Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/nf_kOQtHRJj1x2r6piUf4i3dD_U.roa
File: nf_kOQtHRJj1x2r6piUf4i3dD_U.roa (raw, json)
Hash identifier: Bx17QXzLCTcX2Z8v5ibyvCu1uGRuvKmOTsk0cSfNWmU=
Subject key identifier: 9D:FF:E4:39:0B:47:44:98:F5:C7:6A:FA:A6:25:1F:E2:2D:DD:0F:F5
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 018D6A1DD4AA81705D130138C6EAA0266BD0
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/nf_kOQtHRJj1x2r6piUf4i3dD_U.roa
Signing time: Fri 02 Feb 2024 13:59:16 +0000
ROA not before: Fri 02 Feb 2024 13:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15967
IP address blocks: 31.172.168.0/22 maxlen: 22
31.172.168.0/24 maxlen: 24
31.172.169.0/24 maxlen: 24
31.172.170.0/23 maxlen: 23
77.55.0.0/16 maxlen: 16
77.55.0.0/18 maxlen: 18
77.55.64.0/22 maxlen: 22
77.55.68.0/22 maxlen: 22
77.55.72.0/22 maxlen: 22
77.55.76.0/23 maxlen: 23
77.55.78.0/23 maxlen: 23
77.55.84.0/22 maxlen: 22
77.55.88.0/23 maxlen: 23
77.55.90.0/24 maxlen: 24
77.55.91.0/24 maxlen: 24
77.55.92.0/24 maxlen: 24
77.55.93.0/24 maxlen: 24
77.55.94.0/24 maxlen: 24
77.55.95.0/24 maxlen: 24
77.55.96.0/22 maxlen: 22
77.55.100.0/22 maxlen: 22
77.55.104.0/23 maxlen: 23
77.55.106.0/23 maxlen: 23
77.55.108.0/22 maxlen: 22
77.55.112.0/23 maxlen: 23
77.55.114.0/23 maxlen: 23
77.55.116.0/23 maxlen: 23
77.55.118.0/23 maxlen: 23
77.55.120.0/24 maxlen: 24
77.55.121.0/24 maxlen: 24
77.55.122.0/23 maxlen: 23
77.55.124.0/24 maxlen: 24
77.55.125.0/24 maxlen: 24
77.55.126.0/24 maxlen: 24
77.55.127.0/24 maxlen: 24
77.55.128.0/20 maxlen: 20
77.55.144.0/21 maxlen: 21
77.55.152.0/24 maxlen: 24
77.55.153.0/24 maxlen: 24
77.55.154.0/24 maxlen: 24
77.55.155.0/24 maxlen: 24
77.55.156.0/23 maxlen: 23
77.55.158.0/23 maxlen: 23
77.55.160.0/20 maxlen: 20
77.55.160.0/23 maxlen: 23
77.55.162.0/23 maxlen: 23
77.55.164.0/23 maxlen: 23
77.55.166.0/24 maxlen: 24
77.55.167.0/24 maxlen: 24
77.55.168.0/23 maxlen: 23
77.55.170.0/23 maxlen: 23
77.55.172.0/23 maxlen: 23
77.55.174.0/23 maxlen: 23
77.55.176.0/21 maxlen: 21
77.55.176.0/23 maxlen: 23
77.55.176.0/24 maxlen: 24
77.55.177.0/24 maxlen: 24
77.55.178.0/24 maxlen: 24
77.55.179.0/24 maxlen: 24
77.55.180.0/23 maxlen: 23
77.55.182.0/23 maxlen: 23
77.55.184.0/23 maxlen: 23
77.55.186.0/23 maxlen: 23
77.55.188.0/23 maxlen: 23
77.55.190.0/23 maxlen: 23
77.55.192.0/20 maxlen: 20
77.55.208.0/20 maxlen: 20
77.55.224.0/20 maxlen: 20
77.55.240.0/23 maxlen: 23
77.55.242.0/23 maxlen: 23
77.55.246.0/24 maxlen: 24
77.55.247.0/24 maxlen: 24
77.55.248.0/22 maxlen: 22
77.55.252.0/23 maxlen: 23
85.128.128.0/17 maxlen: 17
85.128.128.0/24 maxlen: 24
85.128.129.0/24 maxlen: 24
85.128.130.0/24 maxlen: 24
85.128.131.0/24 maxlen: 24
85.128.132.0/23 maxlen: 23
85.128.134.0/24 maxlen: 24
85.128.135.0/24 maxlen: 24
85.128.136.0/22 maxlen: 22
