Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/S-Ceh1DZQRyhKHmmSxB56KDIgz0.roa
File: S-Ceh1DZQRyhKHmmSxB56KDIgz0.roa (raw, json)
Hash identifier: /pDXa2j4pzFoRRLhekbrgDmmPn2NS9EauFLl7WhkyKQ=
Subject key identifier: 4B:E0:9E:87:50:D9:41:1C:A1:28:79:A6:4B:10:79:E8:A0:C8:83:3D
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0191FAE1D0C7B51D828F45A2A02F010CA973
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/S-Ceh1DZQRyhKHmmSxB56KDIgz0.roa
Signing time: Mon 16 Sep 2024 12:49:48 +0000
ROA not before: Mon 16 Sep 2024 12:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61323
IP address blocks: 31.193.0.0/20 maxlen: 20
37.220.88.0/21 maxlen: 21
45.67.172.0/22 maxlen: 22
45.84.20.0/22 maxlen: 24
45.131.136.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
45.157.40.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
78.24.88.0/24 maxlen: 24
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.109.160.0/20 maxlen: 20
78.137.112.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
81.201.128.0/20 maxlen: 20
94.229.160.0/20 maxlen: 20
109.108.128.0/19 maxlen: 19
159.253.208.0/21 maxlen: 21
176.124.52.0/22 maxlen: 24
178.238.128.0/20 maxlen: 20
185.55.76.0/23 maxlen: 24
185.55.76.0/24 maxlen: 24
185.55.77.0/24 maxlen: 24
185.55.78.0/23 maxlen: 23
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
185.160.180.0/22 maxlen: 22
185.160.252.0/22 maxlen: 24
185.162.224.0/22 maxlen: 22
185.166.128.0/22 maxlen: 22
185.181.196.0/22 maxlen: 22
185.182.88.0/22 maxlen: 22
185.197.60.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
185.210.196.0/22 maxlen: 22
185.216.76.0/22 maxlen: 22
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.221.204.0/22 maxlen: 22
185.226.220.0/22 maxlen: 22
185.234.36.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a09:b600:5::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 21 Sep 2024 23:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:e1:d0:c7:b5:1d:82:8f:45:a2:a0:2f:01:0c:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Sep 16 12:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4be09e8750d9411ca12879a64b1079e8a0c8833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:f1:ad:c4:82:1a:c3:8c:6a:94:3a:cb:14:
de:ae:2c:d8:bf:f9:d1:da:84:2a:d9:a3:a0:a3:01:
ff:0f:ad:88:ae:a4:75:45:a2:95:87:48:2a:c8:21:
5a:3b:60:cb:4f:35:de:71:43:58:29:11:ec:65:b2:
8d:ae:cd:1e:e9:fd:ae:b3:56:f7:12:5f:57:4d:8c:
2d:cf:0e:3b:64:83:ef:99:81:42:3b:4f:83:e6:b5:
f7:78:5c:4d:60:19:e3:bc:19:a2:8e:25:36:4f:e9:
02:7f:2c:0d:38:e6:17:1a:11:59:fb:a8:86:1e:4b:
c9:64:1d:7e:35:4c:7d:50:17:f4:da:63:ab:ee:f0:
70:8e:25:9f:74:e4:6b:72:3f:8e:75:56:33:42:60:
35:d7:00:51:42:2c:69:52:46:ef:e9:16:18:d7:fc:
55:c7:15:77:c2:6d:1b:c4:4f:27:10:4d:38:8a:5b:
46:94:22:a4:00:ef:00:d4:15:b7:df:4d:8a:ae:dc:
c9:be:85:b7:e7:e3:e1:b3:7d:17:2d:ab:a0:99:31:
a4:50:75:d4:05:f5:9f:b4:8f:7f:00:40:71:4e:1c:
b5:07:49:5c:b3:58:e1:4e:59:bc:9a:55:ac:59:b4:
14:c6:28:63:fc:2a:a6:4c:df:df:11:cb:3c:36:f2:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:9E:87:50:D9:41:1C:A1:28:79:A6:4B:10:79:E8:A0:C8:83:3D
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/S-Ceh1DZQRyhKHmmSxB56KDIgz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.67.172.0/22
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::/47
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
21:ab:39:ae:a8:8b:17:93:11:e0:97:64:14:7a:a2:d7:9c:54:
f0:30:56:3c:fb:4f:32:9a:2f:30:d8:44:f2:9b:cf:c1:ae:13:
4b:1c:4a:0d:de:e6:d8:ca:36:0d:d8:ba:21:b6:9c:27:84:12:
12:86:01:de:52:3b:5b:6e:a2:6b:65:38:ef:eb:d3:c9:5b:6f:
cb:5b:8c:ee:96:a7:6d:03:5b:3b:12:bc:fc:ed:2a:19:83:13:
a3:aa:c2:93:6b:1e:2d:2f:95:ad:6c:80:0e:2f:3b:16:33:8f:
85:82:24:64:35:91:08:e3:14:a3:1c:2a:d4:18:62:1b:b2:f6:
a3:0e:8d:90:21:e8:04:7d:e7:10:2c:87:dc:b1:24:d7:20:9f:
cf:5e:55:b9:36:0b:fe:3f:3a:c9:0f:6b:d5:b7:9d:5c:7b:8b:
4d:c4:0c:b1:b1:c3:41:2f:6f:9f:a2:f8:21:f3:71:ae:7f:aa:
5b:76:2a:77:b8:ea:94:7e:ef:33:0a:2b:99:ab:76:93:76:9e:
02:f9:3e:66:0f:aa:25:75:4b:1d:88:b7:de:63:a0:a9:b0:2d:
cd:bc:2d:9c:e2:03:14:33:d1:cb:05:2b:3e:c5:78:60:11:38:
f0:fa:98:6d:80:a9:09:15:8c:af:e9:07:89:24:4c:58:f4:d1:
49:11:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:37 2025 by rpki-client