Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gqdy_92dF9CWiRHLq40z_mVKFAE.roa
File: gqdy_92dF9CWiRHLq40z_mVKFAE.roa (raw, json)
Hash identifier: 0kdbCbm5a87M5z6dMwCxJrMpWycavbgmW7T6a3Ap9yA=
Subject key identifier: 82:A7:72:FF:DD:9D:17:D0:96:89:11:CB:AB:8D:33:FE:65:4A:14:01
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01906C201020B0D5247156534E4F2008DA71
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gqdy_92dF9CWiRHLq40z_mVKFAE.roa
Signing time: Mon 01 Jul 2024 02:29:18 +0000
ROA not before: Mon 01 Jul 2024 02:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.184.0/23 maxlen: 23
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 09:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:20:10:20:b0:d5:24:71:56:53:4e:4f:20:08:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 1 02:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a772ffdd9d17d0968911cbab8d33fe654a1401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:3a:e7:c7:bf:47:92:43:5d:0b:be:4b:80:
78:40:c0:00:3f:c1:dd:49:24:c5:4a:aa:e7:c3:e2:
0f:38:a6:d7:c2:7f:f2:9e:bc:73:61:12:29:04:48:
d2:92:4c:b0:bb:4b:5e:6e:5e:92:4e:a1:42:58:44:
6b:d5:8f:ac:d4:3d:04:92:3e:7a:2d:1c:fe:1c:0e:
f3:2a:a2:e2:b3:d2:88:65:db:bb:62:9d:45:a8:76:
d1:e2:68:88:d3:58:85:18:3f:51:bf:ce:f1:dc:a7:
e3:c7:f2:fe:e9:96:fa:4e:e3:94:32:5b:f0:fb:ed:
29:38:1f:d7:57:8d:05:61:12:09:1a:d3:da:8a:d7:
59:d8:74:1e:44:82:ae:f2:00:2b:1a:e6:91:a3:36:
23:42:d5:8c:3b:1c:08:dc:3a:8d:2d:6d:a1:bc:a8:
54:71:24:d6:f0:c5:68:ef:61:52:f1:27:48:79:ed:
07:79:3a:5b:d6:e7:13:06:1b:24:8d:4b:ce:65:3f:
72:43:8c:d9:dd:80:5e:17:be:ff:5f:4f:3a:02:13:
56:9c:cc:cc:d8:62:4d:49:29:f4:3f:38:ec:35:4f:
ee:47:c0:3e:94:ca:61:52:c8:10:14:0f:d1:05:8e:
0b:19:a5:5b:90:c4:82:a0:dc:eb:4f:26:4a:3e:5b:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:72:FF:DD:9D:17:D0:96:89:11:CB:AB:8D:33:FE:65:4A:14:01
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gqdy_92dF9CWiRHLq40z_mVKFAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.180.0/24
46.229.96.0/20
90.157.5.0/24
90.157.16.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.68.0/22
90.157.78.0-90.157.83.255
90.157.109.0/24
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0/24
94.31.158.0/23
94.31.176.0/24
94.31.184.0/23
94.31.193.0-94.31.196.255
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.221.0/24
94.31.229.0/24
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.137.0/24
188.73.139.0/24
188.73.141.0/24
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.156.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.183.0/24
213.142.34.0/23
213.142.40.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c0:83:f5:aa:9a:79:4f:19:17:e2:39:a9:d0:af:55:de:d0:
d5:03:a1:03:f6:79:34:71:8a:b1:a1:33:5e:6c:90:33:a6:c4:
35:dd:87:55:8e:f4:24:e8:e6:c2:66:4b:5c:2b:1a:67:7f:19:
b2:f9:de:d0:26:b8:75:1f:5a:4c:c9:82:df:31:11:fd:21:27:
f8:d5:c6:e9:cc:a3:50:62:c9:30:ad:43:29:6a:27:8b:4c:48:
c7:22:f2:41:7f:f3:6e:4d:13:18:a5:bd:25:74:9f:5c:ed:32:
e1:3b:87:6f:b6:70:1b:2a:cb:dc:cb:65:c3:82:40:24:7c:a0:
af:0a:40:37:1c:2e:73:81:cf:16:e1:bb:b3:f7:38:08:1c:3f:
a2:f1:27:73:95:50:96:59:b6:8a:e8:e4:1e:16:1e:bb:de:e8:
16:4e:76:63:5b:93:31:b0:4a:7b:02:bf:fa:1d:7b:a2:23:d3:
25:a6:35:5e:85:95:43:82:a0:37:93:b4:a1:65:02:37:b0:fc:
07:b4:52:8e:c9:59:4c:2e:65:a7:7c:d3:53:10:44:79:51:fc:
ab:d2:13:a3:eb:a0:4e:8d:32:e4:28:66:d5:6a:27:65:54:b3:
11:9e:ab:6c:c6:3e:aa:2f:9c:76:87:89:5c:c4:04:6e:07:fc:
d2:8c:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:13:08 2025 by rpki-client