Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/EXIWOjd85hx6Ix8zgKpXSZwOIas.roa
File: EXIWOjd85hx6Ix8zgKpXSZwOIas.roa (raw, json)
Hash identifier: fmlD4ynVILe8mbinGuHNjZH8GM0PA7ezof3Vjo0k1S0=
Subject key identifier: 11:72:16:3A:37:7C:E6:1C:7A:23:1F:33:80:AA:57:49:9C:0E:21:AB
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0192F667F7789E7F36DC024BE3117A107C36
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/EXIWOjd85hx6Ix8zgKpXSZwOIas.roa
Signing time: Mon 04 Nov 2024 09:01:01 +0000
ROA not before: Mon 04 Nov 2024 09:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
5.1.16.0/20 maxlen: 20
31.128.76.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/22 maxlen: 22
31.128.84.0/22 maxlen: 22
31.128.88.0/22 maxlen: 22
31.128.92.0/22 maxlen: 22
77.222.139.0/24 maxlen: 24
77.222.152.0/22 maxlen: 22
77.222.152.0/24 maxlen: 24
77.222.155.0/24 maxlen: 24
77.222.156.0/24 maxlen: 24
77.222.157.0/24 maxlen: 24
77.222.158.0/23 maxlen: 23
80.77.32.0/22 maxlen: 22
80.77.36.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.38.0/24 maxlen: 24
80.77.39.0/24 maxlen: 24
80.77.40.0/22 maxlen: 22
80.77.44.0/22 maxlen: 22
80.91.166.0/24 maxlen: 24
85.159.0.0/21 maxlen: 21
85.159.0.0/24 maxlen: 24
85.159.2.0/23 maxlen: 24
85.159.5.0/24 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.218.0/23 maxlen: 23
93.183.220.0/22 maxlen: 22
93.183.224.0/24 maxlen: 24
93.183.225.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.230.0/24 maxlen: 24
93.183.231.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
94.232.72.0/21 maxlen: 21
109.206.32.0/19 maxlen: 24
176.102.48.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 24
176.102.56.0/21 maxlen: 24
176.112.0.0/19 maxlen: 24
176.241.128.0/19 maxlen: 24
176.241.148.0/22 maxlen: 22
185.46.248.0/22 maxlen: 24
188.247.96.0/20 maxlen: 20
188.247.116.0/24 maxlen: 24
188.247.117.0/24 maxlen: 24
188.247.118.0/24 maxlen: 24
188.247.119.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
194.29.60.0/24 maxlen: 24
194.29.62.0/24 maxlen: 24
194.29.63.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/24 maxlen: 24
195.114.145.0/24 maxlen: 24
195.114.146.0/23 maxlen: 23
195.114.148.0/23 maxlen: 23
195.114.150.0/24 maxlen: 24
195.114.151.0/24 maxlen: 24
195.114.152.0/24 maxlen: 24
195.114.153.0/24 maxlen: 24
195.114.154.0/24 maxlen: 24
195.114.155.0/24 maxlen: 24
195.114.156.0/24 maxlen: 24
195.114.157.0/24 maxlen: 24
195.114.158.0/24 maxlen: 24
195.114.159.0/24 maxlen: 24
213.111.192.0/18 maxlen: 24
213.111.201.0/24 maxlen: 24
213.111.202.0/24 maxlen: 24
213.111.206.0/23 maxlen: 23
213.111.215.0/24 maxlen: 24
213.111.216.0/24 maxlen: 24
213.111.218.0/23 maxlen: 23
213.111.248.0/24 maxlen: 24
