Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/XMZ4BnUwANmB_R4l8QR-zt6Gnz4.roa
File: XMZ4BnUwANmB_R4l8QR-zt6Gnz4.roa (raw, json)
Hash identifier: 7NAwFundkk8zOnwHirdzzKQJWiklMxv+bhs6Db2JCrY=
Subject key identifier: 5C:C6:78:06:75:30:00:D9:81:FD:1E:25:F1:04:7E:CE:DE:86:9F:3E
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 0193E5A647FF3962EE118F94FDBD62A370E4
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/XMZ4BnUwANmB_R4l8QR-zt6Gnz4.roa
Signing time: Fri 20 Dec 2024 19:58:20 +0000
ROA not before: Fri 20 Dec 2024 19:58:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.152.0/22 maxlen: 22
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 24
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
91.204.128.0/22 maxlen: 22
91.204.128.0/23 maxlen: 23
91.204.130.0/24 maxlen: 24
94.141.160.0/19 maxlen: 19
94.141.162.0/23 maxlen: 23
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/24 maxlen: 24
2a00:e78::/31 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e5:a6:47:ff:39:62:ee:11:8f:94:fd:bd:62:a3:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Dec 20 19:58:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cc67806753000d981fd1e25f1047ecede869f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:45:b2:02:b2:3e:19:74:28:40:e6:41:df:
8b:e4:2d:eb:88:52:46:a8:b2:26:6c:c6:13:67:b6:
74:cb:3f:a2:14:9a:c1:a7:ae:0c:18:e3:d1:d3:91:
61:5a:d9:02:bf:c3:23:f3:55:88:ee:14:e2:73:75:
6c:0e:68:3f:da:bf:f7:fc:92:2b:02:0e:10:99:31:
f7:e7:38:98:a9:79:3a:ac:03:c7:17:4e:4c:de:d8:
48:48:ad:67:b1:fc:11:95:85:df:4a:48:17:c3:0b:
18:82:e0:72:c3:df:7c:b9:70:45:22:3b:26:b7:cc:
49:40:ab:3d:8b:aa:15:48:c8:57:c9:1d:58:a4:0c:
a4:12:ef:f2:87:85:0c:d7:2a:33:b9:72:46:f5:b5:
07:30:80:ab:60:f8:cc:11:a2:9d:aa:20:ba:fd:ae:
ab:3f:37:ae:6c:51:c5:ac:a9:8a:4f:4e:fa:94:3e:
ff:74:19:b7:c5:f3:61:8e:65:96:01:c8:05:67:f5:
de:2e:b6:cf:e2:b4:eb:b1:e8:04:67:d3:44:f8:7a:
d6:b6:fb:0c:e1:04:a0:7c:7d:cf:51:99:6f:b8:cd:
27:88:7a:17:5a:c2:b1:f7:16:c5:1b:9f:89:60:7d:
b7:61:ab:30:40:d3:a0:79:95:15:0a:49:c1:7c:32:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:78:06:75:30:00:D9:81:FD:1E:25:F1:04:7E:CE:DE:86:9F:3E
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/XMZ4BnUwANmB_R4l8QR-zt6Gnz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.152.0/22
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/24
IPv6:
2a00:e78::/31
Signature Algorithm: sha256WithRSAEncryption
5f:09:e8:94:f5:a4:e7:67:04:4d:2d:63:6c:84:c9:ed:eb:41:
de:5e:86:a1:ca:e9:1e:da:30:7e:ce:31:4f:bf:01:78:ea:a6:
6f:19:47:42:bf:a5:4b:99:d5:a7:5b:da:c5:ba:9d:36:07:e1:
cb:12:f7:10:cd:f3:56:0b:24:12:de:3f:37:3a:40:4f:1b:cc:
77:a9:27:64:97:07:94:3f:76:48:39:59:d7:e1:fd:b4:87:92:
4b:7f:ae:21:f5:af:b3:13:14:e9:0b:0f:cb:24:03:b1:7e:c1:
cf:18:e0:0f:fc:bf:4d:b2:49:ef:82:b3:3c:46:dc:f8:ef:b3:
3b:4f:7b:e2:bf:80:8f:1a:6a:41:f7:a2:4b:d4:e8:d7:83:ea:
51:66:a4:13:03:02:11:ec:f6:2f:6a:1f:27:84:c9:b8:b5:c9:
d7:05:54:7d:c2:60:f6:08:3a:bd:dc:91:67:8d:90:81:1b:b0:
43:1d:98:6f:18:b8:b2:f7:f6:6a:1b:d3:ca:6c:13:f4:0e:b5:
6d:4d:dd:ec:92:b9:ca:ca:57:08:bd:d7:75:17:7b:8b:37:fd:
65:73:af:3d:ea:1d:7b:1c:0b:e9:72:bb:d6:47:95:82:02:c6:
bc:4f:b1:ef:70:d8:40:c9:ed:ba:a6:9d:af:4a:78:97:da:01:
0d:38:4f:24
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZPlpkf/OWLuEY+U/b1io3DkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjQxMjIwMTk1ODIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2M2NzgwNjc1MzAwMGQ5ODFmZDFlMjVmMTA0N2VjZWRlODY5ZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0xFsgKyPhl0KEDmQd+L5C3riFJG
qLImbMYTZ7Z0yz+iFJrBp64MGOPR05FhWtkCv8Mj81WI7hTic3VsDmg/2r/3/JIr
Ag4QmTH35ziYqXk6rAPHF05M3thISK1nsfwRlYXfSkgXwwsYguByw998uXBFIjsm
t8xJQKs9i6oVSMhXyR1YpAykEu/yh4UM1yozuXJG9bUHMICrYPjMEaKdqiC6/a6r
PzeubFHFrKmKT076lD7/dBm3xfNhjmWWAcgFZ/XeLrbP4rTrsegEZ9NE+HrWtvsM
4QSgfH3PUZlvuM0niHoXWsKx9xbFG5+JYH23YaswQNOgeZUVCknBfDIYMQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFzGeAZ1MADZgf0eJfEEfs7ehp8+MB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvWE1aNEJuVXdBTm1CX1I0bDhRUi16dDZHbno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDA7BAIAATA1AwQDH4KAAwQC
H4KYAwMATTIDBAVN6cADBARN82ADBARREZADBAJbzIADBAVejaADBAC5uYwwDQQC
AAIwBwMFASoADngwDQYJKoZIhvcNAQELBQADggEBAF8J6JT1pOdnBE0tY2yEye3r
Qd5ehqHK6R7aMH7OMU+/AXjqpm8ZR0K/pUuZ1adb2sW6nTYH4csS9xDN81YLJBLe
Pzc6QE8bzHepJ2SXB5Q/dkg5Wdfh/bSHkkt/riH1r7MTFOkLD8skA7F+wc8Y4A/8
v02ySe+CszxG3PjvsztPe+K/gI8aakH3okvU6NeD6lFmpBMDAhHs9i9qHyeEybi1
ydcFVH3CYPYIOr3ckWeNkIEbsEMdmG8YuLL39mob08psE/QOtW1N3eySucrKVwi9
13UXe4s3/WVzrz3qHXscC+lyu9ZHlYICxrxPse9w2EDJ7bqmna9KeJfaAQ04TyQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:41 2025 by rpki-client