Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/cJ3-b_YSdt5o2x1uZZV8KXufIXI.roa
File: cJ3-b_YSdt5o2x1uZZV8KXufIXI.roa (raw, json)
Hash identifier: 5wiQP8PBSGpSKiiG9sBLJcmM7i/jDQYt/9/CNZr2k7Y=
Subject key identifier: 70:9D:FE:6F:F6:12:76:DE:68:DB:1D:6E:65:95:7C:29:7B:9F:21:72
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 018CC6B9236647798A7101DDF5830A3BB00B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/cJ3-b_YSdt5o2x1uZZV8KXufIXI.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 08:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:23:66:47:79:8a:71:01:dd:f5:83:0a:3b:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=709dfe6ff61276de68db1d6e65957c297b9f2172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:03:27:ee:87:98:cc:d8:4b:21:c6:8a:d9:
b6:15:c8:69:63:e1:41:44:6a:1a:d4:98:92:c5:8e:
c0:47:13:5a:ea:a8:f7:7d:f6:9e:11:89:84:a6:8c:
23:dd:40:f2:c9:89:d1:8c:0e:bb:ea:90:5b:c6:81:
1f:7d:6a:6a:31:40:a9:0a:03:9a:28:fd:35:62:c2:
86:ae:90:67:39:60:cf:af:c6:be:63:f4:0c:b5:75:
c5:61:64:ed:da:0f:53:27:07:da:5a:90:55:c9:63:
5f:67:4c:1e:3d:0e:33:37:1c:88:53:ba:8a:e7:d6:
33:b6:24:87:51:ed:d0:65:01:f0:73:b6:dd:83:cc:
04:e9:0f:93:3a:9e:67:7f:a9:e4:2e:9e:03:88:e4:
25:32:f1:c1:c8:e5:2c:45:0c:b2:87:be:c3:80:f9:
a6:fb:80:c6:40:94:5c:6a:e7:c1:4a:1c:cd:03:2d:
dc:f5:bc:28:95:18:56:c0:05:f4:29:30:a8:e6:30:
2b:52:96:f8:7c:45:24:de:8f:4b:34:1e:e4:90:ec:
54:59:f1:c1:4c:f1:89:9f:1f:99:d9:b4:32:56:c4:
22:8f:e9:e6:a1:e8:52:12:9d:1b:03:01:10:3a:c0:
53:a3:d3:df:da:52:2c:d6:1b:92:8c:a2:2e:ce:92:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:FE:6F:F6:12:76:DE:68:DB:1D:6E:65:95:7C:29:7B:9F:21:72
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/cJ3-b_YSdt5o2x1uZZV8KXufIXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
Signature Algorithm: sha256WithRSAEncryption
85:51:95:17:bd:f7:c7:3f:e0:c2:f0:77:a9:16:52:2f:f0:c8:
3e:0d:80:b0:6c:66:d2:bc:ea:ad:e2:98:5f:dd:d7:e5:37:b5:
ca:5a:74:6d:cb:31:66:8e:3e:10:e3:c0:61:9a:02:5c:3a:2b:
b8:09:0d:a8:5c:04:4f:20:e4:dd:25:3a:b1:e1:8c:05:26:19:
b0:1e:c4:c5:f7:93:2e:ed:df:66:20:3d:ba:e8:29:5d:3d:0a:
07:94:63:4d:42:54:bd:2a:63:09:78:25:ff:c6:49:fc:07:85:
70:63:b6:67:3a:10:b9:41:0d:77:87:f0:a1:91:d3:60:9c:9f:
a9:28:c4:cf:62:6c:ef:76:60:0e:b0:ba:bf:49:63:0c:20:02:
39:6f:9a:e0:94:d2:49:02:36:7c:fb:03:52:d9:e9:57:d2:54:
90:e7:d8:b4:7b:31:fc:08:61:e6:63:d7:d2:21:a5:f3:db:c6:
3a:52:0c:da:83:94:9e:4d:46:f7:7a:40:99:7c:80:e1:5b:e7:
8b:66:03:61:0d:8f:ae:69:81:a5:03:dc:ef:cd:10:6c:1d:26:
33:8f:c7:d4:b1:9a:c9:69:91:e4:7d:88:15:aa:c0:09:f3:ca:
e4:f4:9a:10:fd:55:b2:ed:1b:6d:ec:79:9a:b7:37:50:ee:83:
fa:ea:21:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:44 2024 by rpki-client on console-fra.rpki-client.org