Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PVrAf-TONeQCpYgtmE_CgNgCBjI.roa
File: PVrAf-TONeQCpYgtmE_CgNgCBjI.roa (raw, json)
Hash identifier: uF2+5JEE+99W4HkrJ7PaIeOVYrNm3rULTLJZ9Bghcs0=
Subject key identifier: 3D:5A:C0:7F:E4:CE:35:E4:02:A5:88:2D:98:4F:C2:80:D8:02:06:32
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018F4CDA28ACF6902A165B5527B4BDBF4633
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PVrAf-TONeQCpYgtmE_CgNgCBjI.roa
Signing time: Mon 06 May 2024 07:41:56 +0000
ROA not before: Mon 06 May 2024 07:41:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8359
IP address blocks: 5.144.96.0/19 maxlen: 19
31.40.112.0/20 maxlen: 20
37.208.120.0/21 maxlen: 21
62.118.0.0/16 maxlen: 24
62.168.224.0/19 maxlen: 19
80.83.237.0/24 maxlen: 24
81.91.32.0/19 maxlen: 19
81.91.41.0/24 maxlen: 24
81.195.0.0/16 maxlen: 24
82.96.192.0/18 maxlen: 18
83.237.0.0/16 maxlen: 16
85.140.0.0/15 maxlen: 24
85.235.32.0/19 maxlen: 19
89.175.0.0/16 maxlen: 16
89.175.248.0/21 maxlen: 21
91.76.0.0/14 maxlen: 14
92.43.184.0/21 maxlen: 21
93.90.224.0/20 maxlen: 20
93.90.224.0/22 maxlen: 22
94.140.128.0/19 maxlen: 19
95.169.128.0/19 maxlen: 19
109.198.224.0/19 maxlen: 19
141.105.24.0/21 maxlen: 21
176.222.17.0/24 maxlen: 24
178.141.0.0/16 maxlen: 16
178.155.0.0/17 maxlen: 17
178.159.16.0/20 maxlen: 20
185.168.236.0/22 maxlen: 22
193.104.128.0/24 maxlen: 24
195.34.0.0/19 maxlen: 19
195.34.15.0/24 maxlen: 24
195.34.32.0/19 maxlen: 19
195.34.36.0/24 maxlen: 24
195.34.38.0/24 maxlen: 24
195.34.42.0/24 maxlen: 24
212.188.0.0/17 maxlen: 17
213.87.0.0/16 maxlen: 16
213.87.64.0/22 maxlen: 22
213.87.70.0/23 maxlen: 23
213.87.76.0/23 maxlen: 23
213.87.80.0/20 maxlen: 20
213.87.98.0/23 maxlen: 23
213.87.100.0/24 maxlen: 24
213.87.104.0/24 maxlen: 24
213.87.105.0/24 maxlen: 24
213.87.106.0/23 maxlen: 23
213.87.128.0/19 maxlen: 19
213.87.160.0/22 maxlen: 22
213.87.200.0/22 maxlen: 22
213.87.204.0/22 maxlen: 22
213.87.208.0/23 maxlen: 23
213.87.210.0/23 maxlen: 23
213.87.240.0/22 maxlen: 22
213.87.244.0/23 maxlen: 23
213.87.246.0/24 maxlen: 24
213.87.248.0/22 maxlen: 22
213.147.32.0/19 maxlen: 19
213.176.228.0/22 maxlen: 22
217.74.244.0/22 maxlen: 22
217.74.248.0/21 maxlen: 21
2a00:1fa0::/29 maxlen: 29
2a00:1fa0::/33 maxlen: 33
2a00:1fa0:8000::/33 maxlen: 33
2a00:1fa1::/33 maxlen: 33
2a00:1fa2::/33 maxlen: 33
2a00:1fa3::/33 maxlen: 33
2a00:1fa3:8000::/40 maxlen: 40
2a02:28::/29 maxlen: 29
2a02:28::/32 maxlen: 32
2a02:28:1::/48 maxlen: 48
2a02:28:a::/48 maxlen: 48
