Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/vYe2ZzdwRtEMVHdnLW2rHivT8RQ.roa
File: vYe2ZzdwRtEMVHdnLW2rHivT8RQ.roa (raw, json)
Hash identifier: KiXjKzXcvFfvltB2DUa0w+EmiRh0okEVi64Eb94XvjA=
Subject key identifier: BD:87:B6:67:37:70:46:D1:0C:54:77:67:2D:6D:AB:1E:2B:D3:F1:14
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018CC2DAEDC8963D9D15F37FC6A886BEC385
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/vYe2ZzdwRtEMVHdnLW2rHivT8RQ.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45012
IP address blocks: 193.22.255.0/24 maxlen: 24
185.80.92.0/24 maxlen: 24
185.80.93.0/24 maxlen: 24
185.80.94.0/23 maxlen: 23
185.137.168.0/22 maxlen: 24
128.127.65.0/24 maxlen: 24
128.127.66.0/24 maxlen: 24
93.90.178.0/24 maxlen: 24
93.90.180.0/23 maxlen: 24
109.237.128.0/20 maxlen: 24
91.203.212.0/22 maxlen: 24
195.82.152.0/23 maxlen: 24
185.207.230.0/24 maxlen: 24
185.207.228.0/22 maxlen: 24
185.207.228.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
89.22.100.0/22 maxlen: 24
89.22.106.0/24 maxlen: 24
89.22.108.0/24 maxlen: 24
89.22.110.0/23 maxlen: 24
89.22.112.0/22 maxlen: 24
89.22.116.0/22 maxlen: 24
89.22.122.0/23 maxlen: 24
89.22.124.0/22 maxlen: 24
91.220.49.0/24 maxlen: 24
194.145.226.0/24 maxlen: 24
91.203.108.0/22 maxlen: 24
178.250.170.0/24 maxlen: 24
178.250.174.0/24 maxlen: 24
37.218.252.0/24 maxlen: 24
37.218.248.0/22 maxlen: 22
37.218.254.0/24 maxlen: 24
178.20.96.0/21 maxlen: 24
188.64.46.0/23 maxlen: 24
5.44.108.0/22 maxlen: 24
192.162.87.0/24 maxlen: 24
31.47.240.0/20 maxlen: 24
46.243.88.0/21 maxlen: 24
81.88.16.0/24 maxlen: 24
81.88.28.0/22 maxlen: 24
185.3.232.0/22 maxlen: 24
81.88.32.0/20 maxlen: 24
5.44.100.0/23 maxlen: 24
5.44.102.0/23 maxlen: 24
5.44.104.0/22 maxlen: 24
2a02:2b80::/32 maxlen: 48
2a00:fa40:2000::/36 maxlen: 64
2a00:fa40:4000::/36 maxlen: 36
2a00:fa40:3000::/36 maxlen: 36
2a01:64c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 12:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ed:c8:96:3d:9d:15:f3:7f:c6:a8:86:be:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd87b667377046d10c5477672d6dab1e2bd3f114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:0e:d9:66:96:f6:e3:a1:b2:42:f6:35:f5:
25:b3:7e:de:ef:3b:bc:2f:f0:24:94:28:0e:3b:8f:
a1:3c:1f:bb:61:1c:6d:40:11:e6:9c:0e:0c:f7:00:
01:af:a1:26:04:13:03:61:d6:39:f3:c5:9e:74:18:
67:dd:05:5e:36:0c:0e:29:ad:26:6c:e2:98:80:38:
1c:52:00:ab:45:0a:3c:b0:34:e2:38:28:1e:63:8c:
34:29:c7:51:35:ac:95:59:5b:be:c7:2c:3f:7b:51:
b1:18:b1:27:78:26:8c:0d:80:10:90:c1:51:4a:65:
2c:3f:b1:ce:69:b3:23:91:6e:91:3a:46:3e:1c:12:
f2:ee:37:aa:85:12:49:4d:ae:40:7f:29:ba:16:d1:
b0:1e:b9:aa:61:1d:53:2f:66:56:97:37:59:e2:3c:
96:e1:f3:2e:36:bc:94:cd:2c:86:17:9b:ef:8d:92:
2c:71:80:94:b2:7c:04:43:ef:b6:1f:0c:c1:8d:9f:
1d:0c:27:79:32:6e:9e:74:58:5f:2c:d2:9d:33:7d:
30:ce:7c:b7:02:b8:6c:cb:cc:a8:e9:10:43:e8:7c:
da:55:86:ec:9a:54:53:b5:44:75:80:a2:47:d5:24:
f1:c8:66:34:eb:ed:4b:60:d7:40:cc:b6:89:95:ec:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:B6:67:37:70:46:D1:0C:54:77:67:2D:6D:AB:1E:2B:D3:F1:14
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/vYe2ZzdwRtEMVHdnLW2rHivT8RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.100.0-5.44.111.255
