Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjVovIEovaLPQJBHkBjEAySotJ8.roa
File: tjVovIEovaLPQJBHkBjEAySotJ8.roa (raw, json)
Hash identifier: fgrprpq14yuG4/4jYz0ayra/euxRvCPBcjDK75SLbls=
Subject key identifier: B6:35:68:BC:81:28:BD:A2:CF:40:90:47:90:18:C4:03:24:A8:B4:9F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E4D7B4C6A3505E007BA1D46DD79C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjVovIEovaLPQJBHkBjEAySotJ8.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31195
IP address blocks: 85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 12:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e4:d7:b4:c6:a3:50:5e:00:7b:a1:d4:6d:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63568bc8128bda2cf4090479018c40324a8b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:13:13:96:06:99:41:d2:86:25:18:1f:35:
39:94:eb:41:54:6e:e5:b5:7f:58:a1:53:29:71:44:
45:87:83:2c:c4:52:cd:31:8c:cf:0e:10:42:4d:ad:
02:dd:b0:e8:47:b6:ab:af:9c:70:52:8e:21:d9:ca:
bc:d2:68:35:ba:d6:41:d9:7d:02:48:bc:83:dc:93:
d5:ca:49:6c:08:36:32:77:29:95:a9:b1:09:a4:b6:
61:04:36:41:5c:e6:89:82:d1:28:f9:48:ec:5a:e1:
f4:9b:7e:85:f3:24:e2:a2:20:ba:f0:a3:ad:d6:42:
82:62:ff:2a:12:5b:ee:88:95:f0:c8:34:ed:7d:ef:
9d:d6:8a:0b:76:e6:13:71:cc:b0:bf:b4:dc:80:ca:
31:1f:ec:be:e7:e5:48:dd:12:8a:e7:7f:8f:3b:42:
48:c5:a5:c8:84:25:8f:07:b1:3e:0f:59:f8:f9:48:
0a:7d:e7:e0:6d:01:17:c2:29:b2:86:34:a5:17:b9:
f1:74:7d:46:81:01:15:ef:9f:25:3d:18:de:95:4a:
2e:8f:74:03:64:ef:80:2e:fe:78:80:ce:2c:82:25:
7e:64:56:bf:10:88:a8:80:6e:b8:a5:ba:60:0d:e5:
58:19:f6:74:4e:d3:9f:f4:fd:4e:bb:27:3f:39:ff:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:68:BC:81:28:BD:A2:CF:40:90:47:90:18:C4:03:24:A8:B4:9F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjVovIEovaLPQJBHkBjEAySotJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.170.228.0-188.170.237.255
188.170.239.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9a:1a:34:3c:96:95:58:13:89:8b:01:ae:18:5d:28:8d:c9:
e0:cf:d3:ee:5e:fe:94:f6:f2:09:cb:75:91:a6:4c:66:cf:f7:
c1:a1:8d:72:c4:99:e2:31:b0:33:df:2d:dc:51:78:d5:7e:6d:
47:99:8e:55:2f:ce:87:d7:1a:be:7f:11:6d:6c:d5:8d:11:d3:
76:41:72:b8:2f:a0:6e:5e:15:60:80:1a:3d:f0:60:f6:e3:c4:
7c:c9:f8:96:30:66:41:1e:86:bb:1a:c0:d2:92:69:98:d1:c3:
46:7d:e1:46:70:6d:da:df:a1:0a:c0:b7:92:39:08:a1:b2:32:
bc:5c:9a:5b:eb:da:98:29:92:2c:d8:18:db:24:c9:f2:13:66:
52:72:aa:84:3e:a9:41:c1:fe:c2:7d:0f:7d:fd:63:06:4e:b1:
8d:6a:0d:e7:09:63:8a:b5:2c:08:67:61:e6:3b:85:9e:40:3a:
b1:48:ce:b5:89:cc:45:59:80:68:0d:42:c0:b5:60:a9:48:57:
65:96:ec:80:17:e1:f2:aa:06:f3:8e:e0:77:eb:17:9a:f2:5b:
96:85:68:a2:26:27:71:24:59:02:68:4d:35:16:81:ca:03:90:
e8:61:e3:6a:4f:c5:73:4b:78:0b:b3:ee:72:12:ab:5f:b7:ca:
3b:57:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org