Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/asDFP_KZy5NInbTmXyKwz-D3hz4.roa
File: asDFP_KZy5NInbTmXyKwz-D3hz4.roa (raw, json)
Hash identifier: NCDE9mmFfLm19+cB1TVInEZPG3uzcyXCxt/48SmTfcM=
Subject key identifier: 6A:C0:C5:3F:F2:99:CB:93:48:9D:B4:E6:5F:22:B0:CF:E0:F7:87:3E
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0185704BB6B9151A5ED8AB2514B916E29F11
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/asDFP_KZy5NInbTmXyKwz-D3hz4.roa
Signing time: Mon 02 Jan 2023 02:24:48 +0000
ROA not before: Mon 02 Jan 2023 02:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b6:b9:15:1a:5e:d8:ab:25:14:b9:16:e2:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 2 02:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ac0c53ff299cb93489db4e65f22b0cfe0f7873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:10:99:66:09:ce:5e:0c:4c:13:9f:fb:dc:
08:95:cc:97:a8:60:24:7a:bd:49:28:45:89:bd:0a:
27:e5:05:69:13:d4:c0:51:d3:b9:5b:9a:16:ba:d4:
d5:c8:09:eb:94:b7:5c:f2:03:33:d3:73:65:28:4f:
c6:01:99:24:d0:10:4c:e2:08:d4:a5:65:d4:45:0c:
79:06:20:3d:b8:e6:69:15:6b:17:5c:dd:e2:1c:22:
d0:4b:3c:ac:17:c0:38:bb:26:9a:b8:4b:9c:e6:b9:
0f:50:89:f9:0b:20:fc:fd:67:93:3b:a8:9f:2c:53:
c8:ad:4f:fa:67:13:81:8d:dc:c4:10:77:34:3d:5f:
b7:3c:66:a4:6d:76:61:b8:8e:e4:8f:9a:2b:0c:a8:
b0:8c:70:28:68:62:00:ea:7b:b8:66:29:44:db:a9:
3f:1f:d7:e7:88:16:43:82:0e:f2:57:c2:b4:2c:20:
9e:bd:5c:d8:7e:cf:f8:3f:41:57:a2:26:2e:1a:cc:
30:2a:e5:f6:18:70:b9:0c:bb:cb:df:13:c3:70:03:
ab:6f:60:8d:ea:17:be:a1:bb:4c:c7:40:2d:f1:b3:
94:30:6f:3a:8f:a6:f4:f2:6f:ec:92:1a:c2:b4:5c:
a5:37:c6:80:e1:4c:e8:81:db:a7:20:4b:07:e6:e1:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:C5:3F:F2:99:CB:93:48:9D:B4:E6:5F:22:B0:CF:E0:F7:87:3E
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/asDFP_KZy5NInbTmXyKwz-D3hz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
Signature Algorithm: sha256WithRSAEncryption
95:36:dd:a0:66:b5:37:6d:18:00:74:ad:b2:49:cb:a7:9e:06:
45:ad:ad:d8:ba:42:c5:cc:44:85:36:fa:6d:d3:f2:46:00:df:
15:b4:b5:1a:1c:b5:8d:e9:f4:70:64:04:66:e7:b5:1c:4d:37:
af:08:38:73:02:04:5e:93:8f:b0:39:75:b3:05:29:21:66:e0:
5a:88:b4:34:eb:52:cc:e7:34:f7:ea:ee:67:6c:92:e2:24:6a:
2b:3c:8c:a3:5d:2c:62:84:a1:6c:14:80:d7:66:53:80:45:7d:
12:8f:a6:be:6d:61:a0:e3:26:ee:27:d9:ba:e7:1d:55:c3:af:
f6:c0:82:63:08:36:3e:af:03:23:71:84:f3:1f:9c:82:ee:f4:
c4:b0:94:9e:13:23:23:ed:4b:d8:fb:f6:a4:de:26:9a:81:bf:
d6:c2:f5:41:11:73:4c:63:cb:35:d9:0a:a7:55:4f:1c:3e:29:
9e:60:b1:24:40:05:74:8b:81:47:51:de:bc:1c:32:b8:5e:06:
19:77:82:42:0b:71:19:69:4f:fb:81:70:51:ec:cd:c0:8c:85:
42:c9:6e:9e:50:e5:db:db:cf:87:92:b8:3a:cd:a6:df:fa:e6:
03:1a:34:09:fc:d8:a5:21:53:e2:05:15:92:2e:23:a7:f4:1e:
98:c0:31:0d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYVwS7a5FRpe2KslFLkW4p8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjMwMTAyMDIyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWMwYzUzZmYyOTljYjkzNDg5ZGI0ZTY1ZjIyYjBjZmUwZjc4NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoIQmWYJzl4MTBOf+9wIlcyXqGAk
er1JKEWJvQon5QVpE9TAUdO5W5oWutTVyAnrlLdc8gMz03NlKE/GAZkk0BBM4gjU
pWXURQx5BiA9uOZpFWsXXN3iHCLQSzysF8A4uyaauEuc5rkPUIn5CyD8/WeTO6if
LFPIrU/6ZxOBjdzEEHc0PV+3PGakbXZhuI7kj5orDKiwjHAoaGIA6nu4ZilE26k/
H9fniBZDgg7yV8K0LCCevVzYfs/4P0FXoiYuGswwKuX2GHC5DLvL3xPDcAOrb2CN
6he+obtMx0At8bOUMG86j6b08m/skhrCtFylN8aA4UzogdunIEsH5uGSCwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFGrAxT/ymcuTSJ205l8isM/g94c+MB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvYXNERlBfS1p5NU5JbmJUbVh5S3d6LUQzaHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQDHwswAwQF
JbogAwQEUEygAwQCZw7QAwQCZxEAAwQCZxd8AwQCZ8dYAwQCZ+FIAwQCufdYAwQD
1EZgMAwDBADURmkDBAfURgAwDQYJKoZIhvcNAQELBQADggEBAJU23aBmtTdtGAB0
rbJJy6eeBkWtrdi6QsXMRIU2+m3T8kYA3xW0tRoctY3p9HBkBGbntRxNN68IOHMC
BF6Tj7A5dbMFKSFm4FqItDTrUsznNPfq7mdskuIkais8jKNdLGKEoWwUgNdmU4BF
fRKPpr5tYaDjJu4n2brnHVXDr/bAgmMINj6vAyNxhPMfnILu9MSwlJ4TIyPtS9j7
9qTeJpqBv9bC9UERc0xjyzXZCqdVTxw+KZ5gsSRABXSLgUdR3rwcMrheBhl3gkIL
cRlpT/uBcFHszcCMhULJbp5Q5dvbz4eSuDrNpt/65gMaNAn82KUhU+IFFZIuI6f0
HpjAMQ0=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:12 2024 by rpki-client on console-fra.rpki-client.org