Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/kkSS1V2YJepXya1ipAg-Ur_1imQ.roa
File: kkSS1V2YJepXya1ipAg-Ur_1imQ.roa (raw, json)
Hash identifier: GY6b2VoRLghMQE3GdpMe7jZOYgrMFiVJpGawTxrSHSw=
Subject key identifier: 92:44:92:D5:5D:98:25:EA:57:C9:AD:62:A4:08:3E:52:BF:F5:8A:64
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018DF91F83912810FD69A3C867EA509A735A
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/kkSS1V2YJepXya1ipAg-Ur_1imQ.roa
Signing time: Fri 01 Mar 2024 08:26:48 +0000
ROA not before: Fri 01 Mar 2024 08:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 31.11.128.0/17 maxlen: 17
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
31.11.131.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.172.0/24 maxlen: 24
31.11.202.0/24 maxlen: 24
31.11.208.0/22 maxlen: 22
31.11.228.0/24 maxlen: 24
31.22.96.0/21 maxlen: 21
31.22.100.0/23 maxlen: 23
31.135.168.0/21 maxlen: 21
31.135.175.0/24 maxlen: 24
37.8.192.0/18 maxlen: 18
37.8.208.0/24 maxlen: 24
37.8.214.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
37.8.231.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
62.122.112.0/21 maxlen: 21
77.222.224.0/21 maxlen: 21
77.222.232.0/21 maxlen: 21
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.31.152.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
78.88.0.0/17 maxlen: 17
78.88.28.0/22 maxlen: 22
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.43.0/24 maxlen: 24
78.88.123.0/24 maxlen: 24
78.88.128.0/17 maxlen: 17
78.88.188.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
82.139.0.0/18 maxlen: 18
83.143.40.0/21 maxlen: 21
83.143.136.0/21 maxlen: 21
83.243.104.0/21 maxlen: 21
88.156.0.0/18 maxlen: 18
88.156.64.0/18 maxlen: 18
88.156.64.0/24 maxlen: 24
88.156.78.0/24 maxlen: 24
88.156.80.176/28 maxlen: 28
88.156.128.0/18 maxlen: 18
88.156.128.0/21 maxlen: 21
88.156.128.0/23 maxlen: 23
88.156.130.0/23 maxlen: 23
88.156.132.0/23 maxlen: 23
88.156.134.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.164.0/22 maxlen: 22
88.156.192.0/18 maxlen: 18
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
88.156.255.0/24 maxlen: 24
89.151.0.0/18 maxlen: 18
89.151.16.0/20 maxlen: 20
89.151.40.0/21 maxlen: 21
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
91.230.159.0/24 maxlen: 24
91.230.162.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
91.231.116.0/23 maxlen: 23
91.238.232.0/22 maxlen: 22
93.105.0.0/17 maxlen: 17
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
93.105.176.0/23 maxlen: 23
93.105.178.0/23 maxlen: 23
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
93.105.224.0/21 maxlen: 21
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
94.231.48.0/20 maxlen: 20
95.160.0.0/17 maxlen: 24
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.166.0/24 maxlen: 24
95.160.170.0/24 maxlen: 24
95.160.228.0/22 maxlen: 22
95.160.233.0/24 maxlen: 24
95.160.236.0/22 maxlen: 22
109.107.0.0/19 maxlen: 19
109.107.0.0/21 maxlen: 21
109.107.9.0/24 maxlen: 24
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
109.241.0.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
109.241.128.0/18 maxlen: 18
