Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ToaxTGxS1_p7Xog-b9C2hYd9iew.roa
File: ToaxTGxS1_p7Xog-b9C2hYd9iew.roa (raw, json)
Hash identifier: YUA1ZCcuJPPuFwZyN3lD8QuXBawCMtmeDGvYw34fb7c=
Subject key identifier: 4E:86:B1:4C:6C:52:D7:FA:7B:5E:88:3E:6F:D0:B6:85:87:7D:89:EC
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0191B8206DA7CD441534B21533E19FE45825
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ToaxTGxS1_p7Xog-b9C2hYd9iew.roa
Signing time: Tue 03 Sep 2024 13:43:38 +0000
ROA not before: Tue 03 Sep 2024 13:43:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.88.0/24 maxlen: 24
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 06 Nov 2024 18:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:20:6d:a7:cd:44:15:34:b2:15:33:e1:9f:e4:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 3 13:43:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e86b14c6c52d7fa7b5e883e6fd0b685877d89ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:21:62:fb:d9:6a:19:cd:69:fc:dc:d1:f3:
f9:b7:cf:61:cf:e7:fc:e8:c8:1e:a9:03:ca:75:88:
c4:7e:a5:a5:b2:b8:e6:26:51:4b:dd:28:0d:7d:ea:
ab:75:fb:86:47:d1:f8:15:86:9b:39:3d:22:39:9f:
93:23:fe:ee:2a:f2:3f:7e:47:89:b6:c9:c1:20:62:
0e:77:c4:68:ba:b8:4a:63:97:7d:d7:1c:94:6e:59:
66:d8:a2:35:05:5c:89:37:35:1c:8a:bb:0c:ac:17:
ac:d9:6e:13:9c:85:63:f0:b4:fe:11:19:5c:2f:86:
9f:c9:13:6a:0f:92:72:46:54:4d:ef:13:6f:56:01:
8f:d6:1a:db:f7:78:e9:5e:b6:ad:70:17:4e:80:ce:
42:f5:98:a4:d4:9b:c7:b2:b5:eb:ed:96:e4:c8:81:
2d:0f:68:ff:b3:80:f7:18:4b:85:3c:e4:4a:ec:29:
e3:61:c3:2f:74:05:8f:40:86:fd:69:cb:4b:1d:56:
78:25:b2:19:55:00:75:83:4f:20:b0:50:6d:27:27:
68:68:22:a0:0e:d7:c2:04:29:0f:dc:3a:a9:2c:59:
1a:fe:bd:85:a7:bc:24:e6:e5:ea:70:f4:50:f7:9f:
04:d7:aa:d7:a9:6c:df:4d:33:84:27:06:69:2e:52:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:B1:4C:6C:52:D7:FA:7B:5E:88:3E:6F:D0:B6:85:87:7D:89:EC
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ToaxTGxS1_p7Xog-b9C2hYd9iew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.8.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.48.0-93.120.71.255
93.120.75.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
02:48:44:cf:5e:84:d6:26:4b:bf:a4:2c:a9:e0:9f:13:38:a9:
68:d2:04:d5:62:57:97:d4:29:0c:fc:95:77:46:e4:bd:6f:af:
00:96:19:46:ee:39:5e:04:17:16:77:a9:77:37:9b:dc:03:32:
3a:ea:ef:9a:f8:ce:7e:9b:9f:98:1b:a2:9f:ea:cf:a5:0e:c6:
16:b2:87:3e:59:7a:c9:1e:0c:7c:51:10:18:98:02:d1:91:01:
e0:b3:36:56:41:60:f8:9b:ce:3f:b7:64:d1:2d:1d:88:c9:30:
