Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aMadcVRGzUx7DDts_MPKme3C9RY.roa
File: aMadcVRGzUx7DDts_MPKme3C9RY.roa (raw, json)
Hash identifier: PlBsTPS/OeD+fPFQdixlSPtTRKmO1vE9NaEUtLiikKE=
Subject key identifier: 68:C6:9D:71:54:46:CD:4C:7B:0C:3B:6C:FC:C3:CA:99:ED:C2:F5:16
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018DEF74D9844D3D1F0DD5BDB2EFBB627358
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aMadcVRGzUx7DDts_MPKme3C9RY.roa
Signing time: Wed 28 Feb 2024 11:23:48 +0000
ROA not before: Wed 28 Feb 2024 11:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25159
IP address blocks: 31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
37.29.32.0/21 maxlen: 21
46.229.128.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
78.25.119.0/24 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
83.229.211.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
94.25.172.0/22 maxlen: 22
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
128.204.76.0/22 maxlen: 22
128.204.76.0/23 maxlen: 23
128.204.78.0/23 maxlen: 23
178.176.0.0/19 maxlen: 19
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
178.178.192.0/22 maxlen: 22
178.178.198.0/23 maxlen: 23
178.178.204.0/24 maxlen: 24
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
193.201.228.0/22 maxlen: 22
195.16.96.0/19 maxlen: 19
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
195.230.70.0/23 maxlen: 23
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
212.69.125.0/24 maxlen: 24
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:74:d9:84:4d:3d:1f:0d:d5:bd:b2:ef:bb:62:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Feb 28 11:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68c69d715446cd4c7b0c3b6cfcc3ca99edc2f516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:fa:7a:b0:c0:24:ce:36:6c:de:b3:e4:8f:
4d:99:f8:d1:df:ed:56:11:a5:72:68:b4:bd:59:bb:
eb:2d:0b:ce:27:1b:d3:73:74:c7:f9:e3:3b:70:cb:
98:94:0e:df:7d:a8:84:a1:02:24:54:d4:4c:cd:60:
a4:6a:94:3e:a9:21:98:6d:32:63:2d:8c:3b:44:5e:
da:9e:da:30:4b:99:2e:45:b8:b7:d9:3d:72:40:48:
ae:ff:7c:a5:fa:b9:b9:1d:19:e7:2f:99:d0:a8:47:
81:6c:2c:81:1e:6f:3c:57:fc:42:49:51:e8:7e:6e:
6b:33:f4:b2:f3:46:b9:10:fc:71:00:ee:ee:61:2d:
e6:05:85:db:76:2c:bc:fd:fd:00:5b:66:65:f8:d2:
bc:6b:bd:7d:23:63:88:c6:20:61:51:a5:b7:4c:06:
5e:bc:bf:2d:78:8f:5a:d4:42:c8:47:02:be:aa:38:
94:9a:d4:d6:49:b4:09:e5:70:21:f5:76:6e:1e:59:
3c:74:53:40:5d:85:24:c9:7d:1a:ab:3d:95:53:53:
f8:d0:d4:72:88:9e:28:f5:04:aa:25:9d:23:16:e2:
1e:8f:c3:b7:a5:77:cc:4b:11:20:9c:61:bd:e1:22:
61:f8:04:53:2d:a9:b7:ad:48:fd:a9:8d:b8:c9:a1:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:9D:71:54:46:CD:4C:7B:0C:3B:6C:FC:C3:CA:99:ED:C2:F5:16
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aMadcVRGzUx7DDts_MPKme3C9RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
178.178.198.0/23
178.178.204.0/24
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
42:bf:28:66:b5:02:4a:f7:5f:c8:54:60:1d:42:38:5a:b9:18:
f1:12:26:17:d7:94:59:ea:29:10:e6:e1:d1:b9:ec:5b:26:c9:
02:73:44:e8:55:7e:b4:ee:66:c4:2e:53:3d:f7:57:f2:1b:0d:
1d:9f:7a:fc:2d:51:b4:ae:e7:08:59:4c:34:93:77:22:f9:d9:
de:eb:ab:8d:cf:9d:2d:df:05:b4:d8:58:a8:84:16:43:77:cb:
f7:fe:08:79:1c:fd:2f:6f:ff:c5:ac:c2:59:6e:25:78:0f:47:
d7:1d:f5:50:ef:00:f7:e3:1b:98:9c:e6:05:80:84:fe:4d:57:
60:22:0c:c3:07:a9:f0:1e:18:ae:4a:f8:85:9c:ae:df:b2:2b:
07:2d:aa:40:ae:0c:7f:4e:e9:c3:98:4e:d8:22:1f:96:ab:c2:
c3:a8:16:eb:bd:a3:08:bf:a1:66:8b:f9:2d:7a:e1:7a:74:83:
5a:f5:bd:e4:90:fc:4f:61:c0:3d:1c:4f:99:64:33:25:47:8e:
b8:bc:0b:1b:17:e7:47:6c:f8:05:5a:3b:e5:b0:30:4f:aa:27:
60:2f:df:43:d1:8d:84:75:6a:94:e9:91:90:11:18:39:3d:9f:
f8:36:31:f6:7a:6f:5c:71:e5:5d:7c:09:29:90:96:79:0d:99:
54:86:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:27 2025 by rpki-client