Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/Pu-_XBags1u1pjL3C4ruWKtIbGo.roa
File: Pu-_XBags1u1pjL3C4ruWKtIbGo.roa (raw, json)
Hash identifier: cqCClCOxR43qC7SQ5OUptMLdu41seWDJA/musuZowas=
Subject key identifier: 3E:EF:BF:5C:16:A0:B3:5B:B5:A6:32:F7:0B:8A:EE:58:AB:48:6C:6A
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 019247038FE423A64D54FBF007A4A5FC5F08
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/Pu-_XBags1u1pjL3C4ruWKtIbGo.roa
Signing time: Tue 01 Oct 2024 07:37:48 +0000
ROA not before: Tue 01 Oct 2024 07:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
88.98.192.0/18 maxlen: 18
88.98.200.0/22 maxlen: 22
88.98.204.0/22 maxlen: 22
88.98.216.0/23 maxlen: 23
88.98.218.0/23 maxlen: 23
88.98.240.0/20 maxlen: 20
88.98.240.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/23 maxlen: 23
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.118.0/23 maxlen: 23
137.220.120.0/23 maxlen: 23
137.220.122.0/23 maxlen: 23
137.220.124.0/22 maxlen: 22
140.228.32.0/19 maxlen: 19
140.228.40.0/22 maxlen: 22
140.228.44.0/22 maxlen: 22
140.228.48.0/22 maxlen: 22
140.228.52.0/22 maxlen: 22
140.228.56.0/22 maxlen: 22
140.228.64.0/19 maxlen: 19
140.228.88.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
143.58.128.0/18 maxlen: 18
143.58.128.0/21 maxlen: 21
143.58.136.0/21 maxlen: 21
143.58.144.0/22 maxlen: 22
143.58.148.0/22 maxlen: 22
143.58.152.0/21 maxlen: 21
143.58.160.0/21 maxlen: 21
143.58.192.0/18 maxlen: 18
143.58.212.0/22 maxlen: 22
143.58.216.0/21 maxlen: 21
143.58.216.0/22 maxlen: 22
143.58.220.0/22 maxlen: 22
143.58.224.0/21 maxlen: 21
143.58.224.0/22 maxlen: 22
143.58.228.0/22 maxlen: 22
143.58.236.0/22 maxlen: 22
152.37.64.0/18 maxlen: 18
152.37.64.0/22 maxlen: 22
152.37.68.0/22 maxlen: 22
152.37.72.0/22 maxlen: 22
152.37.76.0/22 maxlen: 22
152.37.80.0/22 maxlen: 22
152.37.84.0/22 maxlen: 22
152.37.88.0/22 maxlen: 22
152.37.92.0/22 maxlen: 22
152.37.96.0/22 maxlen: 22
152.37.100.0/23 maxlen: 23
152.37.102.0/23 maxlen: 23
152.37.104.0/22 maxlen: 22
152.37.108.0/22 maxlen: 22
152.37.114.0/23 maxlen: 23
152.37.124.0/23 maxlen: 23
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.210.212.0/22 maxlen: 22
188.210.212.0/23 maxlen: 23
188.210.214.0/23 maxlen: 23
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
2a01:4b00::/32 maxlen: 32
2a01:4b00:e000::/35 maxlen: 35
Validation: Failed, certificate revoked on Tue 22 Oct 2024 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:03:8f:e4:23:a6:4d:54:fb:f0:07:a4:a5:fc:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Oct 1 07:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eefbf5c16a0b35bb5a632f70b8aee58ab486c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:fd:40:22:4a:ae:c5:6c:74:27:37:61:5a:
76:a3:99:d7:bf:da:9a:60:a0:3f:3b:e5:14:dd:27:
8b:18:a8:b5:42:9b:eb:71:de:58:ad:90:59:8c:f2:
3f:4e:06:fd:8b:da:aa:41:d2:72:b5:7c:28:75:74:
19:43:0c:8d:d4:ee:7c:09:2a:a7:db:6b:28:a6:91:
56:b4:8f:ca:59:e7:59:63:67:87:d9:d8:d6:de:6c:
5d:d0:12:b0:21:6a:79:85:12:42:7d:e1:65:39:ad:
fe:4d:54:fe:1b:5b:50:9c:91:ab:5e:b0:59:8e:bf:
ff:38:93:e8:88:17:ba:4f:2a:2f:96:04:15:4f:e2:
53:00:21:ac:cc:b7:89:75:63:c8:56:ab:d3:a8:2b:
4e:d0:ce:b2:20:ef:3f:b9:7b:f3:30:34:bf:d6:55:
a6:a7:24:3b:1f:47:4e:1b:a5:67:a7:37:71:bb:af:
