Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8AKsVLnFklsYLiWWLF8HusAvyUs.roa
File: 8AKsVLnFklsYLiWWLF8HusAvyUs.roa (raw, json)
Hash identifier: V20QMBSXwvXRafgpksPTOvGdZGN6cas2tIaPS99w79Q=
Subject key identifier: F0:02:AC:54:B9:C5:92:5B:18:2E:25:96:2C:5F:07:BA:C0:2F:C9:4B
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0191DF43326C77A7019741FF107CD1418B20
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8AKsVLnFklsYLiWWLF8HusAvyUs.roa
Signing time: Wed 11 Sep 2024 04:06:48 +0000
ROA not before: Wed 11 Sep 2024 04:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 31.10.3.0/24 maxlen: 24
62.122.0.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
79.137.170.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
79.137.178.0/23 maxlen: 23
81.91.180.0/22 maxlen: 22
81.91.184.0/22 maxlen: 22
81.91.188.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.150.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.202.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
81.211.206.0/24 maxlen: 24
81.211.207.0/24 maxlen: 24
81.211.208.0/24 maxlen: 24
81.211.211.0/24 maxlen: 24
81.211.212.0/24 maxlen: 24
81.211.213.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.253.0/24 maxlen: 24
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
85.193.120.0/21 maxlen: 21
89.208.123.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
93.157.176.0/23 maxlen: 23
93.157.178.0/23 maxlen: 23
93.157.180.0/24 maxlen: 24
93.157.181.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
185.212.244.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.247.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
185.229.120.0/24 maxlen: 24
185.229.121.0/24 maxlen: 24
185.234.24.0/22 maxlen: 22
185.234.24.0/23 maxlen: 23
185.234.26.0/23 maxlen: 23
185.234.60.0/22 maxlen: 22
185.234.60.0/23 maxlen: 23
185.234.62.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
185.250.30.0/23 maxlen: 23
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
193.41.130.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.48.0/24 maxlen: 24
195.189.49.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
195.189.51.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.76.0/24 maxlen: 24
212.96.77.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
217.171.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:43:32:6c:77:a7:01:97:41:ff:10:7c:d1:41:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Sep 11 04:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f002ac54b9c5925b182e25962c5f07bac02fc94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:1b:03:d0:90:a2:84:88:63:70:45:bb:a4:
f1:94:1b:09:a2:06:24:5f:83:f8:5e:80:1e:3f:6a:
7d:6f:2b:92:3b:36:b7:6e:cb:4f:f0:fc:59:ee:3d:
16:87:d3:8d:04:60:ee:25:2e:b0:42:b9:a6:9c:37:
ea:1a:a8:8c:42:8d:79:68:04:10:ef:e1:e0:cb:cb:
3b:af:70:1a:2a:3a:9a:13:af:45:07:02:80:6c:bc:
78:ec:a0:83:59:7c:79:ad:35:1a:8b:e2:d7:b0:1f:
ec:df:55:cd:73:6e:cb:a5:8d:c8:d3:a9:b2:be:5c:
1b:d2:ea:5b:2e:62:bc:d1:1e:2a:95:a4:53:af:2b:
9b:c4:17:39:d8:b5:77:47:9c:d4:6f:03:d3:12:25:
37:07:ba:64:4a:0e:b3:d4:72:c9:a6:86:4a:e3:cf:
e0:ae:2b:13:bc:a2:33:3d:ef:ef:68:40:0e:33:81:
04:6f:21:9c:74:35:8b:0d:9e:0f:5b:2d:c9:a0:81:
fe:c8:6c:50:56:dc:76:4a:15:36:36:04:0d:b9:d7:
3f:b2:07:2b:2f:86:e4:a6:02:68:06:02:c6:16:17:
70:6c:35:90:1a:df:75:6a:cd:02:cd:45:d9:04:22:
0f:78:1e:41:94:f6:90:1b:32:ec:89:a1:7e:97:7f:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:AC:54:B9:C5:92:5B:18:2E:25:96:2C:5F:07:BA:C0:2F:C9:4B
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/8AKsVLnFklsYLiWWLF8HusAvyUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.3.0/24
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.188.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.206.0-81.211.208.255
81.211.211.0-81.211.213.255
81.211.250.0/23
81.211.253.0/24
85.193.96.0/19
89.208.123.0/24
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.229.120.0/23
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
217.171.144.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a7:78:01:7b:2c:a1:4a:a5:25:da:04:99:4d:90:c0:03:20:
ee:8f:cb:b8:30:06:ad:e0:79:70:3c:2a:f7:ea:17:96:0a:40:
3f:e7:b1:51:4b:31:d3:c6:ec:e1:95:41:8a:de:4b:80:16:a8:
1d:7c:57:cf:f3:0c:ec:3b:b5:c8:34:7c:4d:4b:4d:9e:dd:34:
e7:38:b3:f1:91:b4:80:42:d0:48:9a:08:96:ab:4e:ce:4c:18:
a6:df:dd:2b:25:17:d8:99:2a:04:8f:05:e5:00:cf:d8:36:1d:
41:13:5f:54:03:02:98:85:48:08:9d:5c:dc:37:1e:4d:d4:91:
44:1f:de:9d:0d:c9:29:4d:10:15:8d:27:a0:dd:15:a9:c4:e3:
c7:69:12:88:67:6a:7a:26:22:62:5c:35:95:71:a7:5b:29:9d:
79:c2:24:9a:0e:a6:71:a5:9a:22:b5:4b:36:a9:e7:a3:e4:d1:
d0:7e:25:52:cd:3b:dd:2e:1f:04:da:d7:a8:52:d5:32:a1:de:
b7:78:3e:71:42:1f:3f:13:6e:d6:e6:81:6e:2f:13:f7:f1:d9:
fd:5e:68:77:9e:e5:b4:4e:82:a6:7f:88:f2:a5:3e:61:ea:35:
8e:94:e7:84:cd:5c:ba:db:d1:b4:93:62:ef:00:65:5a:4c:2a:
6f:80:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:48 2025 by rpki-client