Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/xCMpTWn9AUUdqput6uf8wdCnGN8.roa
File: xCMpTWn9AUUdqput6uf8wdCnGN8.roa (raw, json)
Hash identifier: zV0hto9To5SCYoLUqOA6vtyVyX+R4BlpVO++XpiiK1M=
Subject key identifier: C4:23:29:4D:69:FD:01:45:1D:AA:9B:AD:EA:E7:FC:C1:D0:A7:18:DF
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 0190305EED558FE306285C2ADA5021FA422C
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/xCMpTWn9AUUdqput6uf8wdCnGN8.roa
Signing time: Wed 19 Jun 2024 12:00:45 +0000
ROA not before: Wed 19 Jun 2024 12:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 2.57.88.0/23 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.91.0/24 maxlen: 24
31.170.160.0/22 maxlen: 24
31.170.164.0/23 maxlen: 24
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 24
31.220.16.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.20.0/23 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.48.0/20 maxlen: 24
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.108.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
45.13.132.0/23 maxlen: 24
45.13.134.0/23 maxlen: 24
45.13.252.0/23 maxlen: 24
45.13.254.0/23 maxlen: 24
45.87.80.0/22 maxlen: 24
45.93.136.0/22 maxlen: 24
93.188.160.0/21 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.3.0/24 maxlen: 24
153.92.4.0/23 maxlen: 24
153.92.6.0/23 maxlen: 24
153.92.6.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.8.0/21 maxlen: 24
153.92.8.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.208.0/22 maxlen: 24
153.92.212.0/22 maxlen: 24
153.92.216.0/21 maxlen: 24
156.67.64.0/20 maxlen: 24
156.67.208.0/20 maxlen: 24
185.28.20.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
194.11.154.0/23 maxlen: 24
194.11.214.0/23 maxlen: 24
195.110.58.0/23 maxlen: 24
212.1.208.0/21 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.211.0/24 maxlen: 24
212.1.212.0/22 maxlen: 24
212.1.212.0/24 maxlen: 24
212.1.215.0/24 maxlen: 24
2a02:4780::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:28::/48 maxlen: 48
2a02:4780:29::/48 maxlen: 48
2a02:4780:2a::/48 maxlen: 48
2a02:4780:2b::/48 maxlen: 48
2a02:4780:2c::/48 maxlen: 48
2a02:4780:2d::/48 maxlen: 48
2a02:4780:2e::/48 maxlen: 48
2a02:4780:2f::/48 maxlen: 48
2a02:4780:30::/48 maxlen: 48
2a02:4780:31::/48 maxlen: 48
2a02:4780:32::/48 maxlen: 48
2a02:4780:33::/48 maxlen: 48
2a02:4780:34::/48 maxlen: 48
2a02:4780:35::/48 maxlen: 48
2a02:4780:36::/48 maxlen: 48
2a02:4780:37::/48 maxlen: 48
2a02:4780:38::/48 maxlen: 48
2a02:4780:39::/48 maxlen: 48
2a02:4780:3a::/48 maxlen: 48
2a02:4780:3b::/48 maxlen: 48
2a02:4780:3c::/48 maxlen: 48
2a02:4780:3d::/48 maxlen: 48
2a02:4780:3e::/48 maxlen: 48
2a02:4780:84::/48 maxlen: 48
2a02:4780:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 06:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:5e:ed:55:8f:e3:06:28:5c:2a:da:50:21:fa:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jun 19 12:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c423294d69fd01451daa9badeae7fcc1d0a718df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:fc:d7:e8:8f:6e:bd:3c:63:fe:27:bd:2a:
be:81:de:23:7f:f9:32:21:47:d8:ad:58:a3:83:d1:
5d:01:df:d4:2f:7e:60:cc:a9:83:4f:b1:e0:12:9a:
d2:29:c8:a8:06:e7:93:2f:b7:b8:67:62:59:60:9b:
fd:bb:0a:a6:e7:f3:0a:f9:e6:b4:b4:67:79:a5:3d:
60:3f:f2:2f:6b:c5:dd:9f:e6:20:7a:7b:2f:36:85:
4f:e1:e9:a7:23:dd:3e:78:c8:aa:a2:c0:9b:e0:aa:
aa:17:f6:bc:9c:b2:44:4f:0e:28:5c:3a:68:af:80:
34:1b:a3:3b:f5:38:14:8e:05:5c:74:c5:2b:0e:23:
21:27:ed:2c:37:d4:dd:1b:e0:28:6b:73:7c:87:0d:
bc:f4:5a:8a:81:0e:4f:a2:94:f9:6c:de:56:0e:8b:
63:f8:5f:fb:68:2b:03:65:0b:e9:06:d1:5d:58:e0:
9a:59:73:55:8c:db:2a:7d:f8:0e:06:ba:f3:ef:b9:
1b:b9:82:3e:42:66:5e:dc:e4:ec:8d:2f:63:c3:b2:
04:fa:07:70:00:37:e2:2c:67:79:5c:a4:9e:75:1c:
c9:dc:fb:e6:19:56:79:c5:79:19:6b:1e:63:87:82:
c0:00:6d:71:27:ed:49:2d:bf:12:21:c0:83:d7:64:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:29:4D:69:FD:01:45:1D:AA:9B:AD:EA:E7:FC:C1:D0:A7:18:DF
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/xCMpTWn9AUUdqput6uf8wdCnGN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
153.92.1.0-153.92.15.255
153.92.208.0/20
156.67.64.0/20
156.67.208.0/20
185.28.20.0/22
185.77.96.0/23
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:3e:ffff:ffff:ffff:ffff:ffff
2a02:4780:84::/47
Signature Algorithm: sha256WithRSAEncryption
b5:1d:0d:79:10:22:d4:e0:d8:38:3e:a5:6b:bf:cd:81:50:01:
b9:f1:65:58:cf:10:47:09:3b:a7:ff:ac:96:8c:ce:92:ef:a9:
e5:ce:81:d6:bc:83:03:77:e5:f3:9e:6a:aa:de:35:9f:28:9b:
47:c8:d8:f8:70:b3:77:da:d5:08:cd:70:b4:54:f3:c1:29:b9:
24:79:8a:60:33:cb:fe:a4:8d:bc:aa:54:2a:2b:7b:f4:44:45:
b4:e6:77:38:54:e4:e5:cc:7c:e2:d7:7d:ac:f8:bc:c6:c0:56:
07:df:b7:78:8c:2d:09:1f:1a:d4:7e:6b:5f:5d:d6:18:93:49:
2d:6a:f4:86:cc:86:ed:05:c3:00:0b:92:a5:3b:a3:6e:d1:eb:
b0:03:6a:4b:3a:49:ff:75:d9:20:2e:b7:68:5c:87:28:45:72:
be:10:c1:0c:d0:ff:02:9d:b6:a2:cd:2b:8e:f5:a1:cf:94:d8:
b2:81:d7:da:69:01:a9:cd:6a:5d:80:81:dc:1d:b4:bb:24:5f:
a8:32:67:c6:d5:46:06:92:fd:c6:58:9a:f6:a0:5f:92:c9:d4:
58:ee:58:aa:d5:a4:6a:90:23:07:a0:fd:0d:65:dd:43:4c:a8:
f6:5a:35:6d:45:6e:10:aa:00:9e:32:6c:21:bb:65:fe:99:a7:
d2:e1:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 09:06:01 2024 by rpki-client on console-ams.rpki-client.org