Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/Iz1Gws7ql3b-HvTPwj8KYjTI5lg.roa
File: Iz1Gws7ql3b-HvTPwj8KYjTI5lg.roa (raw, json)
Hash identifier: SOD/dHGqO9GvOiWlebSWywBPbBVSQTb4nR0PBUrKB40=
Subject key identifier: 23:3D:46:C2:CE:EA:97:76:FE:1E:F4:CF:C2:3F:0A:62:34:C8:E6:58
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 018FC30C1EFC653A9D57A8C911681A7EB3BD
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/Iz1Gws7ql3b-HvTPwj8KYjTI5lg.roa
Signing time: Wed 29 May 2024 06:31:42 +0000
ROA not before: Wed 29 May 2024 06:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199610
IP address blocks: 5.62.64.0/23 maxlen: 23
5.62.66.0/24 maxlen: 24
5.62.67.0/24 maxlen: 24
5.62.68.0/22 maxlen: 22
5.62.96.0/20 maxlen: 20
5.62.112.0/24 maxlen: 24
5.62.113.0/24 maxlen: 24
5.62.114.0/24 maxlen: 24
5.62.115.0/24 maxlen: 24
5.62.116.0/24 maxlen: 24
5.62.117.0/24 maxlen: 24
5.62.118.0/24 maxlen: 24
5.62.119.0/24 maxlen: 24
5.62.120.0/24 maxlen: 24
5.62.121.0/24 maxlen: 24
5.62.122.0/24 maxlen: 24
5.62.123.0/24 maxlen: 24
5.62.124.0/23 maxlen: 23
5.62.126.0/24 maxlen: 24
5.62.127.0/24 maxlen: 24
5.83.160.0/22 maxlen: 22
5.83.164.0/23 maxlen: 23
5.83.166.0/24 maxlen: 24
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.172.0/23 maxlen: 23
5.83.174.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
31.214.128.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.160.0/24 maxlen: 24
31.214.161.0/24 maxlen: 24
31.214.162.0/24 maxlen: 24
31.214.163.0/24 maxlen: 24
31.214.164.0/22 maxlen: 22
31.214.192.0/22 maxlen: 22
31.214.196.0/22 maxlen: 22
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/23 maxlen: 23
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.220.0/23 maxlen: 23
31.214.224.0/22 maxlen: 22
31.214.232.0/21 maxlen: 21
37.10.96.0/21 maxlen: 21
37.10.103.0/24 maxlen: 24
37.10.104.0/23 maxlen: 23
37.10.106.0/24 maxlen: 24
37.10.107.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.118.0/24 maxlen: 24
37.10.119.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.124.0/22 maxlen: 22
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
45.159.4.0/23 maxlen: 23
45.159.6.0/24 maxlen: 24
45.159.7.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.231.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
46.251.234.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
46.251.248.0/24 maxlen: 24
85.190.128.0/23 maxlen: 23
85.190.130.0/23 maxlen: 23
85.190.132.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.136.0/24 maxlen: 24
85.190.137.0/24 maxlen: 24
85.190.138.0/23 maxlen: 23
85.190.140.0/22 maxlen: 22
85.190.144.0/24 maxlen: 24
85.190.145.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
85.190.154.0/23 maxlen: 23
85.190.156.0/23 maxlen: 23
85.190.158.0/24 maxlen: 24
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.164.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
85.190.172.0/22 maxlen: 22
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
95.156.198.0/24 maxlen: 24
