Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Ec_WaeT2AlVdql1SWKTzCj1u2is.roa
File: Ec_WaeT2AlVdql1SWKTzCj1u2is.roa (raw, json)
Hash identifier: vEHSwo1q0J5FiQ7kQePBiRKP9wPr8zdbZGdfDDBtEow=
Subject key identifier: 11:CF:D6:69:E4:F6:02:55:5D:AA:5D:52:58:A4:F3:0A:3D:6E:DA:2B
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018CCA294C4F51892273AB35385A906F86AB
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Ec_WaeT2AlVdql1SWKTzCj1u2is.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.249.0/24 maxlen: 24
31.214.248.0/24 maxlen: 24
31.214.248.0/21 maxlen: 21
31.214.253.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.136.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
134.255.206.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.200.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.252.0/24 maxlen: 24
95.156.255.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
109.230.206.0/24 maxlen: 24
109.230.205.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.204.0/24 maxlen: 24
109.230.200.0/24 maxlen: 24
109.230.207.0/24 maxlen: 24
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.175.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
82.99.216.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.215.0/24 maxlen: 24
82.99.219.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
91.98.97.0/24 maxlen: 24
91.98.96.0/21 maxlen: 21
91.98.96.0/24 maxlen: 24
91.98.98.0/24 maxlen: 24
91.98.102.0/24 maxlen: 24
91.98.100.0/24 maxlen: 24
91.98.99.0/24 maxlen: 24
91.98.31.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
91.98.28.0/24 maxlen: 24
91.98.28.0/22 maxlen: 22
91.98.30.0/24 maxlen: 24
91.98.29.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
185.13.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 22:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4c:4f:51:89:22:73:ab:35:38:5a:90:6f:86:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cfd669e4f602555daa5d5258a4f30a3d6eda2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:9c:f5:4e:26:f1:4a:6d:b9:5d:03:d0:55:
d1:79:04:92:21:56:d1:78:00:4c:ee:5f:4d:37:7c:
ce:9e:81:8c:fa:af:5d:47:3c:c8:66:01:d8:4f:21:
fe:c7:7e:bc:f4:34:0a:2b:41:13:f7:bd:b6:d2:cb:
13:17:69:8e:2c:6d:42:56:7d:e2:2b:76:eb:90:6b:
16:f2:b2:65:80:e3:ee:d0:d8:58:72:70:1f:5e:ba:
46:24:2b:4f:9c:f6:2a:ab:9e:03:a6:46:71:97:34:
d3:75:ed:26:6c:58:43:f4:98:29:41:94:da:f0:f3:
3d:0d:1d:56:4a:e2:98:38:d5:18:0e:fb:b8:b1:13:
29:e5:14:44:eb:03:ac:56:59:dc:61:33:6b:a3:14:
27:c7:9a:10:0e:ae:b2:68:2a:da:f3:2e:c5:58:3d:
49:11:cd:6f:7a:fb:a1:54:e2:23:25:a6:7b:aa:97:
3b:bf:2a:27:55:5f:70:56:4c:ad:ee:f5:6f:35:57:
59:34:ae:09:89:12:aa:68:ab:bb:fb:e2:a7:48:36:
67:c0:8a:5a:64:8c:93:67:95:f1:18:37:65:2f:7e:
f0:5e:ee:c1:76:82:49:8b:a9:0c:ae:46:02:23:94:
0e:a0:14:bd:e5:69:65:7e:03:3d:5f:9d:89:81:d1:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:D6:69:E4:F6:02:55:5D:AA:5D:52:58:A4:F3:0A:3D:6E:DA:2B
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Ec_WaeT2AlVdql1SWKTzCj1u2is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
91.98.28.0/22
91.98.96.0/21
95.156.236.0/23
95.156.252.0/22
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:09:72:58:98:64:e6:c3:94:0c:83:32:66:db:3c:5d:a8:ff:
4f:fb:fe:19:47:2c:3c:4c:bd:db:85:ce:e0:57:06:26:e6:7c:
f7:cd:88:31:f5:ae:d9:2b:cc:34:17:b2:21:da:32:f3:87:fa:
5e:99:2f:6d:a6:7c:77:6b:60:d0:f6:a7:2b:53:9b:0e:f6:43:
5c:6d:2c:ce:e5:be:85:ea:0f:9b:de:69:97:32:fd:55:00:15:
eb:e0:df:41:54:05:ea:a8:43:c3:7e:10:93:1b:30:ef:54:dd:
d0:04:7b:51:5e:10:f3:a2:e8:7e:3b:8c:d1:63:d8:94:93:5c:
92:94:f1:9f:a6:0a:ba:cf:fd:5a:97:d1:ff:71:5f:e4:e1:f0:
44:0e:2f:e6:1b:34:56:68:33:67:4e:80:72:53:be:f4:9e:c1:
af:df:b1:dd:e8:1a:cd:5c:d5:66:63:d7:8b:7c:00:59:44:da:
5a:c5:b9:24:68:f2:3e:15:7b:1d:20:94:d1:af:dd:34:06:d6:
7c:30:d6:00:f7:9b:53:ed:3a:ca:b4:a0:38:aa:fb:9f:80:c1:
db:de:36:7a:ca:28:4f:b6:70:ea:5d:5f:7e:08:1b:79:8d:15:
ec:cc:c5:8e:b6:49:7d:bd:e8:51:f6:2c:02:03:9e:6f:58:26:
c0:89:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org