Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4g8x43P0HpkF_sysgvVHzDt5FZQ.roa
File: 4g8x43P0HpkF_sysgvVHzDt5FZQ.roa (raw, json)
Hash identifier: zYzYRzUUvViju0LkCIsUeUI8DGnoDB7K7GcJbDMaCJQ=
Subject key identifier: E2:0F:31:E3:73:F4:1E:99:05:FE:CC:AC:82:F5:47:CC:3B:79:15:94
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 0192286C24104640BA0AA72FE67DC07911C4
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4g8x43P0HpkF_sysgvVHzDt5FZQ.roa
Signing time: Wed 25 Sep 2024 09:03:48 +0000
ROA not before: Wed 25 Sep 2024 09:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 5.134.0.0/21 maxlen: 24
31.14.50.0/23 maxlen: 24
31.193.176.0/21 maxlen: 24
37.72.160.0/21 maxlen: 24
37.148.176.0/21 maxlen: 24
62.182.56.0/21 maxlen: 21
77.73.96.0/21 maxlen: 24
77.241.80.0/20 maxlen: 24
77.241.83.0/24 maxlen: 24
77.241.87.0/24 maxlen: 24
77.241.93.0/24 maxlen: 24
77.241.95.0/24 maxlen: 24
79.174.128.0/21 maxlen: 24
83.217.64.0/19 maxlen: 24
83.217.64.0/20 maxlen: 20
83.217.80.0/20 maxlen: 24
87.238.160.0/21 maxlen: 24
88.151.240.0/21 maxlen: 24
89.36.74.0/23 maxlen: 24
89.42.54.0/23 maxlen: 24
89.44.166.0/23 maxlen: 24
93.115.168.0/23 maxlen: 23
94.176.98.0/23 maxlen: 24
176.62.160.0/20 maxlen: 24
178.208.32.0/19 maxlen: 24
185.2.52.0/22 maxlen: 24
185.18.8.0/22 maxlen: 24
185.86.16.0/22 maxlen: 24
185.111.196.0/22 maxlen: 24
185.162.28.0/22 maxlen: 24
185.175.196.0/22 maxlen: 24
185.190.84.0/22 maxlen: 24
188.93.96.0/21 maxlen: 24
188.93.152.0/21 maxlen: 24
188.208.36.0/23 maxlen: 24
188.211.170.0/23 maxlen: 24
193.111.95.0/24 maxlen: 24
193.239.210.0/23 maxlen: 24
194.26.24.0/24 maxlen: 24
194.150.224.0/23 maxlen: 23
194.150.224.0/24 maxlen: 24
194.150.225.0/24 maxlen: 24
194.165.51.0/24 maxlen: 24
195.13.56.0/23 maxlen: 24
195.13.56.0/24 maxlen: 24
195.47.215.0/24 maxlen: 24
195.234.184.0/24 maxlen: 24
217.19.224.0/20 maxlen: 24
217.19.228.0/22 maxlen: 24
217.19.232.0/23 maxlen: 24
217.19.234.0/23 maxlen: 24
217.21.176.0/20 maxlen: 24
217.21.176.0/21 maxlen: 24
217.21.179.0/24 maxlen: 24
217.21.184.0/22 maxlen: 24
217.21.188.0/22 maxlen: 24
2a00:1c98::/32 maxlen: 64
2a00:1c98:fff0::/44 maxlen: 64
2a00:7000::/32 maxlen: 64
2a02:d08::/32 maxlen: 64
2a03:a800::/32 maxlen: 32
2a07:ca80::/29 maxlen: 64
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:6c:24:10:46:40:ba:0a:a7:2f:e6:7d:c0:79:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Sep 25 09:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e20f31e373f41e9905feccac82f547cc3b791594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:ab:c2:b8:03:23:b1:67:17:58:59:6f:0d:
