Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/9-U9rYS5O7_ZKS1k_w5Zp7kLdes.roa
File: 9-U9rYS5O7_ZKS1k_w5Zp7kLdes.roa (raw, json)
Hash identifier: hsMMBT4Gqmexcc4xKpZA+4f5VwkoUvHUpwdAL9dg2+0=
Subject key identifier: F7:E5:3D:AD:84:B9:3B:BF:D9:29:2D:64:FF:0E:59:A7:B9:0B:75:EB
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 0191BC86491EA5CAD51EAD13BB92273E1D2F
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/9-U9rYS5O7_ZKS1k_w5Zp7kLdes.roa
Signing time: Wed 04 Sep 2024 10:13:22 +0000
ROA not before: Wed 04 Sep 2024 10:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 2.57.88.0/23 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.91.0/24 maxlen: 24
31.170.160.0/22 maxlen: 24
31.170.164.0/23 maxlen: 24
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 24
31.220.16.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.20.0/23 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.48.0/20 maxlen: 24
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.108.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
45.13.132.0/23 maxlen: 24
45.13.134.0/23 maxlen: 24
45.13.252.0/23 maxlen: 24
45.13.254.0/23 maxlen: 24
45.87.80.0/22 maxlen: 24
45.93.136.0/22 maxlen: 24
93.188.160.0/21 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.3.0/24 maxlen: 24
153.92.4.0/23 maxlen: 24
153.92.6.0/23 maxlen: 24
153.92.6.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.8.0/21 maxlen: 24
153.92.8.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.208.0/22 maxlen: 24
153.92.212.0/22 maxlen: 24
153.92.216.0/21 maxlen: 24
156.67.64.0/20 maxlen: 24
156.67.208.0/20 maxlen: 24
185.28.20.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
194.11.154.0/23 maxlen: 24
194.11.214.0/23 maxlen: 24
195.110.58.0/23 maxlen: 24
212.1.208.0/21 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.211.0/24 maxlen: 24
212.1.212.0/22 maxlen: 24
212.1.212.0/24 maxlen: 24
212.1.215.0/24 maxlen: 24
2a02:4780::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:28::/48 maxlen: 48
2a02:4780:29::/48 maxlen: 48
2a02:4780:2a::/48 maxlen: 48
2a02:4780:2b::/48 maxlen: 48
2a02:4780:2c::/48 maxlen: 48
2a02:4780:2d::/48 maxlen: 48
2a02:4780:2e::/48 maxlen: 48
2a02:4780:2f::/48 maxlen: 48
2a02:4780:30::/48 maxlen: 48
2a02:4780:31::/48 maxlen: 48
2a02:4780:32::/48 maxlen: 48
2a02:4780:33::/48 maxlen: 48
2a02:4780:34::/48 maxlen: 48
2a02:4780:35::/48 maxlen: 48
2a02:4780:36::/48 maxlen: 48
2a02:4780:37::/48 maxlen: 48
2a02:4780:38::/48 maxlen: 48
2a02:4780:39::/48 maxlen: 48
2a02:4780:3a::/48 maxlen: 48
2a02:4780:3b::/48 maxlen: 48
2a02:4780:3c::/48 maxlen: 48
2a02:4780:3d::/48 maxlen: 48
2a02:4780:3e::/48 maxlen: 48
2a02:4780:46::/48 maxlen: 48
