Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GNOYfyDrb4CpS0l5H_3nPkizpnw.roa
File: GNOYfyDrb4CpS0l5H_3nPkizpnw.roa (raw, json)
Hash identifier: uDVEJG7NdBvptr6P0Cy8JiFd9q2zdrbGgHXNdbQWbpY=
Subject key identifier: 18:D3:98:7F:20:EB:6F:80:A9:4B:49:79:1F:FD:E7:3E:48:B3:A6:7C
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0191B7D432D2F22D2617942E9AB8B72F79DA
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GNOYfyDrb4CpS0l5H_3nPkizpnw.roa
Signing time: Tue 03 Sep 2024 12:20:22 +0000
ROA not before: Tue 03 Sep 2024 12:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.88.0/24 maxlen: 24
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
91.237.194.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.72.0/23 maxlen: 23
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 03 Sep 2024 13:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:d4:32:d2:f2:2d:26:17:94:2e:9a:b8:b7:2f:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 3 12:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18d3987f20eb6f80a94b49791ffde73e48b3a67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:28:68:4f:40:0e:e3:d4:9d:9d:f6:e7:ac:
ff:c7:5e:48:52:11:a3:62:f0:24:e2:3e:40:d7:c3:
72:e6:0c:d8:be:fd:43:d2:af:8f:d4:2b:e8:14:76:
94:62:ee:2b:1a:83:6e:a4:5d:b0:1a:5d:33:47:3b:
06:f3:63:6f:51:0e:97:25:ea:86:19:08:ea:4d:44:
e7:84:0b:95:a7:54:44:7b:d8:e7:a8:c7:f6:e2:06:
8e:b6:6b:f0:5f:79:74:9f:05:84:4d:05:6c:ce:34:
e8:b7:12:26:ed:50:63:1d:97:fa:91:7c:c1:73:44:
df:57:5b:65:d9:bf:77:1f:39:7b:78:20:9b:b2:30:
c6:c0:fb:91:c3:7d:a7:b5:a5:1e:38:17:5a:de:4a:
8a:c6:59:39:84:d5:aa:f2:c5:71:3c:9a:d9:a4:80:
8e:56:48:7c:93:08:7a:ec:99:ea:91:43:8c:f8:e2:
e6:7a:c6:5b:e5:11:64:58:e7:bd:ab:c5:03:c8:e8:
06:c4:46:39:41:67:1d:71:1b:00:b7:b2:b5:2b:65:
61:4c:67:9e:a3:e4:af:d2:38:dc:c4:df:25:93:df:
99:8b:30:96:14:26:a8:fe:41:cb:ee:02:23:42:57:
b9:2a:5c:07:f1:26:c1:70:89:05:7e:66:e2:be:b8:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:98:7F:20:EB:6F:80:A9:4B:49:79:1F:FD:E7:3E:48:B3:A6:7C
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GNOYfyDrb4CpS0l5H_3nPkizpnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.8.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
53:7b:2d:be:38:f8:60:16:f4:bd:20:74:35:6e:25:e6:9f:14:
44:35:28:8e:00:b9:18:8f:8b:d8:d1:05:40:21:53:87:32:60:
bb:93:39:fb:e0:8b:63:b9:9a:4e:cc:ca:76:2b:a7:1b:da:33:
eb:0d:d9:9e:0c:72:5f:42:4b:cc:48:3e:d3:5a:30:54:40:d4:
d6:14:a0:53:58:65:a2:66:14:6f:2a:6e:f6:90:49:1b:ca:99:
a2:ef:51:8f:cd:e9:46:88:82:74:ef:cc:50:f6:0c:eb:a5:d7:
45:ea:dd:af:ae:36:00:96:42:c2:ef:f6:d4:a0:c3:d4:43:8b:
d8:4f:98:f3:ae:70:17:52:0a:c1:89:0e:d6:da:a3:36:23:17:
d8:0b:3d:cb:7e:2c:fb:14:6e:dd:75:75:49:ef:55:d2:c7:20:
6f:2b:2e:4d:d8:f3:b0:df:a3:aa:1a:f5:70:6b:61:c6:93:ba:
c5:e8:ba:a1:23:c0:42:43:14:0d:6b:ad:8b:a9:bd:f2:71:4a:
e4:5c:11:0b:2d:f3:4a:36:a4:7b:50:9b:ee:e6:eb:10:b2:4d:
7d:2b:80:a0:a7:ca:75:4c:90:6e:20:09:63:8a:fa:76:97:72:
b3:c5:f7:53:91:c0:7c:1d:4f:07:3f:07:a4:4b:3d:f1:ae:89:
90:e1:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 16:46:29 2024 by rpki-client on console-fra.rpki-client.org