Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XVbuolgo6xaAO9iDVwL6iH0DIYQ.roa
File: XVbuolgo6xaAO9iDVwL6iH0DIYQ.roa (raw, json)
Hash identifier: SL9IKNRDijxwpm7MPJzJ4iQnLLUkJlBgdgCiG0278T8=
Subject key identifier: 5D:56:EE:A2:58:28:EB:16:80:3B:D8:83:57:02:FA:88:7D:03:21:84
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018CCA294B782905EE97209817A11B4362A4
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XVbuolgo6xaAO9iDVwL6iH0DIYQ.roa
Signing time: Tue 02 Jan 2024 12:32:32 +0000
ROA not before: Tue 02 Jan 2024 12:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.192.0/18 maxlen: 18
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
31.214.146.0/23 maxlen: 23
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.225.0/24 maxlen: 24
82.99.224.0/19 maxlen: 19
82.99.232.0/24 maxlen: 24
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.230.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.224.0/24 maxlen: 24
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.82.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
109.230.242.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
109.230.247.0/24 maxlen: 24
95.156.233.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 09 May 2024 22:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4b:78:29:05:ee:97:20:98:17:a1:1b:43:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 2 12:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d56eea25828eb16803bd8835702fa887d032184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:16:23:9b:e7:27:6a:63:80:8f:6e:fa:d9:
11:66:b5:6c:8b:e8:d0:9e:6a:3b:74:0b:6e:a6:1b:
f6:c8:23:e4:7f:35:ee:9c:78:dd:3f:2d:2e:44:f7:
5e:19:8c:7f:31:cd:e1:b5:88:65:b6:9a:c3:d5:41:
02:5c:d8:49:19:e8:45:01:22:89:3c:6d:f4:81:89:
b6:b3:45:da:fa:6c:da:b6:f6:73:45:0d:c1:6f:0d:
cb:36:f7:f5:f5:11:6c:68:db:59:62:b6:da:5d:f8:
e4:f6:73:7b:69:0d:fe:5f:78:ff:e8:35:63:a3:1c:
5e:42:05:da:38:0b:a8:bd:0d:96:c5:4a:12:46:81:
47:66:46:76:54:12:a1:bf:87:80:12:e4:1c:c0:f3:
b1:bb:07:0a:40:3c:d2:37:e4:76:a9:d5:df:62:e2:
1e:2e:e8:85:24:0e:0b:f1:aa:54:ff:6c:1f:7d:2f:
ab:97:37:26:72:1a:ff:c8:b3:ec:06:2a:99:5e:67:
c4:88:c4:c4:ab:b8:c1:06:30:73:84:fc:4e:35:d1:
9a:1b:eb:6d:a1:6b:41:71:4b:41:b2:2e:7f:61:39:
10:9b:98:15:2b:f4:ed:84:fc:d0:80:e2:28:77:2b:
de:be:5e:b3:59:f1:63:63:b1:16:a4:33:42:4e:8f:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:EE:A2:58:28:EB:16:80:3B:D8:83:57:02:FA:88:7D:03:21:84
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XVbuolgo6xaAO9iDVwL6iH0DIYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/16
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
185.10.71.0/24
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
73:39:14:3d:68:5e:8a:46:37:27:b0:d5:83:78:6c:3e:01:84:
a0:01:fe:74:bc:44:09:5b:64:c0:79:51:56:b6:0c:2a:8d:9d:
25:8c:15:51:62:9a:22:88:40:06:72:65:eb:f4:7c:63:6f:cd:
d8:50:da:dc:a8:8a:1e:57:2e:cf:83:c7:29:b1:66:fc:2c:6b:
6a:37:6b:aa:d2:19:1c:e4:86:b2:61:b7:3d:81:1e:97:51:de:
e9:0e:d0:ab:06:45:6e:db:34:14:67:cc:ba:a2:d9:35:87:dd:
06:3a:04:84:0b:88:08:3b:c1:60:33:86:31:fe:b3:d2:fd:b4:
88:c9:d9:df:8b:c0:5d:ca:6e:4f:ae:a7:b2:3f:2b:19:15:e9:
04:97:a3:de:c0:ce:75:79:b7:65:2f:85:54:d4:50:8d:94:ef:
61:4b:7c:aa:6e:e5:bb:92:ba:c6:5a:52:49:e7:9d:65:ee:fe:
45:fe:61:72:51:f9:b7:c4:0b:eb:74:72:a5:db:85:82:3f:61:
0c:bd:a2:12:7e:75:90:08:ad:47:be:2c:5c:40:ef:b8:fd:9f:
50:4f:23:33:ef:ce:e2:fb:f8:dd:22:10:1b:5b:df:3b:47:8c:
45:d2:b6:6b:69:5a:f8:78:93:59:f1:72:e7:31:79:5b:e9:a0:
93:5e:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org