Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2R5lzGseX6fvCe0GMBMIKwAo824.roa
File: 2R5lzGseX6fvCe0GMBMIKwAo824.roa (raw, json)
Hash identifier: IbvuNd6nOD8s7hr5FlsuSAELz2flXt4hIrkCF5kuV2A=
Subject key identifier: D9:1E:65:CC:6B:1E:5F:A7:EF:09:ED:06:30:13:08:2B:00:28:F3:6E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01922318021AF5FEB6EDA869541C7A300936
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2R5lzGseX6fvCe0GMBMIKwAo824.roa
Signing time: Tue 24 Sep 2024 08:13:48 +0000
ROA not before: Tue 24 Sep 2024 08:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/19 maxlen: 24
80.81.35.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/17 maxlen: 17
85.254.49.0/24 maxlen: 24
85.254.50.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
91.190.32.0/19 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.0.0/24 maxlen: 24
159.148.1.0/24 maxlen: 24
159.148.2.0/24 maxlen: 24
159.148.3.0/24 maxlen: 24
159.148.4.0/24 maxlen: 24
159.148.5.0/24 maxlen: 24
159.148.6.0/24 maxlen: 24
159.148.7.0/24 maxlen: 24
159.148.8.0/24 maxlen: 24
159.148.9.0/24 maxlen: 24
159.148.10.0/24 maxlen: 24
159.148.11.0/24 maxlen: 24
159.148.12.0/24 maxlen: 24
159.148.13.0/24 maxlen: 24
159.148.14.0/24 maxlen: 24
159.148.15.0/24 maxlen: 24
159.148.16.0/24 maxlen: 24
159.148.17.0/24 maxlen: 24
159.148.18.0/24 maxlen: 24
159.148.19.0/24 maxlen: 24
159.148.20.0/24 maxlen: 24
159.148.21.0/24 maxlen: 24
159.148.22.0/24 maxlen: 24
159.148.24.0/24 maxlen: 24
159.148.25.0/24 maxlen: 24
159.148.28.0/24 maxlen: 24
159.148.29.0/24 maxlen: 24
159.148.31.0/24 maxlen: 24
159.148.32.0/24 maxlen: 24
159.148.33.0/24 maxlen: 24
159.148.34.0/24 maxlen: 24
159.148.35.0/24 maxlen: 24
159.148.36.0/24 maxlen: 24
159.148.37.0/24 maxlen: 24
159.148.39.0/24 maxlen: 24
159.148.40.0/24 maxlen: 24
159.148.41.0/24 maxlen: 24
159.148.42.0/24 maxlen: 24
159.148.43.0/24 maxlen: 24
159.148.45.0/24 maxlen: 24
159.148.46.0/24 maxlen: 24
159.148.47.0/24 maxlen: 24
159.148.48.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.51.0/24 maxlen: 24
159.148.52.0/24 maxlen: 24
159.148.53.0/24 maxlen: 24
159.148.55.0/24 maxlen: 24
159.148.56.0/24 maxlen: 24
159.148.57.0/24 maxlen: 24
159.148.59.0/24 maxlen: 24
159.148.60.0/24 maxlen: 24
159.148.61.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.64.0/24 maxlen: 24
159.148.65.0/24 maxlen: 24
159.148.67.0/24 maxlen: 24
159.148.68.0/24 maxlen: 24
159.148.69.0/24 maxlen: 24
159.148.70.0/24 maxlen: 24
159.148.71.0/24 maxlen: 24
159.148.72.0/24 maxlen: 24
159.148.75.0/24 maxlen: 24
159.148.76.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.79.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.81.0/24 maxlen: 24
159.148.83.0/24 maxlen: 24
159.148.84.0/24 maxlen: 24
159.148.85.0/24 maxlen: 24
159.148.86.0/24 maxlen: 24
159.148.87.0/24 maxlen: 24
159.148.91.0/24 maxlen: 24
159.148.92.0/24 maxlen: 24
159.148.93.0/24 maxlen: 24
159.148.94.0/24 maxlen: 24
159.148.95.0/24 maxlen: 24
