Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/3YhqatW_idcVKRQ57TRqvn1gLLA.roa
File: 3YhqatW_idcVKRQ57TRqvn1gLLA.roa (raw, json)
Hash identifier: iSS757ZWF3/Tsx1mIy6zykuoCz6hrpK6tnzLmJmJ8fc=
Subject key identifier: DD:88:6A:6A:D5:BF:89:D7:15:29:14:39:ED:34:6A:BE:7D:60:2C:B0
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01919DB185DA6D8AF414C5B97D80FC3C212C
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/3YhqatW_idcVKRQ57TRqvn1gLLA.roa
Signing time: Thu 29 Aug 2024 10:32:22 +0000
ROA not before: Thu 29 Aug 2024 10:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 31.10.3.0/24 maxlen: 24
62.122.0.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
79.137.170.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
79.137.178.0/23 maxlen: 23
81.91.180.0/22 maxlen: 22
81.91.184.0/22 maxlen: 22
81.91.188.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.150.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.202.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
81.211.206.0/24 maxlen: 24
81.211.207.0/24 maxlen: 24
81.211.208.0/24 maxlen: 24
81.211.211.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.253.0/24 maxlen: 24
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
85.193.120.0/21 maxlen: 21
89.208.123.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
93.157.176.0/23 maxlen: 23
93.157.178.0/23 maxlen: 23
93.157.180.0/24 maxlen: 24
93.157.181.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
185.212.244.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.247.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
185.229.120.0/24 maxlen: 24
185.229.121.0/24 maxlen: 24
185.234.24.0/22 maxlen: 22
185.234.24.0/23 maxlen: 23
185.234.26.0/23 maxlen: 23
185.234.60.0/22 maxlen: 22
185.234.60.0/23 maxlen: 23
185.234.62.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
185.250.30.0/23 maxlen: 23
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
193.41.130.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.48.0/24 maxlen: 24
195.189.49.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
195.189.51.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.76.0/24 maxlen: 24
212.96.77.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
217.171.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 04:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:b1:85:da:6d:8a:f4:14:c5:b9:7d:80:fc:3c:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Aug 29 10:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd886a6ad5bf89d715291439ed346abe7d602cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:7e:17:8d:3f:9d:90:4f:61:71:da:d6:7c:
b4:88:1e:c5:8a:eb:7c:c0:46:af:14:a9:ec:e7:f3:
78:1d:ca:74:e0:e3:67:7a:97:ad:05:9e:36:e6:87:
d2:80:2a:b2:c1:bf:71:ab:e5:e2:5a:23:d9:da:fd:
a8:2b:06:5f:0f:eb:81:4f:06:88:f4:f5:0b:93:0d:
52:db:ae:2e:39:78:0b:80:68:20:f0:ce:18:da:c8:
8b:54:0f:2c:37:61:9f:1d:13:85:77:2d:93:f5:3d:
1d:c5:74:4d:c6:30:bd:5e:66:61:9b:15:73:1f:94:
7e:60:62:80:57:99:a2:bf:19:e8:cf:7d:7b:70:ea:
bc:90:44:c0:cf:32:72:b0:9e:19:81:99:68:6a:f5:
21:a1:77:b1:fd:52:59:c9:4e:38:91:f0:ec:a4:04:
a1:2b:fa:e9:7b:20:d1:cf:fa:03:5c:d7:c7:4a:d5:
ca:f7:00:47:91:84:f0:fb:50:f1:66:0c:20:66:37:
dc:84:e1:e8:db:8e:49:5b:80:50:53:6f:19:af:3d:
25:b6:05:a4:0b:fd:aa:85:9d:d2:f4:f5:84:b1:de:
61:a3:31:79:00:e7:4d:c7:44:ed:7c:f9:7c:32:ac:
4b:4c:27:79:ec:a9:b5:e8:17:58:a6:3e:8d:7f:cd:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:6A:6A:D5:BF:89:D7:15:29:14:39:ED:34:6A:BE:7D:60:2C:B0
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/3YhqatW_idcVKRQ57TRqvn1gLLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.3.0/24
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.188.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.206.0-81.211.208.255
81.211.211.0/24
81.211.250.0/23
81.211.253.0/24
85.193.96.0/19
89.208.123.0/24
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.229.120.0/23
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
217.171.144.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b3:54:1b:58:08:9c:a4:e8:ba:f3:72:38:fb:3f:5a:93:ef:
82:64:69:a1:26:48:0b:be:64:f8:bc:0f:e5:1d:0b:c5:ec:f4:
db:85:09:54:b7:bb:e3:06:b6:76:5a:67:20:f4:5a:67:b0:6b:
9a:b3:6c:28:04:c8:07:c8:f5:92:f4:b1:a8:c7:38:ff:7c:07:
ef:ac:18:7d:57:f2:22:ef:e1:0d:65:4a:28:c4:61:4d:bf:f6:
7f:84:65:7d:5c:04:ba:7f:f6:74:c0:ba:23:b7:f6:da:d1:2d:
e2:55:23:90:84:53:08:f0:33:53:b4:1a:71:12:5c:fe:d0:65:
b7:fd:32:40:7d:e1:bd:de:1e:0e:fd:e9:30:2c:85:38:81:1c:
9e:86:f3:2b:24:dc:63:0f:a8:3b:4e:da:a6:5c:a1:67:c8:7c:
c7:ca:70:c1:4c:b9:6c:42:7f:6a:1e:49:a1:59:1a:74:0c:5b:
be:b1:95:e4:09:d1:8c:45:91:6a:bc:65:19:c5:9e:97:ac:22:
7f:4e:97:85:e0:53:46:2c:5a:ff:45:c0:b3:ed:98:65:40:f7:
d3:ac:56:df:18:9a:17:6a:d4:f6:99:cf:e7:8e:37:08:08:1b:
b9:63:00:dd:79:6b:8c:82:a2:c0:98:93:b2:4b:d8:20:3a:ce:
8f:c0:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 05:37:11 2024 by rpki-client on console-ams.rpki-client.org