Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4c6O3vodQHJ_34Q8M_YZpfUreo.roa
File: n4c6O3vodQHJ_34Q8M_YZpfUreo.roa (raw, json)
Hash identifier: Bj3lUltsLDmbaf2JdTQGW3mzInXOFZQ2lQRfkBM27IU=
Subject key identifier: 9F:87:3A:3B:7B:E8:75:01:C9:FF:7E:10:F0:CF:D8:66:97:D4:AD:EA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018E798026CF7A0A0ABA305177C087192BED
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4c6O3vodQHJ_34Q8M_YZpfUreo.roa
Signing time: Tue 26 Mar 2024 06:43:45 +0000
ROA not before: Tue 26 Mar 2024 06:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25159
IP address blocks: 31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
37.29.32.0/21 maxlen: 21
46.229.128.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
78.25.119.0/24 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
83.229.211.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
94.25.172.0/22 maxlen: 22
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
128.204.76.0/22 maxlen: 22
128.204.76.0/23 maxlen: 23
128.204.78.0/23 maxlen: 23
178.176.0.0/19 maxlen: 19
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
178.178.192.0/22 maxlen: 22
178.178.198.0/23 maxlen: 23
178.178.204.0/24 maxlen: 24
178.178.205.0/24 maxlen: 24
178.178.216.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
193.201.228.0/22 maxlen: 22
195.16.96.0/19 maxlen: 19
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
195.230.70.0/23 maxlen: 23
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
212.69.125.0/24 maxlen: 24
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 06 Jun 2024 09:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:80:26:cf:7a:0a:0a:ba:30:51:77:c0:87:19:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 26 06:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f873a3b7be87501c9ff7e10f0cfd86697d4adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:d9:6e:cc:0a:02:c7:ef:d9:92:b2:63:f8:
78:02:52:84:bf:51:b0:7c:20:6b:9a:5b:da:54:ba:
8c:4d:07:aa:f4:7c:44:0e:5b:3b:da:46:39:a6:04:
3a:74:74:9b:9c:d3:bc:5e:ce:f8:56:6e:64:c7:6a:
7f:69:e8:f3:ca:4c:36:4b:ad:09:0e:d9:24:5d:ec:
8e:9a:3f:22:bc:b6:24:4e:00:f8:1b:5c:98:91:8e:
17:55:8c:a8:57:1f:32:3c:43:ae:73:97:0b:6d:af:
ee:68:89:ea:cb:e9:df:43:e7:7e:ca:8b:52:2b:8c:
e5:d0:4c:9a:00:87:0d:52:d5:d1:c8:47:7e:f9:93:
a0:79:42:1e:15:51:05:78:15:6f:c5:59:84:4c:cd:
e4:ee:ef:0e:58:57:11:23:92:12:38:f8:8d:5f:11:
d7:8c:63:c4:ec:9e:ff:a8:2d:3c:21:7d:81:4c:f0:
5d:8c:8d:51:38:53:61:07:d6:0a:43:32:cb:1a:9a:
47:94:cd:95:98:8c:64:29:34:75:0b:68:b8:47:11:
ab:1c:10:96:7d:72:76:29:37:18:fc:73:e4:52:2a:
03:7a:3c:0f:8d:e3:42:6b:98:31:48:66:01:00:33:
1c:b4:c9:18:b0:e7:4b:48:1f:06:e6:93:88:1e:95:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:3A:3B:7B:E8:75:01:C9:FF:7E:10:F0:CF:D8:66:97:D4:AD:EA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4c6O3vodQHJ_34Q8M_YZpfUreo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
178.178.198.0/23
178.178.204.0/23
178.178.216.0/21
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
23:07:5c:2c:3e:be:e4:d6:1e:2c:ca:47:0c:b2:70:15:89:a2:
92:ed:0f:55:ee:d6:9e:6c:05:f9:d8:7d:5f:d9:91:29:dd:26:
fa:56:61:53:a4:26:ec:53:3f:7e:e6:91:63:21:cd:f7:2f:77:
91:9f:47:f3:12:4b:41:94:e4:5a:b4:54:d9:a2:fc:dd:a4:d7:
1c:fa:c7:23:39:1c:60:3e:85:39:db:fc:23:0d:e1:c2:6b:00:
ca:25:ad:0c:64:be:bb:0b:32:b7:36:c1:4c:f9:eb:a7:03:03:
6a:2d:f8:37:c8:a1:60:be:92:15:7d:8a:c0:7b:b6:c3:0b:78:
12:f3:62:f8:19:5a:69:02:47:a0:2c:15:8c:cc:a9:f5:dd:77:
fc:df:e2:94:12:37:08:94:dc:b3:cc:04:87:42:3f:74:d9:76:
cd:b8:d3:b0:06:8b:57:03:e2:9a:be:82:7d:22:2b:f5:32:04:
83:d0:f6:ea:48:22:4a:8d:0d:17:db:ed:97:92:62:86:8a:35:
61:fb:b4:97:65:2c:d9:29:fb:7c:6d:a5:ff:95:68:6d:63:57:
80:6f:9b:44:2a:50:5d:b4:ee:34:92:5e:c3:59:4e:45:b7:16:
53:51:7f:5e:e8:82:bb:d9:68:cd:80:63:b3:a9:fe:cb:5f:b6:
c4:d4:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org