Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ros0oJ_j88nz9WEagfPNSK1qdGU.roa
File: ros0oJ_j88nz9WEagfPNSK1qdGU.roa (raw, json)
Hash identifier: cl1epKvXytg92GOsXfv0Q+mD6ofXfZvrMlFwiYX0DHM=
Subject key identifier: AE:8B:34:A0:9F:E3:F3:C9:F3:F5:61:1A:81:F3:CD:48:AD:6A:74:65
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E335207E1B96551883593907841CA1A21
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ros0oJ_j88nz9WEagfPNSK1qdGU.roa
Signing time: Tue 12 Mar 2024 15:39:57 +0000
ROA not before: Tue 12 Mar 2024 15:39:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
31.216.63.0/24 maxlen: 24
77.87.120.0/24 maxlen: 24
84.246.84.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
84.246.87.0/24 maxlen: 24
84.246.106.0/24 maxlen: 24
84.246.109.0/24 maxlen: 24
87.236.151.0/24 maxlen: 24
88.151.15.0/24 maxlen: 24
89.107.15.0/24 maxlen: 24
89.248.70.0/24 maxlen: 24
91.190.153.0/24 maxlen: 24
91.246.34.0/24 maxlen: 24
91.246.48.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
91.247.161.0/24 maxlen: 24
91.247.165.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.167.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
91.247.183.0/24 maxlen: 24
93.157.104.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.94.161.0/24 maxlen: 24
109.94.163.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.107.142.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
109.205.184.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
176.97.199.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
176.97.208.0/24 maxlen: 24
176.97.222.0/24 maxlen: 24
176.97.223.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
193.163.22.0/24 maxlen: 24
194.26.224.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
212.52.25.0/24 maxlen: 24
212.52.26.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.178.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
217.198.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 15:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:52:07:e1:b9:65:51:88:35:93:90:78:41:ca:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 12 15:39:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae8b34a09fe3f3c9f3f5611a81f3cd48ad6a7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:23:76:b6:97:7c:31:96:09:50:21:1e:b9:
02:ae:cd:7a:0c:36:2a:8e:cc:8b:35:8d:ea:2b:8b:
6c:4f:43:12:27:4f:1c:00:5f:9a:49:ef:43:9a:f3:
b6:b7:e9:6d:09:32:64:8b:9f:b7:4b:86:66:d0:ed:
e0:16:fd:28:fa:97:77:e6:72:e9:e7:0f:2e:42:18:
39:d3:6e:bf:de:2c:45:58:94:7d:16:87:b7:95:43:
a2:be:f9:a3:42:61:ea:af:d4:35:07:f1:44:5b:f3:
1a:7f:40:be:62:a7:a5:31:3e:c6:4e:94:ca:82:99:
78:0c:4b:89:18:40:84:19:b4:86:97:08:58:05:0a:
6d:9a:f7:54:aa:3c:bb:1b:a5:56:47:b7:87:42:ed:
6b:5c:de:8c:9f:ec:ee:5f:aa:b4:70:46:91:88:15:
2e:5a:61:6a:ac:75:a1:05:ef:b5:45:38:37:8e:d3:
c4:33:a3:cf:6c:72:67:2c:d5:92:00:22:26:fc:d5:
5c:47:94:56:e2:e4:3f:41:7e:b8:23:bf:bf:e2:35:
ad:8b:c2:ea:24:5e:1f:da:3d:22:09:15:2d:5f:14:
8e:cb:08:db:49:b4:e0:89:06:ff:74:1e:61:95:ef:
85:ad:76:8c:7c:5c:a2:86:94:72:fe:ce:0c:58:42:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:34:A0:9F:E3:F3:C9:F3:F5:61:1A:81:F3:CD:48:AD:6A:74:65
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ros0oJ_j88nz9WEagfPNSK1qdGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
31.216.63.0/24
77.87.120.0/24
84.246.84.0/24
84.246.86.0/23
84.246.106.0/24
84.246.109.0/24
87.236.151.0/24
88.151.15.0/24
89.107.15.0/24
89.248.70.0/24
91.190.153.0/24
91.246.34.0/24
91.246.48.0/24
91.246.53.0/24
91.247.161.0/24
91.247.165.0-91.247.167.255
91.247.173.0/24
91.247.183.0/24
93.157.104.0/24
93.157.109.0/24
109.94.161.0/24
109.94.163.0/24
109.107.136.0/24
109.107.141.0-109.107.142.255
109.107.144.0/24
109.205.184.0/24
109.205.188.0/24
176.97.199.0/24
176.97.203.0/24
176.97.208.0/24
176.97.222.0/23
176.116.3.0/24
193.160.219.0/24
193.163.22.0/24
194.26.224.0/24
194.105.60.0/24
194.107.92.0/24
212.52.25.0-212.52.26.255
217.198.176.0/24
217.198.178.0-217.198.180.255
217.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
34:42:c1:40:25:1e:88:51:c4:1a:5e:56:32:c6:bc:c0:2b:ef:
09:b8:77:25:a0:e3:cb:f5:7e:f9:9f:db:bf:21:2e:fc:6a:d0:
f5:73:aa:28:67:2c:87:86:38:f0:01:3c:7c:9a:35:7f:16:ec:
09:b6:96:75:f7:f9:6f:46:d6:0a:22:d8:04:e0:d1:43:be:23:
27:72:1f:b0:ae:24:20:e7:27:92:83:64:2d:8b:fd:55:f0:1f:
59:74:da:6f:b3:88:bf:f3:6e:2d:0e:4b:49:9b:7d:09:13:e6:
fe:2e:98:c2:85:a9:bf:91:0d:5b:9a:28:1b:6f:c5:6d:9b:f8:
3d:f6:d4:ba:4f:0b:1d:ec:f8:7c:cb:3b:d2:ad:9d:6c:2b:ef:
aa:4f:d9:29:20:55:69:a8:40:ab:8c:5d:de:ab:00:92:7e:7a:
c1:8b:60:7d:c5:0d:ea:5f:95:d2:60:e2:ba:3a:b3:b8:ab:e1:
a2:98:47:e2:0f:dd:ba:63:8a:4e:4a:68:d6:8b:b7:4c:4d:89:
66:8e:87:14:b5:77:fd:8a:b9:e8:3e:a0:c3:d5:0f:e4:05:d5:
18:d8:31:01:9e:0d:f3:de:ac:93:36:67:d4:00:e6:49:0e:46:
f1:fa:6c:7c:30:c7:1b:f8:3e:f9:8d:94:9d:6c:19:64:9e:43:
3c:7f:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:00 2024 by rpki-client on console-ams.rpki-client.org