Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/m8hTeV1D9QAlON7Z4IiLbhb-3cM.roa
File: m8hTeV1D9QAlON7Z4IiLbhb-3cM.roa (raw, json)
Hash identifier: Lxaz999FvZcaSr1FpHUhb6Ja7r5FZ7laAUj6Ksr5Ig0=
Subject key identifier: 9B:C8:53:79:5D:43:F5:00:25:38:DE:D9:E0:88:8B:6E:16:FE:DD:C3
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0191DA208075CA2F84C39EB1EBB4FF1EB91A
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/m8hTeV1D9QAlON7Z4IiLbhb-3cM.roa
Signing time: Tue 10 Sep 2024 04:10:48 +0000
ROA not before: Tue 10 Sep 2024 04:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 31.10.3.0/24 maxlen: 24
62.122.0.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
79.137.170.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
79.137.178.0/23 maxlen: 23
81.91.180.0/22 maxlen: 22
81.91.184.0/22 maxlen: 22
81.91.188.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.150.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.202.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
81.211.206.0/24 maxlen: 24
81.211.207.0/24 maxlen: 24
81.211.208.0/24 maxlen: 24
81.211.211.0/24 maxlen: 24
81.211.212.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.253.0/24 maxlen: 24
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
85.193.120.0/21 maxlen: 21
89.208.123.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
93.157.176.0/23 maxlen: 23
93.157.178.0/23 maxlen: 23
93.157.180.0/24 maxlen: 24
93.157.181.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
185.212.244.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.247.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
185.229.120.0/24 maxlen: 24
185.229.121.0/24 maxlen: 24
185.234.24.0/22 maxlen: 22
185.234.24.0/23 maxlen: 23
185.234.26.0/23 maxlen: 23
185.234.60.0/22 maxlen: 22
185.234.60.0/23 maxlen: 23
185.234.62.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
185.250.30.0/23 maxlen: 23
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
193.41.130.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.48.0/24 maxlen: 24
195.189.49.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
195.189.51.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.76.0/24 maxlen: 24
212.96.77.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
217.171.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 04:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:20:80:75:ca:2f:84:c3:9e:b1:eb:b4:ff:1e:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Sep 10 04:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bc853795d43f5002538ded9e0888b6e16feddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:fc:7f:50:44:98:2c:96:f8:36:59:db:71:
5b:91:f7:39:0b:18:07:57:29:8d:91:25:04:1f:5a:
1d:ec:40:6a:9a:35:17:10:e1:22:b6:f7:dd:2e:2e:
63:7a:34:f2:05:56:25:2a:09:49:5b:d6:6e:19:8b:
2e:81:49:0a:b6:15:44:ce:7d:82:5f:9b:89:5d:53:
1e:65:55:b9:06:53:da:67:05:98:b5:92:17:88:88:
d6:fd:ee:2a:92:b4:4d:39:46:d3:39:39:b0:91:8f:
b9:09:6e:a8:f8:6c:82:31:e8:30:4f:be:63:16:a0:
ba:b6:9c:c2:6e:ca:32:3c:8a:7b:f6:09:13:f3:cb:
c6:1d:16:d8:c9:f5:70:98:f2:d3:3a:e0:97:ac:4b:
ba:08:72:b6:2d:8d:fc:58:fd:05:fd:9e:02:a5:a9:
65:52:f5:cf:71:ae:29:69:2a:58:b6:87:45:0b:ad:
de:ee:2f:24:c7:8e:58:74:92:41:03:9e:69:4e:b7:
9d:fa:50:ca:77:2f:59:7a:74:37:21:96:7d:1d:f3:
19:9b:8e:71:86:75:09:89:da:3e:bc:ce:92:12:6c:
1b:a0:68:87:09:af:61:cb:36:c5:b8:35:4f:f0:d7:
c6:e9:6d:d8:59:cb:6d:f6:39:ad:42:47:71:79:28:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:53:79:5D:43:F5:00:25:38:DE:D9:E0:88:8B:6E:16:FE:DD:C3
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/m8hTeV1D9QAlON7Z4IiLbhb-3cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.3.0/24
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.188.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.206.0-81.211.208.255
81.211.211.0-81.211.212.255
81.211.250.0/23
81.211.253.0/24
85.193.96.0/19
89.208.123.0/24
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.229.120.0/23
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
217.171.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0d:25:89:e7:d6:b7:94:33:6b:4f:08:bf:c5:d1:9a:61:36:
2d:55:b0:07:40:78:1a:60:d9:2a:62:b3:c9:d5:86:d1:47:be:
82:a5:13:52:4c:2c:f3:21:0a:5a:8e:23:eb:89:52:77:84:9d:
6a:f7:8c:18:de:2d:4e:24:3f:cd:68:65:a0:27:a2:29:b2:05:
8e:f8:ef:aa:89:c0:be:19:b5:e2:5d:6a:b3:5c:fd:c8:25:e2:
70:64:68:4b:60:51:1d:d2:a3:7d:08:7b:6a:b7:6e:d0:80:5e:
f0:26:1e:ac:b0:b2:59:5a:df:d8:d9:b6:20:b3:41:d7:9e:04:
6c:87:79:46:b6:43:67:8f:44:47:40:bb:76:d2:64:68:80:75:
04:53:7d:b6:64:9f:d4:22:1f:fe:39:02:40:98:e6:6a:80:af:
3f:87:28:3e:da:0c:bd:82:51:67:fa:d0:d3:d4:f3:f2:19:54:
69:ee:20:9f:ce:30:d0:f6:f6:64:55:33:39:e4:1a:85:1d:e2:
f6:29:9b:28:26:ba:a3:21:0e:cd:fb:a7:d0:8f:51:1e:52:65:
41:4a:27:cc:63:77:c1:45:fe:90:27:6a:fb:cd:13:d3:f1:56:
f1:8e:07:a0:d3:eb:0d:f0:7b:0a:35:ff:0d:ac:1b:5a:8f:a6:
39:8d:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:54:34 2024 by rpki-client on console-ams.rpki-client.org