Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/90VTgI8F6fHMXu_LbcCR8Chr5Ok.roa
File: 90VTgI8F6fHMXu_LbcCR8Chr5Ok.roa (raw, json)
Hash identifier: v3YSU0SWaOfOdVT7JqAU/uoVzgJ9ATXyvNGYK1YKJDw=
Subject key identifier: F7:45:53:80:8F:05:E9:F1:CC:5E:EF:CB:6D:C0:91:F0:28:6B:E4:E9
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0190BA3E29426524CE345A418CD7935AD21B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/90VTgI8F6fHMXu_LbcCR8Chr5Ok.roa
Signing time: Tue 16 Jul 2024 06:32:34 +0000
ROA not before: Tue 16 Jul 2024 06:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
103.14.208.0/22 maxlen: 22
103.14.211.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 08:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:3e:29:42:65:24:ce:34:5a:41:8c:d7:93:5a:d2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jul 16 06:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f74553808f05e9f1cc5eefcb6dc091f0286be4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:fb:3e:42:43:5f:8e:4c:0f:6f:07:ce:f9:
5a:92:df:96:a8:38:31:f6:e8:2b:3c:1b:ae:e6:b9:
bc:1f:43:f7:14:0b:a1:71:1c:cb:0c:1f:c1:25:94:
55:f5:22:c4:77:86:16:27:83:22:90:c2:31:1e:1d:
20:4f:c3:db:12:0b:ec:2d:de:5e:e2:d3:d0:ff:f3:
8c:e4:fc:b8:a9:cf:c3:5f:3a:08:1e:c6:a1:8b:9d:
b6:b8:93:9d:88:4d:f7:60:f9:f9:8f:d5:df:14:7f:
61:3e:90:c6:36:e9:ca:38:a8:ba:01:2d:c5:1a:d5:
61:ed:2e:de:e5:4d:06:0b:cd:c1:3a:09:1c:aa:be:
cf:bc:a2:5d:ed:7f:5c:ad:66:65:f7:7d:82:db:42:
a1:6a:48:23:5a:ad:a8:82:84:df:60:55:47:cb:36:
be:3b:ce:a4:4f:29:c1:2b:d8:09:72:08:6c:18:9f:
1b:c2:0f:4c:13:35:9a:cb:bb:88:51:a3:1a:6f:0a:
7d:d1:52:85:94:dd:dc:bb:f6:08:49:fe:21:72:b3:
70:49:71:45:e6:5e:fe:85:c0:e4:1b:e4:d1:9d:b8:
4e:97:c1:c4:c7:ef:00:0e:84:62:ac:99:e8:f4:53:
da:6e:bf:d6:b4:67:dc:90:af:67:f7:1c:e3:1e:b8:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:53:80:8F:05:E9:F1:CC:5E:EF:CB:6D:C0:91:F0:28:6B:E4:E9
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/90VTgI8F6fHMXu_LbcCR8Chr5Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.120.0/24
212.70.122.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
c6:73:29:18:01:a9:1a:0b:3f:ca:44:76:9d:51:2d:6d:07:39:
77:63:81:ba:27:80:1e:e5:04:bd:b3:10:69:c5:dd:11:d4:78:
b9:f1:f7:95:20:cc:28:1c:2c:73:5f:2e:9c:61:14:3f:14:15:
0b:b9:91:4d:86:b4:3e:a8:f8:e0:eb:c1:30:39:ff:9c:1c:8e:
a6:b0:c6:7f:bb:55:05:8f:25:65:78:c4:60:9a:ec:18:2c:25:
d2:b6:82:e6:65:85:07:98:b3:da:dc:05:b6:37:d3:94:24:3f:
d6:26:0b:40:d2:10:2e:4f:e2:7f:36:17:c1:46:7c:fb:4c:7a:
da:e0:4b:21:b4:12:fc:e6:fb:ef:c0:ab:f1:d1:68:57:f7:6f:
00:68:dc:fb:48:0e:61:0f:43:41:55:e9:17:95:b9:a1:a3:d6:
67:ec:ba:de:fc:d2:d0:3b:80:1f:93:af:f3:4a:a1:21:3a:73:
45:76:e3:b0:1b:0c:d2:8f:92:1c:3b:ce:99:c6:06:0c:5d:b1:
4b:2a:cd:64:3d:49:7d:7e:ed:1c:49:d2:41:33:5e:b4:72:91:
69:b8:3d:fd:3c:f3:cb:51:d3:09:e5:2f:46:1d:d8:1b:a2:23:
f9:9c:8e:48:af:6e:f7:9d:fc:f2:4e:16:9f:1d:88:e9:c4:2c:
3c:34:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:29 2025 by rpki-client