Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/fXNFXc0_H1b5QwXO6RmEApuqEdU.roa
File: fXNFXc0_H1b5QwXO6RmEApuqEdU.roa (raw, json)
Hash identifier: F3WRHpMZj50GPe7HN+9ScC0kcU2Yw3Gsk8UUjuukyDU=
Subject key identifier: 7D:73:45:5D:CD:3F:1F:56:F9:43:05:CE:E9:19:84:02:9B:AA:11:D5
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 018FA90315A52C4CD7874E0457C7C2CBE56C
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/fXNFXc0_H1b5QwXO6RmEApuqEdU.roa
Signing time: Fri 24 May 2024 05:11:42 +0000
ROA not before: Fri 24 May 2024 05:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 31.5.0.0/16 maxlen: 24
31.5.0.0/17 maxlen: 17
31.5.128.0/17 maxlen: 17
31.14.35.0/24 maxlen: 24
62.121.64.0/18 maxlen: 24
77.81.16.0/20 maxlen: 21
78.96.0.0/15 maxlen: 16
81.89.0.0/20 maxlen: 21
82.208.128.0/18 maxlen: 19
82.210.128.0/18 maxlen: 19
83.103.128.0/17 maxlen: 18
84.117.0.0/16 maxlen: 16
84.117.0.0/17 maxlen: 17
84.117.128.0/17 maxlen: 17
85.186.0.0/16 maxlen: 17
85.204.0.0/20 maxlen: 21
85.204.0.0/21 maxlen: 21
85.204.184.0/21 maxlen: 22
85.204.188.0/22 maxlen: 22
86.104.136.0/21 maxlen: 22
86.105.64.0/20 maxlen: 21
86.106.32.0/19 maxlen: 20
86.106.48.0/20 maxlen: 20
89.33.72.0/21 maxlen: 22
89.38.72.0/22 maxlen: 23
89.42.248.0/21 maxlen: 22
89.42.252.0/22 maxlen: 22
89.44.78.0/23 maxlen: 23
89.44.78.0/24 maxlen: 24
89.136.0.0/15 maxlen: 16
93.113.32.0/23 maxlen: 23
93.113.241.0/24 maxlen: 24
93.113.242.0/23 maxlen: 23
93.117.66.0/23 maxlen: 23
93.117.138.0/23 maxlen: 23
93.117.154.0/23 maxlen: 23
93.118.46.0/23 maxlen: 23
93.119.126.0/23 maxlen: 23
93.119.137.0/24 maxlen: 24
93.119.138.0/23 maxlen: 23
93.119.224.0/23 maxlen: 23
93.119.226.0/24 maxlen: 24
95.76.0.0/15 maxlen: 16
185.63.136.0/22 maxlen: 23
188.208.117.0/24 maxlen: 24
188.208.118.0/23 maxlen: 23
188.214.153.0/24 maxlen: 24
188.214.195.0/24 maxlen: 24
188.214.196.0/23 maxlen: 23
188.240.64.0/22 maxlen: 22
188.240.64.0/23 maxlen: 23
188.240.66.0/23 maxlen: 23
193.178.165.0/24 maxlen: 24
194.102.99.0/24 maxlen: 24
194.102.146.0/24 maxlen: 24
194.102.248.0/21 maxlen: 22
194.105.17.0/24 maxlen: 24
194.105.24.0/22 maxlen: 22
194.105.28.0/22 maxlen: 23
195.234.172.0/24 maxlen: 24
213.164.224.0/19 maxlen: 20
2a04:2400::/27 maxlen: 27
2a04:2400::/28 maxlen: 28
2a04:2410::/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 24 May 2024 07:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:03:15:a5:2c:4c:d7:87:4e:04:57:c7:c2:cb:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: May 24 05:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d73455dcd3f1f56f94305cee91984029baa11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:ad:f9:1b:69:f4:36:35:ed:94:a0:16:b9:
bb:38:fc:07:a2:ba:9a:ec:b0:b9:12:4d:c1:a7:80:
db:bc:a6:7d:09:d5:76:ec:ed:9b:f3:f4:39:43:15:
cc:d4:22:ac:dc:e8:6c:9d:31:64:bd:7f:a8:93:5a:
17:1d:6f:47:b3:90:6b:0f:13:3c:e7:9a:97:e5:53:
97:7e:fe:37:88:6f:b8:1a:f4:1a:20:dd:98:69:2e:
20:70:7d:fe:c7:ae:df:02:09:48:1a:53:3f:58:ae:
f5:70:a6:88:e5:82:66:f5:d5:50:5a:67:88:02:81:
55:5c:d6:f0:45:e9:0a:04:b9:ff:f5:a3:9f:f3:07:
d6:db:49:e2:93:c2:c3:de:b6:52:d1:fe:9e:00:28:
30:f2:41:dd:de:05:35:e1:62:f6:6f:61:f3:0b:19:
0a:d2:94:1e:32:54:66:15:e6:5e:88:43:34:0d:fe:
00:e2:0a:92:13:e8:5a:db:94:bd:05:1b:1b:83:ba:
47:a2:84:86:bb:f9:31:70:9c:b1:23:f7:e6:10:8a:
17:ef:90:c4:eb:72:d5:39:1f:03:c1:96:d2:61:2e:
ee:03:39:45:d9:14:7b:f9:32:ea:fe:2d:61:3d:30:
a2:6f:63:36:a9:fd:51:05:62:b8:e4:3b:09:e8:cb:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:45:5D:CD:3F:1F:56:F9:43:05:CE:E9:19:84:02:9B:AA:11:D5
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/fXNFXc0_H1b5QwXO6RmEApuqEdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.42.248.0/21
89.44.78.0/23
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.153.0/24
188.214.195.0-188.214.197.255
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
Signature Algorithm: sha256WithRSAEncryption
52:1b:7f:0b:89:6c:a2:1f:25:97:59:54:08:11:ac:3c:db:36:
fc:ac:f0:59:df:1d:fe:ec:a5:b3:00:20:bb:07:77:0b:84:11:
d7:1e:65:2b:7d:5c:f4:7c:2b:1d:a3:df:d1:cc:73:04:99:14:
0f:d0:aa:90:1f:38:d1:1b:92:6c:39:7e:84:77:cf:9f:58:d3:
f9:2d:5c:c5:25:28:a3:38:3e:8c:46:8b:97:7d:d6:ab:76:74:
c6:95:0f:f7:a2:ac:e4:ac:34:9a:b1:57:4e:c8:cb:5f:24:4a:
2a:ea:71:99:e9:c0:d7:8a:55:9c:56:56:0f:a5:d0:57:d0:07:
55:b9:03:88:c0:38:0c:75:2a:2a:a7:ac:be:2a:82:b2:9f:5f:
8e:68:59:65:aa:c7:42:7c:c3:90:bc:43:34:d3:6d:e8:c4:13:
af:8b:b5:5e:82:ba:ea:71:5e:33:79:6d:1f:7d:8a:65:84:9b:
c0:98:81:4e:a2:b9:90:c9:ed:e1:f1:7e:17:01:8b:c6:92:4e:
18:b3:c1:8c:cd:0a:0e:e0:e4:ef:db:d3:01:90:97:79:4a:81:
b3:bf:9d:08:0a:56:ff:2f:c8:29:7e:a5:51:9e:c7:66:f5:1e:
f7:0b:39:94:d7:e4:73:09:36:18:ef:0c:46:25:da:0b:1d:dc:
2f:3f:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:24 2025 by rpki-client