Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flPucOdUwWRfzWXRCfcCFiYdHZ0.roa
File: flPucOdUwWRfzWXRCfcCFiYdHZ0.roa (raw, json)
Hash identifier: +SgiYGBHmMJvGuMP36ypan8Lyhz5GOA7sfKnP+NFSyY=
Subject key identifier: 7E:53:EE:70:E7:54:C1:64:5F:CD:65:D1:09:F7:02:16:26:1D:1D:9D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01941C6C7F4CD5E80A57A626795FAD4671AB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flPucOdUwWRfzWXRCfcCFiYdHZ0.roa
Signing time: Tue 31 Dec 2024 11:14:19 +0000
ROA not before: Tue 31 Dec 2024 11:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.81.152.0/22 maxlen: 24
45.90.238.0/24 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.140.0/22 maxlen: 22
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:6c:7f:4c:d5:e8:0a:57:a6:26:79:5f:ad:46:71:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 31 11:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e53ee70e754c1645fcd65d109f70216261d1d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:56:93:d1:18:44:ef:b3:8b:f9:0d:3d:1c:
ff:af:a1:3d:70:62:4e:91:62:52:f2:eb:c6:b1:10:
c1:61:c4:26:f4:b7:a4:be:08:bf:55:2f:ef:07:e9:
81:74:99:d2:1f:27:b4:a4:43:02:35:c9:bf:17:83:
f8:ad:02:96:23:41:06:f1:ce:5a:c4:29:c7:20:9f:
99:dc:fb:1d:4f:26:32:c6:7f:a4:9b:fb:02:ee:ed:
5c:ff:77:79:ca:60:48:84:0c:40:d6:1f:0f:0e:5a:
ee:31:39:ed:bb:60:35:33:1f:b6:c3:73:8b:3f:39:
c0:68:12:ad:56:35:20:31:82:b2:77:37:93:d5:0c:
f2:d0:2d:81:bf:5f:03:61:ae:04:87:b4:ce:6d:88:
d3:30:a6:6c:7d:a6:d4:b7:aa:f4:28:89:dc:7a:7a:
fe:34:84:f5:13:b3:2a:25:5d:d2:96:e6:99:3e:3c:
17:8e:00:25:61:4d:94:ef:14:d3:99:ba:ee:de:7f:
97:6b:77:86:4e:de:08:82:1b:1b:03:47:f3:18:df:
4b:4d:39:68:5e:f0:ba:2e:62:79:b9:cf:2b:e8:b1:
8f:20:42:98:e5:c0:4f:e5:6c:c1:a6:c6:64:82:ce:
52:19:75:53:09:99:4d:11:9d:ea:06:c4:a1:3f:a7:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:EE:70:E7:54:C1:64:5F:CD:65:D1:09:F7:02:16:26:1D:1D:9D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flPucOdUwWRfzWXRCfcCFiYdHZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.81.152.0/22
45.90.238.0/24
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.140.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:08:79:e0:46:12:ce:83:87:e4:f8:99:32:2d:9a:e0:bb:29:
1a:aa:82:cb:da:03:8d:e5:a6:5b:56:dc:c8:e3:bf:85:d5:0b:
08:6c:8b:aa:c1:a0:1f:02:c2:9e:4e:6d:76:4b:09:18:63:99:
16:a4:f9:af:90:78:33:fd:b9:61:c8:a9:e5:c2:20:cf:f0:a8:
f1:06:67:9b:0c:ea:6b:98:fd:21:b1:fe:08:f4:27:b1:77:45:
1c:c4:15:4d:ec:41:62:d8:18:9d:6d:47:a4:4e:b9:75:c6:84:
9d:d0:be:b9:3f:48:97:c0:65:05:9e:15:b3:3d:4a:10:39:a1:
13:fa:ae:18:b2:f1:84:53:16:75:38:76:bc:ea:91:08:41:22:
17:be:f2:b4:2c:46:06:e2:54:be:e6:15:ab:0c:ab:40:10:56:
ed:6c:d1:82:9e:b4:30:6e:03:83:76:af:0d:ee:43:35:25:5f:
7c:51:b6:dd:18:01:c1:d8:40:47:41:e1:7a:b7:54:49:90:2c:
b0:8d:00:53:27:32:17:86:ca:60:b6:4d:03:fc:cb:c2:ef:1f:
e4:7a:0f:42:45:53:74:1c:f9:aa:1b:cd:41:8f:be:da:82:99:
55:8e:bd:61:1f:ab:dc:72:14:44:69:08:6e:1e:8b:3e:18:8b:
28:be:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:23:16 2025 by rpki-client