Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/kUc1QAq0QSBV_HZ2GtMxlyCUIms.roa
File: kUc1QAq0QSBV_HZ2GtMxlyCUIms.roa (raw, json)
Hash identifier: 1toEBD3fbjm3CLGviVZTbuIrDJm8Td/khjtYDQEnmgs=
Subject key identifier: 91:47:35:40:0A:B4:41:20:55:FC:76:76:1A:D3:31:97:20:94:22:6B
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018D3FE6DFCD5303C4425973E8B5B5D0F6B1
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/kUc1QAq0QSBV_HZ2GtMxlyCUIms.roa
Signing time: Thu 25 Jan 2024 09:15:11 +0000
ROA not before: Thu 25 Jan 2024 09:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 5.249.128.0/19 maxlen: 24
31.11.32.0/21 maxlen: 24
31.14.128.0/20 maxlen: 24
46.37.0.0/19 maxlen: 24
62.149.128.0/17 maxlen: 24
66.71.128.0/18 maxlen: 24
77.81.224.0/20 maxlen: 24
80.73.224.0/21 maxlen: 24
80.211.0.0/16 maxlen: 24
82.192.128.0/19 maxlen: 24
89.36.208.0/22 maxlen: 24
89.46.64.0/20 maxlen: 24
89.46.104.0/21 maxlen: 24
89.46.192.0/21 maxlen: 24
94.177.160.0/19 maxlen: 24
94.177.192.0/18 maxlen: 24
95.110.128.0/17 maxlen: 24
176.107.144.0/21 maxlen: 24
185.56.8.0/22 maxlen: 24
185.58.116.0/22 maxlen: 24
188.213.160.0/20 maxlen: 24
194.182.110.0/23 maxlen: 24
195.231.0.0/17 maxlen: 24
195.231.64.0/20 maxlen: 24
195.231.80.0/21 maxlen: 24
195.231.88.0/21 maxlen: 24
209.227.224.0/20 maxlen: 24
209.227.240.0/20 maxlen: 24
217.61.0.0/18 maxlen: 24
217.61.56.0/21 maxlen: 24
217.198.128.0/20 maxlen: 24
2a00:6d40::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 08:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:e6:df:cd:53:03:c4:42:59:73:e8:b5:b5:d0:f6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 25 09:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=914735400ab4412055fc76761ad331972094226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:5e:18:c1:2e:0e:0b:9f:47:54:08:b4:68:
ab:b1:bb:92:57:21:74:c7:3c:56:4e:5b:25:c2:05:
91:bc:37:c5:20:39:28:b3:16:ac:2d:66:81:5e:c0:
36:18:57:81:1a:68:fd:28:25:d7:d8:ba:19:df:d8:
a9:6a:33:a9:c0:b6:50:99:e0:c5:73:fb:e4:11:e8:
a2:74:18:6c:9a:e0:6d:ae:67:db:1f:a5:18:13:86:
fe:39:92:73:97:04:e3:ef:84:94:69:a9:5b:65:9d:
2b:23:04:b2:3a:1f:a6:c9:39:d6:21:57:aa:d2:11:
00:97:2c:87:3e:1d:85:1a:62:b2:d5:6f:46:82:da:
4a:e1:75:ca:19:93:29:0e:6e:79:48:3d:04:0a:97:
40:73:5f:f9:8b:a6:77:a7:e8:54:69:8a:99:f6:82:
a8:e1:05:c2:3e:ce:24:18:a4:a4:29:5e:e0:f1:6e:
d2:9d:28:28:aa:75:23:c7:6a:a7:12:36:62:ef:97:
2b:28:dd:6b:15:e5:66:04:f0:49:6a:73:cd:0e:ce:
93:38:a7:47:6a:91:04:25:af:c8:dc:98:53:b1:c1:
dd:3b:f4:23:9f:9e:7d:d3:0c:f6:62:a4:54:c4:90:
fb:7b:e8:9c:34:c6:c0:bc:74:51:16:0f:e6:8d:9e:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:35:40:0A:B4:41:20:55:FC:76:76:1A:D3:31:97:20:94:22:6B
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/kUc1QAq0QSBV_HZ2GtMxlyCUIms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.128.0/19
31.11.32.0/21
31.14.128.0/20
46.37.0.0/19
62.149.128.0/17
66.71.128.0/18
77.81.224.0/20
80.73.224.0/21
80.211.0.0/16
82.192.128.0/19
89.36.208.0/22
89.46.64.0/20
89.46.104.0/21
89.46.192.0/21
94.177.160.0-94.177.255.255
95.110.128.0/17
176.107.144.0/21
185.56.8.0/22
185.58.116.0/22
188.213.160.0/20
194.182.110.0/23
195.231.0.0/17
209.227.224.0/19
217.61.0.0/18
217.198.128.0/20
IPv6:
2a00:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
43:fd:3f:8b:fa:81:0a:7d:71:eb:d1:57:5a:be:7b:e2:bd:5b:
04:e0:f0:98:e9:c6:58:7c:99:0e:63:9f:91:21:df:e9:94:d4:
60:2d:12:37:ae:95:99:fe:ba:03:eb:fc:f9:f1:a0:a0:01:9a:
ae:f7:aa:b7:e0:2b:1c:ab:12:34:ae:75:5d:ae:6a:76:b9:9e:
99:a9:0c:7e:1b:59:d5:6e:00:63:f4:6a:56:a8:11:a6:fc:da:
88:28:08:da:ea:ee:d2:c1:e6:a1:0a:21:5e:d2:d4:99:bd:07:
e9:69:38:ac:41:61:7e:98:24:c7:60:b1:30:f1:89:50:91:bc:
3a:c0:4a:c3:8e:be:a1:2e:da:7f:a8:cf:39:e5:53:ef:81:c3:
c5:61:1b:e1:1e:f7:0e:2f:6d:02:74:13:1f:1f:10:dd:ef:34:
bf:22:21:c8:89:b6:81:de:fc:20:35:e9:6d:83:21:bf:dd:29:
0f:ba:a0:8b:27:f0:e9:b5:21:fa:0f:a9:1e:e0:81:1a:5d:72:
a3:80:44:7a:48:45:eb:bf:06:07:30:5c:c1:9c:91:5c:ed:a2:
4c:6b:f3:be:1f:4b:29:fb:4d:5b:d2:c8:c3:1f:c0:6a:c8:5e:
29:f5:9b:d1:b9:c2:8c:fb:d5:36:31:81:04:26:b7:66:6a:26:
e6:b0:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:07 2025 by rpki-client