Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/lIILY2uE4jnrNKLH0o5F6JYYibo.roa
File: lIILY2uE4jnrNKLH0o5F6JYYibo.roa (raw, json)
Hash identifier: mIOJEKVXzwEbDUnkVerHzHrtc2DXBZJUclcetPaDRo4=
Subject key identifier: 94:82:0B:63:6B:84:E2:39:EB:34:A2:C7:D2:8E:45:E8:96:18:89:BA
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018CC424F36C2A7D10A73DACA75CB9827D12
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/lIILY2uE4jnrNKLH0o5F6JYYibo.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 31.9.128.0/20 maxlen: 20
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
82.100.128.0/19 maxlen: 19
31.9.144.0/20 maxlen: 20
193.124.28.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
31.9.160.0/19 maxlen: 19
91.144.0.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
91.144.32.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
94.47.0.0/19 maxlen: 19
82.137.244.0/23 maxlen: 23
82.137.243.0/24 maxlen: 24
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
94.47.32.0/19 maxlen: 19
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
82.137.192.0/20 maxlen: 20
31.9.192.0/19 maxlen: 19
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
82.137.208.0/20 maxlen: 20
80.70.120.0/21 maxlen: 21
82.137.224.0/20 maxlen: 20
31.9.224.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
185.109.212.0/22 maxlen: 22
188.133.16.0/20 maxlen: 20
185.99.100.0/22 maxlen: 22
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
5.155.224.0/19 maxlen: 19
188.133.0.0/20 maxlen: 20
185.92.88.0/22 maxlen: 22
94.47.96.0/19 maxlen: 19
5.0.64.0/18 maxlen: 18
5.155.64.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
5.0.0.0/19 maxlen: 19
5.155.0.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
94.47.64.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.155.32.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.100.0/23 maxlen: 23
5.0.192.0/18 maxlen: 18
178.253.102.0/24 maxlen: 24
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
5.155.192.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
94.47.160.0/19 maxlen: 19
5.0.128.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Sun 28 Jan 2024 17:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f3:6c:2a:7d:10:a7:3d:ac:a7:5c:b9:82:7d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94820b636b84e239eb34a2c7d28e45e8961889ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:4e:07:d9:10:8c:ab:fc:2e:cb:5a:0f:41:
c5:a5:98:76:56:2b:2f:d8:72:55:0d:d3:39:e6:b7:
54:3d:7e:ad:2d:4d:3f:81:07:d1:92:d0:db:7a:ae:
db:3b:d3:1a:22:c0:cb:cb:c5:4f:68:15:4c:53:33:
82:ee:40:a3:81:04:72:b2:6b:81:4d:11:44:03:0c:
25:f6:0c:26:3e:33:e7:0d:6d:9c:78:64:4f:62:e0:
99:a7:4f:ab:28:09:b2:64:cd:06:0f:4c:23:e5:6e:
48:54:98:c1:8d:3b:6f:d2:2e:7f:6e:f6:ec:0b:36:
c5:38:38:94:aa:5d:d4:64:48:84:21:ba:ed:f7:4d:
03:fb:28:7d:4d:a2:9b:c9:8f:bf:5b:95:cc:fb:fc:
5c:f7:12:02:b1:d9:fd:e3:84:68:78:09:95:c0:2c:
06:cd:05:2b:38:de:1f:7b:22:11:a0:e2:3c:1d:fd:
f3:fb:61:3e:d1:87:94:32:f6:b6:7c:93:fd:c1:27:
3b:9e:0b:cf:68:4c:8b:64:06:9d:30:c2:81:0b:6c:
f3:8a:f6:95:f4:ae:c8:9a:9f:c3:71:fc:bd:94:7f:
2f:d0:0b:b6:ad:97:0d:a5:64:13:2d:46:e9:8b:cc:
1a:18:91:c4:11:1e:c6:56:75:c0:0e:8e:5b:8e:35:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:0B:63:6B:84:E2:39:EB:34:A2:C7:D2:8E:45:E8:96:18:89:BA
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/lIILY2uE4jnrNKLH0o5F6JYYibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.98.255
178.253.100.0-178.253.111.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:38:b3:a9:0a:b4:15:ef:10:7a:87:78:a3:65:9a:ca:3e:d6:
0d:74:c1:5c:26:32:c0:a8:22:0c:eb:b7:07:38:3e:fd:5e:77:
cc:26:76:5b:01:75:a0:ce:4c:d0:35:45:3b:77:7e:d7:72:c0:
1d:16:b7:95:e3:22:84:b0:f7:dd:6b:65:46:ff:20:6c:3a:2b:
07:5e:0f:37:ad:36:1f:af:43:2a:39:cc:27:03:13:7d:95:8d:
38:06:44:21:0f:19:b3:11:23:9f:29:e1:6b:1f:ca:b2:3d:27:
15:47:f2:e1:95:2e:35:2f:15:3a:2c:ab:6a:c6:41:e9:a4:e8:
e6:5e:16:f3:e7:72:73:50:eb:ae:81:07:72:e3:85:ad:08:21:
39:e8:af:c4:33:4f:14:02:f1:14:37:94:e3:89:1e:d7:53:f4:
1a:9c:35:b5:e4:24:fe:8d:bd:a1:93:f9:0b:6b:f7:e8:ce:b4:
e1:f7:42:9f:47:5f:6c:c0:cb:95:9b:ea:5e:a9:32:2f:0f:60:
ba:dd:48:b5:c6:ba:7e:7d:b4:01:45:52:b0:b2:4a:a7:a7:8d:
93:56:34:1c:7e:ae:86:d4:c1:c5:cd:c3:3e:6c:1e:52:bf:c4:
b8:6b:fb:c8:f7:e8:ef:e8:3a:bf:24:71:d7:fe:43:23:27:04:
9c:4c:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org