Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BXFaGupvGb_7rosXRBrR7aOH0w8.roa
File: BXFaGupvGb_7rosXRBrR7aOH0w8.roa (raw, json)
Hash identifier: jssnzwh1IuaaBKw9sa2HjgvzIVkc9gxKHfJAlfj7Iws=
Subject key identifier: 05:71:5A:1A:EA:6F:19:BF:FB:AE:8B:17:44:1A:D1:ED:A3:87:D3:0F
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0193407F13A67D0E2E870B97920AE863C3FD
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BXFaGupvGb_7rosXRBrR7aOH0w8.roa
Signing time: Mon 18 Nov 2024 18:18:10 +0000
ROA not before: Mon 18 Nov 2024 18:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
5.1.16.0/20 maxlen: 20
31.128.76.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/22 maxlen: 22
31.128.84.0/22 maxlen: 22
31.128.88.0/22 maxlen: 22
31.128.92.0/22 maxlen: 22
77.222.139.0/24 maxlen: 24
77.222.152.0/22 maxlen: 24
77.222.156.0/23 maxlen: 24
77.222.158.0/23 maxlen: 24
80.77.32.0/22 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.38.0/24 maxlen: 24
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 24
80.77.40.0/22 maxlen: 22
80.77.44.0/22 maxlen: 22
80.91.166.0/24 maxlen: 24
85.159.0.0/21 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.218.0/23 maxlen: 23
93.183.220.0/22 maxlen: 22
93.183.224.0/24 maxlen: 24
93.183.225.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.230.0/24 maxlen: 24
93.183.231.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
94.232.72.0/21 maxlen: 21
109.206.32.0/19 maxlen: 24
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 24
176.102.56.0/21 maxlen: 24
176.112.0.0/19 maxlen: 24
176.241.128.0/19 maxlen: 24
176.241.148.0/22 maxlen: 22
178.213.168.0/21 maxlen: 24
185.46.248.0/22 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.116.0/24 maxlen: 24
188.247.117.0/24 maxlen: 24
188.247.118.0/24 maxlen: 24
188.247.119.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
194.29.60.0/22 maxlen: 24
195.114.128.0/24 maxlen: 24
195.114.129.0/24 maxlen: 24
195.114.135.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.146.0/23 maxlen: 24
195.114.148.0/23 maxlen: 24
195.114.150.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.152.0/24 maxlen: 24
195.114.153.0/24 maxlen: 24
195.114.154.0/24 maxlen: 24
195.114.155.0/24 maxlen: 24
195.114.156.0/24 maxlen: 24
195.114.157.0/24 maxlen: 24
195.114.158.0/24 maxlen: 24
195.114.159.0/24 maxlen: 24
213.111.192.0/18 maxlen: 24
213.111.201.0/24 maxlen: 24
213.111.202.0/24 maxlen: 24
213.111.206.0/23 maxlen: 23
213.111.215.0/24 maxlen: 24
213.111.216.0/24 maxlen: 24
213.111.218.0/23 maxlen: 23
213.111.248.0/24 maxlen: 24
213.111.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 09:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:7f:13:a6:7d:0e:2e:87:0b:97:92:0a:e8:63:c3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Nov 18 18:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05715a1aea6f19bffbae8b17441ad1eda387d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:51:7d:18:cb:a2:0f:26:d4:f8:96:28:c4:
86:e9:34:0e:a0:65:d8:73:35:49:85:7f:d1:a4:ec:
46:a1:3b:83:f8:a6:e5:78:17:2f:e7:14:1c:9c:86:
45:fe:26:fc:48:a8:4b:88:7c:5f:ed:c1:59:04:33:
86:e3:cc:7e:b9:91:13:d7:46:59:a6:29:7b:71:62:
ad:25:77:05:86:96:c6:a7:80:58:3e:82:2c:b1:0b:
a7:f6:ab:28:b9:52:a7:89:0a:f5:8e:bb:16:57:1c:
9f:91:ca:69:9b:de:69:15:d0:0a:17:e4:57:c7:c1:
aa:6a:d5:49:04:ec:60:9f:e0:c7:0e:d9:d4:10:7e:
de:eb:33:c6:dc:25:aa:aa:fd:9c:98:cd:fa:c6:50:
c0:e8:77:0e:2d:f0:a8:e2:d0:98:57:32:28:5b:ad:
27:ff:0b:65:9f:1e:96:85:da:c4:3b:a8:30:2e:41:
2e:18:60:b9:26:9b:a1:99:36:bb:7b:99:32:54:ae:
d7:e8:05:53:83:31:77:5d:fa:d6:91:e1:6c:0d:91:
d8:f7:90:3b:71:a2:d0:10:b2:8f:ae:03:12:be:4e:
d6:f4:42:12:e1:83:e7:94:1e:ee:c4:17:2a:8a:b1:
33:3e:63:08:d1:b2:6f:84:59:9a:9f:b3:a4:18:36:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:5A:1A:EA:6F:19:BF:FB:AE:8B:17:44:1A:D1:ED:A3:87:D3:0F
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BXFaGupvGb_7rosXRBrR7aOH0w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.76.0-31.128.95.255
77.222.139.0/24
77.222.152.0/21
80.77.32.0/20
80.91.166.0/24
85.159.0.0/21
91.197.220.0/22
93.183.214.0/24
93.183.216.0-93.183.227.255
93.183.230.0-93.183.235.255
93.183.240.0/20
94.232.72.0/21
109.206.32.0/19
176.102.48.0/20
176.112.0.0/19
176.241.128.0/19
178.213.168.0/21
185.46.248.0/22
188.247.96.0/20
188.247.116.0/22
193.108.49.0/24
193.108.128.0/24
194.29.60.0/22
195.114.128.0/23
195.114.135.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
83:04:24:56:65:da:71:71:be:54:18:1a:9a:2b:87:0e:49:eb:
31:59:fd:5e:8a:8e:bf:45:16:17:34:8d:18:95:7c:8a:04:72:
b0:68:e6:6f:3a:52:a1:73:b7:dc:ce:43:20:29:80:2d:04:2b:
4a:4b:f2:a0:43:30:67:d0:1f:63:2e:4b:14:ea:23:0e:75:e4:
47:49:b1:24:f7:00:e9:23:79:ba:fb:d2:7b:b4:14:5b:ba:c4:
7c:04:e7:27:f4:fc:a3:2f:64:81:71:a6:ec:50:77:04:76:bf:
a7:1d:03:89:89:c3:19:cb:3d:5d:7b:af:57:f8:37:47:c4:5e:
e5:4c:68:0e:b8:78:fb:c1:39:f8:16:ce:62:04:50:5e:8b:7a:
95:6b:a0:7a:28:67:46:97:f9:de:e3:b8:4f:59:5a:2e:5a:20:
56:89:f5:86:c3:8a:02:3b:1a:c3:7c:aa:7d:69:60:fb:d3:09:
06:c1:38:35:7d:64:5a:1a:fc:af:c9:30:76:4d:79:54:b5:67:
53:12:05:2b:7e:22:d9:a6:60:9a:3d:46:ea:00:78:11:6c:18:
60:60:9f:0e:f6:1a:73:cc:01:d3:39:7e:2b:75:80:8a:35:24:
24:53:d4:dd:a2:9a:0a:80:e3:29:7b:96:ce:57:1e:39:f9:06:
8a:19:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:08 2024 by rpki-client on console-ams.rpki-client.org