Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/PXp81QzYxns7wZNiqaGm0svO4Ug.roa
File: PXp81QzYxns7wZNiqaGm0svO4Ug.roa (raw, json)
Hash identifier: vD9REQjgQ8vXvUO5YfpNEToCfc5JgSG/7vZzFQrVd7Q=
Subject key identifier: 3D:7A:7C:D5:0C:D8:C6:7B:3B:C1:93:62:A9:A1:A6:D2:CB:CE:E1:48
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 01930AA22FD9EF226CCD602629BC0BA62FBC
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/PXp81QzYxns7wZNiqaGm0svO4Ug.roa
Signing time: Fri 08 Nov 2024 07:17:01 +0000
ROA not before: Fri 08 Nov 2024 07:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9146
IP address blocks: 31.176.128.0/17 maxlen: 21
31.176.128.0/19 maxlen: 19
31.176.128.0/20 maxlen: 20
31.176.144.0/20 maxlen: 20
31.176.160.0/19 maxlen: 19
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
31.176.192.0/20 maxlen: 20
31.176.208.0/21 maxlen: 21
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
31.176.224.0/20 maxlen: 20
31.176.240.0/20 maxlen: 20
37.203.64.0/18 maxlen: 21
37.203.64.0/20 maxlen: 20
37.203.80.0/20 maxlen: 20
37.203.96.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
80.65.64.0/19 maxlen: 21
80.65.64.0/20 maxlen: 20
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.68.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.72.0/22 maxlen: 22
80.65.76.0/22 maxlen: 22
80.65.80.0/20 maxlen: 20
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
85.92.226.0/24 maxlen: 24
85.92.227.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
85.92.230.0/24 maxlen: 24
85.92.232.0/21 maxlen: 21
85.92.240.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
89.146.128.0/20 maxlen: 20
89.146.144.0/20 maxlen: 20
89.146.160.0/20 maxlen: 20
89.146.176.0/20 maxlen: 20
92.36.128.0/17 maxlen: 21
92.36.128.0/19 maxlen: 19
92.36.128.0/21 maxlen: 21
92.36.136.0/21 maxlen: 21
92.36.144.0/20 maxlen: 20
92.36.160.0/19 maxlen: 19
92.36.160.0/20 maxlen: 20
92.36.176.0/20 maxlen: 20
92.36.192.0/19 maxlen: 19
92.36.192.0/20 maxlen: 20
92.36.192.0/21 maxlen: 21
92.36.208.0/20 maxlen: 20
92.36.224.0/19 maxlen: 19
92.36.224.0/20 maxlen: 20
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.240.0/21 maxlen: 21
109.163.128.0/18 maxlen: 18
109.163.128.0/19 maxlen: 19
109.163.128.0/22 maxlen: 22
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
109.163.146.0/24 maxlen: 24
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.168.0/21 maxlen: 23
109.163.168.0/23 maxlen: 23
109.163.170.0/24 maxlen: 24
109.163.171.0/24 maxlen: 24
109.163.172.0/22 maxlen: 22
109.163.176.0/20 maxlen: 21
109.163.176.0/21 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.188.0/23 maxlen: 23
109.163.190.0/23 maxlen: 23
109.175.0.0/17 maxlen: 21
109.175.0.0/19 maxlen: 19
109.175.4.0/23 maxlen: 23
109.175.6.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
109.175.20.0/23 maxlen: 23
109.175.22.0/23 maxlen: 23
109.175.24.0/24 maxlen: 24
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