95.156.209.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
95.156.211.0/24 maxlen: 24
95.156.213.0/24 maxlen: 24
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
109.230.214.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
109.230.243.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
134.255.198.0/24 maxlen: 24
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
185.9.104.0/22 maxlen: 22
194.169.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
217.114.192.0/21 maxlen: 21
2a03:4d40::/32 maxlen: 32
2a03:4d40:10::/48 maxlen: 48
2a03:4d40:20::/48 maxlen: 48
2a03:4d40:30::/48 maxlen: 48
2a03:4d40:40::/48 maxlen: 48
2a03:4d40:50::/48 maxlen: 48
2a03:4d40:60::/48 maxlen: 48
2a03:4d40:70::/48 maxlen: 48
2a03:4d40:80::/48 maxlen: 48
2a03:4d40:90::/48 maxlen: 48
2a03:4d40:a0::/48 maxlen: 48
2a03:4d41::/40 maxlen: 40
2a03:4d41::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:100::/44 maxlen: 44
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:300::/40 maxlen: 40
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:500::/40 maxlen: 40
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d41:900::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d44:800::/37 maxlen: 37
2a03:4d45::/37 maxlen: 37
2a03:4d45:800::/37 maxlen: 37
2a03:4d47::/48 maxlen: 48
2a03:4d47:800::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 11:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:0c:1e:fc:65:3a:9d:57:a8:c9:11:68:1a:7e:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: May 29 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=233d46c2ceea9776fe1ef4cfc23f0a6234c8e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:e5:c7:2b:c7:e1:17:43:b3:c4:95:12:32:
45:ae:f9:20:21:ed:00:88:49:11:f9:ae:3c:6c:83:
91:48:aa:33:11:b7:6f:92:8e:7a:d6:04:7e:8c:d2:
ee:4b:52:a9:53:16:56:58:3f:c3:c6:b0:8f:93:8f:
9a:be:cc:00:9c:7e:93:92:e5:b0:a9:13:96:d5:2f:
16:a4:ce:a3:3f:0d:c9:09:15:de:9c:e4:b3:c5:17:
34:84:e5:00:13:1b:d3:6b:aa:ac:55:43:ef:a1:c0:
b4:b5:99:8e:23:83:e7:99:6b:14:71:c3:f8:3d:3b:
fb:77:f1:4e:1f:1a:12:f0:f9:30:42:29:25:47:37:
61:d2:4d:d4:92:71:fa:d4:9c:d8:a8:29:a8:3d:50:
0b:24:0f:89:e8:91:9a:59:dc:15:98:4e:7c:79:27:
71:48:7b:a3:03:d8:7f:3e:ad:11:92:5e:e7:df:cf:
c9:bd:3b:7b:63:5d:51:d7:7c:cc:d1:76:4e:de:ba:
03:70:86:26:e3:97:17:db:59:5f:d3:10:6c:4e:56:
69:12:a6:ba:48:04:ee:21:71:14:5d:f9:02:93:b4:
20:f8:ba:f3:1f:1a:bb:90:80:44:ec:b1:56:fe:2f:
f4:d8:1c:c7:fb:79:9b:c2:36:72:a4:5d:62:b8:a0:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:46:C2:CE:EA:97:76:FE:1E:F4:CF:C2:3F:0A:62:34:C8:E6:58
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/Iz1Gws7ql3b-HvTPwj8KYjTI5lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0/20
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.167.255
31.214.192.0/21
31.214.202.0-31.214.211.255
31.214.216.0-31.214.221.255
31.214.224.0/22
31.214.232.0/21
37.10.96.0-37.10.107.255
37.10.115.0/24
37.10.118.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0-46.251.248.255
85.190.128.0-85.190.150.255