85.128.140.0/23 maxlen: 23
85.128.142.0/24 maxlen: 24
85.128.143.0/24 maxlen: 24
85.128.144.0/20 maxlen: 20
85.128.160.0/19 maxlen: 19
85.128.192.0/18 maxlen: 18
2a01:6100::/32 maxlen: 32
2a01:6100::/48 maxlen: 48
2a01:6100:111::/48 maxlen: 48
2a01:6100:fe00::/48 maxlen: 48
2a01:6100:fe01::/48 maxlen: 48
2a01:6100:fe02::/48 maxlen: 48
2a01:6100:fe10::/48 maxlen: 48
2a01:6100:fe11::/48 maxlen: 48
2a01:6100:fe12::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 07:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:1d:d4:aa:81:70:5d:13:01:38:c6:ea:a0:26:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Feb 2 13:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dffe4390b474498f5c76afaa6251fe22ddd0ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:b7:f5:08:33:e0:ba:1a:84:14:65:98:a5:
71:01:41:c8:7a:2b:05:89:60:15:61:f1:4f:38:1b:
2a:42:64:b6:b4:3b:54:ed:07:09:9e:d8:7a:69:82:
c9:98:e6:11:46:4a:96:33:b1:57:2f:15:2a:1f:e3:
fb:b3:05:46:ba:45:e1:bf:a0:6c:6f:55:54:89:31:
47:8b:b6:ee:39:83:67:d9:a1:c2:c5:a3:c3:e6:65:
7a:35:c4:6e:9a:68:f0:ab:22:85:a8:b2:b3:f9:13:
4a:b9:44:09:d0:25:d1:f0:e7:d0:86:30:40:a6:e4:
2f:75:35:13:8e:50:2e:c8:e4:6d:43:c1:97:47:65:
0e:95:ee:10:16:ba:68:8c:ee:3b:a4:a2:70:49:d4:
dd:fc:1a:c4:b1:c5:2a:b5:a5:93:43:51:2b:36:d7:
40:9f:4d:37:14:3c:9f:44:a5:dd:d6:cd:da:a9:7a:
4b:b5:01:15:49:4f:37:cf:8f:c3:44:f6:8f:07:0f:
2e:a4:b5:78:57:ca:3c:82:14:b1:50:a5:3b:cf:c7:
ff:5f:20:e8:32:37:58:0e:fa:71:bc:9f:cc:9b:10:
bb:f6:0a:c7:b9:33:81:fb:1e:32:20:3f:8d:20:84:
18:d1:cc:97:14:09:37:21:b8:86:13:91:82:06:53:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:E4:39:0B:47:44:98:F5:C7:6A:FA:A6:25:1F:E2:2D:DD:0F:F5
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/nf_kOQtHRJj1x2r6piUf4i3dD_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.168.0/22
77.55.0.0/16
85.128.128.0/17
IPv6:
2a01:6100::/32
Signature Algorithm: sha256WithRSAEncryption
14:f4:09:cd:42:df:a7:53:ae:99:96:fa:bf:2e:bf:2d:8e:c0:
98:17:f4:9b:af:06:b5:ba:5b:c9:ee:1c:47:c8:d7:32:12:b2:
5f:6c:57:b1:19:df:8c:f4:eb:46:ea:da:a9:9c:76:01:72:33:
96:c2:d6:54:22:36:1b:59:3a:b0:86:16:e6:3f:76:4d:7c:4b:
40:04:f2:79:d5:3d:d4:f7:15:9e:96:e7:85:b5:2a:7e:ec:d7:
74:15:d5:92:46:9f:b3:6c:7b:83:e6:79:22:e3:fa:41:19:ac:
da:c8:aa:ae:bf:66:36:42:69:cf:49:ff:7a:3d:0f:6c:05:1d:
4e:65:11:c7:ec:c2:0c:49:20:a3:46:05:9f:93:9f:1a:02:b9:
39:30:32:7e:6a:55:f6:71:e1:9d:62:26:8c:e3:8d:3c:fa:37:
91:f6:9c:ba:38:16:90:2f:5e:16:87:3c:e7:37:de:68:0b:08:
1f:37:03:80:d8:bc:7a:a3:10:89:19:b9:a4:9c:d4:a8:df:23:
bf:cb:07:71:4a:8a:ed:73:62:9b:91:83:51:55:39:32:af:4e:
f4:b9:5f:95:c2:26:05:87:bb:d3:60:49:12:d9:c1:38:3d:5c:
6f:86:34:b7:f3:60:61:2d:4e:62:f0:a4:12:29:d4:59:f2:00:
de:d4:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:10 2024 by rpki-client on console-ams.rpki-client.org