Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/1-2OoGxOoaanTp4NFyBXy9hgjFp8.roa
File: 1-2OoGxOoaanTp4NFyBXy9hgjFp8.roa (raw, json)
Hash identifier: +4TofhrZgPqRlaPZZtu+oLS5re60B1e16/PQ8wTozhE=
Subject key identifier: FB:63:A8:1B:13:A8:69:A9:D3:A7:83:45:C8:15:F2:F6:18:23:16:9F
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01951DA5FED1E67074592934FD41FC54C2A6
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/1-2OoGxOoaanTp4NFyBXy9hgjFp8.roa
Signing time: Wed 19 Feb 2025 09:59:32 +0000
ROA not before: Wed 19 Feb 2025 09:59:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:a5:fe:d1:e6:70:74:59:29:34:fd:41:fc:54:c2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Feb 19 09:59:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb63a81b13a869a9d3a78345c815f2f61823169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:99:45:c3:9c:0e:5c:39:d3:b3:ad:f3:37:
5f:a0:ca:ce:cc:9d:80:b6:cc:e4:5b:d1:ff:68:bc:
69:65:8a:24:d7:38:90:f0:2d:7c:cc:a2:e6:fc:0a:
f1:37:6f:29:4a:28:69:95:66:d2:61:80:2b:a7:7f:
c0:99:61:94:11:91:59:fa:39:43:95:71:6e:c8:c0:
8e:14:e4:e6:8b:3b:3a:bc:48:a3:20:40:07:09:d5:
fc:6e:13:86:f5:20:f8:1b:59:a3:a4:75:3d:45:41:
51:a2:f6:93:fd:79:3b:07:e6:6f:75:85:d1:3e:6b:
ef:71:c8:d8:81:50:8a:38:2a:ca:4b:dc:c4:dc:5d:
aa:99:fe:ae:78:f8:35:24:e9:3d:fa:18:2e:6b:90:
68:a3:50:52:22:a2:ac:a8:96:f1:71:9a:68:66:ac:
46:e3:29:f8:08:4a:56:6e:81:d0:9c:79:97:2f:30:
c2:3e:3f:1c:fa:06:c5:ef:e6:ba:33:20:50:c2:a6:
45:24:55:96:2b:85:9f:67:b8:52:70:ad:c1:b0:5c:
c3:e3:bd:24:ab:86:77:01:f8:38:23:bf:5f:77:f2:
e5:90:78:a7:f7:a2:54:78:d6:70:4b:20:f6:45:e9:
d3:23:d3:39:f4:af:95:31:f3:46:0f:9e:c1:ce:af:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:63:A8:1B:13:A8:69:A9:D3:A7:83:45:C8:15:F2:F6:18:23:16:9F
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/1-2OoGxOoaanTp4NFyBXy9hgjFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/21
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
9d:8f:be:13:aa:f2:dd:18:d0:1f:63:dd:66:ec:68:c4:f2:8c:
33:82:3a:77:6d:24:fb:04:ad:16:bb:3c:32:46:7d:d0:33:29:
bb:e4:e4:7d:4c:37:8f:c0:47:a5:71:a8:26:08:5a:19:dd:a7:
6d:d0:6d:65:95:2b:9c:5e:74:27:72:8d:2d:46:96:36:e4:4c:
24:df:8a:30:e9:4e:52:8d:ce:a3:13:b5:f1:ee:20:0b:3a:f8:
0f:f8:10:76:16:4e:f1:4c:8b:53:81:87:9d:b9:eb:e8:f0:f9:
48:83:84:b0:de:60:5b:52:cf:0c:28:5a:88:20:63:07:78:6f:
2a:26:74:9e:58:3d:88:61:1b:2b:31:bf:14:b1:8e:64:23:71:
34:bc:87:c6:cd:ad:d1:0f:de:92:d9:25:bc:f9:0e:a4:11:c5:
f5:52:e2:8e:52:ec:6d:71:13:02:2f:da:af:fd:4f:a6:37:f5:
0d:99:04:df:53:8f:a7:bd:56:aa:94:60:58:e3:e8:bf:cc:93:
de:e9:96:c2:87:6c:d3:76:21:38:d1:50:ce:be:4b:85:4b:4a:
4a:d8:41:6e:6d:a7:b0:4b:77:35:31:9b:df:99:33:33:db:0b:
c6:12:a1:fb:45:fc:7d:7b:d2:07:4b:3d:0b:d9:79:52:4e:f7:
ea:f1:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:38:45 2025 by rpki-client