73:2a:e5:ce:09:0d:e6:c1:52:dc:cf:3c:dc:fd:22:87:e8:ab:
07:1d:27:c7:22:c4:3f:f9:06:66:35:22:99:dc:23:2c:64:6c:
93:e5:08:06:ac:ab:85:fa:06:c6:a7:80:c9:91:51:68:e0:66:
9c:d4:3d:62:80:01:e0:56:e2:c6:55:88:ca:9f:2a:fa:2b:9d:
3f:0e:78:e5:c9:2b:04:f3:cc:26:ce:a7:51:ee:a4:b6:8e:2e:
97:93:77:6a:b9:e9:e8:61:f5:ee:16:84:82:d8:4a:82:2f:a6:
4c:33:3c:bf:c0:31:41:5e:26:6f:1e:89:0b:a6:5e:da:e2:72:
cd:11:24:15:d6:8d:88:49:20:c6:d0:3d:4c:bc:0c:d7:8f:d5:
ac:a8:30:1f
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgISAZG4IG2nzUQVNLIVM+Gf5FglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwOTAzMTM0MzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTg2YjE0YzZjNTJkN2ZhN2I1ZTg4M2U2ZmQwYjY4NTg3N2Q4OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYghYvvZahnNafzc0fP5t89hz+f8
6MgeqQPKdYjEfqWlsrjmJlFL3SgNfeqrdfuGR9H4FYabOT0iOZ+TI/7uKvI/fkeJ
tsnBIGIOd8RourhKY5d91xyUbllm2KI1BVyJNzUcirsMrBes2W4TnIVj8LT+ERlc
L4afyRNqD5JyRlRN7xNvVgGP1hrb93jpXratcBdOgM5C9Zik1JvHsrXr7ZbkyIEt
D2j/s4D3GEuFPORK7CnjYcMvdAWPQIb9actLHVZ4JbIZVQB1g08gsFBtJydoaCKg
DtfCBCkP3DqpLFka/r2Fp7wk5uXqcPRQ958E16rXqWzfTTOEJwZpLlLnEQIDAQAB
o4IEBzCCBAMwHQYDVR0OBBYEFE6GsUxsUtf6e16IPm/QtoWHfYnsMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvVG9heFRHeFMxX3A3WG9nLWI5QzJoWWQ5aWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGwYIKwYBBQUHAQcBAf8EggIKMIICBjCCAgIEAgABMIIB
+gMEAh+DDAMEAx+FwAMEAB+HAQMEAB+HBwMEASVhejAMAwQBQCtCAwQDQCtAMAwD
BARAK1ADBAJAK1gDBANNJAgwDAMEAk0kHAMEAE0kHjAMAwQFTSQgAwQBTSQ0MAwD
BARNJFADBARNJGAwDAMEBk3owAMEA03o0AMEAk3o3AMEAlGhDAMEAVXMxAMEAVZo
hAMEAVkiSgMEAVkq6AMEAVksZAMEAVktXAMEAVkucAMEAVvhIgMEAVvlEAMEAFvl
HwMEAlvlnDAMAwQAW+ffAwQAW+fiAwQBW+gQAwQBW+kCAwQBW+nKAwQBW+qWAwQC
W+rcAwQCW+8AAwQAW++yAwQCW/CcAwQDW/WwAwQCW/a8AwQCW/bEAwQAXXgIMAwD
BABdeBsDBABdeB4DBABdeCEwDAMEBF14MAMEA114QDAMAwQAXXhLAwQCXXhQMAwD
BABdeFUDBABdeFoDBAJdeFwDBANdeHADBAJdeHwDBACrGd8DBAOwYDgDBAOwYLAD
BAOwYZADBAOwYjgDBASwa0ADBACwbmoDBAGwbnIDBAOwbwADBAKwcFQDBAOwdCgD
BAOwdlgDBAOweWADBAOwfLAwDAMEArKflAMEBbKfgDAMAwQCuQnsAwQCuQnwAwQC
uWjEAwQCvL/4AwQAvNXpAwQAwQC+AwQDwSTAMA0GCSqGSIb3DQEBCwUAA4IBAQAC
SETPXoTWJku/pCyp4J8TOKlo0gTVYleX1CkM/JV3RuS9b68AlhlG7jleBBcWd6l3
N5vcAzI66u+a+M5+m5+YG6Kf6s+lDsYWsoc+WXrJHgx8URAYmALRkQHgszZWQWD4
m84/t2TRLR2IyTBzKuXOCQ3mwVLczzzc/SKH6KsHHSfHIsQ/+QZmNSKZ3CMsZGyT
5QgGrKuF+gbGp4DJkVFo4Gac1D1igAHgVuLGVYjKnyr6K50/DnjlySsE88wmzqdR
7qS2ji6Xk3dquenoYfXuFoSC2EqCL6ZMMzy/wDFBXiZvHokLpl7a4nLNESQV1o2I
SSDG0D1MvAzXj9WsqDAf
-----END CERTIFICATE-----
Generated at Wed Nov 6 20:24:34 2024 by rpki-client on console-fra.rpki-client.org