2a02:29::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 16 Oct 2024 13:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:da:28:ac:f6:90:2a:16:5b:55:27:b4:bd:bf:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: May 6 07:41:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d5ac07fe4ce35e402a5882d984fc280d8020632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:3a:4c:a7:5d:0c:38:e3:a0:b4:02:f2:d5:
f5:fb:42:a2:d1:a6:5d:32:03:3c:d9:61:75:76:cf:
69:7a:63:aa:ea:5e:6f:4f:a2:73:97:1f:17:6d:c9:
9c:d5:b3:da:40:5e:25:09:97:e2:79:6c:96:71:d6:
b3:f5:f1:12:59:dc:0c:97:59:3c:39:9c:a4:19:b8:
ce:12:e4:93:03:03:fd:e1:9c:66:97:35:41:cc:89:
ed:79:b2:41:cd:25:fd:e4:a9:77:06:ca:ac:cd:f3:
13:ef:15:87:77:cd:a3:13:53:53:d9:86:08:92:f0:
c4:5d:c4:59:6c:f9:1f:f4:09:07:bf:df:10:53:9a:
b9:64:58:f1:ff:17:84:76:52:22:5a:fc:df:e3:8c:
26:de:a6:9e:21:b6:62:e0:85:90:f6:4a:bb:27:60:
5b:c8:bb:a2:7f:10:c9:f8:5c:45:41:7b:22:f7:02:
20:dc:b9:05:7b:98:e3:7b:ae:9f:85:2d:d7:c6:da:
0a:56:1e:66:59:d0:1d:5c:7a:b9:ee:1b:ed:5c:b8:
4d:5b:2d:e5:fd:55:12:e1:48:88:f6:02:d6:0b:58:
5f:92:60:20:ae:0e:14:06:26:56:f4:66:a8:06:d7:
6a:4a:97:1f:c3:eb:2f:7b:7a:5c:e9:d2:5e:e3:e0:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:C0:7F:E4:CE:35:E4:02:A5:88:2D:98:4F:C2:80:D8:02:06:32
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PVrAf-TONeQCpYgtmE_CgNgCBjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.96.0/19
31.40.112.0/20
37.208.120.0/21
62.118.0.0/16
62.168.224.0/19
80.83.237.0/24
81.91.32.0/19
81.195.0.0/16
82.96.192.0/18
83.237.0.0/16
85.140.0.0/15
85.235.32.0/19
89.175.0.0/16
91.76.0.0/14
92.43.184.0/21
93.90.224.0/20
94.140.128.0/19
95.169.128.0/19
109.198.224.0/19
141.105.24.0/21
176.222.17.0/24
178.141.0.0/16
178.155.0.0/17
178.159.16.0/20
185.168.236.0/22
193.104.128.0/24
195.34.0.0/18
212.188.0.0/17
213.87.0.0/16
213.147.32.0/19
213.176.228.0/22
217.74.244.0-217.74.255.255
IPv6:
2a00:1fa0::/29
2a02:28::/29
Signature Algorithm: sha256WithRSAEncryption
3a:55:3d:68:90:cf:43:bb:9f:0e:b1:f4:47:20:9a:cc:fe:fd:
87:89:e8:09:dc:cf:de:2b:1d:0a:de:8f:70:99:af:a2:30:17:
2d:76:7c:0a:eb:61:59:2c:0e:ab:a5:50:e1:8d:2e:00:ad:bc:
db:bd:ae:33:1a:dd:56:9b:d4:29:0f:59:7d:e7:c9:73:d4:55:
e2:a1:82:4e:a1:f4:46:ee:97:7c:f6:d1:68:f1:29:bd:e2:27:
46:4e:64:08:07:27:3e:94:a4:7d:7a:6c:11:75:dd:81:00:11:
5c:c3:76:e7:12:24:ed:33:9c:ef:02:ff:b2:65:f1:74:6a:76:
9d:33:1f:5c:6c:1b:99:63:8d:59:a5:57:40:3c:a4:cb:11:a2:
d4:1f:41:1b:e4:02:75:cc:d8:0d:7b:f7:e5:e5:9c:6b:0e:04:
04:e8:c1:0b:af:f5:0d:97:50:7f:de:e7:34:2f:db:82:06:90:
25:1d:8e:4b:84:1f:91:7f:8c:1a:48:ce:b1:de:80:29:d5:33:
42:ec:78:e0:e1:af:12:d7:22:4c:d6:3a:05:d9:a9:1e:53:61:
34:ec:be:01:93:4f:e8:36:7c:cb:58:cb:96:56:33:c9:d5:32:
68:46:38:cf:25:f8:2f:89:ce:54:c6:ce:1f:92:fc:14:ed:26:
1e:87:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:21:15 2025 by rpki-client