109.241.192.0/18 maxlen: 18
178.235.0.0/17 maxlen: 17
178.235.40.0/24 maxlen: 24
178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.136.0/23 maxlen: 23
178.235.138.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.150.0/24 maxlen: 24
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
185.51.180.0/22 maxlen: 22
192.166.120.0/23 maxlen: 23
193.201.18.0/23 maxlen: 23
194.54.188.0/22 maxlen: 22
195.26.72.0/22 maxlen: 22
195.28.170.0/23 maxlen: 23
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
195.242.252.0/22 maxlen: 22
2a00:9f00::/32 maxlen: 32
2a00:9f00::/36 maxlen: 36
2a00:9f00::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:c::/48 maxlen: 48
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:aa::/48 maxlen: 48
2a00:9f00:bb::/48 maxlen: 48
2a00:9f00:cc::/48 maxlen: 48
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:abba::/48 maxlen: 48
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:babe::/48 maxlen: 48
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:1f:83:91:28:10:fd:69:a3:c8:67:ea:50:9a:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Mar 1 08:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=924492d55d9825ea57c9ad62a4083e52bff58a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:29:37:ab:d9:11:45:86:5b:94:a2:75:dd:
23:8d:5a:51:79:e8:76:99:25:46:5a:00:f3:4b:53:
07:ed:0e:bf:32:39:c9:41:40:42:3f:69:1e:e2:72:
fd:5a:bd:fe:0d:7d:8b:5e:6b:ec:69:43:eb:9f:d2:
8a:74:59:c0:fb:c1:8a:51:fb:f4:bd:61:a7:84:bb:
6d:1a:d6:e4:89:3d:71:8b:a8:50:43:a4:7a:d2:fb:
d0:81:1a:78:28:ea:b9:85:f2:1b:8f:7a:0e:56:f2:
ac:b5:76:11:d9:99:c9:8a:b9:a1:6c:f2:76:c0:0d:
ad:0a:76:72:d7:3a:d5:a4:ab:e2:33:7a:b1:5b:1d:
d4:77:c1:f3:c5:f9:e8:c3:61:40:ed:fb:f6:fc:cf:
22:90:00:62:3f:58:40:82:74:f7:2c:3e:ad:42:68:
84:72:ec:39:bf:e4:25:19:e2:dc:50:02:cf:81:ff:
e8:0f:c8:28:b3:cf:94:6e:be:8f:7e:f8:9c:3d:bd:
2b:d0:0f:1a:71:c6:84:d3:b7:cc:34:6b:ef:e5:d0:
b5:d7:10:02:d4:c7:7e:d5:21:cf:e5:f5:d7:6c:14:
46:b9:cf:20:f0:bb:dd:15:f4:c3:18:ab:1a:e1:5e:
58:54:c3:d6:d0:fa:73:65:d5:a7:d7:db:de:1a:0f:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:44:92:D5:5D:98:25:EA:57:C9:AD:62:A4:08:3E:52:BF:F5:8A:64
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/kkSS1V2YJepXya1ipAg-Ur_1imQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
84:ce:90:f5:fa:b2:0a:8b:a3:94:90:4a:f2:7d:92:e2:b8:0b:
af:7b:3a:03:c6:0a:30:d2:a6:95:32:a4:36:c4:0d:84:b8:0b:
3b:0d:a9:aa:33:d3:a1:1a:fd:d4:2f:ac:cd:0d:9b:22:11:75:
38:0a:ae:33:fa:a8:5d:96:7c:c2:14:98:8b:1e:a3:7f:04:fb:
54:06:1d:e1:ba:cc:ea:72:21:09:0a:b7:ea:76:52:cc:0d:ef:
45:87:e4:7e:cc:b3:07:14:c5:5c:ad:3a:75:0e:11:4a:e2:b1:
9b:e4:59:6b:82:4e:3f:1f:dd:7c:5c:60:38:4c:b2:05:9a:4d:
94:34:6c:0e:f0:19:1e:40:d6:85:d3:9a:b7:92:a1:b4:5a:18:
28:b7:30:35:32:0e:b7:0e:d9:33:77:72:e8:49:53:a4:bd:ff:
61:a1:1e:9e:b0:65:91:29:48:10:40:1c:87:e6:50:25:af:2c:
87:1e:df:59:00:38:ff:16:bb:f1:fd:a5:ae:35:c5:55:04:f2:
85:40:b4:96:96:f9:74:a2:30:a0:37:8b:bc:ab:ec:04:ad:2a:
e8:49:84:b6:d9:b6:72:16:48:cf:2a:9c:55:5a:3a:67:d3:d2:
7b:de:42:a0:85:ed:72:09:96:77:cc:37:3c:67:b3:5d:53:4e:
28:60:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org