Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/M-gj7rrEvAGc9peDuYvf9YBqnFY.roa
File: M-gj7rrEvAGc9peDuYvf9YBqnFY.roa (raw, json)
Hash identifier: weQDKIKTsgO32geAJui1ck2duE3PrWvXWtP1QPh7gQU=
Subject key identifier: 33:E8:23:EE:BA:C4:BC:01:9C:F6:97:83:B9:8B:DF:F5:80:6A:9C:56
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0192B9227843BEE63169B521280C84FA3A0B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/M-gj7rrEvAGc9peDuYvf9YBqnFY.roa
Signing time: Wed 23 Oct 2024 11:28:16 +0000
ROA not before: Wed 23 Oct 2024 11:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
103.14.208.0/22 maxlen: 22
103.14.208.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
185.247.89.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:22:78:43:be:e6:31:69:b5:21:28:0c:84:fa:3a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Oct 23 11:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33e823eebac4bc019cf69783b98bdff5806a9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:0c:da:a7:59:cf:dd:bf:5a:e8:78:e1:c4:
bc:2a:c9:ef:7d:8c:13:f3:5d:a8:6e:2f:ff:ef:39:
ff:7f:12:da:36:16:26:2b:bb:e7:08:37:dd:a1:40:
fb:3b:56:eb:e6:d4:80:78:49:dc:26:94:ef:82:e2:
3c:d9:0f:8e:9c:58:57:8c:21:7e:94:83:3d:f4:2c:
29:bc:46:96:13:3b:d5:b7:76:c3:1e:6f:e5:f6:42:
77:8a:0b:43:d0:3a:f5:15:cd:35:cf:15:5b:64:84:
f2:42:7d:40:3e:83:97:31:92:4f:23:68:dd:a4:cb:
d3:9d:f3:27:10:8d:f9:4a:39:25:28:24:b8:47:3b:
9c:b3:d1:f8:5f:e5:c3:1d:e7:0e:60:2e:37:93:46:
09:fe:66:e0:37:de:ba:02:34:90:d1:59:71:7b:01:
38:dd:b7:12:4b:89:c2:42:24:c4:e0:13:c9:d8:02:
0e:b6:cd:18:d0:ab:34:f8:51:06:2d:1d:c6:72:05:
b0:d0:06:aa:38:48:30:3e:ec:67:38:c4:13:60:0c:
b7:80:cd:ca:4c:e4:91:78:65:af:6f:48:54:46:a3:
37:72:56:bc:dd:dd:c3:1b:c6:1d:df:55:13:4c:f6:
8b:c2:b4:b6:b5:2f:95:32:f9:65:f1:f4:a5:65:00:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:23:EE:BA:C4:BC:01:9C:F6:97:83:B9:8B:DF:F5:80:6A:9C:56
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/M-gj7rrEvAGc9peDuYvf9YBqnFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.109.0/24
212.70.120.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
c4:c9:08:66:96:ad:14:36:e6:16:67:5d:fe:d2:ec:44:5a:4d:
c5:46:18:72:91:37:e5:f4:59:1e:9e:4d:8d:ff:1c:58:2d:b6:
9c:fa:90:60:c3:6d:21:6e:61:eb:7a:7f:8d:3b:b2:6b:f7:94:
27:52:bf:4b:99:80:41:aa:cc:6d:ab:6c:2a:aa:e1:7a:57:d5:
19:d2:d0:97:90:c1:59:fb:a1:49:41:13:34:c3:e3:ea:24:e6:
69:f6:b7:24:96:d9:d4:82:96:80:0d:7d:18:6e:ef:c2:42:47:
8e:67:bc:af:9f:a9:13:7e:4d:09:7e:6d:f1:c3:97:e5:da:ad:
90:9c:4a:50:c4:02:4a:79:ee:16:47:29:ff:bc:50:24:dd:f7:
8c:04:fa:14:46:9b:74:a4:25:30:ae:68:be:01:ff:a6:3d:bb:
2f:71:2d:9c:c1:3b:0c:a4:e5:63:4f:64:64:dd:11:75:c3:be:
d2:f9:d8:b5:94:40:83:d7:24:32:84:5f:cc:8f:74:3d:cd:de:
28:9d:7d:9a:20:8d:8f:d6:0a:6b:84:05:c4:27:24:db:b9:05:
0e:43:14:ad:08:99:e4:d8:4a:86:1c:83:7b:8b:2c:ca:a2:9a:
01:9e:07:cb:2a:2c:fe:89:9c:3b:d2:dd:1f:2e:ad:33:48:b0:
98:7b:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:49:01 2025 by rpki-client