Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/J8TvP6Q14p59WMPc-i0a1e1Fj60.roa
File: J8TvP6Q14p59WMPc-i0a1e1Fj60.roa (raw, json)
Hash identifier: RcYzo8HvBIs7vvHLfetwqYIBcOGDf4ka6xB4HbXseQs=
Subject key identifier: 27:C4:EF:3F:A4:35:E2:9E:7D:58:C3:DC:FA:2D:1A:D5:ED:45:8F:AD
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01867D004E10014CF10CD9DAAA52EDBEB17B
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/J8TvP6Q14p59WMPc-i0a1e1Fj60.roa
Signing time: Thu 23 Feb 2023 06:40:17 +0000
ROA not before: Thu 23 Feb 2023 06:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198589
IP address blocks: 37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:00:4e:10:01:4c:f1:0c:d9:da:aa:52:ed:be:b1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Feb 23 06:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c4ef3fa435e29e7d58c3dcfa2d1ad5ed458fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:8f:f7:c1:86:4c:5a:55:18:69:d0:8c:da:
2b:a1:d7:36:b1:c0:7a:c7:3a:18:32:a9:57:23:a1:
d7:cc:0f:65:cc:4c:57:4f:91:b0:13:02:c1:b8:16:
58:67:a3:45:95:eb:48:70:62:15:c0:e5:eb:da:9a:
9a:9c:b4:79:14:6a:c0:9f:b2:6d:7b:d6:2c:e3:16:
3f:05:da:e1:48:1b:ba:c7:a1:4a:74:f9:24:c2:bd:
3e:2c:9d:da:5e:50:0f:d4:ac:ee:e4:66:16:0f:f0:
1c:04:1e:b0:b2:89:9f:8a:0f:9d:10:99:36:c4:35:
d2:66:3b:57:59:93:0f:83:ae:f6:47:19:9a:c9:42:
fe:60:67:6a:0c:97:b4:8c:b7:86:ae:16:69:d1:dc:
b4:db:66:d5:50:b6:b8:e1:3b:e1:b8:db:4d:69:78:
1a:08:25:20:51:12:af:37:f7:51:5d:e2:57:92:49:
6b:d9:96:1f:50:cc:b8:76:b7:2e:a1:0b:37:57:51:
c8:1b:8d:d7:19:7e:e5:a9:d5:bd:85:dd:f9:9d:da:
36:88:e3:08:2a:05:85:b5:d7:aa:08:50:38:ce:4f:
2b:2e:a4:fb:03:0e:57:62:85:00:0b:fa:cf:be:fe:
b7:f6:b9:fe:5a:a9:1f:c7:ee:78:5d:94:bf:1e:17:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:EF:3F:A4:35:E2:9E:7D:58:C3:DC:FA:2D:1A:D5:ED:45:8F:AD
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/J8TvP6Q14p59WMPc-i0a1e1Fj60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:f6:25:7b:f9:f8:7b:0e:2b:75:76:fa:7c:21:f3:da:c9:83:
40:dc:94:d5:40:73:e0:a2:61:69:06:dc:6b:79:99:b2:67:fc:
65:5b:2f:6b:45:ec:01:38:5e:d1:32:8b:58:b8:91:62:bd:7e:
ce:20:3a:8f:f1:37:86:8b:c4:e0:86:87:b5:2d:2a:5f:1d:de:
87:a1:82:07:b7:c4:90:d8:7e:c7:ef:00:de:2f:df:57:2d:ad:
b2:fd:2e:b8:27:05:26:ad:3a:a9:3a:8c:45:9a:71:c6:97:18:
2f:d0:2c:71:8a:c3:f2:b4:3d:7a:d8:27:f2:b4:ad:19:17:b6:
7e:c0:1c:ed:3a:e8:24:6a:a0:7f:4f:07:ca:5e:5b:7b:44:8c:
3e:a1:56:fc:22:06:b3:51:03:e4:1e:53:42:91:73:83:ad:41:
65:10:fe:20:17:99:22:65:6c:fe:75:d6:f2:04:f8:81:9f:56:
50:d1:a3:11:d8:36:35:d7:00:83:05:66:8b:cf:b3:12:81:2d:
48:7a:d0:59:7f:67:ae:2d:a0:42:f1:1b:06:b9:19:ba:24:58:
c0:b3:36:af:59:70:bb:71:59:f0:2b:9a:f0:1d:02:d3:70:cc:
b4:79:55:0d:8b:f4:ec:ed:58:a9:45:e5:01:5a:88:06:89:2c:
66:97:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org