2a02:4780:47::/48 maxlen: 48
2a02:4780:48::/48 maxlen: 48
2a02:4780:49::/48 maxlen: 48
2a02:4780:84::/48 maxlen: 48
2a02:4780:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Sep 2024 07:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:86:49:1e:a5:ca:d5:1e:ad:13:bb:92:27:3e:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Sep 4 10:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e53dad84b93bbfd9292d64ff0e59a7b90b75eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:3b:f1:5c:a3:4b:f5:b9:3f:0c:96:3e:e6:
ec:ae:8b:4d:c6:1a:09:99:6e:87:98:0d:7a:8e:36:
e8:a4:70:c8:d1:f3:f3:1b:d7:e5:50:45:9e:a5:24:
52:e4:95:46:02:d3:bb:f0:09:17:76:6f:96:d8:34:
81:c5:cb:c8:31:d4:db:b7:a7:7d:35:9c:91:08:11:
9e:f4:52:e9:e2:7c:dd:17:c2:ac:ae:69:35:80:3e:
44:fa:23:6a:a7:2a:53:c9:ff:c8:81:e0:cf:68:ff:
78:21:b4:29:bc:d6:89:de:5c:aa:8a:3d:6c:3f:2e:
8c:58:63:a9:eb:d2:bb:e5:0b:a5:27:95:5d:b9:5a:
75:28:fb:cf:7d:9c:98:76:b0:82:8c:fa:04:05:a8:
51:a8:4f:6f:e5:61:45:7d:3e:32:7e:e6:bb:a4:4f:
96:ae:c7:53:55:85:b6:d1:0e:2e:dd:23:fb:e6:f3:
0c:75:f1:45:54:bd:4a:1d:69:95:5f:3b:e3:9b:48:
35:4e:0f:22:08:71:6e:a2:f2:6a:37:cf:02:6f:be:
0b:d8:fa:90:c3:85:07:aa:dd:ec:dd:ed:4c:51:98:
8d:77:ae:55:96:16:84:0e:26:8a:37:20:de:86:69:
ef:6d:93:1f:3e:37:57:a9:03:14:35:44:57:4f:c8:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:3D:AD:84:B9:3B:BF:D9:29:2D:64:FF:0E:59:A7:B9:0B:75:EB
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/9-U9rYS5O7_ZKS1k_w5Zp7kLdes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
153.92.1.0-153.92.15.255
153.92.208.0/20
156.67.64.0/20
156.67.208.0/20
185.28.20.0/22
185.77.96.0/23
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:3e:ffff:ffff:ffff:ffff:ffff
2a02:4780:46::-2a02:4780:49:ffff:ffff:ffff:ffff:ffff
2a02:4780:84::/47
Signature Algorithm: sha256WithRSAEncryption
1c:9e:a9:bd:44:1d:52:1d:fd:1a:ac:b1:5c:fb:9f:25:0c:68:
4f:1c:c8:8c:89:46:0e:4c:b6:09:46:93:35:56:6f:7d:e9:75:
14:13:b0:d6:f9:bf:05:ad:4a:f0:bc:ad:a5:97:df:1b:1a:8a:
c9:ff:95:ae:cd:18:2c:7b:2d:b4:f8:48:61:dc:07:ba:ee:0f:
0b:fc:86:54:eb:ef:53:73:22:fe:0b:83:bf:5c:f8:bc:5c:af:
a0:f7:72:66:77:54:81:69:7e:b5:45:3f:78:5a:76:da:c2:a2:
17:ff:ff:d8:28:f7:ea:44:27:8b:fa:2d:90:81:1c:19:f1:8f:
71:2a:2b:14:16:ce:a3:66:18:34:55:67:ba:87:91:e8:27:44:
17:fe:91:c5:5c:1c:4d:30:2e:e0:2b:c8:6f:84:fe:81:f7:e6:
64:81:f6:2e:c7:3a:1e:a1:56:d1:43:83:c0:d8:c3:dd:2b:50:
75:87:87:bf:af:38:3e:b7:eb:17:86:40:d0:96:11:07:8e:5e:
68:af:46:6d:2b:bb:b6:d1:ea:c5:c5:56:80:27:0a:18:ca:e1:
c0:80:e5:2c:c5:61:fb:4e:34:a1:fc:f8:a0:9f:33:e0:a6:99:
14:c1:6b:5e:3a:31:e0:67:3d:e3:93:f5:7b:9d:a9:3d:ca:af:
7e:8c:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 08:13:25 2024 by rpki-client on console-fra.rpki-client.org