159.148.96.0/24 maxlen: 24
159.148.97.0/24 maxlen: 24
159.148.100.0/24 maxlen: 24
159.148.101.0/24 maxlen: 24
159.148.106.0/24 maxlen: 24
159.148.107.0/24 maxlen: 24
159.148.108.0/24 maxlen: 24
159.148.110.0/24 maxlen: 24
159.148.111.0/24 maxlen: 24
159.148.112.0/24 maxlen: 24
159.148.113.0/24 maxlen: 24
159.148.115.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.118.0/24 maxlen: 24
159.148.120.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.122.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.127.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.132.0/24 maxlen: 24
159.148.133.0/24 maxlen: 24
159.148.135.0/24 maxlen: 24
159.148.139.0/24 maxlen: 24
159.148.145.0/24 maxlen: 24
159.148.146.0/24 maxlen: 24
159.148.151.0/24 maxlen: 24
159.148.152.0/24 maxlen: 24
159.148.153.0/24 maxlen: 24
159.148.154.0/24 maxlen: 24
159.148.155.0/24 maxlen: 24
159.148.156.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.161.0/24 maxlen: 24
159.148.162.0/24 maxlen: 24
159.148.164.0/24 maxlen: 24
159.148.168.0/24 maxlen: 24
159.148.170.0/24 maxlen: 24
159.148.175.0/24 maxlen: 24
159.148.178.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.187.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.189.0/24 maxlen: 24
159.148.192.0/24 maxlen: 24
159.148.193.0/24 maxlen: 24
159.148.194.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.196.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.202.0/24 maxlen: 24
159.148.205.0/24 maxlen: 24
159.148.206.0/24 maxlen: 24
159.148.207.0/24 maxlen: 24
159.148.209.0/24 maxlen: 24
159.148.210.0/24 maxlen: 24
159.148.211.0/24 maxlen: 24
159.148.212.0/24 maxlen: 24
159.148.213.0/24 maxlen: 24
159.148.214.0/24 maxlen: 24
159.148.215.0/24 maxlen: 24
159.148.217.0/24 maxlen: 24
159.148.219.0/24 maxlen: 24
159.148.221.0/24 maxlen: 24
159.148.223.0/24 maxlen: 24
159.148.227.0/24 maxlen: 24
159.148.228.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.230.0/24 maxlen: 24
159.148.232.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
159.148.235.0/24 maxlen: 24
159.148.237.0/24 maxlen: 24
159.148.238.0/24 maxlen: 24
159.148.250.0/24 maxlen: 24
159.148.251.0/24 maxlen: 24
159.148.252.0/24 maxlen: 24
159.148.254.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 08:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:18:02:1a:f5:fe:b6:ed:a8:69:54:1c:7a:30:09:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 24 08:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d91e65cc6b1e5fa7ef09ed063013082b0028f36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:01:c3:cb:d1:43:c5:fe:f4:21:9d:6c:85:
02:45:a6:16:ea:51:d2:c2:e7:d8:46:f7:fa:6b:6b:
02:09:9f:b7:dd:5c:e1:df:a6:c7:59:f5:1a:58:61:
46:46:1c:bf:e5:2b:4e:51:e9:ca:6d:5d:f2:b3:6b:
aa:b5:21:67:01:cc:88:d0:fd:71:9e:80:12:c4:38:
c8:d1:1a:2c:48:df:aa:2a:97:2a:0a:2f:2d:86:23:
6b:f4:30:ed:16:8d:bd:0e:62:e3:29:18:f6:77:e6:
19:f2:f6:1e:fc:44:f8:24:5b:3e:55:13:75:14:99:
d2:f6:f1:b9:bc:43:87:9e:2e:25:27:cc:93:59:36:
