Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dq7MAjYyu8jopIGO_PjtAr881q0.roa
File: dq7MAjYyu8jopIGO_PjtAr881q0.roa (raw, json)
Hash identifier: oZvfhzlWCDKAjgKpkR2dIVbsjUWWzsSda/u7D9eDISo=
Subject key identifier: 76:AE:CC:02:36:32:BB:C8:E8:A4:81:8E:FC:F8:ED:02:BF:3C:D6:AD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018C15EE35316677B9FB77D70B0437742581
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dq7MAjYyu8jopIGO_PjtAr881q0.roa
Signing time: Tue 28 Nov 2023 12:36:21 +0000
ROA not before: Tue 28 Nov 2023 12:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
109.188.112.0/23 maxlen: 23
193.201.228.0/22 maxlen: 22
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
109.188.64.0/19 maxlen: 19
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
31.173.24.0/21 maxlen: 21
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
178.178.192.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:ee:35:31:66:77:b9:fb:77:d7:0b:04:37:74:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 28 12:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76aecc023632bbc8e8a4818efcf8ed02bf3cd6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:97:7a:f1:cd:83:24:b2:09:aa:6b:b6:e1:
de:75:55:7c:70:d4:8b:f1:a9:cd:5f:5b:c7:89:12:
ec:21:2c:e6:5a:1a:4c:20:11:d1:d2:2c:94:a3:be:
a3:a0:44:2e:ab:cf:74:f2:76:63:68:2a:28:a7:a8:
01:cd:86:4b:49:82:04:f3:74:cb:ba:72:5a:c7:f6:
50:1e:90:7c:29:ae:24:2f:b3:46:a8:98:47:e6:44:
36:d7:33:8a:4a:5d:41:5b:1a:09:cb:f5:cc:73:d9:
31:08:4c:47:9f:f3:f5:c6:b4:96:e2:fc:da:ad:cf:
dd:ce:f9:bb:01:36:c8:18:27:6c:ba:1f:a1:22:a9:
73:a1:ce:72:48:58:ed:b4:16:66:4e:a7:25:69:dd:
e7:97:45:4f:7a:8f:64:6e:a4:61:57:6e:e0:10:45:
d2:64:62:6d:7c:cc:48:01:bd:5f:c6:3f:56:41:af:
fc:a0:15:98:8e:0f:51:12:96:e4:55:89:ed:87:67:
87:17:1d:59:39:71:44:16:1f:60:e5:b4:ea:b8:b3:
c5:a9:d8:85:51:78:c9:82:43:08:b1:66:68:1a:4c:
6b:c4:ad:a5:88:36:62:4d:9a:d5:fd:c9:a2:8f:4c:
c6:d2:ca:d2:52:83:95:c4:fe:b5:11:c8:0e:11:3c:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AE:CC:02:36:32:BB:C8:E8:A4:81:8E:FC:F8:ED:02:BF:3C:D6:AD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dq7MAjYyu8jopIGO_PjtAr881q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
95:44:c0:41:27:3e:65:ae:4a:da:50:c7:62:7a:55:47:c4:ff:
a0:bb:51:68:3d:e2:86:ae:fb:28:e2:28:ba:d8:b9:24:1a:89:
9a:87:30:81:4d:19:a8:be:b6:6b:e3:ec:8d:2e:c5:c9:b4:d8:
26:ff:be:db:d7:c6:19:a8:30:51:5e:5c:0c:d4:9a:77:a8:54:
11:fb:6e:14:25:bd:39:60:ae:db:60:18:c2:b4:54:44:26:fa:
58:74:2a:67:76:ad:4a:54:11:8b:97:9d:f8:61:9f:6e:69:d9:
05:fd:58:f5:09:b4:1a:0f:a0:54:5f:2f:f8:66:fa:c8:d1:6e:
fa:8e:7f:af:13:46:ea:ff:4c:11:80:ae:c0:9e:35:72:26:dd:
0a:05:82:f4:5a:07:16:a9:ad:61:91:da:8b:d6:4b:bb:68:8f:
e8:c5:ad:28:46:51:5d:61:4c:03:d7:6a:e0:cb:55:ac:80:c2:
63:22:ce:97:46:b5:d2:dd:7d:8a:b3:ca:54:1d:0d:24:2a:aa:
cf:02:9a:f1:fc:73:34:6e:9d:30:1b:7b:2d:b7:1a:6d:9c:31:
12:ba:85:8a:5c:3a:fd:76:8a:7b:3c:a0:1d:b3:ca:25:34:cf:
77:4b:7e:d2:40:99:bf:c6:ab:ec:5b:a2:23:64:36:63:c4:9f:
c1:d7:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org