Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m2MwjMLLU1tCdXnifXk1127Omms.roa
File: m2MwjMLLU1tCdXnifXk1127Omms.roa (raw, json)
Hash identifier: Nx15jGmLSMcOTuGYB22YuoXcQ9zGByLO78YM9EDROHE=
Subject key identifier: 9B:63:30:8C:C2:CB:53:5B:42:75:79:E2:7D:79:35:D7:6E:CE:9A:6B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918EB92137D59F669E912D07501233EE1D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m2MwjMLLU1tCdXnifXk1127Omms.roa
Signing time: Mon 26 Aug 2024 12:46:22 +0000
ROA not before: Mon 26 Aug 2024 12:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/20 maxlen: 20
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 20
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.192.0/20 maxlen: 20
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Aug 2024 07:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:b9:21:37:d5:9f:66:9e:91:2d:07:50:12:33:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 12:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b63308cc2cb535b427579e27d7935d76ece9a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:1c:50:73:83:43:6b:78:87:1c:b4:cf:09:
ed:5c:da:a7:c2:66:7d:24:d6:dd:e5:b8:c5:01:1f:
77:42:a1:06:ec:cf:a4:70:4a:ab:e8:ee:8b:db:1a:
fc:18:ba:b0:4b:e3:34:f9:56:6f:83:e2:e7:02:a7:
38:41:c4:15:a0:62:e1:b6:c3:96:01:f4:16:88:98:
2f:10:e9:52:35:d5:b3:5f:d5:01:bc:f9:d7:16:d1:
b7:b2:16:6e:cc:70:4b:4b:31:64:91:f7:f8:f3:e7:
c8:67:e0:bf:5d:aa:c8:65:06:aa:4c:01:af:ff:a3:
b0:5e:64:75:3f:af:4b:c3:cb:84:1a:78:2e:11:08:
4b:f4:fc:a7:37:27:7c:88:90:4d:18:f9:ab:6f:0b:
41:d6:73:da:39:70:67:b6:cc:45:bd:27:38:49:48:
b8:c0:aa:2b:0d:bb:fa:7e:3e:fc:80:fe:67:0c:60:
7c:1d:ad:dc:78:56:99:a8:c2:17:ea:bc:f7:7c:1c:
8f:ea:31:2b:31:61:7a:bb:c3:ee:63:ff:c1:6e:0a:
10:66:2a:91:b8:ed:83:62:64:c3:55:f4:bb:03:c9:
4f:0c:3e:85:6f:a2:f5:53:23:63:ac:5f:d9:f0:db:
40:59:d1:a3:c8:45:c8:b6:08:11:7e:05:d7:20:5e:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:30:8C:C2:CB:53:5B:42:75:79:E2:7D:79:35:D7:6E:CE:9A:6B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m2MwjMLLU1tCdXnifXk1127Omms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0-62.183.50.255
62.183.52.0-62.183.75.255
62.183.88.0/22
62.183.96.0/22
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
5a:e8:dd:95:48:29:41:d6:3a:70:f7:fa:d7:26:be:5e:ba:e2:
d1:32:13:58:32:36:03:a0:a9:22:33:70:44:70:be:ae:91:6a:
ce:54:28:b8:65:07:c5:22:fb:8c:7e:64:f4:ce:73:57:17:7b:
13:02:84:62:3c:06:37:ee:49:ef:33:0e:d4:e1:66:75:52:f1:
c0:52:39:05:0f:0b:41:26:27:d1:ef:ef:e7:c9:ff:ea:35:ff:
45:b7:d7:b8:64:12:9e:3e:e6:30:4e:15:79:17:03:e8:42:4b:
f9:c1:37:52:c3:74:2a:8e:cb:5b:94:77:15:97:92:fa:e2:83:
7e:f5:66:d2:49:61:f3:07:9e:1f:a1:6e:ae:b1:c5:6c:09:0a:
df:80:2e:c1:0d:96:95:d4:1e:d3:ac:20:28:6c:19:d8:a6:7c:
39:24:f2:31:2b:60:d6:f9:7d:6a:d3:8e:61:e7:18:39:9f:97:
25:07:e3:c3:92:67:2c:ec:c2:33:bb:cb:cb:ee:ab:93:de:73:
13:2d:df:00:e4:b6:68:ff:ce:72:d8:16:1f:af:66:95:6c:f4:
32:fd:9d:05:e6:01:fb:78:0a:81:88:df:e0:42:a2:4c:26:e3:
34:7b:c3:37:56:65:50:cf:e9:16:69:c1:36:3b:4c:96:f7:5c:
5d:42:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:29:56 2025 by rpki-client