Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/5NdB-yY1dkTQ9148qmdyrUo4PIU.roa
File: 5NdB-yY1dkTQ9148qmdyrUo4PIU.roa (raw, json)
Hash identifier: tYD/gawZ2lVQX/hbh4xvvoY1PAYxLLGvdR02BEjCNp4=
Subject key identifier: E4:D7:41:FB:26:35:76:44:D0:F7:5E:3C:AA:67:72:AD:4A:38:3C:85
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 018CCA2AB41C710BEFF1AE702D72090B84A6
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/5NdB-yY1dkTQ9148qmdyrUo4PIU.roa
Signing time: Tue 02 Jan 2024 12:34:05 +0000
ROA not before: Tue 02 Jan 2024 12:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 93.117.66.0/23 maxlen: 23
93.113.242.0/23 maxlen: 23
93.113.241.0/24 maxlen: 24
185.63.136.0/22 maxlen: 23
89.42.252.0/22 maxlen: 22
188.214.196.0/23 maxlen: 23
188.214.195.0/24 maxlen: 24
89.42.248.0/21 maxlen: 22
85.204.184.0/21 maxlen: 22
85.204.188.0/22 maxlen: 22
213.164.224.0/19 maxlen: 20
188.208.118.0/23 maxlen: 23
188.208.117.0/24 maxlen: 24
84.117.128.0/17 maxlen: 17
89.33.72.0/21 maxlen: 22
93.117.138.0/23 maxlen: 23
82.208.128.0/18 maxlen: 19
93.117.154.0/23 maxlen: 23
85.204.0.0/21 maxlen: 21
85.204.0.0/20 maxlen: 21
194.102.248.0/21 maxlen: 22
95.76.0.0/15 maxlen: 16
93.119.224.0/23 maxlen: 23
93.113.32.0/23 maxlen: 23
93.119.226.0/24 maxlen: 24
86.106.32.0/19 maxlen: 20
78.96.0.0/15 maxlen: 16
86.106.48.0/20 maxlen: 20
188.214.153.0/24 maxlen: 24
83.103.128.0/17 maxlen: 18
84.117.0.0/17 maxlen: 17
84.117.0.0/16 maxlen: 16
31.5.128.0/17 maxlen: 17
195.234.172.0/24 maxlen: 24
188.240.64.0/23 maxlen: 23
188.240.64.0/22 maxlen: 22
188.240.66.0/23 maxlen: 23
89.38.72.0/22 maxlen: 23
194.102.146.0/24 maxlen: 24
93.119.126.0/23 maxlen: 23
31.5.0.0/17 maxlen: 17
93.119.138.0/23 maxlen: 23
93.119.137.0/24 maxlen: 24
82.210.128.0/18 maxlen: 19
31.5.0.0/16 maxlen: 16
89.136.0.0/15 maxlen: 16
194.102.99.0/24 maxlen: 24
81.89.0.0/20 maxlen: 21
77.81.16.0/20 maxlen: 21
93.118.46.0/23 maxlen: 23
62.121.64.0/18 maxlen: 19
193.178.165.0/24 maxlen: 24
86.104.136.0/21 maxlen: 22
194.105.17.0/24 maxlen: 24
194.105.24.0/22 maxlen: 22
31.14.35.0/24 maxlen: 24
194.105.28.0/22 maxlen: 23
85.186.0.0/16 maxlen: 17
86.105.64.0/20 maxlen: 21
89.44.78.0/23 maxlen: 23
89.44.78.0/24 maxlen: 24
2a04:2400::/28 maxlen: 28
2a04:2400::/27 maxlen: 27
2a04:2410::/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 24 May 2024 04:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b4:1c:71:0b:ef:f1:ae:70:2d:72:09:0b:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 2 12:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4d741fb26357644d0f75e3caa6772ad4a383c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:53:91:9c:76:84:85:3a:7b:ea:e6:5b:ed:
f2:0e:4e:9a:73:d0:ab:5d:0f:e5:59:0f:11:f9:5c:
cd:3d:83:35:57:07:7e:81:95:5e:1a:e6:fe:85:06:
03:69:03:d3:43:13:d1:a0:d2:24:c2:8c:95:59:c1:
d3:8c:68:0e:31:16:a6:80:1e:1c:18:f5:e3:76:8a:
75:d4:b1:87:ce:9f:c5:b1:86:89:0c:8f:7f:7a:ae:
b0:84:28:83:da:90:0a:09:b6:c7:cc:c7:85:e8:ed:
e8:03:06:44:f0:b5:ab:74:98:81:0f:13:08:68:92:
c6:f1:4b:56:83:73:e7:7f:ee:38:f3:7b:54:67:23:
4f:fd:d3:a1:30:3b:72:f3:c4:20:85:ae:45:2d:18:
bc:7a:c9:18:ea:ee:7a:ab:33:99:51:b2:33:e7:0f:
72:a5:c5:39:ea:cf:1b:7b:13:72:ac:8d:b2:ac:e5:
4b:92:36:6c:c3:4e:22:5a:3e:fc:02:fe:fc:ae:cf:
8c:bc:30:e0:30:4f:7f:c5:c5:d5:85:16:ba:97:9a:
8e:89:e4:5f:36:0c:0c:21:ad:45:64:ac:f2:32:7b:
41:23:54:23:b7:f7:d2:64:98:77:29:bf:c9:86:22:
72:ae:6c:dc:3e:2e:ab:b8:48:ee:05:3d:b2:b4:5f:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:41:FB:26:35:76:44:D0:F7:5E:3C:AA:67:72:AD:4A:38:3C:85
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/5NdB-yY1dkTQ9148qmdyrUo4PIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.42.248.0/21
89.44.78.0/23
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.153.0/24
188.214.195.0-188.214.197.255
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
Signature Algorithm: sha256WithRSAEncryption
5b:13:0e:ea:6b:08:d0:08:94:0b:ce:c8:24:37:cc:99:9c:bb:
bf:4d:dc:0a:a7:86:18:cc:73:00:45:0b:38:8e:33:3d:45:05:
3d:76:22:a1:ab:63:2f:51:28:9c:f5:16:f7:d3:85:8a:26:c6:
ac:b0:e7:bf:24:0a:fa:9f:1d:94:f8:9c:b8:28:99:48:82:c9:
67:68:7b:5f:39:8c:b2:49:3a:2b:0d:61:dc:7b:d7:a8:4d:ee:
2c:ca:93:f0:d7:be:7c:27:d3:39:1b:e7:68:f2:95:c6:c8:30:
0f:b8:c1:15:44:28:3d:0c:64:60:15:fb:c1:0e:26:c3:17:0c:
f0:e9:b8:fb:b6:9c:ab:bb:b9:d0:65:e8:be:7c:35:a8:59:11:
b5:d7:09:1e:99:61:c3:6e:14:bd:43:1c:09:d3:a2:56:fa:87:
5b:28:4d:73:58:79:2e:b1:7e:ca:4f:8e:bf:68:15:6f:32:de:
1b:7e:3e:62:7e:49:e3:e3:a7:bf:68:07:c0:7c:96:a4:10:a8:
a7:a8:bd:21:75:8e:1c:da:ed:a8:af:ab:9b:9c:ab:ae:60:4f:
b5:3f:ea:ff:4c:42:7f:4b:40:92:7b:e9:13:3c:33:df:ee:91:
5c:2c:39:98:20:d5:31:56:6b:63:26:3f:cd:67:99:c0:4b:3f:
89:d2:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:04:10 2025 by rpki-client