Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7NqY1T-m8b_AVQpPPSnmO8_UdY.roa
File: v7NqY1T-m8b_AVQpPPSnmO8_UdY.roa (raw, json)
Hash identifier: c524eNmeCx4Nx84MZgkORGJpXGj0CjX2WpwCr0REGyI=
Subject key identifier: BF:B3:6A:63:54:FE:9B:C6:FF:01:54:29:3C:F4:A7:98:EF:3F:51:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191FFDF3CA8BE4A9EFF9E08DFBA940AFB9E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7NqY1T-m8b_AVQpPPSnmO8_UdY.roa
Signing time: Tue 17 Sep 2024 12:05:05 +0000
ROA not before: Tue 17 Sep 2024 12:05:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 31.13.195.0/24 maxlen: 32
31.13.197.0/24 maxlen: 32
31.13.208.0/24 maxlen: 32
31.13.216.0/21 maxlen: 32
31.13.217.0/24 maxlen: 32
31.13.221.0/24 maxlen: 32
31.13.223.0/24 maxlen: 32
31.13.230.0/23 maxlen: 32
31.13.236.0/22 maxlen: 32
31.13.241.0/24 maxlen: 32
31.13.245.0/24 maxlen: 32
37.60.138.0/24 maxlen: 32
37.60.139.0/24 maxlen: 32
45.81.38.0/24 maxlen: 32
82.115.210.0/24 maxlen: 32
83.143.115.0/24 maxlen: 32
85.217.140.0/24 maxlen: 32
87.120.6.0/23 maxlen: 32
87.120.6.0/24 maxlen: 32
87.120.8.0/24 maxlen: 32
87.120.13.0/24 maxlen: 32
87.120.37.0/24 maxlen: 32
87.120.39.0/24 maxlen: 32
87.120.43.0/24 maxlen: 32
87.120.61.0/24 maxlen: 32
87.120.104.0/24 maxlen: 32
87.120.109.0/24 maxlen: 32
87.120.128.0/23 maxlen: 32
87.120.132.0/24 maxlen: 32
87.120.133.0/24 maxlen: 32
87.120.134.0/24 maxlen: 32
87.120.135.0/24 maxlen: 32
87.120.165.0/24 maxlen: 32
87.120.176.0/24 maxlen: 32
87.120.195.0/24 maxlen: 32
87.120.199.0/24 maxlen: 32
87.120.200.0/24 maxlen: 32
87.120.201.0/24 maxlen: 32
87.120.206.0/23 maxlen: 32
87.120.206.0/24 maxlen: 32
87.120.207.0/24 maxlen: 32
87.120.217.0/24 maxlen: 32
87.120.223.0/24 maxlen: 32
87.120.253.0/24 maxlen: 32
87.120.254.0/24 maxlen: 32
87.120.255.0/24 maxlen: 32
87.121.0.0/23 maxlen: 32
87.121.0.0/24 maxlen: 32
87.121.1.0/24 maxlen: 32
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 32
87.121.42.0/24 maxlen: 32
87.121.52.0/24 maxlen: 32
87.121.64.0/24 maxlen: 32
87.121.82.0/24 maxlen: 32
87.121.83.0/24 maxlen: 32
87.121.90.0/23 maxlen: 32
87.121.110.0/24 maxlen: 32
87.121.111.0/24 maxlen: 32
87.121.112.0/24 maxlen: 32
87.121.113.0/24 maxlen: 32
87.121.118.0/24 maxlen: 32
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 32
91.92.0.0/24 maxlen: 32
91.92.1.0/24 maxlen: 32
91.92.2.0/24 maxlen: 32
91.92.65.0/24 maxlen: 32
91.92.66.0/24 maxlen: 32
91.92.105.0/24 maxlen: 32
91.92.109.0/24 maxlen: 32
91.92.139.0/24 maxlen: 32
91.92.197.0/24 maxlen: 32
91.92.198.0/23 maxlen: 32
91.92.219.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
91.212.233.0/24 maxlen: 32
92.249.49.0/24 maxlen: 32
93.123.8.0/24 maxlen: 32
93.123.12.0/24 maxlen: 32
93.123.18.0/24 maxlen: 32
93.123.28.0/23 maxlen: 32
93.123.32.0/22 maxlen: 32
93.123.36.0/24 maxlen: 32
93.123.37.0/24 maxlen: 32
93.123.64.0/24 maxlen: 32
93.123.117.0/24 maxlen: 32
94.156.12.0/24 maxlen: 32
94.156.15.0/24 maxlen: 32
94.156.24.0/24 maxlen: 32
94.156.25.0/24 maxlen: 32
94.156.42.0/24 maxlen: 32
94.156.44.0/24 maxlen: 32
94.156.77.0/24 maxlen: 32
94.156.94.0/24 maxlen: 32
94.156.98.0/24 maxlen: 32
94.156.100.0/24 maxlen: 32
94.156.106.0/24 maxlen: 32
94.156.129.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.153.0/24 maxlen: 32