d2:8c:30:e8:27:b0:10:79:cf:39:3b:c9:26:68:ca:
30:15:ff:b1:84:33:62:ac:10:5f:02:03:6d:97:79:
b8:ce:3f:0a:b8:ce:43:3a:14:18:00:a1:d2:5c:94:
39:83:9a:d2:96:21:8d:2a:7e:64:2e:ad:10:22:9e:
02:4a:b7:94:92:f3:97:17:da:30:9d:b9:ff:c4:75:
ee:df:73:9e:fd:10:51:2a:3d:aa:ca:f8:90:88:c7:
b7:41:b6:d7:c5:11:e4:90:90:38:68:4f:6f:c6:93:
ed:8b:b6:a9:d9:da:40:3e:01:6e:54:3a:c9:6c:dd:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:65:CC:6B:1E:5F:A7:EF:09:ED:06:30:13:08:2B:00:28:F3:6E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2R5lzGseX6fvCe0GMBMIKwAo824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0/19
83.223.128.0/19
85.254.0.0-85.254.191.255
91.190.32.0/19
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
a7:cd:47:f4:c8:d1:80:d7:6a:22:55:ea:1f:e9:8c:59:07:92:
2f:bd:3c:8e:3e:1d:dc:cb:a2:16:85:e5:70:50:f4:de:c7:c0:
4f:6a:2f:5a:a2:e6:29:8b:41:29:23:6e:d0:f5:1e:8d:c0:82:
c7:95:b1:43:ef:bd:8d:49:8b:58:b6:69:ed:64:18:cf:0c:4d:
03:2e:3b:a4:2e:42:6b:89:a3:74:40:bb:8b:67:90:7c:a8:f8:
ec:8a:2c:a1:62:3e:95:e7:c6:ba:28:10:7d:54:fc:de:ef:26:
0f:78:d1:bb:d2:ee:3f:4b:69:4c:8a:9b:5e:c0:85:dc:a4:fb:
2b:4a:18:96:fe:33:c0:f0:8b:24:3a:b8:cf:16:f7:ff:72:94:
d4:3a:68:ee:81:dd:f4:99:b0:74:1e:21:6b:c2:32:c0:1d:7c:
5b:a0:5f:51:2d:08:0d:62:ad:65:50:ef:4d:da:77:40:31:de:
06:be:c6:c7:94:df:0b:fe:d2:f4:88:c2:5f:59:ac:2d:9d:7f:
85:c1:9b:82:92:65:8f:ad:af:96:2b:39:54:dd:6d:27:45:bb:
a8:41:db:48:9f:de:3c:fc:ff:af:20:ae:d1:fb:34:ba:82:29:
9d:c1:94:7a:cf:cd:e9:82:eb:2a:d8:73:d2:45:13:42:46:ee:
b1:09:b0:01
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZIjGAIa9f627ahpVBx6MAk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwOTI0MDgxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTFlNjVjYzZiMWU1ZmE3ZWYwOWVkMDYzMDEzMDgyYjAwMjhmMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzsBw8vRQ8X+9CGdbIUCRaYW6lHS
wufYRvf6a2sCCZ+33Vzh36bHWfUaWGFGRhy/5StOUenKbV3ys2uqtSFnAcyI0P1x
noASxDjI0RosSN+qKpcqCi8thiNr9DDtFo29DmLjKRj2d+YZ8vYe/ET4JFs+VRN1
FJnS9vG5vEOHni4lJ8yTWTbSjDDoJ7AQec85O8kmaMowFf+xhDNirBBfAgNtl3m4
zj8KuM5DOhQYAKHSXJQ5g5rSliGNKn5kLq0QIp4CSreUkvOXF9ownbn/xHXu33Oe
/RBRKj2qyviQiMe3QbbXxRHkkJA4aE9vxpPti7ap2dpAPgFuVDrJbN0qaQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFNkeZcxrHl+n7wntBjATCCsAKPNuMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvMlI1bHpHc2VYNmZ2Q2UwR01CTUlLd0FvODI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDLhPIAwQF
UFEgAwQFU9+AMAsDAwFV/gMEBlX+gAMEBVu+IAMEBF5l4AMEA23NeAMDAJ+UAwQC
uRtcAwQE2UVwMA0EAgACMAcDBQAqAgYQMA0GCSqGSIb3DQEBCwUAA4IBAQCnzUf0
yNGA12oiVeof6YxZB5IvvTyOPh3cy6IWheVwUPTex8BPai9aouYpi0EpI27Q9R6N
wILHlbFD772NSYtYtmntZBjPDE0DLjukLkJriaN0QLuLZ5B8qPjsiiyhYj6V58a6
KBB9VPze7yYPeNG70u4/S2lMiptewIXcpPsrShiW/jPA8IskOrjPFvf/cpTUOmju
gd30mbB0HiFrwjLAHXxboF9RLQgNYq1lUO9N2ndAMd4GvsbHlN8L/tL0iMJfWawt
nX+FwZuCkmWPra+WKzlU3W0nRbuoQdtIn948/P+vIK7R+zS6gimdwZR6z83pgusq
2HPSRRNCRu6xCbAB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:23 2025 by rpki-client