Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6fUfXtKj4S_Oym3zEEoKSSZCLHs.roa
File: 6fUfXtKj4S_Oym3zEEoKSSZCLHs.roa (raw, json)
Hash identifier: yDQKGAVebsEMGvZc9sGvo7T3TvcpWnqHta5vgFgfWh8=
Subject key identifier: E9:F5:1F:5E:D2:A3:E1:2F:CE:CA:6D:F3:10:4A:0A:49:26:42:2C:7B
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019256C476713F0B63421D6C6820E555B7C3
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6fUfXtKj4S_Oym3zEEoKSSZCLHs.roa
Signing time: Fri 04 Oct 2024 09:02:48 +0000
ROA not before: Fri 04 Oct 2024 09:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.50.0/24 maxlen: 24
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:c4:76:71:3f:0b:63:42:1d:6c:68:20:e5:55:b7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Oct 4 09:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9f51f5ed2a3e12fceca6df3104a0a4926422c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:22:eb:70:15:cc:92:68:c3:90:64:65:e9:
61:c3:e2:90:09:25:0d:7a:b4:47:b3:7e:3e:f9:3f:
d3:c5:6a:fb:74:1b:a1:09:b6:69:d6:ce:02:e1:e2:
88:e2:2e:60:ae:d6:2b:30:c4:3d:bb:a8:d9:8f:5c:
7c:dd:fd:41:94:34:5d:45:35:62:ee:e9:b8:78:a5:
7f:9f:87:03:fb:5a:93:72:7d:8d:86:5c:a5:40:44:
37:56:7a:fb:93:46:83:b5:56:5b:a7:59:8f:a6:13:
60:4d:ad:5b:4b:32:1b:6d:3d:2b:96:42:b7:13:01:
60:c8:95:b2:98:59:c1:a8:cd:53:96:e7:bf:5b:0e:
cb:14:51:01:45:2a:83:a1:01:59:15:23:0a:03:cd:
10:2a:3b:58:1c:3c:42:87:28:53:db:67:ad:ed:5e:
58:13:09:b1:ad:98:a4:10:ad:1a:75:76:f6:a3:5c:
1a:62:fa:f4:a9:fc:25:41:4c:77:77:ce:39:a6:79:
77:ec:be:e0:f8:54:11:64:7a:b3:98:d7:34:ad:5a:
f1:97:a9:7b:2a:d9:75:7f:37:a5:ed:aa:b0:60:cf:
1f:25:0e:b8:a4:1b:67:64:63:9b:a3:27:9c:3e:29:
27:15:c1:9e:2b:db:c5:bf:94:29:f2:a2:42:97:e3:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:1F:5E:D2:A3:E1:2F:CE:CA:6D:F3:10:4A:0A:49:26:42:2C:7B
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6fUfXtKj4S_Oym3zEEoKSSZCLHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/22
89.46.86.0/24
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/23
103.81.143.0/24
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
00:7e:e7:f9:f8:8b:f7:6d:73:09:20:55:8f:c8:46:be:36:b2:
12:d2:02:32:f1:96:77:5c:4f:9b:4c:8a:a4:a4:2d:bf:0f:85:
db:d3:05:35:e2:0c:31:ad:5d:d0:4c:b8:1b:70:9d:bd:58:a9:
fb:36:4b:80:97:88:7e:7a:42:9b:59:4d:b7:21:2c:90:7d:fe:
d6:c5:3f:20:ed:42:f5:02:92:c2:0e:b9:77:07:f1:91:c0:75:
98:ba:58:e6:aa:e6:16:3a:25:b4:f8:22:6b:47:4b:99:51:59:
0d:c4:44:49:28:3a:c6:f8:95:09:64:24:f6:61:3e:51:26:09:
e7:df:e2:08:9f:f3:78:20:52:54:56:a3:65:80:da:f1:ce:02:
6b:24:86:10:13:48:65:ec:84:07:a2:63:9d:a8:92:aa:13:76:
aa:f4:73:4b:41:27:e3:d4:3a:7b:28:b9:62:63:b6:18:40:91:
6f:2e:cf:c4:e3:f8:39:18:8e:1f:5a:65:d5:29:d3:46:d5:e9:
c0:c3:ed:cf:51:71:37:7a:79:31:56:3e:be:48:02:aa:12:0b:
ea:da:d4:8d:d4:a5:03:90:d7:f3:f2:fc:00:e7:35:fc:a5:11:
5c:fa:9c:db:33:3c:92:37:b6:fb:64:8c:ff:22:3f:40:57:ad:
92:1c:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:09 2024 by rpki-client on console-fra.rpki-client.org