Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/89Lk5DcUk8N7xZYiVILfcXtYbmA.roa
File: 89Lk5DcUk8N7xZYiVILfcXtYbmA.roa (raw, json)
Hash identifier: gZ4UW44WBBJhns6xj07mCAmIOG3I08jmQfQW4wsTZ74=
Subject key identifier: F3:D2:E4:E4:37:14:93:C3:7B:C5:96:22:54:82:DF:71:7B:58:6E:60
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01938B355BC43C53B276273D80C25AE50E2B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/89Lk5DcUk8N7xZYiVILfcXtYbmA.roa
Signing time: Tue 03 Dec 2024 06:29:10 +0000
ROA not before: Tue 03 Dec 2024 06:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25159
IP address blocks: 31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
37.29.32.0/21 maxlen: 21
46.229.128.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
78.25.119.0/24 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
83.229.211.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
94.25.172.0/22 maxlen: 22
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
128.204.76.0/22 maxlen: 22
128.204.76.0/23 maxlen: 23
128.204.78.0/23 maxlen: 23
178.176.0.0/19 maxlen: 19
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
178.178.192.0/22 maxlen: 22
178.178.198.0/23 maxlen: 23
178.178.204.0/24 maxlen: 24
178.178.205.0/24 maxlen: 24
178.178.216.0/21 maxlen: 21
178.178.235.0/24 maxlen: 24
178.178.236.0/24 maxlen: 24
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
193.201.228.0/22 maxlen: 22
195.16.96.0/19 maxlen: 19
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
195.230.70.0/23 maxlen: 23
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
212.69.96.0/19 maxlen: 19
212.69.106.0/24 maxlen: 24
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
212.69.125.0/24 maxlen: 24
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:35:5b:c4:3c:53:b2:76:27:3d:80:c2:5a:e5:0e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 3 06:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d2e4e4371493c37bc596225482df717b586e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:a3:fd:a0:07:2c:32:d4:fd:c4:f6:64:ae:
92:3a:74:63:7d:33:66:3c:c3:2c:ff:8b:45:dc:38:
a1:5a:83:c3:9b:e7:d8:f7:11:5b:26:7f:9d:02:6e:
a0:17:f7:e9:6e:15:75:18:91:0a:d3:77:df:02:19:
6a:06:55:32:07:e5:62:4b:b6:7b:5b:3d:fa:c5:4c:
0c:cc:b9:1e:3c:0f:59:5f:06:49:b7:70:e4:b0:da:
19:5f:86:1e:ec:83:29:a0:6f:59:02:6f:54:e4:0c:
31:97:10:d2:7c:1b:e7:c4:4f:f6:b7:85:b0:51:35:
18:d9:b5:d1:66:2d:38:f2:b6:bc:c2:e5:52:c4:a1:
5b:f7:de:c7:fb:e7:fc:0d:48:43:8e:26:c3:60:d1:
7e:67:90:62:31:9d:3d:c7:6b:17:1a:20:7e:ec:7d:
82:93:04:f6:74:d2:d2:9f:6d:d0:62:e5:2f:5f:7d:
44:a0:72:97:77:df:03:2c:b6:10:43:ec:cc:18:ae:
6c:ae:0b:98:e1:61:93:72:f3:df:a0:7e:11:a6:30:
c7:ab:43:de:98:a7:64:87:3e:01:db:dc:aa:d8:65:
bb:a9:52:e4:ab:f6:b8:ef:20:89:2e:91:77:87:25:
b4:72:da:79:cd:d5:83:76:b4:e1:bb:40:23:a1:c6:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:E4:E4:37:14:93:C3:7B:C5:96:22:54:82:DF:71:7B:58:6E:60
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/89Lk5DcUk8N7xZYiVILfcXtYbmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
178.178.198.0/23
178.178.204.0/23
178.178.216.0/21
178.178.235.0-178.178.236.255
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.96.0/19
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
94:00:b1:30:26:6c:89:7f:4d:ef:57:96:b9:a3:4d:77:fe:32:
a4:1b:f8:cc:4c:68:51:1e:73:66:89:77:43:32:71:13:97:1c:
7e:d8:55:fd:a6:d4:74:8c:3c:c7:f5:65:a3:28:91:cd:78:f4:
ff:9d:a0:15:14:68:5a:10:70:2d:c7:b0:a8:c9:fe:69:5e:54:
85:74:fa:fd:64:96:f7:9e:7d:c8:79:31:02:f2:8a:dc:20:01:
f9:59:21:97:3d:ca:3e:3f:34:4f:a1:93:b3:85:c5:cc:68:0d:
8a:a1:53:06:c2:a3:00:be:b1:d0:e0:14:94:8b:ff:ab:76:11:
3f:7e:f5:b4:ff:25:38:d0:c3:4f:39:13:38:04:b1:3c:a0:e5:
a2:a5:17:b9:a2:d8:2f:d6:aa:99:2d:9e:85:bc:f4:c9:41:01:
55:41:b3:e4:a7:a2:a6:e9:ae:3b:73:d9:ac:58:94:26:fe:df:
1f:aa:67:da:fe:0d:ff:a1:95:a7:9d:c3:d2:a9:4d:01:c7:60:
51:e7:f6:31:b6:70:16:c7:28:2d:ac:1c:72:fc:7b:f1:ec:74:
8f:6b:2d:88:5c:00:f1:29:7c:21:1c:86:e9:c3:4f:c9:fa:c6:
1f:78:fd:26:d3:d1:81:1a:8e:de:37:f1:f8:f4:27:81:45:fc:
4f:d5:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:50 2025 by rpki-client