31.47.240.0/20
37.218.248.0-37.218.252.255
37.218.254.0/24
46.243.88.0/21
81.88.16.0/24
81.88.28.0-81.88.47.255
89.22.100.0/22
89.22.106.0/24
89.22.108.0/24
89.22.110.0-89.22.119.255
89.22.122.0-89.22.127.255
91.203.108.0/22
91.203.212.0/22
91.220.49.0/24
93.90.178.0/24
93.90.180.0/23
109.237.128.0/20
128.127.65.0-128.127.66.255
178.20.96.0/21
178.250.170.0/24
178.250.174.0/24
185.3.232.0/22
185.80.92.0/22
185.137.168.0/22
185.207.228.0/22
188.64.46.0/23
192.162.87.0/24
193.22.255.0/24
194.145.226.0/24
195.5.120.0/23
195.82.152.0/23
IPv6:
2a00:fa40:2000::-2a00:fa40:4fff:ffff:ffff:ffff:ffff:ffff
2a01:64c0::/32
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
2c:a8:30:fd:04:f5:f1:6d:ed:c4:b2:8a:d6:b3:c9:a0:4c:8e:
cf:be:4e:72:de:1c:b1:88:9f:21:11:56:b9:fb:42:78:ae:ad:
88:ba:7d:87:d6:5b:ea:b6:08:30:9d:ba:cc:e6:45:12:6b:7d:
a5:2b:15:95:6d:62:29:9f:8c:74:30:b1:f1:c5:f0:b3:12:23:
5d:15:50:5f:15:0e:4d:88:69:75:57:63:df:18:2b:04:2f:56:
4f:e1:e2:f9:bb:c2:d0:60:22:3d:19:5e:e3:e8:53:9f:42:d4:
54:9b:e0:3f:f4:4d:2f:10:7a:50:50:c8:0e:41:02:2e:cf:d1:
f0:36:3a:a5:ea:aa:b9:3e:23:99:f1:7f:3d:4c:55:c7:b2:04:
8b:7c:d7:5e:36:43:8d:4a:82:2c:a3:8f:6c:36:f5:73:02:96:
27:ce:52:4c:6a:1b:8e:cf:ba:bf:e5:0f:84:ea:aa:b6:6b:4c:
af:d6:0f:04:e8:bf:2a:c5:20:f0:e7:36:b8:d2:4c:d8:af:35:
19:25:26:b9:85:8d:a9:df:23:1b:16:b4:86:4a:d4:fb:6e:50:
2c:cc:49:4a:e9:ed:bb:7a:0c:cf:1c:10:1f:2b:bd:59:b1:22:
50:79:a4:5c:34:55:fc:9c:8a:55:99:b7:a7:b4:96:24:af:92:
20:6a:48:ee
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAYzC2u3Ilj2dFfN/xqiGvsOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDg3YjY2NzM3NzA0NmQxMGM1NDc3NjcyZDZkYWIxZTJiZDNmMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVMO2WaW9uOhskL2NfUls37e7zu8
L/AklCgOO4+hPB+7YRxtQBHmnA4M9wABr6EmBBMDYdY588WedBhn3QVeNgwOKa0m
bOKYgDgcUgCrRQo8sDTiOCgeY4w0KcdRNayVWVu+xyw/e1GxGLEneCaMDYAQkMFR
SmUsP7HOabMjkW6ROkY+HBLy7jeqhRJJTa5Afym6FtGwHrmqYR1TL2ZWlzdZ4jyW
4fMuNryUzSyGF5vvjZIscYCUsnwEQ++2HwzBjZ8dDCd5Mm6edFhfLNKdM30wzny3
Arhsy8yo6RBD6HzaVYbsmlRTtUR1gKJH1STxyGY06+1LYNdAzLaJleyUKQIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFL2Htmc3cEbRDFR3Zy1tqx4r0/EUMB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEvdlllMlp6ZHdSdEVNVkhkbkxXMnJIaXZUOFJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCB9wQCAAEwgfAw
DAMEAgUsZAMEBAUsYAMEBB8v8DAMAwQDJdr4AwQAJdr8AwQAJdr+AwQDLvNYAwQA
UVgQMAwDBAJRWBwDBARRWCADBAJZFmQDBABZFmoDBABZFmwwDAMEAVkWbgMEA1kW
cDAMAwQBWRZ6AwQHWRYAAwQCW8tsAwQCW8vUAwQAW9wxAwQAXVqyAwQBXVq0AwQE
be2AMAwDBACAf0EDBACAf0IDBAOyFGADBACy+qoDBACy+q4DBAK5A+gDBAK5UFwD
BAK5iagDBAK5z+QDBAG8QC4DBADAolcDBADBFv8DBADCkeIDBAHDBXgDBAHDUpgw
JgQCAAIwIDAQAwYFKgD6QCADBgQqAPpAQAMFACoBZMADBQAqAiuAMA0GCSqGSIb3
DQEBCwUAA4IBAQAsqDD9BPXxbe3EsorWs8mgTI7Pvk5y3hyxiJ8hEVa5+0J4rq2I
un2H1lvqtggwnbrM5kUSa32lKxWVbWIpn4x0MLHxxfCzEiNdFVBfFQ5NiGl1V2Pf
GCsEL1ZP4eL5u8LQYCI9GV7j6FOfQtRUm+A/9E0vEHpQUMgOQQIuz9HwNjql6qq5
PiOZ8X89TFXHsgSLfNdeNkONSoIso49sNvVzApYnzlJMahuOz7q/5Q+E6qq2a0yv
1g8E6L8qxSDw5za40kzYrzUZJSa5hY2p3yMbFrSGStT7blAszElK6e27egzPHBAf
K71ZsSJQeaRcNFX8nIpVmbentJYkr5Igakju
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org