Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qzkUTW8sy2JpTauDjpH93ipqcfI.roa
File: qzkUTW8sy2JpTauDjpH93ipqcfI.roa (raw, json)
Hash identifier: N387vCB7e6EWC8gnn14rwZQ+wodeUP1ikJo1LyHe0aA=
Subject key identifier: AB:39:14:4D:6F:2C:CB:62:69:4D:AB:83:8E:91:FD:DE:2A:6A:71:F2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01918EE8BB84093EA03F29FBE7FC00E86F2A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qzkUTW8sy2JpTauDjpH93ipqcfI.roa
Signing time: Mon 26 Aug 2024 13:38:22 +0000
ROA not before: Mon 26 Aug 2024 13:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31224
IP address blocks: 31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.100.0/24 maxlen: 24
31.173.101.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
46.229.132.0/22 maxlen: 22
78.25.88.0/22 maxlen: 22
83.149.32.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.36.0/22 maxlen: 22
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
85.26.192.0/22 maxlen: 22
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.178.229.0/24 maxlen: 24
178.178.230.0/24 maxlen: 24
2a03:d000:5000::/40 maxlen: 40
2a03:d000:5000::/41 maxlen: 41
2a03:d000:5080::/41 maxlen: 41
2a03:d000:5100::/40 maxlen: 40
2a03:d000:5100::/41 maxlen: 41
2a03:d000:5180::/41 maxlen: 41
2a03:d000:5270::/44 maxlen: 44
2a03:d000:52f0::/44 maxlen: 44
2a03:d000:5301::/48 maxlen: 48
2a03:d000:5302::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Aug 2024 04:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:e8:bb:84:09:3e:a0:3f:29:fb:e7:fc:00:e8:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 26 13:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab39144d6f2ccb62694dab838e91fdde2a6a71f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:22:20:f3:9a:86:51:a9:1e:22:93:15:53:
fc:5f:d1:eb:08:f1:3a:bc:d8:cf:70:ac:7c:bc:e3:
e4:1d:df:12:42:fc:18:d1:7f:f4:fb:0c:d5:7f:53:
f8:4b:c6:06:be:63:60:8d:36:12:2a:ad:68:ef:57:
f5:8d:a6:ab:6b:88:1f:30:26:30:87:a7:c3:b2:5b:
69:3b:80:42:90:89:d6:c5:80:b5:42:ab:04:2b:86:
ff:30:a3:9e:56:30:92:3b:fd:60:5c:01:86:af:34:
45:ce:84:f5:be:12:47:99:8a:a0:39:6c:63:9b:c6:
6e:c0:da:5d:ab:5c:31:7a:d6:74:32:6d:db:12:52:
f3:60:7e:15:83:a6:3a:d4:de:02:fd:2b:fd:d4:66:
5e:a9:9e:f1:d9:d7:35:49:a8:4a:f9:10:e9:0f:c2:
fa:78:d9:cc:24:63:eb:dd:ed:db:cf:c3:e4:ff:2e:
a7:39:08:0e:49:86:e5:d3:c8:9c:b7:17:45:2e:08:
1d:7e:7e:82:1c:33:a6:af:c3:91:2f:15:83:12:d3:
a0:e6:d6:bb:9d:a8:6e:47:6a:93:bf:cb:3d:0c:4a:
da:70:0e:05:27:dd:cf:36:a5:45:c8:97:bb:a4:f6:
87:f9:1d:47:3d:0b:36:24:23:36:64:c6:31:36:c3:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:14:4D:6F:2C:CB:62:69:4D:AB:83:8E:91:FD:DE:2A:6A:71:F2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qzkUTW8sy2JpTauDjpH93ipqcfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
178.178.229.0-178.178.230.255
IPv6:
2a03:d000:5000::/39
2a03:d000:5270::/44
2a03:d000:52f0::/44
2a03:d000:5301::-2a03:d000:5302:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:05:ec:d4:ff:12:4f:74:0f:03:f5:08:d6:c0:3b:bd:2a:b4:
ea:57:38:28:b1:03:d8:50:25:75:d9:21:23:ab:da:b6:aa:54:
99:0f:3d:1f:03:21:55:f7:29:23:ae:6a:ae:ee:88:e5:c1:0e:
2d:8a:a1:c9:ea:b7:7f:58:17:13:a5:43:d0:bf:0d:54:e2:92:
3a:d1:74:03:61:7d:ed:86:29:7b:66:9c:fc:8d:98:e2:bc:18:
40:6f:1b:0b:23:65:d6:53:9c:7c:b1:52:df:01:2f:ec:bc:6a:
9b:8d:f6:32:7d:7e:24:e8:9b:c2:53:ad:24:b0:bd:fc:1f:22:
9d:e2:ed:78:ba:9a:a0:24:3f:94:8e:34:8c:dc:6a:61:5f:8f:
f0:e7:3d:98:d5:c8:5c:03:b1:58:22:09:42:d8:69:0c:95:e0:
38:fd:1d:0a:8b:8a:00:d9:75:b2:ac:c6:5e:7d:57:0a:83:46:
ea:01:c5:81:00:45:d6:a9:7e:15:43:12:f8:2c:50:43:90:d6:
5c:4c:a8:cb:8d:fa:b7:f6:50:f3:0d:70:20:8c:cc:74:37:1f:
e1:13:2e:87:6e:10:5e:9c:81:f9:93:7a:de:97:38:c9:bb:b7:
9b:12:a6:f4:ee:5c:11:63:c3:d5:ef:3c:58:f3:52:1e:71:37:
48:50:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:36 2025 by rpki-client