Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/mGBlbA3XpoTFZUfzkUcgta2F8iw.roa
File: mGBlbA3XpoTFZUfzkUcgta2F8iw.roa (raw, json)
Hash identifier: GjCF7JnWLcaA4JnDcn7R72f2su0xNxRNzhjMsv+fiYA=
Subject key identifier: 98:60:65:6C:0D:D7:A6:84:C5:65:47:F3:91:47:20:B5:AD:85:F2:2C
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01909BD56EE56CCD81BFE9ED3A23771F7FFE
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/mGBlbA3XpoTFZUfzkUcgta2F8iw.roa
Signing time: Wed 10 Jul 2024 08:49:34 +0000
ROA not before: Wed 10 Jul 2024 08:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16371
IP address blocks: 45.6.48.0/22 maxlen: 23
77.240.112.0/20 maxlen: 20
77.240.112.0/21 maxlen: 21
77.240.120.0/21 maxlen: 21
77.240.124.0/23 maxlen: 23
77.240.124.0/24 maxlen: 24
77.240.125.0/24 maxlen: 24
77.240.126.0/24 maxlen: 24
79.139.120.0/21 maxlen: 21
79.139.120.0/22 maxlen: 22
79.139.124.0/22 maxlen: 22
82.194.64.0/19 maxlen: 19
82.194.64.0/20 maxlen: 20
82.194.64.0/24 maxlen: 24
82.194.80.0/20 maxlen: 20
85.187.56.0/22 maxlen: 22
85.187.56.0/23 maxlen: 23
85.187.58.0/23 maxlen: 23
86.109.96.0/19 maxlen: 19
86.109.96.0/20 maxlen: 20
86.109.97.0/24 maxlen: 24
86.109.99.0/24 maxlen: 24
86.109.102.0/24 maxlen: 24
86.109.112.0/20 maxlen: 20
86.109.124.0/22 maxlen: 22
86.109.124.0/23 maxlen: 23
86.109.126.0/23 maxlen: 23
87.238.88.0/21 maxlen: 22
89.17.192.0/20 maxlen: 20
89.17.192.0/21 maxlen: 21
89.17.200.0/21 maxlen: 21
89.17.208.0/20 maxlen: 20
89.17.208.0/21 maxlen: 21
89.17.216.0/21 maxlen: 21
89.37.224.0/23 maxlen: 23
89.37.224.0/24 maxlen: 24
89.37.225.0/24 maxlen: 24
93.90.16.0/20 maxlen: 20
93.90.16.0/21 maxlen: 21
93.90.24.0/21 maxlen: 21
93.90.28.0/22 maxlen: 22
93.90.28.0/23 maxlen: 23
93.90.30.0/23 maxlen: 23
109.70.32.0/21 maxlen: 21
109.70.32.0/22 maxlen: 22
109.70.32.0/24 maxlen: 24
109.70.36.0/22 maxlen: 22
176.28.96.0/19 maxlen: 19
176.28.96.0/20 maxlen: 20
176.28.97.0/24 maxlen: 24
176.28.103.0/24 maxlen: 24
176.28.112.0/20 maxlen: 20
176.28.119.0/24 maxlen: 24
176.28.126.0/23 maxlen: 23
176.28.126.0/24 maxlen: 24
176.28.127.0/24 maxlen: 24
185.2.68.0/22 maxlen: 22
185.2.68.0/24 maxlen: 24
185.2.69.0/24 maxlen: 24
185.2.70.0/23 maxlen: 23
185.78.24.0/22 maxlen: 23
194.116.184.0/23 maxlen: 23
194.116.184.0/24 maxlen: 24
194.116.185.0/24 maxlen: 24
213.149.224.0/20 maxlen: 20
213.149.224.0/21 maxlen: 21
213.149.232.0/21 maxlen: 21
213.149.240.0/20 maxlen: 20
213.149.240.0/21 maxlen: 21
213.149.248.0/21 maxlen: 21
217.116.0.0/20 maxlen: 20
217.116.0.0/21 maxlen: 21
217.116.0.0/24 maxlen: 24
217.116.2.0/24 maxlen: 24
217.116.8.0/21 maxlen: 21
217.116.15.0/24 maxlen: 24
217.116.16.0/20 maxlen: 20
217.116.16.0/21 maxlen: 21
217.116.18.0/24 maxlen: 24
217.116.24.0/21 maxlen: 21
217.116.27.0/24 maxlen: 24
217.116.28.0/24 maxlen: 24
2a02:3b8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:d5:6e:e5:6c:cd:81:bf:e9:ed:3a:23:77:1f:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jul 10 08:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9860656c0dd7a684c56547f3914720b5ad85f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:9a:1c:0f:7f:d9:c8:b7:2f:2b:ec:aa:cd:
f2:d9:54:b1:a0:2b:b9:8f:58:9f:98:a9:d7:5e:00:
4e:73:6a:55:36:64:1e:d9:26:2c:0d:42:5e:5f:c1:
fd:95:7d:ed:6c:65:ac:ea:99:1b:93:15:03:03:35:
a6:d2:98:f2:30:a3:82:e0:e0:d5:28:8d:0d:3d:21:
