Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jXx74wms2-PrdvlXIFkXdyVrvbU.roa
File: jXx74wms2-PrdvlXIFkXdyVrvbU.roa (raw, json)
Hash identifier: Xcerns9Wi98yxbwr8/fWnTgJHksFWqPzO+JACDYi9/A=
Subject key identifier: 8D:7C:7B:E3:09:AC:DB:E3:EB:76:F9:57:20:59:17:77:25:6B:BD:B5
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 0194F569DA19EC6C9D026259729CC0FC169A
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jXx74wms2-PrdvlXIFkXdyVrvbU.roa
Signing time: Tue 11 Feb 2025 14:29:02 +0000
ROA not before: Tue 11 Feb 2025 14:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/21 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Mar 2025 09:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:69:da:19:ec:6c:9d:02:62:59:72:9c:c0:fc:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Feb 11 14:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d7c7be309acdbe3eb76f95720591777256bbdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:25:f3:ec:bb:f9:d6:b2:fa:56:06:74:2d:
a2:70:78:e9:e6:23:b3:4d:28:84:00:46:46:1a:52:
2e:e5:05:09:14:07:2e:9e:f0:2b:58:a2:29:ed:d1:
83:d5:a4:d7:61:e6:8f:f8:83:e0:a4:57:27:45:f3:
19:04:ff:d7:5b:b7:4e:f2:2b:3c:54:4e:25:48:82:
55:f1:6c:6c:e5:e2:d7:da:09:ea:47:95:49:25:60:
b0:73:9d:a4:1b:36:f2:b0:7c:ba:02:f8:3d:d3:44:
d9:e6:0d:b7:8e:27:c7:69:02:8a:84:e5:c6:f5:38:
54:bb:b4:2c:6f:af:b5:ed:25:f8:ce:48:03:43:da:
f5:2b:d9:4d:56:23:03:57:40:f0:f2:6c:e8:ac:b4:
81:3e:96:33:e8:2d:49:1d:93:22:66:a8:9c:83:47:
d5:5b:6f:0c:93:cd:0c:c1:11:29:b4:8d:78:1f:c3:
b0:f2:ed:e5:4e:72:d5:e0:a7:d4:4e:4d:83:95:49:
7b:61:6a:3f:72:87:50:57:1e:a3:d1:63:64:7a:10:
b4:ab:47:64:55:d4:bd:b0:96:08:fd:fa:4c:b8:d9:
7d:40:1d:15:50:cf:0b:c8:64:20:93:57:7d:57:01:
0d:bf:b6:b2:fa:eb:9d:07:54:f1:78:01:a0:59:49:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:7B:E3:09:AC:DB:E3:EB:76:F9:57:20:59:17:77:25:6B:BD:B5
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jXx74wms2-PrdvlXIFkXdyVrvbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.143.0/24
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/23
185.103.51.0/24
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:8ff:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
18:13:c4:46:52:c1:4c:e6:01:5b:87:a0:f2:9f:ea:f4:a9:7b:
26:b8:4f:06:cd:34:91:1b:d7:b2:95:51:a5:cc:dc:76:15:9a:
b4:3a:3f:cc:7a:59:73:3e:53:44:5e:7e:2e:c0:0b:24:b4:19:
82:bf:2a:5a:60:98:34:0e:2f:ed:f4:d1:2b:c0:ab:ef:f4:21:
9b:dc:87:63:ba:fd:6c:15:70:c2:fd:82:fb:08:45:19:3c:e1:
5d:22:04:35:6b:bf:46:9d:24:5b:f7:29:b3:8a:11:1e:10:0d:
96:a6:e9:bc:d9:e7:88:ae:8e:4c:49:00:40:73:d7:f6:f3:63:
04:ba:40:7f:d3:b5:99:cf:61:6a:f7:7c:07:4f:9d:bb:36:16:
c0:55:dc:79:a4:c2:60:9d:91:d5:9b:5e:2d:07:a4:c4:04:8c:
3d:56:d6:2e:db:90:cd:d6:92:6b:cc:6d:f3:1b:15:27:a7:88:
02:3b:aa:6c:45:18:1c:25:c5:2d:31:35:95:e3:6a:0b:81:ac:
07:9d:5d:4b:af:b3:8e:97:00:94:c1:53:19:e6:45:b0:86:f3:
45:d3:05:d7:2f:7f:9c:59:88:94:d7:5a:11:ea:8b:27:a7:4a:
ec:25:65:01:66:56:eb:f3:9d:df:81:63:13:e8:34:76:c3:bb:
37:52:f2:4e
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISAZT1adoZ7GydAmJZcpzA/BaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjUwMjExMTQyOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdjN2JlMzA5YWNkYmUzZWI3NmY5NTcyMDU5MTc3NzI1NmJiZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m4l8+y7+day+lYGdC2icHjp5iOz
TSiEAEZGGlIu5QUJFAcunvArWKIp7dGD1aTXYeaP+IPgpFcnRfMZBP/XW7dO8is8
VE4lSIJV8Wxs5eLX2gnqR5VJJWCwc52kGzbysHy6Avg900TZ5g23jifHaQKKhOXG
9ThUu7Qsb6+17SX4zkgDQ9r1K9lNViMDV0Dw8mzorLSBPpYz6C1JHZMiZqicg0fV
W28Mk80MwREptI14H8Ow8u3lTnLV4KfUTk2DlUl7YWo/codQVx6j0WNkehC0q0dk
VdS9sJYI/fpMuNl9QB0VUM8LyGQgk1d9VwENv7ay+uudB1TxeAGgWUlRmQIDAQAB
o4IDFzCCAxMwHQYDVR0OBBYEFI18e+MJrNvj63b5VyBZF3cla721MB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvalh4NzR3bXMyLVByZHZsWElGa1hkeVZydmJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjCBzQQCAAEwgcYD
BAIfDFQDBAAfhDoDBAElmYoDBAElmawDBAItcngDBAMu/ggDBAFNUQYDBAFNUbwD
BAFWazADBAFWa/IDBAFZJFoDBAFZKNgDBAFZKowDBAFZLeIDBANZLlADBANbasAD
BARbe8ADBAJnOUgDBABnUY8DBAJ0zqgDBAON/7gDBAK5ApgDBAK5EFQDBAK5NJwD
BAK5PswDBAG5ZzADBAC5ZzMDBAO8X+ADBAG81GwDBAG88BIDBAK88FwDBAG88N4D
BAG88cYwRAQCAAIwPgMFACoAFtgDBgAqA7AAAgMGACoDsAAEMBADBgEqA7AABgMG
ACoDsAAIAwUDKgPXwAMFAyoE8YADBQMqBimAMA0GCSqGSIb3DQEBCwUAA4IBAQAY
E8RGUsFM5gFbh6Dyn+r0qXsmuE8GzTSRG9eylVGlzNx2FZq0Oj/MellzPlNEXn4u
wAsktBmCvypaYJg0Di/t9NErwKvv9CGb3Idjuv1sFXDC/YL7CEUZPOFdIgQ1a79G
nSRb9ymzihEeEA2Wpum82eeIro5MSQBAc9f282MEukB/07WZz2Fq93wHT527NhbA
Vdx5pMJgnZHVm14tB6TEBIw9VtYu25DN1pJrzG3zGxUnp4gCO6psRRgcJcUtMTWV
42oLgawHnV1Lr7OOlwCUwVMZ5kWwhvNF0wXXL3+cWYiU11oR6osnp0rsJWUBZlbr
853fgWMT6DR2w7s3UvJO
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:55 2025 by rpki-client