Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/F_TnUlvnvE0mv_dL5CZb7CuiGO4.roa
File: F_TnUlvnvE0mv_dL5CZb7CuiGO4.roa (raw, json)
Hash identifier: qN9TF86GoCllU+2ZcFh0VYhE2657kuRyrzTFq4GbL+s=
Subject key identifier: 17:F4:E7:52:5B:E7:BC:4D:26:BF:F7:4B:E4:26:5B:EC:2B:A2:18:EE
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019423D70009FC5E3C7891857651F960D345
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/F_TnUlvnvE0mv_dL5CZb7CuiGO4.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Feb 2025 14:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:09:fc:5e:3c:78:91:85:76:51:f9:60:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f4e7525be7bc4d26bff74be4265bec2ba218ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:4c:33:8d:74:80:36:30:d8:b0:4c:9b:9b:
e1:b7:f2:a6:72:02:2f:14:46:3d:39:39:11:0a:ca:
f7:d7:e9:6b:10:c0:73:23:82:b1:f8:f4:e7:fb:e0:
76:de:45:11:f5:8a:35:6b:25:99:67:51:22:bd:d5:
44:93:ee:50:45:21:6d:20:1d:12:ed:c2:e1:df:76:
08:fb:b4:b3:d0:18:9f:e9:12:1a:d5:d0:e6:04:74:
c4:b3:de:52:9d:8c:61:9c:7b:00:6d:85:13:0e:62:
20:28:c6:0e:6b:3e:6b:77:a3:06:f8:ca:c5:97:17:
a6:ac:e0:89:1c:70:5d:9b:8d:62:f5:eb:9e:fe:d5:
85:08:02:be:2c:99:7b:b7:0a:6e:fe:68:36:b3:e3:
c0:d6:49:33:1e:ad:99:81:fe:2a:3d:1c:c5:12:4e:
75:c6:49:d5:1c:64:2b:d7:1e:76:51:39:94:bf:31:
b8:fc:85:61:39:6d:ad:d0:68:7e:54:76:fc:ce:a3:
98:34:86:96:e7:c4:08:dd:98:78:c6:58:e5:33:d8:
98:ca:f0:58:ac:1c:0c:b0:bf:5f:d5:7d:13:e3:cb:
21:89:0e:a2:4b:86:4d:70:8f:ca:10:64:f5:40:00:
38:ce:3a:b5:9a:3c:08:a8:7c:c5:57:65:80:a9:2a:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:E7:52:5B:E7:BC:4D:26:BF:F7:4B:E4:26:5B:EC:2B:A2:18:EE
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/F_TnUlvnvE0mv_dL5CZb7CuiGO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/22
89.46.86.0/24
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.143.0/24
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/23
185.103.51.0/24
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:8ff:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
2f:44:76:64:cb:ec:2e:4f:a2:3c:0b:85:b8:3a:d1:e9:10:f3:
96:bb:e2:70:70:cb:28:4f:86:89:06:ac:da:44:1c:78:3b:07:
7d:bd:db:9e:2a:a3:65:d8:f2:44:85:d2:aa:ea:22:d7:05:63:
cf:ee:09:08:23:c8:aa:35:b5:58:b8:64:19:77:89:6e:b5:f1:
cc:da:8b:82:38:bd:55:4d:8f:35:d1:51:7a:c5:34:04:1b:f9:
c0:98:d7:6b:f0:a4:c7:3d:2b:f7:0e:be:fc:c2:d1:5e:2b:aa:
3c:b0:79:ba:c2:d9:21:45:84:fe:3c:38:7e:35:d4:83:4c:bd:
ec:af:fa:10:d5:02:3a:ad:1c:a4:24:b6:93:9e:b7:dc:91:4f:
eb:93:e9:6d:87:8d:2d:39:36:3e:ff:75:59:de:82:af:69:e4:
1f:c7:f4:a4:bf:b4:4f:84:52:89:84:5a:23:1a:d3:d1:84:f2:
5a:0f:ab:1f:7f:16:6e:4b:b0:2e:81:54:25:28:4a:f0:3f:56:
13:b0:73:15:5e:0b:8e:01:96:30:7c:3c:d8:a5:1e:bf:84:22:
b2:ed:51:65:a5:2f:7f:0f:4f:aa:79:be:db:fd:96:e0:43:cf:
ea:af:45:fb:ba:ee:59:90:06:4c:66:27:d6:e2:4e:5e:a0:c7:
4a:62:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:11 2025 by rpki-client