Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/SSW8qAHiYTu0BFEau1TrsNeJJ90.roa
File: SSW8qAHiYTu0BFEau1TrsNeJJ90.roa (raw, json)
Hash identifier: DOK4bOBplpEIiV82gFm9/EEWBQgA+9SobrgqKXL4DQU=
Subject key identifier: 49:25:BC:A8:01:E2:61:3B:B4:04:51:1A:BB:54:EB:B0:D7:89:27:DD
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01870C370BBE66EBAD5E5511AB9A5220E4DE
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/SSW8qAHiYTu0BFEau1TrsNeJJ90.roa
Signing time: Thu 23 Mar 2023 02:05:46 +0000
ROA not before: Thu 23 Mar 2023 02:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 213.127.128.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.160.252.0/22 maxlen: 22
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.46.128.0/17 maxlen: 17
62.195.0.0/16 maxlen: 16
212.187.64.0/18 maxlen: 18
62.194.0.0/16 maxlen: 16
62.194.0.0/15 maxlen: 15
213.93.0.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
212.187.0.0/18 maxlen: 18
212.187.0.0/17 maxlen: 17
80.113.0.0/17 maxlen: 17
80.113.0.0/16 maxlen: 16
213.126.128.0/18 maxlen: 18
213.126.128.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
213.127.0.0/17 maxlen: 17
213.127.0.0/16 maxlen: 16
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.126.192.0/18 maxlen: 18
77.248.0.0/15 maxlen: 15
77.248.0.0/14 maxlen: 14
213.46.0.0/17 maxlen: 17
213.46.0.0/16 maxlen: 16
24.132.128.0/17 maxlen: 17
80.85.32.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
89.99.0.0/16 maxlen: 16
217.105.224.0/20 maxlen: 20
217.105.224.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
217.104.192.0/18 maxlen: 18
89.98.0.0/16 maxlen: 16
89.98.0.0/15 maxlen: 15
213.124.160.0/20 maxlen: 20
213.124.160.0/19 maxlen: 19
213.124.176.0/20 maxlen: 20
217.104.128.0/18 maxlen: 18
217.104.128.0/17 maxlen: 17
213.124.192.0/19 maxlen: 19
213.124.192.0/18 maxlen: 18
24.132.0.0/17 maxlen: 17
24.132.0.0/16 maxlen: 16
217.105.32.0/19 maxlen: 19
178.85.0.0/16 maxlen: 16
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
31.151.0.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
95.97.0.0/16 maxlen: 16
178.84.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
31.151.128.0/17 maxlen: 17
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
217.63.160.0/19 maxlen: 19
212.178.48.0/20 maxlen: 20
185.137.202.0/23 maxlen: 23
185.137.200.0/23 maxlen: 23
185.137.200.0/22 maxlen: 22
80.57.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.0.0/16 maxlen: 16
95.96.0.0/16 maxlen: 16
95.96.0.0/15 maxlen: 15
62.163.128.0/17 maxlen: 17
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
217.103.128.0/17 maxlen: 17
212.83.80.0/20 maxlen: 20
80.56.0.0/16 maxlen: 16
80.56.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
217.102.64.0/18 maxlen: 18
217.102.0.0/18 maxlen: 18
217.102.0.0/17 maxlen: 17
46.129.0.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.128.0/17 maxlen: 17
62.163.0.0/17 maxlen: 17
62.163.0.0/16 maxlen: 16
81.175.96.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.0.0/19 maxlen: 19
62.108.16.0/20 maxlen: 20
92.108.0.0/15 maxlen: 15
92.108.0.0/14 maxlen: 14
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
185.94.92.0/22 maxlen: 22
81.175.64.0/19 maxlen: 19
81.175.64.0/18 maxlen: 18
77.250.0.0/15 maxlen: 15
2a02:a200::/28 maxlen: 28
2a02:a200::/27 maxlen: 27
2a03:4aa0::/29 maxlen: 29
2a02:a210::/28 maxlen: 28
Validation: Failed, certificate revoked on Mon 05 Jun 2023 11:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:37:0b:be:66:eb:ad:5e:55:11:ab:9a:52:20:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 23 02:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4925bca801e2613bb404511abb54ebb0d78927dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:7d:dc:83:59:77:c1:3d:a1:8c:d1:c8:bb:
