Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/tRjx1Cp2GTkQUtSYCJ-8Sajq8oc.roa
File: tRjx1Cp2GTkQUtSYCJ-8Sajq8oc.roa (raw, json)
Hash identifier: 2M7FI8m84i5kcLrGXiSlv7ij9jRUKq+0SVYuTfGkMZM=
Subject key identifier: B5:18:F1:D4:2A:76:19:39:10:52:D4:98:08:9F:BC:49:A8:EA:F2:87
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01856D5CF14EFF3CC1D111EF9DFFD3A244ED
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/tRjx1Cp2GTkQUtSYCJ-8Sajq8oc.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35470
IP address blocks: 213.187.240.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
89.31.96.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
178.18.80.0/20 maxlen: 24
31.3.96.0/21 maxlen: 24
85.10.188.0/22 maxlen: 22
141.138.192.0/20 maxlen: 24
193.138.204.0/22 maxlen: 24
141.138.207.0/24 maxlen: 24
185.3.208.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
185.110.172.0/22 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
79.170.88.0/21 maxlen: 24
185.96.4.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
37.230.96.0/21 maxlen: 24
194.60.207.0/24 maxlen: 24
37.34.48.0/21 maxlen: 24
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
2a02:348:59::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348::/32 maxlen: 32
2a02:348:60::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:3::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Dec 2023 10:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f1:4e:ff:3c:c1:d1:11:ef:9d:ff:d3:a2:44:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b518f1d42a7619391052d498089fbc49a8eaf287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:63:43:ec:44:90:e1:ed:b9:eb:8a:f2:73:
d7:fc:9d:31:b0:30:db:41:bb:39:fd:24:6d:7a:84:
e4:ac:02:82:4d:d4:23:5b:8d:fd:fb:28:94:d2:da:
17:74:3c:97:31:2f:25:49:83:40:5d:70:c0:5a:f8:
be:5c:b1:e3:ed:d7:a3:bf:14:e7:3c:7d:97:b4:45:
4d:20:68:75:86:c0:0b:85:84:81:32:42:35:33:17:
79:a8:3b:b4:e5:83:67:fa:fc:f5:4c:10:b3:01:78:
40:85:30:86:17:76:8f:f5:26:a1:55:20:d8:43:80:
e5:8c:10:59:df:73:47:40:5a:ea:d6:e8:f8:4f:52:
03:3c:6a:77:be:09:0e:ca:b2:fc:fb:8a:8a:6c:42:
71:47:28:c9:ff:9d:11:06:24:db:82:19:ea:af:81:
f5:89:47:9d:3a:5e:93:fa:b7:d4:b7:ad:47:64:31:
fb:85:f8:c6:9b:8a:dd:51:f4:cc:36:5e:ab:cb:53:
db:39:0f:4a:0d:9a:b9:49:48:8f:59:d3:31:b4:71:
8d:a3:9c:4a:af:a1:ea:95:db:4b:27:fb:fc:61:77:
3e:1b:a7:50:6c:55:a2:b8:00:b3:c7:20:b0:85:bf:
77:87:7c:2a:0f:84:e4:ce:de:60:41:66:02:88:7b:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:F1:D4:2A:76:19:39:10:52:D4:98:08:9F:BC:49:A8:EA:F2:87
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/tRjx1Cp2GTkQUtSYCJ-8Sajq8oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
51:88:67:2e:00:5d:4a:f0:33:7a:63:5e:6c:07:78:05:9d:c3:
f6:4c:9d:14:4e:ff:5a:8e:54:a6:9d:22:5a:ab:30:6f:6c:14:
13:a2:78:f9:99:16:fa:e6:43:85:49:62:75:0e:ad:02:07:74:
08:8f:f8:22:1b:e9:03:2d:25:00:2a:77:71:42:6f:99:d7:f7:
5d:44:87:0d:c3:a8:2d:4a:66:53:98:7d:f0:61:ac:b3:e7:73:
9e:cf:9d:0d:32:8c:3b:17:d5:b5:df:8e:ab:8f:b6:ff:a9:5a:
5d:64:19:78:f1:1c:72:ab:8d:1b:a1:7c:84:d8:d8:75:76:90:
f2:66:1a:6b:d8:a8:c7:9b:a8:6a:34:cb:63:d5:0f:5c:97:ee:
7f:12:2f:48:13:03:5a:d6:40:2e:2f:94:53:81:37:f0:8c:42:
db:47:de:25:8f:8d:f1:8c:67:97:f7:36:27:3c:96:25:71:cc:
db:2f:a1:71:b1:2f:25:cc:2a:41:7b:6e:36:ad:55:bd:df:0c:
5f:07:23:8c:2a:5d:cd:b0:5b:2d:ba:40:70:58:9c:04:4e:12:
a6:d2:09:8b:18:ba:b4:01:16:ce:c8:82:fe:de:7f:49:e3:48:
24:6f:6c:61:c6:e0:4b:8d:10:fb:42:1f:51:15:5b:2e:48:f5:
d7:ea:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org