f3:7c:1a:cf:f8:73:3a:e0:46:af:94:04:ab:1c:57:
3f:8d:2f:24:e7:2b:16:1c:c6:bf:dd:d9:43:89:f5:
a5:8c:5e:e5:d0:c3:71:59:52:48:9c:e6:a3:bc:c0:
83:4e:92:5d:b6:a4:c0:36:26:65:bf:f7:53:cc:47:
2e:60:6b:ce:92:21:6f:07:a7:c9:e4:d2:45:61:97:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:BF:5C:16:A0:B3:5B:B5:A6:32:F7:0B:8A:EE:58:AB:48:6C:6A
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/Pu-_XBags1u1pjL3C4ruWKtIbGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
88.98.192.0/18
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
140.228.32.0-140.228.95.255
141.0.144.0/20
143.58.128.0/17
152.37.64.0/18
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
IPv6:
2a01:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
42:34:6d:56:c8:cb:1f:a3:f7:76:7b:3a:3f:65:57:df:a4:1d:
89:2a:13:b2:e0:2b:dc:08:8c:9f:ee:4d:ed:66:48:b4:60:c7:
58:9a:ca:37:b7:83:81:6d:00:96:12:f6:e5:db:10:74:22:df:
ac:27:6f:2a:bb:a5:47:30:a2:bc:f1:0d:4d:81:60:40:1e:9e:
33:6a:79:0f:91:75:ca:a9:b1:89:b2:2b:1c:d5:df:95:c3:20:
89:de:84:ef:91:41:86:f4:dd:4a:eb:a5:78:01:69:2d:e2:1a:
2f:1f:a2:fb:c0:24:0f:f1:e1:ec:ce:b9:62:af:83:2c:49:e2:
63:5a:2a:2e:2d:6b:0a:df:40:29:47:54:5f:16:d1:fb:43:af:
ba:9d:e0:2b:99:f3:49:4c:db:19:42:aa:c5:ba:92:ce:df:17:
1c:d6:37:2b:84:fc:59:2a:22:5c:7b:ae:8b:6d:a3:1c:48:a6:
e9:97:1b:26:ba:cd:67:70:d1:88:ed:3f:d5:00:32:23:73:66:
1e:8d:1a:6d:5e:61:08:55:e5:35:63:df:86:cf:30:35:68:6b:
4e:bb:b6:d5:62:2f:5f:a5:75:1e:46:37:70:71:7f:19:94:a2:
68:a2:b1:86:56:6d:b3:c8:18:0e:5f:27:a3:1e:3e:9c:50:03:
e3:fc:a6:1e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZJHA4/kI6ZNVPvwB6Sl/F8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMTE5ZDljMWE1ZDZlM2YzZTIxZjZmYTg2M2Q4N2Ey
ZTRiMGQwHhcNMjQxMDAxMDczNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWVmYmY1YzE2YTBiMzViYjVhNjMyZjcwYjhhZWU1OGFiNDg2YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaL9QCJKrsVsdCc3YVp2o5nXv9qa
YKA/O+UU3SeLGKi1Qpvrcd5YrZBZjPI/Tgb9i9qqQdJytXwodXQZQwyN1O58CSqn
22soppFWtI/KWedZY2eH2djW3mxd0BKwIWp5hRJCfeFlOa3+TVT+G1tQnJGrXrBZ
jr//OJPoiBe6TyovlgQVT+JTACGszLeJdWPIVqvTqCtO0M6yIO8/uXvzMDS/1lWm
pyQ7H0dOG6Vnpzdxu6/zfBrP+HM64EavlASrHFc/jS8k5ysWHMa/3dlDifWljF7l
0MNxWVJInOajvMCDTpJdtqTANiZlv/dTzEcuYGvOkiFvB6fJ5NJFYZfwvwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFD7vv1wWoLNbtaYy9wuK7lirSGxqMB8GA1UdIwQY
MBaAFJ6VoRnZwaXW4/PiH2+oY9h6LksNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzct
N2JlNmViNmJjZTg3LzEvUHUtX1hCYWdzMXUxcGpMM0M0cnVXS3RJYkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzctN2JlNmViNmJjZTg3
LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTCBkwQCAAEwgYwDBAIf
DvgDBAIlnEgDBAZYYsADBAJZIHgDBAJZIqQDBAJZI8QDBANZJEADBANZJ4gDBAJZ
LCgDBAJdc8ADBAaJ3EAwDAMEBYzkIAMEBYzkQAMEBI0AkAMEB486gAMEBpglQAME
ArkYeAMEBLyskAMEA7zS0AMEArzToAMEArzViAMEA7zWCAMEBdEjQDANBAIAAjAH
AwUAKgFLADANBgkqhkiG9w0BAQsFAAOCAQEAQjRtVsjLH6P3dns6P2VX36QdiSoT
suAr3AiMn+5N7WZItGDHWJrKN7eDgW0AlhL25dsQdCLfrCdvKrulRzCivPENTYFg
QB6eM2p5D5F1yqmxibIrHNXflcMgid6E75FBhvTdSuuleAFpLeIaLx+i+8AkD/Hh
7M65Yq+DLEniY1oqLi1rCt9AKUdUXxbR+0Ovup3gK5nzSUzbGUKqxbqSzt8XHNY3
K4T8WSoiXHuui22jHEim6ZcbJrrNZ3DRiO0/1QAyI3NmHo0abV5hCFXlNWPfhs8w
NWhrTru21WIvX6V1HkY3cHF/GZSiaKKxhlZts8gYDl8nox4+nFAD4/ymHg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:29 2025 by rpki-client