Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/PlA5MvbN2w01oxw65NXxKrdeMZk.roa
File: PlA5MvbN2w01oxw65NXxKrdeMZk.roa (raw, json)
Hash identifier: NwMK3kn/f4JCw01oJn2ld5i73YXzzSFrts3m3T3uxlM=
Subject key identifier: 3E:50:39:32:F6:CD:DB:0D:35:A3:1C:3A:E4:D5:F1:2A:B7:5E:31:99
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019324C413678205290813417E5499CF7A0A
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/PlA5MvbN2w01oxw65NXxKrdeMZk.roa
Signing time: Wed 13 Nov 2024 09:04:10 +0000
ROA not before: Wed 13 Nov 2024 09:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:c4:13:67:82:05:29:08:13:41:7e:54:99:cf:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Nov 13 09:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e503932f6cddb0d35a31c3ae4d5f12ab75e3199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:54:52:62:6a:c9:a0:b7:e5:7c:95:c5:bb:
37:0c:d6:32:13:e9:02:cb:ca:3c:fb:b7:83:6c:29:
d1:c7:bd:50:c0:9d:d8:8c:aa:9d:79:a2:2e:e4:5b:
6b:4e:1b:76:85:34:83:3f:e7:cd:c9:36:2c:dc:c5:
55:c9:4e:65:07:38:36:4a:b3:72:67:22:42:da:2e:
51:66:e3:14:aa:0a:4b:f3:31:8f:67:66:6c:09:e6:
3c:68:ba:e6:3d:51:c1:fb:c8:5b:8b:62:e3:39:5d:
7b:c4:36:9b:83:b5:cc:39:49:45:2a:bc:96:cb:3d:
81:7a:3f:0d:cc:45:35:0e:92:49:8e:72:87:5a:b5:
b0:b2:f8:a6:60:0f:74:5a:97:f0:37:71:db:98:88:
a8:c1:f7:7c:3c:69:00:7e:36:0d:29:ad:7d:0b:8e:
af:5b:67:a9:dc:4e:e4:0b:b5:40:c0:d3:24:7d:18:
3d:0d:f7:40:11:02:b2:90:5e:f7:08:f9:9a:19:ba:
c2:08:12:7c:ca:d4:96:d9:4f:8f:49:8d:1a:4e:b6:
74:5b:6e:5f:05:a0:8c:47:5d:55:e5:63:c6:aa:ba:
3e:fd:55:e7:26:1b:1d:24:b9:e9:ec:32:ab:1f:50:
67:52:17:9e:f5:b0:e9:45:3f:5a:e7:75:80:8b:85:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:39:32:F6:CD:DB:0D:35:A3:1C:3A:E4:D5:F1:2A:B7:5E:31:99
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/PlA5MvbN2w01oxw65NXxKrdeMZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/22
89.46.86.0/24
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.143.0/24
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/23
185.103.51.0/24
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:8ff:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
9b:3b:d8:46:8e:25:c7:9d:77:41:d7:6d:53:98:2a:ba:52:aa:
11:a6:ba:c8:6b:2c:ab:5e:e0:b1:d6:66:93:33:cc:6a:9b:73:
8b:ba:d9:39:03:c5:a6:b7:c6:6b:da:01:ee:ea:d2:cb:67:fa:
ca:fb:87:f6:92:3c:54:eb:86:ee:d5:25:19:6f:64:cb:ea:a5:
ca:a1:e4:1e:43:b5:6f:68:04:4c:55:63:61:63:bd:d1:eb:58:
f5:39:21:a9:4c:4a:cc:b9:c2:f7:14:83:bf:eb:eb:af:28:6c:
12:2c:52:16:e1:dd:cf:1e:89:6a:c8:e9:90:e3:76:d7:ef:0c:
d0:77:c5:8d:ba:a7:2e:d2:93:aa:d7:1a:74:a5:eb:48:da:91:
ba:3c:d1:f2:48:57:62:04:4e:b3:d3:6d:df:cb:e5:3d:f2:ac:
1b:00:36:1d:81:b5:03:03:b8:68:e7:77:e5:93:2e:38:3c:90:
ec:51:07:b3:07:30:d3:d6:ac:e2:e3:e1:13:32:2b:34:d1:fa:
bb:92:f1:2c:ff:57:34:b1:a0:f3:7e:5a:52:eb:db:8f:86:03:
9e:dd:47:54:21:32:95:48:db:30:a3:51:83:77:b5:90:1a:b9:
e8:a9:3e:dc:8e:9c:6e:9b:0b:03:c4:b4:7a:98:ad:29:18:3e:
7e:54:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:13 2025 by rpki-client