Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mg6_WDvixaDgiKdmizhFBqT6VXo.roa
File: mg6_WDvixaDgiKdmizhFBqT6VXo.roa (raw, json)
Hash identifier: ysTSpv3HL0T1aDTMv9NcvPTJ8nNI5ie7MqZuAMZ/MZ4=
Subject key identifier: 9A:0E:BF:58:3B:E2:C5:A0:E0:88:A7:66:8B:38:45:06:A4:FA:55:7A
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0190BA2CC46B279FCE3C286E38A085175C4D
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mg6_WDvixaDgiKdmizhFBqT6VXo.roa
Signing time: Tue 16 Jul 2024 06:13:34 +0000
ROA not before: Tue 16 Jul 2024 06:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/22 maxlen: 22
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:84::/48 maxlen: 48
2a04:7f80:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jul 2024 07:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:2c:c4:6b:27:9f:ce:3c:28:6e:38:a0:85:17:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jul 16 06:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a0ebf583be2c5a0e088a7668b384506a4fa557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:9d:04:8b:07:82:28:af:a4:bf:64:46:98:
50:9e:90:75:9a:83:20:eb:36:18:80:3c:fa:4e:82:
3f:e1:e0:51:47:86:17:56:c7:a1:49:41:b1:68:d3:
e2:65:00:97:46:44:72:b2:62:93:90:fe:1d:01:85:
e9:27:84:b7:73:bd:86:98:04:75:ff:38:62:d8:3a:
85:01:f1:81:ed:7f:45:4c:a1:30:12:fd:5e:7d:af:
4d:3a:ca:3a:15:c8:c7:03:12:d7:6d:56:e9:6d:f6:
30:8b:cf:40:8e:55:fc:b1:29:35:76:c1:59:5d:a7:
bb:dd:5c:48:d5:db:a6:31:71:0c:3c:cf:a7:0d:7c:
e4:5e:51:28:14:d2:28:c9:ec:f0:80:36:3e:70:4d:
fd:d8:ce:06:39:43:e2:4d:71:c7:22:59:04:16:18:
f7:f1:1c:0c:3d:38:70:68:3b:4a:8f:38:3b:ae:57:
7d:63:56:37:f3:4c:4c:b7:22:68:d4:c8:91:3c:7e:
69:71:ae:79:1a:b7:74:d9:15:01:e5:ea:b3:e6:b3:
59:e4:42:34:f6:a9:fa:89:b9:6b:e1:61:e8:b9:09:
b7:09:7d:dd:db:28:26:04:33:59:99:fb:16:aa:7b:
ff:bf:bd:10:fa:fa:32:d9:aa:c9:58:57:e1:cb:db:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:BF:58:3B:E2:C5:A0:E0:88:A7:66:8B:38:45:06:A4:FA:55:7A
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mg6_WDvixaDgiKdmizhFBqT6VXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
5a:0b:31:c1:28:d2:00:a2:a6:84:4d:79:99:33:f5:0c:bb:7a:
20:0e:80:b8:67:7e:19:ca:d5:24:aa:e0:d9:e8:57:31:f5:1a:
f8:51:34:a0:82:c5:35:82:a5:b4:0f:24:2f:8c:0a:8c:8b:00:
76:a4:8f:fa:4c:3e:e3:95:35:8c:41:75:12:75:ae:97:dc:cc:
ca:27:ce:8c:29:20:65:57:c7:53:cb:a3:95:2f:89:00:6f:1f:
3e:80:10:29:93:44:d9:30:d6:70:d0:c5:cf:5f:89:db:90:2d:
b8:f2:00:c0:4b:fa:de:5c:b3:40:11:6b:72:6c:26:ff:c2:46:
a2:ef:75:06:9e:c5:c7:9b:61:ee:1b:7e:22:2e:9c:69:f3:e2:
5b:89:3e:61:11:1c:77:bc:44:3f:b7:a7:bb:68:51:98:fc:eb:
fd:f2:1c:b6:70:4d:90:c0:21:1d:ab:cc:12:dd:9f:cd:4a:22:
19:6f:29:9a:72:64:76:36:2d:94:e6:1a:c9:3f:63:1f:5f:b6:
7a:1a:5a:29:a2:30:21:6e:80:e7:e4:88:96:53:58:04:fa:24:
c4:65:8e:86:a4:80:44:50:c0:f3:04:b6:62:aa:2f:a7:4e:bf:
14:47:7f:4d:f0:d2:13:f9:d0:c7:36:2d:99:81:56:cc:6d:0e:
34:27:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:16 2025 by rpki-client