7d:e2:cb:c0:5e:7d:48:71:c4:f0:be:d5:f9:0b:2a:
07:b6:79:85:30:08:23:38:0a:79:54:6a:8f:7c:d6:
a0:72:d5:2d:d1:0c:78:11:04:d2:98:8a:08:f6:4b:
fc:e8:0c:08:82:cf:35:1a:eb:9b:98:e6:f0:37:7b:
d8:5c:ee:e9:4a:e0:b4:a1:13:c1:01:63:45:7e:d4:
b0:df:87:37:16:31:4a:22:a3:50:3e:39:20:d4:0c:
87:d3:97:73:d9:d4:71:a1:c2:26:1a:6e:d4:6d:8e:
c4:9e:be:fe:ed:c4:da:7f:15:91:1e:f5:b5:9f:33:
4e:81:cc:2b:4f:d6:41:36:fa:39:ad:b6:ce:44:c8:
38:b8:6a:d4:4a:e0:46:8f:de:47:0a:f2:f7:e4:18:
f8:8a:35:de:2e:54:14:56:a4:34:4b:54:93:20:d9:
36:d8:e2:83:ec:ff:c7:7d:9a:ee:b0:ce:b8:15:18:
98:44:bc:56:fc:11:39:de:d9:aa:09:44:80:c8:b1:
72:df:a9:14:37:2d:9b:f1:40:d2:63:ab:c6:60:19:
6d:b6:ee:4d:4e:d7:64:50:1f:8a:68:f2:c8:3e:a1:
4d:1e:1f:1a:e8:64:e6:b4:4b:8d:8f:24:68:59:88:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:31:E3:73:F4:1E:99:05:FE:CC:AC:82:F5:47:CC:3B:79:15:94
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4g8x43P0HpkF_sysgvVHzDt5FZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.0.0/21
31.14.50.0/23
31.193.176.0/21
37.72.160.0/21
37.148.176.0/21
62.182.56.0/21
77.73.96.0/21
77.241.80.0/20
79.174.128.0/21
83.217.64.0/19
87.238.160.0/21
88.151.240.0/21
89.36.74.0/23
89.42.54.0/23
89.44.166.0/23
93.115.168.0/23
94.176.98.0/23
176.62.160.0/20
178.208.32.0/19
185.2.52.0/22
185.18.8.0/22
185.86.16.0/22
185.111.196.0/22
185.162.28.0/22
185.175.196.0/22
185.190.84.0/22
188.93.96.0/21
188.93.152.0/21
188.208.36.0/23
188.211.170.0/23
193.111.95.0/24
193.239.210.0/23
194.26.24.0/24
194.150.224.0/23
194.165.51.0/24
195.13.56.0/23
195.47.215.0/24
195.234.184.0/24
217.19.224.0/20
217.21.176.0/20
IPv6:
2a00:1c98::/32
2a00:7000::/32
2a02:d08::/32
2a03:a800::/32
2a07:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
32:b7:79:61:38:2b:24:ce:1e:9e:95:67:17:aa:83:f9:f3:46:
73:f7:0b:ed:45:48:da:c9:c7:c0:e0:d3:4d:36:e5:39:ba:8d:
7e:d9:0e:bd:19:05:62:dc:91:1f:1d:56:01:89:cf:06:ff:b0:
c2:c6:2b:3e:39:f9:98:91:f8:2f:7a:9f:f4:ee:f7:a2:96:6b:
16:a9:5a:b6:2c:23:0b:3e:7c:3a:df:87:7a:ec:31:46:15:cc:
cf:b8:6e:40:d2:df:da:c7:9d:6f:1c:6b:fb:41:98:ee:a1:2c:
fc:df:ee:84:45:d4:99:d8:60:e5:48:f8:b9:61:8a:4b:a5:50:
ba:53:9c:55:34:7b:e5:6f:ee:b9:fa:a8:44:2d:20:c4:fd:21:
6f:18:97:04:79:47:91:07:d5:1a:d5:bb:92:ab:9e:47:3d:f3:
6f:d8:db:22:0b:f7:48:04:7e:d6:2c:a6:cd:c2:3e:18:e9:96:
44:ad:ce:b4:62:be:85:f9:28:28:36:35:06:46:b5:22:93:f8:
40:17:23:2b:82:a2:85:59:83:dc:0c:ff:b0:ed:f1:83:02:0f:
ec:bc:20:3e:0d:ef:85:59:3a:25:25:fc:50:22:d7:61:71:f7:
3e:fd:cc:74:48:31:b3:3a:7f:57:4c:37:74:30:10:99:0d:a9:
bd:a2:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:07 2025 by rpki-client