94.156.158.0/24 maxlen: 32
94.156.159.0/24 maxlen: 32
94.156.172.0/23 maxlen: 32
94.156.179.0/24 maxlen: 32
94.156.185.0/24 maxlen: 32
94.156.188.0/24 maxlen: 32
94.156.190.0/24 maxlen: 32
94.156.216.0/21 maxlen: 32
94.156.227.0/24 maxlen: 32
94.156.232.0/24 maxlen: 32
94.156.233.0/24 maxlen: 32
94.156.249.0/24 maxlen: 32
94.156.251.0/24 maxlen: 32
94.156.252.0/24 maxlen: 32
194.55.184.0/23 maxlen: 32
194.169.173.0/24 maxlen: 32
212.73.128.0/23 maxlen: 32
212.73.130.0/23 maxlen: 32
212.73.131.0/24 maxlen: 32
212.73.132.0/24 maxlen: 32
212.73.133.0/24 maxlen: 32
212.73.134.0/24 maxlen: 32
212.73.136.0/24 maxlen: 32
212.73.138.0/23 maxlen: 32
212.73.138.0/24 maxlen: 32
212.73.140.0/24 maxlen: 32
212.73.141.0/24 maxlen: 32
212.73.142.0/24 maxlen: 32
212.73.143.0/24 maxlen: 32
212.73.144.0/24 maxlen: 32
212.73.145.0/24 maxlen: 32
212.73.146.0/24 maxlen: 32
212.73.147.0/24 maxlen: 32
212.73.148.0/24 maxlen: 32
212.73.155.0/24 maxlen: 32
212.73.157.0/24 maxlen: 32
212.87.207.0/24 maxlen: 32
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Sep 2024 13:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:df:3c:a8:be:4a:9e:ff:9e:08:df:ba:94:0a:fb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 12:05:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb36a6354fe9bc6ff0154293cf4a798ef3f51d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:b1:13:10:b7:31:6d:5c:d8:c7:ea:fb:e8:
97:b0:4b:93:4d:be:64:12:4c:ee:ed:d6:76:8a:d3:
46:6f:38:db:eb:26:9e:36:64:2f:59:05:1a:61:90:
dc:3e:50:2c:7e:f4:66:0f:6d:35:c4:de:c1:37:62:
de:72:6d:61:1f:b7:2d:48:5b:3e:94:19:8f:f5:2f:
05:25:bc:14:6d:e9:79:f6:cb:38:d1:84:a4:69:02:
ff:78:4a:92:1b:63:76:f1:02:4c:a5:95:f2:e2:4b:
66:41:a4:f1:d2:65:87:94:15:f8:27:d7:cd:ac:20:
bd:59:b5:30:b6:e8:08:8c:cd:4f:a3:dc:ec:19:e7:
3d:4e:63:3f:ed:01:38:25:61:63:d8:38:57:43:6f:
b2:5f:02:85:03:4f:f5:38:16:51:25:c6:29:c4:a3:
d4:53:c5:a6:f5:56:51:25:87:2a:e6:ff:5e:2d:21:
cf:42:3c:12:ca:c7:61:83:7b:2a:be:99:e7:95:63:
aa:df:6f:72:f3:55:a8:a6:06:e9:4f:19:4c:52:33:
6d:df:25:8f:f7:aa:18:42:88:31:d5:15:0b:85:1a:
fe:2c:4c:ae:2c:f0:0f:52:f7:8f:13:3b:62:8b:42:
e7:fa:df:ad:28:7c:69:e7:e8:91:ee:f6:87:b6:57:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:6A:63:54:FE:9B:C6:FF:01:54:29:3C:F4:A7:98:EF:3F:51:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7NqY1T-m8b_AVQpPPSnmO8_UdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
af:53:ba:6b:5c:d6:14:2b:ba:40:fb:d0:ed:a9:fd:4d:17:f5:
f6:be:01:12:84:d0:54:22:fe:ca:f3:58:80:9a:51:35:d1:e4:
58:f4:73:a1:67:fb:e2:62:40:64:38:49:ae:9f:22:a7:5e:ea:
3d:78:02:10:86:be:69:0b:27:d2:9f:d1:2e:c6:12:74:16:d5:
de:0f:d8:d1:1e:76:6d:89:c8:3f:f0:9c:8c:b8:f8:1a:29:1d:
29:5c:74:b2:78:d2:dd:98:78:ae:65:50:38:16:56:9c:34:66:
76:d1:67:ea:47:3c:2d:0c:77:14:62:d5:c4:ed:30:ec:b2:27:
d0:c6:73:77:42:a6:a1:15:4d:a2:3d:5a:7a:4a:1f:5f:69:48:
e2:bd:e0:32:09:9c:5c:e4:d4:17:4e:5a:b9:ae:0a:9d:75:aa:
76:77:94:b4:d7:e2:cd:f1:01:d1:a4:36:96:b7:8a:ff:76:ff:
d0:46:36:2c:37:bf:af:f9:bc:83:2b:00:01:90:be:c2:eb:fc:
b9:1e:02:c2:e9:e9:6c:ad:5b:77:2c:f6:e8:dc:ed:91:c8:dd:
59:96:54:07:24:a4:a9:42:64:da:9d:45:97:c3:50:25:a9:6f:
9d:cc:bf:9a:4d:8d:7e:f3:d9:f4:89:8d:17:25:ea:5a:c9:52:
69:8c:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:43 2024 by rpki-client on console-fra.rpki-client.org