Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/7XD1I0RxIrpn_G46H28iUXyHPYY.roa
File: 7XD1I0RxIrpn_G46H28iUXyHPYY.roa (raw, json)
Hash identifier: soE61nvS6rOkmXgpkA07iVaw8togK047m0gLEJ9eQLE=
Subject key identifier: ED:70:F5:23:44:71:22:BA:67:FC:6E:3A:1F:6F:22:51:7C:87:3D:86
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 018FB8C051BEB9361DD2E10D2BFD08D5CC72
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/7XD1I0RxIrpn_G46H28iUXyHPYY.roa
Signing time: Mon 27 May 2024 06:32:42 +0000
ROA not before: Mon 27 May 2024 06:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61323
IP address blocks: 31.193.0.0/20 maxlen: 20
37.220.88.0/21 maxlen: 21
45.84.20.0/22 maxlen: 24
45.131.136.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
45.157.40.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
78.24.88.0/24 maxlen: 24
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.109.160.0/20 maxlen: 20
78.137.112.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
81.201.128.0/20 maxlen: 20
94.229.160.0/20 maxlen: 20
109.108.128.0/19 maxlen: 19
159.253.208.0/21 maxlen: 21
176.124.52.0/22 maxlen: 24
178.238.128.0/20 maxlen: 20
185.55.76.0/24 maxlen: 24
185.55.77.0/24 maxlen: 24
185.55.78.0/23 maxlen: 23
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
185.160.180.0/22 maxlen: 22
185.160.252.0/22 maxlen: 24
185.162.224.0/22 maxlen: 22
185.166.128.0/22 maxlen: 22
185.181.196.0/22 maxlen: 22
185.182.88.0/22 maxlen: 22
185.197.60.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
185.210.196.0/22 maxlen: 22
185.216.76.0/22 maxlen: 22
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.221.204.0/22 maxlen: 22
185.226.220.0/22 maxlen: 22
185.234.36.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a09:b600:5::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 May 2024 15:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:c0:51:be:b9:36:1d:d2:e1:0d:2b:fd:08:d5:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: May 27 06:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed70f523447122ba67fc6e3a1f6f22517c873d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:a5:11:ec:55:1b:14:b7:d1:2f:70:44:dc:
cb:d0:7b:b6:36:3b:05:2e:b7:40:61:57:1b:01:8b:
89:94:1e:ed:87:f0:6d:de:81:0f:31:bb:af:03:2a:
76:6f:cc:d3:dd:be:bc:47:04:d4:3c:41:1b:c7:2c:
bd:cc:70:18:ef:d7:92:6c:a2:45:c8:df:5c:23:1c:
74:1f:b5:09:dc:6c:13:5c:21:4e:c1:ca:03:01:21:
de:06:b9:8f:4c:7d:9f:b8:e5:f7:6f:0d:71:0e:36:
b8:cb:b0:5f:bc:ab:32:25:ae:55:98:13:0e:6c:e2:
27:96:76:09:3c:15:62:dd:4e:2e:9c:82:14:09:9f:
31:3c:e6:33:2b:78:fb:3f:37:5f:50:71:44:ab:c3:
b0:fe:95:f8:b5:cc:d6:5f:9a:9d:77:74:00:c8:26:
66:e6:c7:35:21:7b:71:70:b3:f2:f8:10:25:59:0b:
b9:74:51:19:8f:cb:2d:f0:6b:08:e6:c6:41:5c:6b:
3a:64:6a:da:e6:4b:a5:5d:fc:6a:f4:8e:d1:e5:35:
c2:cd:1b:f5:fc:30:1c:d5:c2:2a:04:33:6d:ca:7b:
81:ff:15:7f:f5:98:d8:98:14:c7:83:34:9f:36:66:
f7:fc:3b:59:03:ca:b3:40:52:0a:b6:f7:7a:86:7f:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:F5:23:44:71:22:BA:67:FC:6E:3A:1F:6F:22:51:7C:87:3D:86
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/7XD1I0RxIrpn_G46H28iUXyHPYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::/47
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:e7:7d:46:4d:02:79:eb:71:0b:7e:a9:90:db:c4:51:23:07:
a0:50:bc:1b:f0:5f:c2:a5:4b:08:9a:33:c4:d8:ab:86:05:b1:
d9:89:2a:75:98:54:b7:ef:3c:3a:5a:12:36:b8:4d:22:55:6f:
69:1f:f1:77:d3:88:9c:e2:4f:d7:cb:f2:1d:74:60:b4:aa:2e:
d9:40:4c:27:d2:14:f5:7e:6a:96:10:2a:c3:cc:b8:9a:62:1d:
03:81:bd:b1:ca:39:84:3a:83:a5:17:03:e2:55:b2:2f:02:a9:
47:62:34:f0:89:64:25:e2:21:cb:c4:d2:5f:7e:30:ec:2c:ff:
37:da:48:55:56:af:2d:3d:d0:12:1a:ed:73:fd:56:08:2a:ac:
e4:04:ec:ed:33:da:f9:6d:7f:22:76:15:57:b7:06:e6:f8:5a:
22:6e:5b:3a:1b:1f:94:d1:4a:25:a7:df:0e:55:18:ad:bf:69:
7f:61:2d:36:be:62:dd:c2:ea:2f:1c:0e:28:2a:25:cb:88:55:
69:02:92:a9:5d:78:52:25:25:c9:2b:27:94:0e:09:4a:10:db:
7a:91:5f:21:60:ac:67:57:d4:b8:a2:fe:94:b2:5e:1f:6a:4c:
29:91:6b:c7:77:e0:83:86:dc:ad:fb:f5:7c:f0:a0:bd:93:98:
56:51:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:45 2024 by rpki-client on console-fra.rpki-client.org