91:c2:2e:f0:01:eb:b7:fc:b1:8a:53:ef:cd:a8:d8:
38:d0:54:81:26:f2:54:ff:99:a2:0e:28:2e:da:5a:
33:73:fe:87:dc:8c:18:54:87:b8:2a:8c:ff:6e:36:
5c:2d:2d:e0:f3:5e:d0:8b:50:62:a2:db:25:72:c8:
02:66:e9:1e:a5:41:6f:21:cc:68:a5:79:10:86:96:
ac:9f:01:20:63:c4:5d:25:b1:ac:ca:30:8b:7b:1d:
c4:77:c6:da:bf:23:80:0d:fa:81:96:a5:3b:e4:1f:
00:35:37:6c:d7:24:53:e4:5a:4a:d0:90:38:b6:7f:
ea:7a:8b:3e:e3:ec:d3:e2:95:73:e2:98:ed:ec:b8:
71:d6:a7:f4:2e:19:1c:dd:17:80:d4:19:ff:f0:bc:
7e:6b:b0:05:ca:6d:4a:f7:34:4f:4a:3e:a4:8f:4b:
a5:4d:96:e0:dc:71:cc:41:ab:89:86:9b:c1:b6:f4:
19:d0:59:20:b9:c6:a1:8d:e2:39:44:f5:5b:08:4b:
3a:05:d0:3f:9f:fe:3b:70:79:56:6f:37:c1:33:40:
85:fe:03:e4:c8:e7:20:e3:b1:f9:31:8b:f7:dc:4f:
10:43:ac:c4:4d:a8:57:96:4e:f4:7b:69:3c:9b:1f:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:BC:A8:01:E2:61:3B:B4:04:51:1A:BB:54:EB:B0:D7:89:27:DD
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/SSW8qAHiYTu0BFEau1TrsNeJJ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
81.175.64.0/18
89.98.0.0/15
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
IPv6:
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
86:00:33:14:9f:d0:4a:7c:48:27:40:bc:15:63:7e:36:2a:6c:
b8:1a:96:a6:2e:de:0a:04:24:96:ab:d2:8e:b9:33:64:9d:9d:
41:9d:a3:9f:e7:18:15:bc:0e:82:b0:b0:66:ba:16:10:33:fd:
e2:0a:d9:1a:28:02:b9:33:4a:8c:47:59:5f:23:c9:66:f3:a3:
9c:7f:83:47:18:65:fb:7a:10:13:a0:2c:3f:be:a9:77:8e:c9:
63:56:ad:4b:d1:56:c6:17:7b:21:e0:44:f4:f0:ae:1f:68:8c:
b0:0f:f4:5f:16:3e:bb:43:e5:8b:2d:11:43:17:b4:44:e6:d9:
5e:41:59:04:1f:30:0b:5e:61:c0:5d:41:80:71:71:bb:29:a5:
b9:45:ec:03:e3:f5:69:c3:34:a3:64:ab:bf:e1:0d:ff:b2:82:
f3:46:58:43:5e:c9:f3:3e:f1:29:74:1c:82:23:9b:12:4c:7e:
e5:62:1e:c1:6e:42:62:a5:f2:b9:a8:73:e3:52:cd:30:88:12:
b8:d5:ce:a7:78:c7:04:77:c3:37:52:17:c1:be:88:39:74:dd:
6a:4d:d8:d0:29:3d:6b:e2:20:6e:7d:ad:97:c6:ea:b7:7d:f0:
ff:53:8e:85:f6:36:5d:0b:fb:0b:66:1b:99:fb:25:c5:09:ec:
cb:3a:86:50
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAYcMNwu+ZuutXlURq5pSIOTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjMwMzIzMDIwNTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTI1YmNhODAxZTI2MTNiYjQwNDUxMWFiYjU0ZWJiMGQ3ODkyN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS993INZd8E9oYzRyLuRwi7wAeu3
/LGKU+/NqNg40FSBJvJU/5miDigu2lozc/6H3IwYVIe4Koz/bjZcLS3g817Qi1Bi
otslcsgCZukepUFvIcxopXkQhpasnwEgY8RdJbGsyjCLex3Ed8bavyOADfqBlqU7
5B8ANTds1yRT5FpK0JA4tn/qeos+4+zT4pVz4pjt7Lhx1qf0Lhkc3ReA1Bn/8Lx+
a7AFym1K9zRPSj6kj0ulTZbg3HHMQauJhpvBtvQZ0FkgucahjeI5RPVbCEs6BdA/
n/47cHlWbzfBM0CF/gPkyOcg47H5MYv33E8QQ6zETahXlk70e2k8mx82xwIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFEklvKgB4mE7tARRGrtU67DXiSfdMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEvU1NXOHFBSGlZVHUwQkZFYXUxVHJzTmVKSjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH6BggrBgEFBQcBBwEB/wSB6jCB5zCBzgQCAAEwgccDAwAY
hAMDAB+XAwMALoEDBAU+bAADAwA+owMDAT7CAwMCTfgDAwFQOAMEBFBVIAMDAFBx
AwQGUa9AAwMBWWIDAwJcbAMDAV9gAwMBslQDBAK5XlwDBAK5icgDBAXUU0ADBAXU
siADBAfUuwADBAXVIgADAwDVLgMDANVdMAsDBAXVfKADAwDVfDALAwQH1X6AAwMH
1QADBAXVoMADBAPVoPgDBAbZP4ADBAfZZgADAwDZZzAMAwQH2WiAAwQG2WkAAwQF
2WngMBQEAgACMA4DBQUqAqIAAwUDKgNKoDANBgkqhkiG9w0BAQsFAAOCAQEAhgAz
FJ/QSnxIJ0C8FWN+NipsuBqWpi7eCgQklqvSjrkzZJ2dQZ2jn+cYFbwOgrCwZroW
EDP94grZGigCuTNKjEdZXyPJZvOjnH+DRxhl+3oQE6AsP76pd47JY1atS9FWxhd7
IeBE9PCuH2iMsA/0XxY+u0Pliy0RQxe0RObZXkFZBB8wC15hwF1BgHFxuymluUXs
A+P1acM0o2Srv+EN/7KC80ZYQ17J8z7xKXQcgiObEkx+5WIewW5CYqXyuahz41LN
MIgSuNXOp3jHBHfDN1IXwb6IOXTdak3Y0Ck9a+Igbn2tl8bqt33w/1OOhfY2XQv7
C2YbmfslxQnsyzqGUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org