Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/AxnHiYUM7YXufZMqOjVys6h7yFM.roa
File: AxnHiYUM7YXufZMqOjVys6h7yFM.roa (raw, json)
Hash identifier: 3OU25P8ZAfujIAa9C1GwYebbajTSmsePMEPB+KK3Xw0=
Subject key identifier: 03:19:C7:89:85:0C:ED:85:EE:7D:93:2A:3A:35:72:B3:A8:7B:C8:53
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01862A668BC2B064B6CD70D98B1E90A4F25F
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/AxnHiYUM7YXufZMqOjVys6h7yFM.roa
Signing time: Tue 07 Feb 2023 05:43:28 +0000
ROA not before: Tue 07 Feb 2023 05:43:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.32.0/19 maxlen: 19
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
103.17.1.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.199.88.0/22 maxlen: 22
103.199.89.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.160.0/21 maxlen: 21
80.76.160.0/20 maxlen: 20
80.76.172.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.174.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/22 maxlen: 22
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:66:8b:c2:b0:64:b6:cd:70:d9:8b:1e:90:a4:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Feb 7 05:43:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0319c789850ced85ee7d932a3a3572b3a87bc853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:7e:0d:21:8c:9f:2f:58:bf:0e:79:83:d1:
28:30:48:41:bc:fb:f1:3b:51:92:38:cd:fd:ec:4f:
41:43:53:cd:52:68:3c:4d:af:62:38:5b:50:ed:f5:
3a:c1:29:3f:8f:28:53:46:d9:59:3b:2c:cc:4f:a1:
c8:08:1d:71:d5:ca:3b:2b:7c:9a:99:cc:94:81:fd:
81:36:8e:29:48:10:f9:5e:e0:95:f9:89:e1:f4:af:
f1:01:28:bd:71:54:3e:ed:62:ae:22:c1:72:e3:eb:
3d:62:94:68:ea:da:0a:d1:11:6e:92:d3:4c:8c:83:
15:44:08:49:65:cf:31:da:28:45:12:ce:b9:e3:b2:
73:37:07:b4:c6:66:84:c8:2b:dc:65:8f:40:c8:f6:
da:6e:c8:42:72:9f:1b:ed:dc:62:8e:4d:12:cf:c7:
e4:b8:fe:37:4f:f5:91:cb:d3:28:53:fd:38:9e:bb:
29:e5:05:44:40:8b:dd:d8:41:df:60:fc:67:06:ba:
d7:eb:5c:df:27:36:d2:a0:cd:52:fc:b0:ae:5f:31:
4b:53:55:07:36:b9:ea:99:fc:2f:86:d0:ea:05:c9:
e1:71:3d:e8:c5:3d:ea:d5:d6:e9:47:91:23:62:87:
6f:5a:16:3f:9d:e9:24:d9:ab:a5:de:d1:a4:b3:a5:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:C7:89:85:0C:ED:85:EE:7D:93:2A:3A:35:72:B3:A8:7B:C8:53
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/AxnHiYUM7YXufZMqOjVys6h7yFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:fc:fb:10:b1:cc:92:34:ec:45:f5:57:dc:ed:e2:7c:f3:84:
a5:6b:a4:33:29:fb:71:51:31:82:77:ad:00:53:68:55:98:13:
24:71:18:40:74:bc:d0:05:12:af:fb:e8:ca:94:31:4b:1e:d0:
36:b2:23:eb:cd:9d:83:37:6c:5d:5e:8d:57:67:cc:be:7c:17:
88:46:da:01:07:a0:7c:69:e1:c4:ba:0d:a9:b8:d2:1d:bc:4a:
f0:39:ea:04:78:7d:1b:45:da:ac:e3:fd:74:89:36:d1:52:da:
01:8e:d7:f9:4d:19:e2:c4:8a:1e:f0:99:2b:e0:a8:aa:ac:0a:
eb:f9:0d:43:ef:8a:d8:ac:fd:81:97:70:25:fb:9a:72:cf:a2:
58:5c:77:81:54:b7:fb:46:fb:59:19:04:7b:d0:a1:09:26:3c:
61:c9:ce:d5:28:53:46:d3:ad:b9:c1:39:28:69:d0:67:92:b8:
56:66:39:22:3c:89:6d:c2:74:a5:dd:e7:69:4b:63:3b:2a:17:
6b:9c:9d:f2:51:91:a9:37:14:cd:43:5f:5e:86:05:bb:61:bb:
2f:66:b3:d6:5a:0e:46:6e:73:33:fe:3c:e0:3d:94:67:ea:03:
13:42:21:9f:23:01:f3:de:43:7f:38:95:60:1c:e2:e3:7d:98:
34:9c:24:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYYqZovCsGS2zXDZix6QpPJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjMwMjA3MDU0MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzE5Yzc4OTg1MGNlZDg1ZWU3ZDkzMmEzYTM1NzJiM2E4N2JjODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xN+DSGMny9Yvw55g9EoMEhBvPvx
O1GSOM397E9BQ1PNUmg8Ta9iOFtQ7fU6wSk/jyhTRtlZOyzMT6HICB1x1co7K3ya
mcyUgf2BNo4pSBD5XuCV+Ynh9K/xASi9cVQ+7WKuIsFy4+s9YpRo6toK0RFuktNM
jIMVRAhJZc8x2ihFEs6547JzNwe0xmaEyCvcZY9AyPbabshCcp8b7dxijk0Sz8fk
uP43T/WRy9MoU/04nrsp5QVEQIvd2EHfYPxnBrrX61zfJzbSoM1S/LCuXzFLU1UH
NrnqmfwvhtDqBcnhcT3oxT3q1dbpR5EjYodvWhY/nekk2aul3tGks6XpcwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFAMZx4mFDO2F7n2TKjo1crOoe8hTMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvQXhuSGlZVU03WVh1ZlpNcU9qVnlzNmg3eUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDHwswAwQF
JbogAwQEUEygAwQCZxEAAwQCZxd8AwQCZ8dYAwQCZ+FIAwQCufdYAwQF1EZgMA0E
AgACMAcDBQMqBH+AMA0GCSqGSIb3DQEBCwUAA4IBAQCp/PsQscySNOxF9Vfc7eJ8
84Sla6QzKftxUTGCd60AU2hVmBMkcRhAdLzQBRKv++jKlDFLHtA2siPrzZ2DN2xd
Xo1XZ8y+fBeIRtoBB6B8aeHEug2puNIdvErwOeoEeH0bRdqs4/10iTbRUtoBjtf5
TRnixIoe8Jkr4KiqrArr+Q1D74rYrP2Bl3Al+5pyz6JYXHeBVLf7RvtZGQR70KEJ
Jjxhyc7VKFNG0625wTkoadBnkrhWZjkiPIltwnSl3edpS2M7KhdrnJ3yUZGpNxTN
Q19ehgW7YbsvZrPWWg5GbnMz/jzgPZRn6gMTQiGfIwHz3kN/OJVgHOLjfZg0nCRH
-----END CERTIFICATE-----
Generated at Tue Aug 22 07:53:14 2023 by rpki-client on console-ams.rpki-client.org