Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/zKhCCusStKiKG1Q0m3ak3JB_EnM.roa
File: zKhCCusStKiKG1Q0m3ak3JB_EnM.roa (raw, json)
Hash identifier: UMN/Uvglx+kNATYDuUwif8uM8oBF8zS/zqPV9WWriMM=
Subject key identifier: CC:A8:42:0A:EB:12:B4:A8:8A:1B:54:34:9B:76:A4:DC:90:7F:12:73
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01916EC2239AB9BD0930B01030BA9DB0209A
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/zKhCCusStKiKG1Q0m3ak3JB_EnM.roa
Signing time: Tue 20 Aug 2024 07:48:22 +0000
ROA not before: Tue 20 Aug 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.93.43.0/24 maxlen: 24
103.111.0.0/24 maxlen: 24
103.111.1.0/24 maxlen: 24
103.111.2.0/24 maxlen: 24
103.111.3.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.133.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.153.124.0/22 maxlen: 24
185.153.124.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 11:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:c2:23:9a:b9:bd:09:30:b0:10:30:ba:9d:b0:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Aug 20 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cca8420aeb12b4a88a1b54349b76a4dc907f1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:f4:b7:5c:37:fa:9d:3c:90:74:d4:0d:3c:
ba:fc:cb:a1:e2:9c:1c:fb:8e:b8:a5:b8:92:10:17:
7a:f5:fc:f3:8b:c1:00:1d:3c:4d:83:12:09:42:ab:
38:10:be:ae:a8:4c:2d:38:97:c7:13:89:e1:b2:c9:
1c:ce:87:a7:d9:ea:9d:da:6c:49:03:1c:f1:aa:ec:
9a:b7:df:80:1d:ef:d1:22:56:90:5b:b2:de:a4:00:
b9:cf:b4:7f:17:1d:d9:11:2f:16:76:37:20:02:02:
e1:4e:af:da:da:37:c6:1d:1c:6e:96:e4:43:9c:02:
07:9f:71:2c:90:2d:e2:35:21:35:3d:25:8d:a4:6f:
cb:33:33:3b:ff:f3:a4:b1:a0:c3:52:6a:e8:d3:93:
1b:ec:ae:b7:88:20:16:b1:00:33:a9:c4:99:aa:93:
b2:e3:71:48:64:77:7c:50:71:5d:47:ca:22:10:f3:
53:38:ca:6b:55:47:db:62:bb:df:0e:99:44:3d:d3:
0a:fd:ae:96:49:23:83:f0:ef:4d:04:c8:58:59:ba:
59:99:bb:64:88:96:b6:e4:4b:53:2c:cd:b4:b0:00:
66:e6:9b:24:8a:28:a6:ff:2a:b2:5c:70:9f:3c:2c:
b8:24:9a:76:af:32:dc:84:28:74:e5:e9:58:48:0f:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A8:42:0A:EB:12:B4:A8:8A:1B:54:34:9B:76:A4:DC:90:7F:12:73
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/zKhCCusStKiKG1Q0m3ak3JB_EnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.24.0/22
103.93.40.0/22
103.111.0.0/22
109.104.132.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/22
185.153.124.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
6d:10:a8:4f:8f:e6:7b:2b:67:0a:4f:ef:9c:59:96:ed:88:a6:
73:71:03:11:6f:e0:2a:ba:3d:cb:cd:fe:78:4a:04:a8:f4:99:
b4:61:0d:6d:29:48:da:d6:65:b5:56:b6:9c:cf:ad:53:41:ed:
f2:a3:ce:f5:cc:37:28:95:17:c1:e3:12:7e:7a:c7:74:d5:ee:
e1:c4:98:cd:b5:ec:e5:a2:51:23:7e:e7:c1:4c:aa:bc:f2:52:
ac:47:65:49:09:f7:f2:6f:2c:d5:59:fb:eb:a6:44:e0:3b:37:
f0:36:fe:bf:65:aa:20:d9:1c:59:25:1e:d6:c1:13:a4:eb:a2:
7b:6b:6c:a4:83:f5:7f:df:2d:62:dc:5f:35:87:ab:6a:1a:fd:
61:85:08:fb:cd:33:c4:0a:d6:8d:81:83:6a:63:24:d7:fb:85:
d8:b4:6e:50:52:52:22:d1:21:c0:d1:bd:46:fb:65:b1:1d:04:
50:07:23:ac:17:a2:08:93:fd:63:76:21:06:f5:2a:4c:ab:61:
e7:88:e2:8f:ec:0a:2d:30:48:ad:43:50:1f:95:ca:ba:70:7b:
25:21:65:4d:b2:0f:70:31:fb:9e:4f:77:66:7b:6c:11:34:f9:
4f:5b:a7:ef:f1:20:dc:ac:eb:57:a3:86:ca:79:e3:b9:b5:3e:
69:15:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:43 2025 by rpki-client