Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/0Z4ctlJMrGm73xq3MrM_nz055fg.roa
File: 0Z4ctlJMrGm73xq3MrM_nz055fg.roa (raw, json)
Hash identifier: SceeN6nLCo3O8NtH3Qs7WKXVDkR+l9yQOao8b/IQ3aw=
Subject key identifier: D1:9E:1C:B6:52:4C:AC:69:BB:DF:1A:B7:32:B3:3F:9F:3D:39:E5:F8
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0194403F5200C5FC2312B8E2060D894E3919
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/0Z4ctlJMrGm73xq3MrM_nz055fg.roa
Signing time: Tue 07 Jan 2025 10:11:19 +0000
ROA not before: Tue 07 Jan 2025 10:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.69.32.0/24 maxlen: 24
103.69.33.0/24 maxlen: 24
103.69.34.0/24 maxlen: 24
103.69.35.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.93.43.0/24 maxlen: 24
103.111.0.0/24 maxlen: 24
103.111.1.0/24 maxlen: 24
103.111.2.0/24 maxlen: 24
103.111.3.0/24 maxlen: 24
103.254.240.0/24 maxlen: 24
103.254.241.0/24 maxlen: 24
103.254.242.0/24 maxlen: 24
103.254.243.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.153.124.0/22 maxlen: 24
185.153.124.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 11:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:3f:52:00:c5:fc:23:12:b8:e2:06:0d:89:4e:39:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 7 10:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19e1cb6524cac69bbdf1ab732b33f9f3d39e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:5c:a6:33:ba:ce:cd:19:e9:75:6a:6e:44:
b9:96:65:97:58:db:69:c8:c6:c7:97:09:2d:1e:10:
76:a4:dd:94:a6:bb:06:b3:34:79:ad:40:5f:49:15:
7b:1a:16:cd:0e:6e:b8:60:d3:f3:f6:f0:47:27:9f:
4f:db:10:fe:0a:9a:dd:b5:9c:75:10:8a:cc:f3:a9:
b8:fe:e8:0c:9a:b8:89:1d:ae:7a:d2:a1:c4:68:3b:
9e:80:49:32:b7:30:c0:e3:77:05:ec:39:da:74:75:
48:94:c6:6b:3e:73:41:8e:44:20:d2:47:f4:c3:56:
8e:66:b1:2c:ee:00:7f:49:ac:5b:44:3e:21:0d:9c:
a1:fc:73:71:65:d0:9a:0c:fd:c0:a9:09:fd:88:38:
bd:ba:93:bc:0f:c4:be:a0:76:36:4d:1f:0f:3e:c0:
25:ff:4f:99:47:70:d3:a2:e4:c2:c1:35:a2:e8:cd:
0b:62:d9:79:14:57:49:aa:91:37:7b:df:a1:a9:9c:
6b:6b:b9:6b:7e:8d:89:5b:da:8b:ce:52:98:1e:3e:
15:29:17:5a:48:d4:84:53:91:7c:8e:d8:44:75:63:
66:ea:be:81:c4:32:3a:f4:08:c6:8f:34:d3:56:78:
84:47:55:ff:1f:3b:16:5e:89:81:bd:c3:bf:52:1e:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:1C:B6:52:4C:AC:69:BB:DF:1A:B7:32:B3:3F:9F:3D:39:E5:F8
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/0Z4ctlJMrGm73xq3MrM_nz055fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.25.0-45.142.27.255
103.69.32.0/22
103.93.40.0/22
103.111.0.0/22
103.254.240.0/22
109.104.132.0/24
109.104.135.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/22
185.153.124.0/22
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
7c:fe:8a:a3:5e:2b:dc:25:a7:9a:11:30:2d:c3:e0:f2:50:b0:
90:7e:8b:fa:bb:f0:78:d2:c5:26:e0:de:d0:65:84:26:3a:8b:
2f:fb:f2:10:ab:b0:e8:a3:39:4b:02:33:50:a3:2d:84:ef:a1:
bd:52:be:d3:c3:0d:43:c0:6c:bf:75:bd:ea:39:00:87:f1:56:
f7:bc:b1:9b:b7:45:fc:3b:dd:a0:23:6c:ba:bb:13:c0:2d:4f:
1a:cb:43:fa:ae:d1:40:74:a3:3d:76:ed:49:ad:bb:b2:25:3a:
bd:3d:8b:c4:8a:65:a0:49:5e:ed:7e:c3:e0:6f:ce:48:01:4d:
36:07:1b:6f:60:56:9b:41:db:f2:ac:7e:23:85:cf:a4:8e:b6:
0c:c0:1e:24:95:74:c8:9b:d4:7a:b4:0c:40:31:85:d7:d8:e5:
d6:7e:e3:00:68:58:7f:3e:a7:95:78:97:99:4e:c1:7c:e2:5f:
a0:6f:bb:5c:66:43:84:0e:35:51:2b:d0:7c:44:64:66:ff:4d:
a1:c6:85:53:0a:f4:f7:c2:e9:c4:22:42:0c:60:bd:a9:81:d3:
2c:ef:21:21:65:f2:c7:68:f0:54:61:82:1a:ed:08:b2:4e:3e:
cf:dd:9a:a2:a0:e6:a6:7e:ba:14:92:6c:a9:67:e4:0d:aa:fe:
03:ac:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client