Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/cDC65IeakOCW80a9QF4cNdjtV08.roa
File: cDC65IeakOCW80a9QF4cNdjtV08.roa (raw, json)
Hash identifier: OjE5d9EvC7806pe7P5xzB65kcWidf4NryfFC9wku1eE=
Subject key identifier: 70:30:BA:E4:87:9A:90:E0:96:F3:46:BD:40:5E:1C:35:D8:ED:57:4F
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0193F8E78E072CA65669670661CBD3750BBB
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/cDC65IeakOCW80a9QF4cNdjtV08.roa
Signing time: Tue 24 Dec 2024 13:42:24 +0000
ROA not before: Tue 24 Dec 2024 13:42:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 31.42.184.0/23 maxlen: 23
31.42.186.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.58.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.82.0/23 maxlen: 23
62.182.84.0/24 maxlen: 24
62.182.85.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
62.182.87.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
152.89.60.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.63.0/24 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.124.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.26.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.214.0/23 maxlen: 24
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:e7:8e:07:2c:a6:56:69:67:06:61:cb:d3:75:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Dec 24 13:42:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7030bae4879a90e096f346bd405e1c35d8ed574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:2d:9f:1d:eb:6e:d0:e1:67:ba:b4:44:3a:
1e:25:8f:69:5e:0c:06:b8:9a:f2:90:07:19:e8:14:
0c:2f:a6:6a:b3:7e:3b:56:32:df:a7:8c:dd:1f:82:
e4:0b:5b:05:4a:50:94:d9:68:1c:83:94:08:1a:00:
63:41:d9:7d:ba:6e:2c:e1:d7:cf:bd:20:f0:1e:6d:
9c:95:9a:a5:8f:b3:cc:13:3f:f8:0d:9d:a7:62:aa:
d8:67:58:d0:ea:0a:71:09:f9:b4:05:ac:13:bd:c5:
a6:ec:fd:e2:a9:be:1a:af:b8:e1:64:19:a9:ea:0a:
2e:0b:e4:6c:5a:c8:53:46:a5:ad:cc:55:e1:51:03:
53:7f:61:f5:da:93:5e:7d:63:1e:b0:bd:91:8a:cc:
86:0a:62:5f:8c:6f:11:14:f7:b6:bb:37:6f:53:18:
ad:3d:11:60:ae:af:e2:f1:84:69:dc:b0:d0:22:b1:
83:51:86:93:e4:b4:55:12:cb:58:a0:0d:8a:9a:6d:
3e:bc:de:69:30:cf:13:2a:91:43:ab:00:a3:a0:37:
39:ce:27:20:12:4a:78:35:36:9c:77:27:88:f1:a6:
b6:e3:ae:a0:d5:af:3d:0e:f0:94:1b:72:29:32:8d:
b5:10:63:56:66:b2:63:d0:bb:55:00:36:9a:eb:43:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:BA:E4:87:9A:90:E0:96:F3:46:BD:40:5E:1C:35:D8:ED:57:4F
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/cDC65IeakOCW80a9QF4cNdjtV08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.66.210.0/24
195.66.214.0/23
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:57:8f:44:cc:9b:aa:e7:5c:4b:84:18:52:26:ac:58:0a:7b:
65:45:86:46:20:4e:fc:b7:05:cf:66:dd:9c:ca:c1:b2:25:70:
3c:05:16:36:d4:33:d8:cb:ca:81:c6:91:45:5c:70:67:28:59:
c4:e7:ad:3b:78:1f:6e:7d:78:88:5a:9d:da:6a:83:99:66:cc:
49:35:5e:b9:86:4b:41:0b:9d:7a:19:42:da:82:93:0a:4a:88:
84:b2:aa:9c:95:9e:a4:83:07:64:d0:c2:ce:07:be:a8:53:8a:
62:e8:6d:24:37:fb:7f:18:5d:86:e2:2e:da:eb:5a:29:d0:54:
4d:9c:34:49:5e:2d:19:7f:be:a7:0e:7e:08:81:96:e0:52:89:
a8:a1:f9:8d:56:47:d0:76:ac:4f:8d:4b:bb:19:ff:d5:30:bd:
a2:98:e1:f9:f3:62:71:05:ca:96:4d:26:2a:0e:39:03:ad:2a:
0d:d5:ff:39:4b:79:8b:75:56:62:dd:f0:08:a6:ba:d7:00:78:
d4:36:f1:37:22:ce:ad:c1:8c:eb:e7:59:d2:2f:95:b1:1e:79:
f0:71:b7:94:61:86:57:b4:03:d1:41:a3:bd:1d:29:65:3f:ed:
b2:5d:54:c8:82:27:37:0b:44:f6:b3:7b:85:16:93:60:02:8e:
5c:1e:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:57 2025 by rpki-client