92:7e:e5:cf:99:e7:b4:12:f6:0f:f0:af:a0:00:db:
7e:a7:97:82:9b:80:d5:82:84:82:8b:8f:45:17:56:
8c:d2:df:50:c7:86:d0:20:ea:29:31:78:e7:96:e5:
52:27:99:67:0c:66:3b:ae:d3:7c:71:a5:c8:f1:cc:
10:8e:34:75:08:df:63:82:7d:61:6c:33:da:7b:6b:
75:bc:33:28:bc:4d:f4:b0:92:ae:b5:bf:d6:93:54:
6a:54:e5:b8:d9:13:2a:04:32:34:dd:ea:ae:1e:3b:
05:70:d1:7f:4c:27:f9:a4:a2:8a:0b:24:b2:ab:1f:
51:f7:4f:a2:09:7e:42:84:12:f8:f4:38:75:64:32:
06:01:b0:7b:4f:60:1a:ac:9e:38:ac:5a:e0:f5:51:
38:f3:83:9a:11:ba:dd:2e:84:75:f8:01:bd:df:1b:
07:de:b4:5e:b7:f3:85:f5:52:b6:a2:16:be:2d:67:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:65:6C:0D:D7:A6:84:C5:65:47:F3:91:47:20:B5:AD:85:F2:2C
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/mGBlbA3XpoTFZUfzkUcgta2F8iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
77.240.112.0/20
79.139.120.0/21
82.194.64.0/19
85.187.56.0/22
86.109.96.0/19
87.238.88.0/21
89.17.192.0/19
89.37.224.0/23
93.90.16.0/20
109.70.32.0/21
176.28.96.0/19
185.2.68.0/22
185.78.24.0/22
194.116.184.0/23
213.149.224.0/19
217.116.0.0/19
IPv6:
2a02:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
47:41:75:b9:9c:37:88:12:8f:5e:ea:f9:3f:b8:e9:0b:ca:2f:
c8:fa:dc:56:28:dd:91:a6:23:c7:f3:05:4d:79:13:b2:fb:38:
97:4a:98:68:70:db:b6:fe:ee:ed:74:af:6d:2f:1e:f8:33:e7:
84:36:a4:8d:ac:1f:8e:5a:fd:87:23:2e:83:af:7a:62:6b:e0:
e2:fa:96:c5:43:c4:fa:dc:c8:70:80:4d:ca:f9:1f:fc:29:72:
a8:f8:04:32:60:d1:89:9f:e1:65:e0:7e:73:be:97:5b:77:d8:
ca:55:3e:ff:52:c0:d3:71:8a:f6:b1:81:0f:bd:40:46:16:c8:
b9:d1:39:54:6a:ca:7b:11:13:dc:64:7f:ba:28:5e:e2:4e:c2:
da:22:fa:45:ee:f1:a3:93:a3:d3:02:4a:9a:4c:04:b8:dc:04:
0e:81:76:1a:d2:b5:38:cd:12:42:86:0f:b3:da:b0:f3:6b:38:
c8:c3:04:bb:5c:01:c1:86:20:66:ff:5a:34:e1:23:42:35:e1:
53:e0:4b:d0:63:e5:0d:79:9a:19:d0:15:79:bf:a7:c6:0d:1f:
eb:ba:68:a6:d0:68:4b:cc:a8:f1:8f:8d:63:a4:93:96:1b:25:
31:78:07:a3:a6:4e:e5:1f:ed:1b:a4:5c:da:13:98:db:e1:a1:
8b:0b:75:2a
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZCb1W7lbM2Bv+ntOiN3H3/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjQwNzEwMDg0OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODYwNjU2YzBkZDdhNjg0YzU2NTQ3ZjM5MTQ3MjBiNWFkODVmMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH+aHA9/2ci3Lyvsqs3y2VSxoCu5
j1ifmKnXXgBOc2pVNmQe2SYsDUJeX8H9lX3tbGWs6pkbkxUDAzWm0pjyMKOC4ODV
KI0NPSGSfuXPmee0EvYP8K+gANt+p5eCm4DVgoSCi49FF1aM0t9Qx4bQIOopMXjn
luVSJ5lnDGY7rtN8caXI8cwQjjR1CN9jgn1hbDPae2t1vDMovE30sJKutb/Wk1Rq
VOW42RMqBDI03equHjsFcNF/TCf5pKKKCySyqx9R90+iCX5ChBL49Dh1ZDIGAbB7
T2AarJ44rFrg9VE484OaEbrdLoR1+AG93xsH3rRet/OF9VK2oha+LWcZpwIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFJhgZWwN16aExWVH85FHILWthfIsMB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvbUdCbGJBM1hwb1RGWlVmemtVY2d0YTJGOGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAi0GMAME
BE3wcAMEA0+LeAMEBVLCQAMEAlW7OAMEBVZtYAMEA1fuWAMEBVkRwAMEAVkl4AME
BF1aEAMEA21GIAMEBbAcYAMEArkCRAMEArlOGAMEAcJ0uAMEBdWV4AMEBdl0ADAN
BAIAAjAHAwUAKgIDuDANBgkqhkiG9w0BAQsFAAOCAQEAR0F1uZw3iBKPXur5P7jp
C8ovyPrcVijdkaYjx/MFTXkTsvs4l0qYaHDbtv7u7XSvbS8e+DPnhDakjawfjlr9
hyMug696Ymvg4vqWxUPE+tzIcIBNyvkf/ClyqPgEMmDRiZ/hZeB+c76XW3fYylU+
/1LA03GK9rGBD71ARhbIudE5VGrKexET3GR/uihe4k7C2iL6Re7xo5Oj0wJKmkwE
uNwEDoF2GtK1OM0SQoYPs9qw82s4yMMEu1wBwYYgZv9aNOEjQjXhU+BL0GPlDXma
GdAVeb+nxg0f67poptBoS8yo8Y+NY6STlhslMXgHo6ZO5R/tG6Rc2hOY2+Ghiwt1
Kg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:33 2025 by rpki-client