Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_d1UyrZ0GVUao3BcB6ZA7kE7RHU.roa
File: _d1UyrZ0GVUao3BcB6ZA7kE7RHU.roa (raw, json)
Hash identifier: 71XEaLotH6iLjwv5Dkgfnjk/Y3SY2waokABEAW9weYE=
Subject key identifier: FD:DD:54:CA:B6:74:19:55:1A:A3:70:5C:07:A6:40:EE:41:3B:44:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019173F9E6F0CB298243592CEFB4BE84AE74
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_d1UyrZ0GVUao3BcB6ZA7kE7RHU.roa
Signing time: Wed 21 Aug 2024 08:07:22 +0000
ROA not before: Wed 21 Aug 2024 08:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.253.56.0/22 maxlen: 24
31.13.247.0/24 maxlen: 24
31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.216.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
94.125.100.0/22 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.184.0/22 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
193.168.196.0/22 maxlen: 24
194.113.36.0/22 maxlen: 24
212.87.220.0/22 maxlen: 24
212.87.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:f9:e6:f0:cb:29:82:43:59:2c:ef:b4:be:84:ae:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 21 08:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fddd54cab67419551aa3705c07a640ee413b4475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:0c:c9:f6:40:1c:ec:b2:88:63:70:53:02:
17:cb:67:ae:25:9e:c5:95:2f:2f:88:3f:19:51:49:
a9:f0:fa:7f:aa:bd:9b:6e:98:bf:5f:4f:e9:16:f7:
5f:31:76:49:68:a9:1a:dd:e3:22:3e:8c:08:e6:b5:
22:16:35:0d:b6:cf:5b:02:30:7f:c6:27:af:87:47:
02:9b:5d:47:6a:55:35:dd:19:d4:58:f0:ff:45:82:
9a:1b:12:4f:ef:c7:44:f8:c0:ad:10:a3:25:72:23:
47:20:48:b9:a0:68:e3:b9:45:87:71:02:f4:4f:dd:
2e:7a:b5:c1:cd:18:90:57:ed:b9:a6:7c:3d:a8:90:
ad:35:09:c3:35:53:ae:44:2f:30:bd:68:5f:88:b4:
5f:0d:0f:36:0b:06:d0:12:42:6a:b8:ef:17:63:cb:
64:25:0c:89:e9:e7:9d:f8:57:d1:28:ee:ed:a7:46:
55:6c:33:ff:d2:d1:87:fa:58:0a:5b:ff:77:f4:8a:
4c:b5:2a:2d:07:5d:0b:66:01:90:e5:9f:a8:17:3c:
f7:50:f5:ac:45:9a:2e:5d:6e:09:c1:df:b8:97:b3:
61:75:40:df:48:b5:c9:5d:84:85:f8:6c:f8:01:c5:
0d:d2:d9:9a:19:22:be:6c:46:a4:be:eb:17:26:df:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:54:CA:B6:74:19:55:1A:A3:70:5C:07:A6:40:EE:41:3B:44:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_d1UyrZ0GVUao3BcB6ZA7kE7RHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.247.0/24
31.169.124.0/22
37.139.128.0/24
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.84.88.0/24
45.88.66.0/23
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
85.209.134.0/24
87.120.36.0/24
87.120.88.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.98.0/24
87.121.216.0/22
91.92.21.0/24
93.123.30.0/23
94.125.100.0/22
94.156.236.0/24
109.206.236.0/24
109.206.240.0/22
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.137.0-185.218.138.255
185.246.220.0-185.246.222.255
