Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xFSZDBepLSQEj6EpHzB7uuAZilY.roa
File: xFSZDBepLSQEj6EpHzB7uuAZilY.roa (raw, json)
Hash identifier: 8VruOtV2+diqoPoX4JF+3NFxCNj3L5KWxzT58HC9Jcc=
Subject key identifier: C4:54:99:0C:17:A9:2D:24:04:8F:A1:29:1F:30:7B:BA:E0:19:8A:56
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019102A2BAB462DFD90D4339BD52A591A5B5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xFSZDBepLSQEj6EpHzB7uuAZilY.roa
Signing time: Tue 30 Jul 2024 07:55:04 +0000
ROA not before: Tue 30 Jul 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
78.109.123.0/24 maxlen: 24
78.109.124.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
86.109.193.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
86.109.208.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
86.109.220.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
217.115.94.0/24 maxlen: 24
2a03:d000:9004::/46 maxlen: 46
2a03:d005::/40 maxlen: 40
2a03:d005:100::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d005:300::/40 maxlen: 40
2a03:d005:400::/40 maxlen: 40
2a03:d005:500::/40 maxlen: 40
2a03:d005:600::/40 maxlen: 40
2a03:d005:700::/40 maxlen: 40
2a03:d005:800::/40 maxlen: 40
2a03:d005:900::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 02 Oct 2024 11:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:a2:ba:b4:62:df:d9:0d:43:39:bd:52:a5:91:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jul 30 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c454990c17a92d24048fa1291f307bbae0198a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:44:e9:7a:bb:54:5e:79:60:ec:6a:ca:55:
73:14:b6:c4:fc:a1:83:11:5e:ed:81:2b:31:84:0b:
8d:5c:8d:72:6d:20:a8:a8:b5:77:b9:0a:2e:36:a4:
9c:6b:38:29:7d:e1:93:ca:74:b3:45:80:09:0e:9c:
ef:93:1b:00:c5:ad:50:dc:ba:a7:f5:e8:6d:8c:64:
1f:c1:32:8c:dd:4b:4e:a2:92:9d:31:d7:99:65:0a:
1a:2e:ca:31:07:f2:92:e3:9a:6f:e1:70:84:1a:c8:
a2:be:27:9a:e2:74:15:fb:c9:1a:f9:3c:ed:fa:8e:
60:b8:aa:68:62:76:f5:d8:6c:7b:18:e1:45:9c:e7:
5c:7f:c8:3d:9b:b4:28:fd:f5:8d:fc:d6:77:97:10:
19:e2:d7:48:d6:4d:e1:21:86:bd:0a:51:fb:95:8c:
99:ef:68:3a:75:97:0d:98:15:b8:12:c9:f9:e3:7d:
a3:18:bd:f2:d2:8a:e5:72:d6:2d:a7:63:86:5f:ca:
ce:51:91:c1:0c:17:85:77:bc:74:48:4e:7b:5d:c8:
7c:86:74:c1:39:9d:3c:20:cd:62:54:4f:26:e8:17:
ee:ac:13:c2:26:22:f0:75:7c:a3:99:38:d0:a2:9a:
6e:d5:78:df:07:08:5a:15:78:66:97:13:64:56:d3:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:99:0C:17:A9:2D:24:04:8F:A1:29:1F:30:7B:BA:E0:19:8A:56
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xFSZDBepLSQEj6EpHzB7uuAZilY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
78.109.123.0-78.109.124.255
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:95:fe:a5:da:36:22:f6:5f:d4:ff:64:2b:2d:50:9b:0e:ec:
80:0b:c6:22:44:8b:63:ac:4f:8f:9d:ce:d0:bb:ac:12:a6:7d:
67:25:58:df:a1:97:01:ae:32:3e:4d:e4:af:4e:45:a0:eb:ce:
7e:2f:06:1f:0a:2b:50:fc:b7:d9:8c:21:26:4c:52:fb:d7:0b:
2c:f6:20:29:05:3e:d3:b3:5d:02:fb:b3:03:1a:ac:86:2a:3d:
bb:d9:62:bc:ee:8c:47:9d:d0:d8:c7:40:33:8d:86:50:0d:5c:
c7:f2:f6:92:4a:6a:79:ff:3e:a0:b3:32:79:e2:2b:fd:cb:a2:
6b:0d:fe:0f:86:d1:b8:d8:06:fb:d2:99:c3:f5:13:ad:ab:04:
4f:bd:50:03:57:4c:ad:69:e1:1b:e4:37:23:fd:4c:f1:ef:ac:
1f:30:25:76:2c:f3:50:a4:dd:04:69:48:9c:42:b1:00:ea:da:
15:0f:c4:c3:a0:db:c9:77:93:ea:6e:22:4a:92:b4:9e:c6:43:
ed:5f:1e:8d:ac:96:c8:2b:26:bf:39:d7:f0:14:0d:ed:a6:55:
32:5b:29:b1:f8:ca:52:3e:48:93:72:99:b8:3b:54:2a:a9:c0:
d5:2d:72:30:c1:1f:89:a4:4e:a4:8e:92:57:17:2e:67:26:d1:
d6:f5:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:02 2025 by rpki-client