:91:38:b1:41:94:89:8c:3f:11:2a:cf:f4:a9:
de:f5:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org