Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gD9DmhTqNzck9_emJx_mayAIcbc.roa
File: gD9DmhTqNzck9_emJx_mayAIcbc.roa (raw, json)
Hash identifier: siYGSH/D8nqIg1RaSinHojA5xRFwhhcFNhW9JKhhOqI=
Subject key identifier: 80:3F:43:9A:14:EA:37:37:24:F7:F7:A6:27:1F:E6:6B:20:08:71:B7
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018FED55A231DF34DF4E64C2D2332D2E4173
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gD9DmhTqNzck9_emJx_mayAIcbc.roa
Signing time: Thu 06 Jun 2024 11:36:03 +0000
ROA not before: Thu 06 Jun 2024 11:36:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.133.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 16:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:55:a2:31:df:34:df:4e:64:c2:d2:33:2d:2e:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 6 11:36:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=803f439a14ea373724f7f7a6271fe66b200871b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:15:0d:09:96:4b:1c:e9:28:5f:11:8f:e2:
fa:04:19:f4:c8:ad:ae:42:82:10:e1:69:18:c8:a2:
83:56:90:28:a5:cd:4e:ad:a7:2c:5e:0f:d1:11:54:
18:3c:8f:bc:e9:93:e7:d0:e4:91:f4:22:30:5a:65:
c7:73:fc:81:84:42:9f:92:7e:fb:a4:c3:57:3a:33:
01:c4:3c:68:09:53:18:99:06:50:09:a7:3f:0f:04:
b6:18:67:b8:d0:a2:c7:37:6d:b0:28:a8:65:57:42:
4b:9d:09:f2:c8:90:14:b1:e4:d6:b0:62:59:ee:c7:
c6:e6:15:3a:86:e9:28:06:8f:f7:3f:16:c5:b8:06:
43:8a:1d:05:44:2e:71:91:28:29:db:01:c5:8e:85:
a8:8d:dc:c0:2e:b0:7e:a2:11:58:50:0f:d4:74:7b:
fe:a3:68:d2:54:5e:f9:36:1a:b6:6d:ad:2c:52:cf:
a3:54:5d:9a:a8:0a:0a:40:d7:7f:f3:4f:fd:67:6a:
ca:9d:6c:cd:9e:d1:8b:21:6a:47:9a:b6:35:f2:4d:
71:af:03:93:51:70:b7:ad:1e:51:43:37:9d:66:00:
a3:85:1b:df:e1:f3:57:ac:24:6c:23:5a:56:f2:02:
e7:cd:5d:2b:0d:35:e6:fa:b0:c7:f0:af:84:21:56:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:43:9A:14:EA:37:37:24:F7:F7:A6:27:1F:E6:6B:20:08:71:B7
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gD9DmhTqNzck9_emJx_mayAIcbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.24.0/22
109.104.132.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
60:96:09:ef:1b:d7:23:17:d4:d2:7c:21:19:1b:20:a8:8c:e6:
ab:c3:f7:59:82:09:77:df:a2:1a:7f:33:ce:bb:40:07:52:e3:
ed:f1:3a:21:80:20:25:95:3d:4f:df:db:aa:93:b7:c2:a4:1f:
08:f7:32:a0:4c:f5:21:45:d3:d3:14:68:36:b2:60:e8:12:02:
f6:57:20:36:e4:90:70:f0:36:78:73:b8:34:f2:0c:91:79:6f:
fd:54:3c:2a:14:18:f9:3d:21:17:6e:89:a4:bb:04:f5:aa:4c:
53:b3:ab:6d:9e:e3:9d:d1:b8:cb:0c:62:c0:70:82:0e:3b:6d:
0c:7a:f7:2e:a6:10:54:66:86:62:e5:b2:62:76:08:c7:e5:51:
f4:83:05:b2:dd:44:72:00:82:fb:8f:99:57:c9:2c:13:06:65:
4f:cc:04:75:1e:ff:6e:f0:7c:60:e5:c3:df:c6:5b:65:7c:49:
a5:90:e1:ba:d7:84:3d:b5:56:a2:1d:3b:36:6e:ad:e6:cb:74:
af:21:a7:9b:2f:de:eb:14:34:3e:11:8c:20:f1:8b:99:7c:c9:
99:aa:7c:9d:ec:0b:bb:00:a3:86:19:2e:b1:c7:9a:ac:a9:4d:
5b:c4:ff:7a:94:72:4b:d6:df:df:f9:b1:63:b2:db:7c:86:20:
ad:f7:24:c2
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAY/tVaIx3zTfTmTC0jMtLkFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjQwNjA2MTEzNjAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDNmNDM5YTE0ZWEzNzM3MjRmN2Y3YTYyNzFmZTY2YjIwMDg3MWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllMVDQmWSxzpKF8Rj+L6BBn0yK2u
QoIQ4WkYyKKDVpAopc1OracsXg/REVQYPI+86ZPn0OSR9CIwWmXHc/yBhEKfkn77
pMNXOjMBxDxoCVMYmQZQCac/DwS2GGe40KLHN22wKKhlV0JLnQnyyJAUseTWsGJZ
7sfG5hU6hukoBo/3PxbFuAZDih0FRC5xkSgp2wHFjoWojdzALrB+ohFYUA/UdHv+
o2jSVF75Nhq2ba0sUs+jVF2aqAoKQNd/80/9Z2rKnWzNntGLIWpHmrY18k1xrwOT
UXC3rR5RQzedZgCjhRvf4fNXrCRsI1pW8gLnzV0rDTXm+rDH8K+EIVZrAwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFIA/Q5oU6jc3JPf3picf5msgCHG3MB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvZ0Q5RG1oVHFOemNrOV9lbUp4X21heUFJY2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzBEBAIAATA+AwQDH6uY
AwQCLY4YMAwDBAJtaIQDBARtaIADBAJtaJwDBAKQMDQDBAK5NWQDBAK56XwDBAHC
cVADBAHCcV4wUwQCAAIwTQMFAyoEJ8ADBQMqCW5AAwUDKgluwAMFAyoNJ8ADBQMq
DULAAwUDKg1KQAMFAyoOPwADBQMqDk8AAwUDKg7UwAMFAyoPQsADBQMqD6iAMA0G
CSqGSIb3DQEBCwUAA4IBAQBglgnvG9cjF9TSfCEZGyCojOarw/dZggl336IafzPO
u0AHUuPt8TohgCAllT1P39uqk7fCpB8I9zKgTPUhRdPTFGg2smDoEgL2VyA25JBw
8DZ4c7g08gyReW/9VDwqFBj5PSEXbomkuwT1qkxTs6ttnuOd0bjLDGLAcIIOO20M
evcuphBUZoZi5bJidgjH5VH0gwWy3URyAIL7j5lXySwTBmVPzAR1Hv9u8Hxg5cPf
xltlfEmlkOG614Q9tVaiHTs2bq3my3SvIaebL97rFDQ+EYwg8YuZfMmZqnyd7Au7
AKOGGS6xx5qsqU1bxP96lHJL1t/f+bFjstt8hiCt9yTC
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:09 2025 by rpki-client