Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ImCCh4yZPcd9L70D-Vfa7sN1XR4.roa
File: ImCCh4yZPcd9L70D-Vfa7sN1XR4.roa (raw, json)
Hash identifier: DKE/DgSleAPbWomVRIdXD1JYzYZQQs/OO4A6Wb461ME=
Subject key identifier: 22:60:82:87:8C:99:3D:C7:7D:2F:BD:03:F9:57:DA:EE:C3:75:5D:1E
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 01925726DE4A9756E67C3E0C58404348D704
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ImCCh4yZPcd9L70D-Vfa7sN1XR4.roa
Signing time: Fri 04 Oct 2024 10:50:17 +0000
ROA not before: Fri 04 Oct 2024 10:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.32.0/24 maxlen: 24
31.210.33.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.58.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
77.92.128.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
77.92.133.0/24 maxlen: 32
77.92.134.0/24 maxlen: 24
77.92.135.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.141.0/24 maxlen: 24
77.92.149.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.156.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
77.92.158.0/24 maxlen: 24
77.92.159.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.114.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
188.132.134.0/24 maxlen: 24
188.132.135.0/24 maxlen: 32
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.157.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.244.0/24 maxlen: 32
188.132.245.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.252.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
212.68.32.0/24 maxlen: 24
212.68.33.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.42.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
2a02:26b0:8001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 22:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:26:de:4a:97:56:e6:7c:3e:0c:58:40:43:48:d7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 4 10:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=226082878c993dc77d2fbd03f957daeec3755d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:71:d7:4e:9a:69:c4:8e:15:b1:fa:f0:0d:
80:fe:38:8b:25:13:f2:d7:aa:76:fd:3a:e1:2f:c3:
de:40:d2:e9:02:4c:15:57:58:03:02:77:cf:a0:de:
25:59:e4:10:14:c4:fa:1c:e7:e6:1f:d9:cf:9b:42:
5c:12:e5:fb:57:43:05:cd:24:e7:e8:7e:a1:13:b8:
3a:62:15:e2:a8:50:74:08:d1:c9:45:fe:bf:da:6f:
e6:21:bf:dd:61:28:a6:37:00:0a:ce:0d:43:06:8e:
51:a9:33:6e:91:7f:39:14:ab:23:de:8c:f0:9d:0e:
be:f3:1d:dd:1f:d4:b0:41:b5:82:9c:5b:c7:49:f2:
0a:74:f3:c8:2b:ca:86:bf:b3:e4:cf:45:a6:5b:b1:
27:7e:ed:e1:ce:7d:97:05:9a:75:27:e6:05:9c:08:
dc:d3:72:66:93:4d:33:b3:b3:2c:15:28:4a:04:1e:
a7:a2:51:c9:d1:c3:c2:3e:90:db:8f:dc:16:38:dc:
ed:da:de:ba:cc:34:e4:66:dd:11:b1:fe:26:c5:cd:
7a:44:25:8c:0d:c1:58:d0:b1:be:4b:98:f0:8d:03:
8b:f0:ee:c2:f8:8f:3e:bf:e7:6c:a0:d4:7a:49:e2:
80:47:81:2c:81:10:9f:51:49:e1:89:2c:4b:fd:69:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:60:82:87:8C:99:3D:C7:7D:2F:BD:03:F9:57:DA:EE:C3:75:5D:1E
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ImCCh4yZPcd9L70D-Vfa7sN1XR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.56.0-31.210.61.255
77.92.128.0/23
77.92.132.0-77.92.141.255
77.92.149.0/24
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.108.0/24
78.135.113.0-78.135.114.255
78.135.116.0/24
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.176.255
188.132.180.0/24
188.132.194.0/24
188.132.204.0/23
188.132.244.0-188.132.246.255
188.132.252.0/22
212.68.32.0/23
212.68.40.0-212.68.46.255
212.68.50.0/23
212.68.57.0/24
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
d6:31:e9:66:7b:ec:b1:60:6a:2e:70:6a:e2:68:23:53:9f:60:
bb:61:aa:19:bc:20:84:c5:2e:8f:8d:2a:99:91:91:fa:8d:7b:
3d:71:ce:2f:9f:5e:25:bc:33:69:5c:1c:57:20:09:1f:b5:bd:
35:97:5e:aa:23:37:9d:c4:4b:13:96:b1:f3:18:4a:4e:a8:7f:
35:b4:cf:37:b0:87:56:2b:e3:74:ed:7a:ea:18:7e:a0:17:42:
43:d2:61:63:93:8e:49:cc:07:92:a3:ff:79:27:cf:f4:1d:66:
7d:3c:88:1f:5d:5a:1f:4c:e0:42:39:10:8d:21:07:f4:23:b8:
a3:f3:8d:d8:9d:41:ea:4d:0b:01:45:16:9d:c8:5b:f1:31:3f:
d2:76:95:80:16:f2:a0:c5:df:b5:5c:bb:d9:dc:c4:58:74:6c:
6d:47:d4:30:52:1b:77:fa:5c:e4:3d:76:c0:92:3e:f0:0a:85:
74:65:47:4a:b3:80:bc:77:64:af:71:b1:85:83:6b:62:6f:07:
0c:bd:ab:3c:d1:b4:ba:61:47:7b:e4:2d:b9:27:3a:be:8c:6b:
64:ab:b5:ab:d7:fb:ba:4e:6b:72:cc:8c:5b:c6:0d:34:9c:f2:
e5:b1:2a:e5:2e:52:65:c3:7e:00:5e:20:8c:c8:66:a9:2d:22:
00:6a:62:91
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 8 01:10:55 2024 by rpki-client on console-ams.rpki-client.org