109.175.32.0/19 maxlen: 19
109.175.32.0/21 maxlen: 21
109.175.38.0/23 maxlen: 23
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
109.175.48.0/20 maxlen: 20
109.175.64.0/20 maxlen: 20
109.175.96.0/19 maxlen: 19
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.98.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.100.0/23 maxlen: 23
109.175.102.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.106.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
195.222.48.0/20 maxlen: 20
195.222.48.0/21 maxlen: 21
195.222.49.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 22 Nov 2024 13:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:a2:2f:d9:ef:22:6c:cd:60:26:29:bc:0b:a6:2f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Nov 8 07:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d7a7cd50cd8c67b3bc19362a9a1a6d2cbcee148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:42:7c:2c:d9:91:e9:d0:27:b2:9a:e0:6c:
31:e0:b9:04:bf:9b:f4:9b:49:c9:b4:09:ee:bf:a2:
45:21:0e:cd:84:07:0e:f2:1f:f7:c0:90:8e:15:41:
88:5d:56:fc:f0:7d:0f:0f:56:ff:ac:be:96:98:7f:
3a:78:8b:d2:9a:69:d1:dc:c8:4b:7e:b2:21:ee:1d:
25:54:6e:93:70:f8:80:46:aa:5a:72:8c:f3:a9:fc:
d4:81:04:9d:ec:38:f2:fd:de:77:b2:2b:4b:7d:65:
5e:d2:58:7f:f3:ed:79:78:c4:e0:ac:7c:ef:62:ff:
da:b8:e7:0d:c7:6a:a3:d7:74:2c:e9:f7:a2:d7:e8:
ce:9c:f2:88:eb:62:d5:84:02:7d:63:fb:07:53:90:
c5:d7:f1:47:27:e4:2b:54:03:bf:9c:0c:8c:87:2e:
2c:9b:bc:84:46:d2:0b:9e:f8:36:a9:b8:39:49:bf:
01:4f:e0:01:eb:bd:29:71:1c:0e:c3:f1:36:84:f5:
4a:b9:4c:b2:6f:5c:62:ed:50:db:4a:61:10:6b:2c:
51:db:2f:9d:c4:33:73:fc:a8:98:89:df:53:53:a9:
87:d5:f1:c4:ed:41:a6:e2:65:aa:91:d9:72:ea:da:
b5:0d:44:74:27:63:49:71:e5:23:0d:8b:6f:e1:23:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:7C:D5:0C:D8:C6:7B:3B:C1:93:62:A9:A1:A6:D2:CB:CE:E1:48
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/PXp81QzYxns7wZNiqaGm0svO4Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.226.0-85.92.230.255
85.92.232.0-85.92.247.255
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:36:40:94:3e:e7:64:37:65:5c:7a:db:b9:a0:7b:8d:41:6a:
43:4f:a4:b0:d3:2b:3c:d4:96:8a:77:f2:b8:6f:df:0f:3e:a6:
31:d9:e7:bc:21:5c:1d:94:ce:84:ba:3f:3b:e2:32:ae:05:ef:
e1:cb:2b:95:03:c5:bc:71:0f:bc:31:2f:f3:b1:bb:5b:37:a4:
7a:f2:5e:93:f5:2c:5c:ac:3a:61:ca:cb:5b:e5:da:82:9c:d1:
91:59:eb:bb:f4:0e:9e:52:5a:47:8a:e1:52:e5:5b:98:a7:4a:
79:a9:57:4e:fc:c7:8c:32:21:66:86:6a:a5:28:7a:94:27:3b:
b7:8f:9d:82:bc:96:29:ef:75:81:a4:8d:f2:3c:87:b2:0c:ce:
85:cd:f3:86:13:77:73:10:98:9c:66:f5:f3:d3:66:c8:2a:50:
6f:83:97:0e:e4:bd:fe:30:f6:0e:e1:04:71:52:17:a6:fc:d6:
81:3b:95:f7:93:a9:b9:78:46:8e:be:17:b3:0c:01:15:0d:36:
85:3d:ec:94:92:c5:46:3f:f3:5a:9c:0e:63:dd:48:16:0c:8c:
ad:7f:bb:dc:6c:83:08:9a:3b:3f:99:20:64:7f:5f:12:5f:97:
db:b9:18:4e:db:7a:88:d2:a0:7d:38:9a:1f:85:96:2b:c2:a1:
09:8c:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:22 2025 by rpki-client