Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/mNzunkkg_6MiJquHW5r5MQjJxzY.roa
File: mNzunkkg_6MiJquHW5r5MQjJxzY.roa (raw, json)
Hash identifier: t2WKnxyU/GE5O6HNlukXH1OyJxPtp/c9ockVhhCZTRc=
Subject key identifier: 98:DC:EE:9E:49:20:FF:A3:22:26:AB:87:5B:9A:F9:31:08:C9:C7:36
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 01914B5A11B9ABBB1831C77A855D1EFBC5D2
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/mNzunkkg_6MiJquHW5r5MQjJxzY.roa
Signing time: Tue 13 Aug 2024 10:47:59 +0000
ROA not before: Tue 13 Aug 2024 10:47:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.56.0/24 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
89.40.216.0/23 maxlen: 23
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.227.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.142.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 22
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.50.0/24 maxlen: 24
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 08:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:5a:11:b9:ab:bb:18:31:c7:7a:85:5d:1e:fb:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Aug 13 10:47:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98dcee9e4920ffa32226ab875b9af93108c9c736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:eb:d5:c8:fe:7e:a5:15:41:ca:bf:95:fe:
09:55:29:37:54:97:e4:40:6b:9b:f4:c7:be:69:da:
63:46:97:37:13:e0:8a:3b:63:28:88:dc:5d:d5:9f:
52:b5:c7:35:64:f4:54:25:c8:b0:3a:45:53:1a:1e:
66:af:58:8c:3d:8e:0c:74:fe:d8:d2:e8:80:56:3f:
48:17:9b:b3:2d:28:8d:64:50:37:ce:9d:3c:00:67:
98:f6:3c:ce:9d:cc:1d:9f:4b:ef:e6:47:77:5e:85:
72:94:4e:62:f7:59:97:ae:e0:3c:74:43:78:77:92:
5a:0e:fb:92:34:7d:70:4e:33:4c:7a:ad:aa:63:f7:
39:1e:ec:a5:ec:c9:fd:7c:fb:fb:ba:5b:3e:c6:48:
6b:13:0a:e2:f0:3b:b8:d8:2a:24:84:25:1d:91:01:
8c:df:e1:08:3a:e9:93:3f:44:26:d5:e0:e5:b5:39:
44:0d:d4:b1:2d:ef:71:c4:ce:66:35:4a:01:ab:a6:
95:22:f4:0e:c1:7f:b9:3c:66:27:19:5a:72:5c:11:
21:47:2e:cc:61:81:60:92:30:44:44:ba:06:64:e8:
90:55:8c:bb:bd:05:62:79:99:34:d6:4f:83:ed:0c:
ac:27:71:74:16:ad:fb:43:93:4a:08:07:9f:1e:2f:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:EE:9E:49:20:FF:A3:22:26:AB:87:5B:9A:F9:31:08:C9:C7:36
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/mNzunkkg_6MiJquHW5r5MQjJxzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0/24
31.132.58.0/24
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::/40
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
72:33:9f:45:76:c2:2f:06:a5:91:41:59:06:19:c0:1a:6f:70:
cc:ab:6f:a3:69:37:d3:b3:3e:49:de:f7:69:34:37:7c:fb:07:
cc:9b:a4:9e:b3:a7:15:ef:b0:d5:e3:0e:e7:41:b1:06:6a:f2:
61:d4:8f:68:6b:ba:2e:d2:76:ca:4c:71:21:31:68:2d:b7:b7:
4b:ce:a2:b0:55:df:00:94:ab:36:45:8c:ed:97:cc:92:b5:62:
62:60:15:f6:5d:53:92:a9:b3:d9:a3:0a:c4:be:76:8a:d4:13:
21:46:28:eb:fd:da:be:49:af:3c:64:98:ea:82:e1:d9:68:97:
f3:3f:03:ea:0d:3a:34:df:27:82:e3:07:35:3b:ca:80:3a:ca:
ab:a3:04:b1:b2:53:d1:bf:33:05:81:83:ff:82:61:28:f1:d2:
e1:b5:d7:6a:62:3d:49:05:6d:ec:7b:c6:1b:0d:b5:29:c5:52:
6b:0f:92:e5:9d:b6:0b:c5:25:01:f5:2a:2d:6f:28:32:5f:52:
ff:5f:d2:f7:05:d4:4c:72:a5:05:9a:46:96:ba:59:5b:56:5d:
5c:8e:42:e8:24:ca:bf:41:4e:54:c7:ff:15:57:ab:f6:1c:17:
16:e6:0d:ce:11:b7:81:20:c2:93:df:b1:aa:c8:c9:54:e3:08:
e2:09:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 10:11:12 2024 by rpki-client on console-fra.rpki-client.org