Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/aMia9MN4EOo9Kgc2-893jo_x0OM.roa
File: aMia9MN4EOo9Kgc2-893jo_x0OM.roa (raw, json)
Hash identifier: sNUYUFvYI1GySOitJVrSCrPmOvve7x69C5GCc2SZmok=
Subject key identifier: 68:C8:9A:F4:C3:78:10:EA:3D:2A:07:36:FB:CF:77:8E:8F:F1:D0:E3
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0190C55C8AD3FD4D4D7CA43407B140D83755
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/aMia9MN4EOo9Kgc2-893jo_x0OM.roa
Signing time: Thu 18 Jul 2024 10:21:34 +0000
ROA not before: Thu 18 Jul 2024 10:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
103.14.208.0/22 maxlen: 22
103.14.211.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 09:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:5c:8a:d3:fd:4d:4d:7c:a4:34:07:b1:40:d8:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jul 18 10:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68c89af4c37810ea3d2a0736fbcf778e8ff1d0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:12:c6:27:e9:2c:1d:2b:b0:95:f2:86:c9:
85:0b:c6:bb:1f:ba:a6:85:af:f0:2b:f3:9e:b0:62:
48:b1:46:30:81:62:e3:50:a9:67:84:24:38:31:4e:
7b:2e:2b:7c:f1:ab:e4:ff:0d:9c:90:08:47:d1:94:
4c:b8:de:fa:75:72:ba:96:c1:94:2d:57:95:55:a5:
97:06:5a:73:14:49:db:31:2f:e3:e2:c3:22:d5:c3:
55:4d:e4:8d:7c:c1:c1:1b:c2:e8:35:ee:f7:55:60:
b3:4f:53:b4:f7:72:d5:9b:f0:5e:82:38:85:4e:52:
40:62:9e:74:81:51:de:dc:1c:92:f4:dc:74:45:23:
88:50:f3:ed:19:d9:dd:b3:31:14:6b:bc:b5:f8:b1:
67:37:32:1c:a4:2c:f9:dd:e7:38:f2:0f:05:77:26:
fa:9b:34:8d:ee:95:66:f7:b2:56:ab:b3:e3:7f:b8:
36:61:24:ca:cf:08:1f:f5:a6:51:bd:a0:ce:0b:aa:
2b:be:cd:38:96:ce:fc:09:cd:ab:3d:b5:c8:f3:00:
05:55:4e:04:bd:56:97:95:ec:73:de:f5:38:f7:f0:
bb:3e:8a:4d:b2:89:dd:6a:80:a3:72:ff:72:a8:09:
ee:c4:66:70:36:31:3b:9d:9f:86:ea:1d:e9:37:7b:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:9A:F4:C3:78:10:EA:3D:2A:07:36:FB:CF:77:8E:8F:F1:D0:E3
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/aMia9MN4EOo9Kgc2-893jo_x0OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.109.0/24
212.70.120.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
c6:8f:39:95:74:dc:29:fe:0e:80:89:1d:73:07:12:de:98:0f:
9f:9e:b3:a6:74:4a:2b:18:0f:af:3b:52:30:85:58:b8:10:e5:
9a:10:a4:17:91:86:3a:62:43:99:37:0a:b3:a1:53:67:f1:f0:
d5:bf:0b:92:f7:d4:c3:16:4d:b1:39:ac:35:44:6d:0d:c9:92:
4c:a5:89:b9:b4:26:43:6d:6a:f3:81:6a:ee:a9:51:d5:d6:87:
68:94:44:d2:68:ac:fd:a0:b4:87:a7:a5:76:e8:e2:2a:d8:ef:
a5:11:22:21:d5:ea:8f:45:6a:5f:91:46:45:58:35:c2:bb:e5:
e3:58:ea:db:bc:2a:b5:13:db:25:bd:03:36:f6:69:e7:f1:f9:
85:e9:86:36:98:6f:bd:27:55:77:9a:6b:c5:df:3d:de:8c:d7:
96:0f:ec:a4:67:71:b8:99:5f:9f:b2:ad:e9:00:5e:a4:30:43:
40:7a:91:e4:e2:94:69:ca:c0:81:e9:91:ed:62:03:67:9f:7c:
34:cf:7a:90:86:b6:07:2b:65:a2:9a:45:65:fa:ba:21:4a:71:
cb:f0:44:7a:18:c6:14:0b:f5:e5:d0:68:36:aa:46:5e:e8:89:
ac:5a:da:55:02:78:8c:65:43:22:bb:57:8d:66:4c:96:a0:86:
10:d8:ea:5a
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZDFXIrT/U1NfKQ0B7FA2DdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjQwNzE4MTAyMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGM4OWFmNGMzNzgxMGVhM2QyYTA3MzZmYmNmNzc4ZThmZjFkMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dcSxifpLB0rsJXyhsmFC8a7H7qm
ha/wK/OesGJIsUYwgWLjUKlnhCQ4MU57Lit88avk/w2ckAhH0ZRMuN76dXK6lsGU
LVeVVaWXBlpzFEnbMS/j4sMi1cNVTeSNfMHBG8LoNe73VWCzT1O093LVm/BegjiF
TlJAYp50gVHe3ByS9Nx0RSOIUPPtGdndszEUa7y1+LFnNzIcpCz53ec48g8Fdyb6
mzSN7pVm97JWq7Pjf7g2YSTKzwgf9aZRvaDOC6orvs04ls78Cc2rPbXI8wAFVU4E
vVaXlexz3vU49/C7PopNsondaoCjcv9yqAnuxGZwNjE7nZ+G6h3pN3s3+QIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFGjImvTDeBDqPSoHNvvPd46P8dDjMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvYU1pYTlNTjRFT285S2djMi04OTNqb194ME9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQDHwswAwQB
Jbo4AwQCJbo8MAwDBABQTKUDBAFQTKgDBAJnDtAwDAMEA2fhSAMEAGfhSgMEArn3
WDAMAwQC1EZkAwQB1EZoAwQA1EZtMAwDBAPURngDBADURnwwDQYJKoZIhvcNAQEL
BQADggEBAMaPOZV03Cn+DoCJHXMHEt6YD5+es6Z0SisYD687UjCFWLgQ5ZoQpBeR
hjpiQ5k3CrOhU2fx8NW/C5L31MMWTbE5rDVEbQ3Jkkylibm0JkNtavOBau6pUdXW
h2iURNJorP2gtIenpXbo4irY76URIiHV6o9Fal+RRkVYNcK75eNY6tu8KrUT2yW9
Azb2aefx+YXphjaYb70nVXeaa8XfPd6M15YP7KRncbiZX5+yrekAXqQwQ0B6keTi
lGnKwIHpke1iA2effDTPepCGtgcrZaKaRWX6uiFKccvwRHoYxhQL9eXQaDaqRl7o
iaxa2lUCeIxlQyK7V41mTJaghhDY6lo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:03 2025 by rpki-client