185.252.179.0/24
193.8.184.0/22
193.47.60.0/23
193.148.56.0/22
193.168.196.0/22
194.113.36.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
59:24:38:04:02:4c:46:44:ac:d4:84:2c:4d:68:c9:ee:9a:d5:
a1:6a:48:f1:08:16:a9:fa:8a:e3:de:77:9c:5b:9d:08:b9:2a:
66:02:e6:94:51:cd:43:15:6b:0b:68:10:71:81:9e:ad:bb:e1:
ab:8f:7a:3f:a0:d8:a1:50:a2:e1:a6:d5:11:a6:3b:da:d7:97:
12:22:64:f0:82:a5:33:82:55:05:42:5c:4b:01:e3:1b:b1:bd:
87:a0:f7:e7:74:9f:56:23:f5:5b:59:ba:0c:35:29:bf:24:f6:
d2:e7:58:84:35:61:fc:d4:b3:6c:84:ad:d8:ef:d6:7b:70:9d:
f6:8b:07:0c:e2:5d:b4:1d:a3:d6:9a:ef:4a:1f:09:c9:2d:10:
d3:3e:a0:5c:32:34:08:6e:d8:48:07:9b:f6:80:a6:8f:1e:c3:
c4:e1:39:34:ca:22:8e:bf:23:37:a9:a4:3c:79:b6:eb:ac:44:
20:1c:61:24:b8:0e:b2:14:f0:4b:94:50:3f:89:8e:88:b3:0b:
3a:09:f9:af:55:42:0b:c2:0c:8f:73:0f:5a:bb:81:20:a7:ac:
f2:d9:02:36:ee:69:b2:7e:ce:e7:db:81:18:f8:26:bf:70:5b:
4e:6c:f4:68:df:7b:5b:c7:d2:40:b5:5f:2a:ca:ee:03:63:a4:
18:5f:cf:69
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISAZFz+ebwyymCQ1ks77S+hK50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODIxMDgwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRkNTRjYWI2NzQxOTU1MWFhMzcwNWMwN2E2NDBlZTQxM2I0NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqToMyfZAHOyyiGNwUwIXy2euJZ7F
lS8viD8ZUUmp8Pp/qr2bbpi/X0/pFvdfMXZJaKka3eMiPowI5rUiFjUNts9bAjB/
xievh0cCm11HalU13RnUWPD/RYKaGxJP78dE+MCtEKMlciNHIEi5oGjjuUWHcQL0
T90uerXBzRiQV+25pnw9qJCtNQnDNVOuRC8wvWhfiLRfDQ82CwbQEkJquO8XY8tk
JQyJ6eed+FfRKO7tp0ZVbDP/0tGH+lgKW/939IpMtSotB10LZgGQ5Z+oFzz3UPWs
RZouXW4Jwd+4l7NhdUDfSLXJXYSF+Gz4AcUN0tmaGSK+bEakvusXJt/efwIDAQAB
o4IDZzCCA2MwHQYDVR0OBBYEFP3dVMq2dBlVGqNwXAemQO5BO0R1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvX2QxVXlyWjBHVlVhbzNCY0I2WkE3a0U3UkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBewYIKwYBBQUHAQcBAf8EggFqMIIBZjCCAWIEAgABMIIB
WgMEAgX9OAMEAB8N9wMEAh+pfAMEACWLgAMEAC0M/gMEAC0OpQMEAC1R8wMEAC1U
WAMEAS1YQgMEAC1Z9AMEAC1bwQMEAi1fAAMEAC2AYQMEAC2AYwMEAS2A6gMEAC2V
6wMEAE9uPwMEAFOPcQMEAFQVrAMEAFUfLAMEAFUfLgMEAFXQiAMEAFXQiwMEAFXR
hgMEAFd4JAMEAFd4WAMEAFd4XAMEAFd4bAMEAFd4xAMEAFd4zQMEAFd42AMEAFd4
2wMEAFd43gMEAFd5LwMEAFd5YgMEAld52AMEAFtcFQMEAV17HgMEAl59ZAMEAF6c
7AMEAG3O7AMEAm3O8AMEAKsWEAMEAKsWEwMEAKsWHgMEAbnPDjAMAwQAudqJAwQA
udqKMAwDBAK59twDBAC59t4DBAC5/LMDBALBCLgDBAHBLzwDBALBlDgDBALBqMQD
BALCcSQDBALUV9wwDQYJKoZIhvcNAQELBQADggEBAFkkOAQCTEZErNSELE1oye6a
1aFqSPEIFqn6iuPed5xbnQi5KmYC5pRRzUMVawtoEHGBnq274auPej+g2KFQouGm
1RGmO9rXlxIiZPCCpTOCVQVCXEsB4xuxvYeg9+d0n1Yj9VtZugw1Kb8k9tLnWIQ1
YfzUs2yErdjv1ntwnfaLBwziXbQdo9aa70ofCcktENM+oFwyNAhu2EgHm/aApo8e
w8ThOTTKIo6/IzeppDx5tuusRCAcYSS4DrIU8EuUUD+JjoizCzoJ+a9VQgvCDI9z
D1q7gSCnrPLZAjbuabJ+zufbgRj4Jr9wW05s9Gjfe1vH0kC1XyrK7gNjpBhfz2k=
-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:21 2024 by rpki-client on console-ams.rpki-client.org