Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zNXQnPS3jIXp3QYarkwgEjYhFP0.roa
File: zNXQnPS3jIXp3QYarkwgEjYhFP0.roa (raw, json)
Hash identifier: ioW1CG+osOVvFoDsAt90Tx5MoxOZc4SPZ48znhX0Y2M=
Subject key identifier: CC:D5:D0:9C:F4:B7:8C:85:E9:DD:06:1A:AE:4C:20:12:36:21:14:FD
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018DB260252027ED6431257D1DA259195884
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zNXQnPS3jIXp3QYarkwgEjYhFP0.roa
Signing time: Fri 16 Feb 2024 14:44:21 +0000
ROA not before: Fri 16 Feb 2024 14:44:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.88.0/24 maxlen: 24
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
91.237.194.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.72.0/23 maxlen: 23
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.84.0/24 maxlen: 24
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 19 Apr 2024 13:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:60:25:20:27:ed:64:31:25:7d:1d:a2:59:19:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Feb 16 14:44:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd5d09cf4b78c85e9dd061aae4c2012362114fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:52:1f:1b:25:7d:f1:43:54:6e:aa:b3:31:
3e:0b:17:7c:68:40:5f:65:04:1d:b9:d2:5a:46:e9:
ca:55:03:3f:ed:26:79:08:e7:e4:25:2e:73:3d:10:
ce:19:53:8b:3a:9f:97:bf:52:ac:6d:4e:1a:a3:88:
1b:8b:df:49:28:1d:1f:b1:7d:70:8b:44:95:12:0f:
41:9c:42:b7:30:90:95:c2:2d:e1:e7:dd:2f:f5:ad:
88:47:a9:5a:f5:f8:e7:23:bc:11:a4:47:61:cb:38:
3a:78:dd:1e:28:44:c5:65:58:6f:c7:3a:32:2e:93:
45:74:b5:2a:9b:c0:6b:81:75:a8:87:7d:c2:a5:bb:
85:8b:0b:2c:5a:33:fa:db:39:57:13:2a:21:22:df:
12:9d:08:d2:06:01:bf:76:3b:61:15:1b:c9:c1:d4:
11:22:1c:2f:94:35:e2:0b:64:a7:48:34:f1:5b:6b:
88:b5:4c:58:fa:dd:8e:84:bc:76:ac:30:52:d4:78:
67:32:a9:f2:e5:54:af:56:84:29:ca:ed:09:f9:90:
8d:c4:04:b5:3b:b1:70:38:4c:c4:6d:23:5e:cc:a2:
06:0f:38:ff:72:18:6a:42:92:60:cc:53:78:50:41:
38:7c:68:b1:eb:30:da:d1:c0:a8:a6:31:1f:ee:8b:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:D0:9C:F4:B7:8C:85:E9:DD:06:1A:AE:4C:20:12:36:21:14:FD
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zNXQnPS3jIXp3QYarkwgEjYhFP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:2d:93:ba:b6:84:e8:64:0f:dd:b9:fd:ce:f4:d6:0b:fe:88:
04:90:6b:3a:fa:f6:a4:43:4d:53:51:8b:90:1a:9b:92:26:b1:
2a:a3:a5:0b:db:0b:2c:f1:a2:25:d5:d1:b5:63:3d:14:bb:c5:
e1:ea:ab:de:48:21:1d:27:be:4c:96:f3:c2:a9:46:fa:02:d4:
51:11:c1:71:99:14:34:93:6c:de:0d:1f:5d:e0:e2:43:56:6b:
35:19:08:51:c4:0f:ad:b6:76:af:56:44:6e:23:9a:28:57:38:
54:95:91:0a:e8:78:23:2b:df:8c:dd:61:fe:a0:ef:8d:93:fb:
ab:17:a7:98:4f:d7:c6:e7:85:ec:7b:d2:11:c4:05:95:a5:dc:
07:36:a7:eb:7b:04:9b:70:c3:dd:73:a3:dc:ae:f9:61:7a:eb:
51:b6:da:13:d7:1b:a4:b3:e2:13:45:04:c6:63:7b:9a:53:50:
fe:16:87:cb:df:c0:76:4a:54:f7:b8:a4:3d:37:3b:fd:c1:27:
a6:33:4f:9e:81:5e:e7:92:7e:e4:e8:a7:27:ce:a8:ea:f9:c3:
42:7f:1e:e2:e1:1d:e0:88:e4:42:3a:80:66:9a:b1:71:97:dc:
b2:fe:c8:55:75:a5:34:e9:89:20:5e:0b:9d:5f:31:09:24:9a:
5c:e2:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 18:28:16 2024 by rpki-client on console-ams.rpki-client.org