Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/4MRL7-ukr95Gf7lLSg2PVYJnuHs.roa
File: 4MRL7-ukr95Gf7lLSg2PVYJnuHs.roa (raw, json)
Hash identifier: U6/4epvUKBlPKYTKmLyQWkTuW6ePsa6zibMFItHQ2aU=
Subject key identifier: E0:C4:4B:EF:EB:A4:AF:DE:46:7F:B9:4B:4A:0D:8F:55:82:67:B8:7B
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0190C106EB1E6A87CE0C50E35D6B4D3734B8
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/4MRL7-ukr95Gf7lLSg2PVYJnuHs.roa
Signing time: Wed 17 Jul 2024 14:09:34 +0000
ROA not before: Wed 17 Jul 2024 14:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
88.98.192.0/18 maxlen: 18
88.98.200.0/22 maxlen: 22
88.98.204.0/22 maxlen: 22
88.98.216.0/23 maxlen: 23
88.98.218.0/23 maxlen: 23
88.98.240.0/20 maxlen: 20
88.98.240.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/23 maxlen: 23
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.118.0/23 maxlen: 23
137.220.120.0/23 maxlen: 23
137.220.122.0/23 maxlen: 23
137.220.124.0/22 maxlen: 22
140.228.32.0/19 maxlen: 19
140.228.40.0/22 maxlen: 22
140.228.44.0/22 maxlen: 22
140.228.48.0/22 maxlen: 22
140.228.52.0/22 maxlen: 22
140.228.56.0/22 maxlen: 22
140.228.64.0/19 maxlen: 19
140.228.88.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
143.58.128.0/18 maxlen: 18
143.58.128.0/21 maxlen: 21
143.58.136.0/21 maxlen: 21
143.58.144.0/22 maxlen: 22
143.58.148.0/22 maxlen: 22
143.58.152.0/21 maxlen: 21
143.58.160.0/21 maxlen: 21
143.58.192.0/18 maxlen: 18
143.58.212.0/22 maxlen: 22
143.58.216.0/21 maxlen: 21
143.58.216.0/22 maxlen: 22
143.58.220.0/22 maxlen: 22
143.58.224.0/21 maxlen: 21
143.58.224.0/22 maxlen: 22
143.58.228.0/22 maxlen: 22
143.58.236.0/22 maxlen: 22
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
2a01:4b00::/32 maxlen: 32
2a01:4b00:e000::/35 maxlen: 35
Validation: Failed, certificate revoked on Thu 18 Jul 2024 07:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:06:eb:1e:6a:87:ce:0c:50:e3:5d:6b:4d:37:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jul 17 14:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c44befeba4afde467fb94b4a0d8f558267b87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:e5:49:cb:e6:b1:b9:d7:89:f7:84:f5:67:
a7:5f:7d:de:f2:68:7b:bd:3c:5b:3e:b2:18:49:b8:
e7:43:da:fa:ce:19:e1:f1:5c:a7:a3:0f:65:49:03:
06:5a:4e:33:0f:55:21:e2:94:af:49:9e:ae:7f:32:
96:81:97:dc:0e:96:c9:c3:c6:d9:48:db:67:4c:67:
0d:4e:c5:46:6e:e0:16:58:82:e7:ea:83:bf:d7:a5:
3f:aa:8a:fa:f5:0f:25:ad:a3:ee:c4:2d:d3:f2:9a:
27:f3:cc:20:ce:a0:50:d7:7a:37:e8:e8:bd:53:9a:
22:78:2b:08:f7:82:26:28:0f:5a:5a:b9:c4:e9:3c:
f5:ad:f1:0d:ee:20:78:07:e4:c6:29:a9:25:a9:24:
72:79:7a:12:76:79:82:3d:a2:cc:5d:c6:8b:44:79:
90:22:a4:c5:5c:81:0c:42:36:02:70:3c:5e:10:cb:
df:e8:d2:ae:6e:db:84:67:96:d6:62:b9:3d:f8:05:
23:32:f0:61:4e:a0:84:97:68:fc:dd:ac:3f:c2:78:
5a:a7:9c:62:c5:87:d9:48:24:80:f1:5c:42:d7:fb:
c7:88:5b:bb:53:12:c3:6a:07:90:b6:14:ba:05:34:
1f:b7:89:80:2e:24:a5:68:31:ea:f9:17:d6:ce:04:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:4B:EF:EB:A4:AF:DE:46:7F:B9:4B:4A:0D:8F:55:82:67:B8:7B
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/4MRL7-ukr95Gf7lLSg2PVYJnuHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
88.98.192.0/18
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
140.228.32.0-140.228.95.255
141.0.144.0/20
143.58.128.0/17
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
IPv6:
2a01:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
3a:5a:ec:9d:bd:c6:e5:0d:da:0e:c6:c8:67:d0:f8:e4:c6:84:
10:08:d4:3b:4f:b0:f2:c2:44:99:b9:1e:26:9b:2d:ae:97:2b:
79:a3:f9:5e:41:c6:08:de:71:9c:d7:dc:1f:42:be:2e:5b:8c:
3e:6d:e7:b1:c7:8c:a1:98:34:da:a0:c3:f7:3c:95:26:57:27:
93:c0:19:f8:81:91:9f:5e:8b:a0:87:6d:a5:38:b2:e9:fd:0e:
99:ee:02:d9:92:2c:c6:61:71:7e:41:62:db:31:d8:5e:04:91:
69:de:22:7b:cb:c2:5a:76:02:44:3d:61:1a:bc:3f:94:4c:48:
20:b2:54:bd:ea:65:82:e8:eb:dc:d7:ca:82:1c:ba:c9:77:66:
35:b9:7d:d2:eb:8f:74:dd:1a:2c:f1:4a:bb:21:3d:e7:7a:bf:
90:46:b0:1a:f9:55:b3:83:3a:38:d4:eb:2a:9e:07:a9:7f:81:
e2:e1:ae:c7:98:71:b7:fc:29:14:95:1d:5e:2f:e1:86:5d:a5:
99:eb:c1:e9:a0:0b:24:48:8a:aa:d9:36:18:25:55:7b:de:e1:
8a:1c:3b:79:7e:31:b4:2e:62:79:14:d2:66:19:49:3b:72:2a:
19:56:ae:c7:e1:06:66:38:5b:79:8d:be:3c:a6:7c:43:f4:f0:
79:a3:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:20 2025 by rpki-client