85.190.152.0-85.190.175.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/32
2a03:4d43:800::/37
2a03:4d44:800::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
04:23:42:8d:32:24:a4:ea:39:e2:4e:de:46:29:7d:b5:14:ec:
6c:11:4c:c1:11:e8:b4:b6:e5:fb:86:3d:8f:fb:83:7c:47:9a:
ac:be:9f:63:c4:f3:68:e9:aa:64:14:0f:a1:16:fb:c7:94:2b:
92:fa:7f:11:0a:ad:b0:c3:d8:c8:01:5c:43:2e:f5:3d:5d:ef:
3a:e0:db:44:b6:b9:10:f3:97:66:35:9f:e3:c4:ec:9f:48:71:
64:94:ef:8b:90:63:fd:3d:9a:78:21:00:eb:f1:83:f2:8e:ad:
f0:05:c5:2c:a5:9c:af:3d:35:a0:fa:80:f0:c3:9b:c5:e8:8e:
e0:d1:70:fe:4f:bd:9f:b5:e1:21:06:ea:53:e6:6d:0a:3c:4d:
37:64:bb:79:fc:a1:d5:88:1e:53:98:08:9d:a7:e0:27:d7:7b:
7b:0a:99:cd:67:77:e6:c1:96:89:70:6f:61:99:ed:b5:c8:b4:
ff:23:c7:7a:e5:c9:fc:48:a5:1b:f0:22:fd:19:95:75:2a:df:
29:cc:80:3b:74:6d:f5:1a:b0:3a:bd:54:2a:19:5e:14:4e:10:
74:f5:65:61:00:10:f0:13:7a:a2:fd:72:6b:2c:d6:b5:72:cb:
c8:5e:9a:42:9c:3d:3b:05:a6:b1:96:4f:85:ce:df:43:e3:0e:
9f:b5:74:81
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgISAY/DDB78ZTqdV6jJEWgafrO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjQwNTI5MDYzMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzNkNDZjMmNlZWE5Nzc2ZmUxZWY0Y2ZjMjNmMGE2MjM0YzhlNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf/lxyvH4RdDs8SVEjJFrvkgIe0A
iEkR+a48bIORSKozEbdvko561gR+jNLuS1KpUxZWWD/DxrCPk4+avswAnH6TkuWw
qROW1S8WpM6jPw3JCRXenOSzxRc0hOUAExvTa6qsVUPvocC0tZmOI4PnmWsUccP4
PTv7d/FOHxoS8PkwQiklRzdh0k3UknH61JzYqCmoPVALJA+J6JGaWdwVmE58eSdx
SHujA9h/Pq0Rkl7n38/JvTt7Y11R13zM0XZO3roDcIYm45cX21lf0xBsTlZpEqa6
SATuIXEUXfkCk7Qg+LrzHxq7kIBE7LFW/i/02BzH+3mbwjZypF1iuKCJeQIDAQAB
o4ID/zCCA/swHQYDVR0OBBYEFCM9RsLO6pd2/h70z8I/CmI0yOZYMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvSXoxR3dzN3FsM2ItSHZUUHdqOEtZalRJNWxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEwYIKwYBBQUHAQcBAf8EggICMIIB/jCCAagEAgABMIIB
oAMEAwU+QAMEBQU+YAMEBAVToAMEAwVloAMEAB/WgAMEAR/WgjAMAwQBH9aGAwQA
H9aIAwQBH9aOAwQAH9aUMAwDBAEf1p4DBAMf1qADBAMf1sAwDAMEAR/WygMEAh/W
0DAMAwQDH9bYAwQBH9bcAwQCH9bgAwQDH9boMAwDBAUlCmADBAIlCmgDBAAlCnMw
DAMEASUKdgMEByUKAAMEAS2MgAMEAC2MgwMEAi2fBAMEAS775DAMAwQALvvnAwQA
LvvsAwQALvvuMAwDBAQu+/ADBAAu+/gwDAMEB1W+gAMEAFW+ljAMAwQDVb6YAwQE
Vb6gMAwDBABfnMEDBABfnMIDBABfnMYwDAMEAF+c0QMEAl+c0AMEAF+c1QMEAV+c
3AMEAF+c4AMEAV+c7gMEAF+c+gMEAG3mxQMEAG3m0AMEAG3m0wMEAG3m1gMEAW3m
8AMEAG3m8wMEAW3m+AMEAoAAcAMEAIb/xgMEAYb/0DAMAwQChv/UAwQAhv/WAwQA
hv/wAwQAhv/7AwQCuQloAwQAwqnTAwQBw1KeAwQD2XLAMFAEAgACMEowDwMFBioD
TUADBgAqA01BBgMGACoDTUEJAwUAKgNNQgMGAyoDTUMIAwYDKgNNRAgDBgQqA01F
AAMHACoDTUcAAAMHACoDTUcIADANBgkqhkiG9w0BAQsFAAOCAQEABCNCjTIkpOo5
4k7eRil9tRTsbBFMwRHotLbl+4Y9j/uDfEearL6fY8TzaOmqZBQPoRb7x5Qrkvp/
EQqtsMPYyAFcQy71PV3vOuDbRLa5EPOXZjWf48Tsn0hxZJTvi5Bj/T2aeCEA6/GD
8o6t8AXFLKWcrz01oPqA8MObxeiO4NFw/k+9n7XhIQbqU+ZtCjxNN2S7efyh1Yge
U5gInafgJ9d7ewqZzWd35sGWiXBvYZnttci0/yPHeuXJ/EilG/Ai/RmVdSrfKcyA
O3Rt9RqwOr1UKhleFE4QdPVlYQAQ8BN6ov1yayzWtXLLyF6aQpw9OwWmsZZPhc7f
Q+MOn7V0gQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:22 2024 by rpki-client on console-ams.rpki-client.org