213.111.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 18:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:67:f7:78:9e:7f:36:dc:02:4b:e3:11:7a:10:7c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Nov 4 09:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1172163a377ce61c7a231f3380aa57499c0e21ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:a2:5e:6d:63:c6:4e:1e:15:52:49:40:52:
5c:6e:18:4e:6b:2e:8e:7a:b9:ea:83:ef:21:58:7a:
ed:40:ce:a6:56:95:11:5a:91:43:4d:42:d1:97:c3:
28:45:75:79:da:84:62:f2:08:3a:b6:b6:94:c2:5b:
0a:9e:4b:d7:bd:8c:92:7d:bf:70:a1:16:4c:ea:f3:
7b:1c:b3:ef:27:de:1d:6f:c4:e3:3e:9c:af:e8:18:
28:c7:f8:e0:45:ee:96:22:06:a1:82:a2:c1:ee:65:
5f:5f:bd:f2:62:26:d5:ad:36:87:b9:b8:40:f8:d3:
42:0f:81:6a:65:9e:33:50:e9:7c:4e:d6:0a:40:11:
b8:e6:8f:a8:03:28:f2:4a:78:09:e2:9a:5e:95:0e:
b2:ac:d4:a2:4d:63:7f:16:d4:34:1f:11:89:e1:5c:
87:ab:0b:d3:5c:9c:70:2c:47:c8:fa:87:71:f5:f3:
a7:1a:34:7f:24:33:43:56:88:f5:3b:06:c9:0d:e3:
63:f5:34:d6:0f:61:8d:df:a5:5d:b6:11:2b:1a:50:
32:30:6e:33:c3:62:ed:39:e5:92:60:2e:3a:33:ed:
fe:e7:3e:38:ee:a5:4f:6b:70:40:d2:78:61:ab:32:
55:5d:d5:ec:7c:4a:10:c9:54:71:b6:35:90:55:92:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:72:16:3A:37:7C:E6:1C:7A:23:1F:33:80:AA:57:49:9C:0E:21:AB
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/EXIWOjd85hx6Ix8zgKpXSZwOIas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.76.0-31.128.95.255
77.222.139.0/24
77.222.152.0/21
80.77.32.0/20
80.91.166.0/24
85.159.0.0/21
91.197.220.0/22
93.183.214.0/24
93.183.216.0-93.183.227.255
93.183.230.0-93.183.235.255
93.183.240.0/20
94.232.72.0/21
109.206.32.0/19
176.102.48.0/20
176.112.0.0/19
176.241.128.0/19
185.46.248.0/22
188.247.96.0/20
188.247.116.0/22
193.108.49.0/24
193.108.128.0/24
194.29.60.0/22
195.114.141.0-195.114.159.255
213.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
47:7a:04:7f:19:80:d7:8e:e1:8d:5f:02:39:96:e1:3c:a9:5a:
e9:69:4e:26:49:ca:5a:24:99:62:96:86:7a:27:ba:cb:b7:9f:
f5:21:13:3e:01:8e:88:5f:04:af:6d:8c:6d:14:67:55:97:39:
2d:ac:39:7e:81:6d:5b:76:0e:7e:0d:24:58:58:9d:a6:d2:39:
5b:64:17:d3:9a:ea:42:a9:4e:07:18:c9:8c:59:40:05:c4:19:
fd:03:32:3c:ef:f4:af:c8:e2:ac:e3:62:ab:0d:2b:49:9e:69:
71:05:e7:25:95:07:0c:0d:33:4f:6f:94:6d:f5:9e:5e:85:77:
99:50:fc:e3:09:77:a9:1f:f7:f8:08:f3:89:67:5c:ba:9c:87:
ca:95:d8:fb:48:86:cf:d8:1f:83:57:69:6a:25:d5:d7:ca:de:
c4:3b:00:e5:88:ac:7a:b5:22:09:1d:30:81:f6:84:82:f9:e5:
70:01:97:74:37:54:93:60:8d:db:55:a5:8e:be:7a:9b:82:a8:
04:9e:0a:6e:2d:11:64:5a:00:31:9d:4c:65:1e:f0:b1:69:0d:
6d:2d:c4:22:40:18:3a:a5:5c:1a:16:31:0c:71:22:b3:09:94:
79:3d:c1:f3:ec:8f:e5:24:42:6b:b4:7b:29:62:cc:77:52:ae:
f9:99:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:55 2024 by rpki-client on console-ams.rpki-client.org