Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EQgGUODYiCy0A0CT4b3NYfBkv5Q.roa
File: EQgGUODYiCy0A0CT4b3NYfBkv5Q.roa (raw, json)
Hash identifier: Z/snsnZrQlTrZACsjAMHA1NEzVh30Lxk+kiNETR/pwg=
Subject key identifier: 11:08:06:50:E0:D8:88:2C:B4:03:40:93:E1:BD:CD:61:F0:64:BF:94
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0189B59267E9BE0EADC52D39BD0ACD076E24
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EQgGUODYiCy0A0CT4b3NYfBkv5Q.roa
Signing time: Wed 02 Aug 2023 09:26:58 +0000
ROA not before: Wed 02 Aug 2023 09:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
109.188.112.0/23 maxlen: 23
193.201.228.0/22 maxlen: 22
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
109.188.64.0/19 maxlen: 19
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
31.173.24.0/21 maxlen: 21
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
62.64.0.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 27 Sep 2023 14:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:92:67:e9:be:0e:ad:c5:2d:39:bd:0a:cd:07:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 2 09:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11080650e0d8882cb4034093e1bdcd61f064bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:c1:67:ae:f9:54:01:26:5d:c2:24:f1:06:
23:7c:ad:cb:56:b6:59:a9:02:5b:40:55:ce:86:e1:
a0:41:ed:0a:67:69:df:6f:37:26:2c:8a:cb:d9:82:
f6:3e:1b:64:93:70:0c:76:0e:74:7b:88:b8:98:51:
c9:ec:28:5c:1d:19:b3:6b:18:3e:ec:f4:e0:e2:fa:
72:cd:0d:9a:53:96:8d:a4:7e:c6:89:a6:bd:77:8e:
f5:2b:03:dd:51:7a:9e:63:c7:be:71:22:80:cd:d0:
0e:96:cb:2e:87:86:7b:6e:b1:d2:7a:4b:18:da:bf:
18:66:a8:61:9e:e7:52:0f:6b:73:5c:2a:0d:66:ac:
69:f7:08:92:10:62:3c:07:5a:1c:55:e2:7b:d7:79:
a5:12:f7:6c:03:b6:62:76:13:eb:d1:48:52:07:b8:
3b:c1:0d:84:6a:07:b6:01:91:57:a1:a9:4a:a6:87:
30:17:9b:cc:6f:5d:b2:3e:04:ef:8b:ab:1b:f4:03:
c6:cc:52:7a:67:c2:c6:50:81:b6:34:e7:08:93:0e:
c8:41:9a:a1:c2:45:09:c3:b0:c9:f9:08:7d:ea:a3:
6b:fb:d6:fe:6b:9d:30:11:71:a3:d9:c0:b5:18:e1:
0f:32:fa:76:b4:dc:ae:f5:f7:5f:66:9d:f1:b0:7d:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:08:06:50:E0:D8:88:2C:B4:03:40:93:E1:BD:CD:61:F0:64:BF:94
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EQgGUODYiCy0A0CT4b3NYfBkv5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
03:8b:82:16:79:07:04:dd:5a:18:35:a0:32:ef:37:84:3a:9d:
6d:21:af:9f:cf:97:5d:73:a6:2a:bc:d4:92:1a:03:50:80:e9:
e8:05:de:54:a8:71:0e:37:c9:b3:5d:92:eb:43:c6:57:ce:c3:
51:d3:70:d0:c4:df:7e:a5:90:2c:e9:c9:89:a6:eb:91:60:f1:
39:78:51:d3:d8:01:b6:82:25:fa:71:35:47:c4:b0:e6:a8:44:
93:4a:fa:dd:a0:b8:ad:98:e5:e9:a9:a2:c9:32:b2:d3:e8:1f:
99:65:b3:93:55:3a:3f:a7:cb:7d:11:ca:9b:10:70:a5:09:50:
a9:53:52:eb:7b:9a:3c:2f:91:fe:fb:97:cb:f6:15:7c:b0:ca:
8c:33:29:d4:43:84:9e:e7:c0:bd:06:df:8b:52:0e:5c:14:c2:
46:9f:86:40:fc:bc:6b:aa:a4:cc:43:5f:7c:b9:12:8f:a1:a8:
c6:c1:4d:f5:15:9b:cd:df:0b:73:b3:80:ee:6a:d7:41:e0:e4:
73:6c:b4:2c:be:77:1f:b5:16:0f:05:98:bc:9f:51:a2:37:7b:
82:66:8b:0f:14:8c:80:7f:e1:30:99:bd:18:1d:ab:50:ef:b3:
67:5a:0f:cb:b9:45:36:84:af:a3:49:79:22:f6:0d:27:8c:a9:
1f:f1:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org