Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/xAVlk8MVaGJpoVU3dTsbYiCsrOI.roa
File: xAVlk8MVaGJpoVU3dTsbYiCsrOI.roa (raw, json)
Hash identifier: wT/7cukEFDCliuoTg7ddWfXkiYlqf0ueDUBZTvTIP/0=
Subject key identifier: C4:05:65:93:C3:15:68:62:69:A1:55:37:75:3B:1B:62:20:AC:AC:E2
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0190C0772E4DF94343C38F092BAEADA9A701
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/xAVlk8MVaGJpoVU3dTsbYiCsrOI.roa
Signing time: Wed 17 Jul 2024 11:32:34 +0000
ROA not before: Wed 17 Jul 2024 11:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/23 maxlen: 23
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.118.0/23 maxlen: 23
137.220.120.0/23 maxlen: 23
137.220.122.0/23 maxlen: 23
137.220.124.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 Jul 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:77:2e:4d:f9:43:43:c3:8f:09:2b:ae:ad:a9:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jul 17 11:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4056593c315686269a15537753b1b6220acace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:d3:fd:f5:d5:b2:30:f9:d9:9a:9c:b4:9d:
bf:ad:24:20:99:5a:cf:dc:30:95:83:dc:a5:3d:f9:
23:57:08:4a:d9:68:40:b2:ee:d1:23:fa:32:b9:a2:
78:ef:a3:dd:1b:76:27:9a:52:90:f5:70:1c:6b:35:
61:cf:8f:ae:75:05:c9:10:75:c0:3e:3e:69:b0:18:
14:cb:1c:6d:99:cf:4b:e0:58:2f:e6:f0:b1:7e:ce:
6d:4d:c5:1e:97:89:76:f8:86:a8:66:e7:dd:97:57:
b8:7a:80:f7:17:93:5a:af:f5:64:fd:1b:2e:7e:b0:
5a:2f:90:a5:13:4b:a4:ac:0d:0f:bc:e1:a1:3b:39:
be:0b:f8:15:12:3f:f0:45:09:9e:a6:6e:21:ed:6d:
6d:d8:6f:b9:39:0d:f7:6a:77:40:56:47:d5:f2:d0:
ab:6f:dd:44:dc:83:8b:85:75:45:82:a6:b1:3f:04:
a1:3d:2a:47:d8:42:48:e7:c5:48:77:3a:62:03:89:
5f:4d:40:49:d9:c8:80:54:80:87:c8:84:e3:53:c0:
52:b0:c3:b9:e9:13:92:11:b6:43:a6:5f:a6:53:df:
49:b0:2a:82:8c:91:c6:44:31:63:84:09:1b:d3:f6:
d5:c4:15:b3:cc:46:47:0b:e9:9a:7d:00:d7:b3:e2:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:05:65:93:C3:15:68:62:69:A1:55:37:75:3B:1B:62:20:AC:AC:E2
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/xAVlk8MVaGJpoVU3dTsbYiCsrOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
141.0.144.0/20
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
Signature Algorithm: sha256WithRSAEncryption
22:52:58:47:53:25:6c:90:2f:3c:3e:ea:82:18:b8:61:bd:87:
d8:09:59:b2:40:8e:95:e6:2e:70:32:a7:66:6b:ff:99:1e:b0:
e2:73:08:88:f8:00:db:ef:df:30:f2:0b:a8:ce:9c:3a:1f:ee:
6d:7e:4e:fd:8d:f2:51:78:3b:53:bf:f6:ce:2a:b1:ac:ff:8e:
50:31:34:55:85:26:23:ef:19:a2:ea:49:44:21:58:47:99:db:
f1:49:1f:7c:c2:12:f8:3f:36:ba:a4:d3:8d:39:b7:97:4e:68:
56:64:0e:21:0b:ae:92:c2:73:b7:4a:b9:95:1e:df:96:17:61:
a8:5a:4b:af:59:61:0e:7f:19:6e:a2:0d:64:fe:00:eb:4e:36:
65:4d:df:50:a5:21:50:6d:ce:d9:c9:78:bd:88:5c:0a:89:56:
dc:e7:c9:d0:78:1d:8b:5d:53:43:21:e1:20:5d:50:63:8e:15:
e0:4a:fa:37:e9:fd:41:4f:1b:a6:d8:fa:4f:5c:85:69:c1:23:
73:94:9a:bd:74:c6:5d:5b:2f:d1:d6:c2:fc:4e:98:d9:0b:0e:
5a:2f:25:f8:bf:f1:98:de:1d:d6:26:b2:81:d0:52:48:0c:8b:
22:6a:36:7a:20:1f:b8:b0:68:a1:6e:69:f6:3e:d9:13:b1:00:
55:f0:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 17:08:46 2024 by rpki-client on console-ams.rpki-client.org