Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/859PCad-4ufmeHhW9mxboklj9eM.roa
File: 859PCad-4ufmeHhW9mxboklj9eM.roa (raw, json)
Hash identifier: vUm1UvZM6tTMNJJnEsC6+CUkVGa/YAG9qZelXP0WQrU=
Subject key identifier: F3:9F:4F:09:A7:7E:E2:E7:E6:78:78:56:F6:6C:5B:A2:49:63:F5:E3
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0193DF43D1CA8CF033464DBA168194E87ED8
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/859PCad-4ufmeHhW9mxboklj9eM.roa
Signing time: Thu 19 Dec 2024 14:13:04 +0000
ROA not before: Thu 19 Dec 2024 14:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.160.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
78.90.206.0/24 maxlen: 24
78.90.247.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
80.253.52.0/24 maxlen: 24
80.253.53.0/24 maxlen: 24
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.24.54.0/24 maxlen: 24
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.9.224.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.18.240.0/24 maxlen: 24
217.18.245.0/24 maxlen: 24
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:43:d1:ca:8c:f0:33:46:4d:ba:16:81:94:e8:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Dec 19 14:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39f4f09a77ee2e7e6787856f66c5ba24963f5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:1c:e8:c0:9e:ae:56:69:48:6a:70:85:4e:
ef:34:68:7f:22:ac:0a:4a:92:0f:1d:5f:7a:d6:75:
45:40:7c:2a:aa:2b:ed:91:86:da:ca:6d:3e:0f:45:
fd:7c:64:43:d1:8c:d4:ab:8f:0d:0f:10:80:8a:4e:
72:89:9c:79:8c:d0:64:3f:be:b7:88:27:54:ed:75:
dc:0d:e2:79:d6:cd:fb:71:dc:80:50:2f:e2:78:f2:
53:4e:08:f7:1f:43:aa:6a:41:b4:a7:db:59:bf:f9:
64:75:53:ad:48:c9:ae:f9:04:54:ab:f4:ff:3f:08:
35:d6:f1:d1:05:62:f7:f6:52:2c:a5:49:f8:e9:ea:
dd:3b:40:a9:5c:18:da:a3:50:fa:4b:36:bd:dc:63:
f2:a1:88:ba:3c:eb:01:36:7e:6b:f6:6c:ac:ab:8a:
be:5c:92:1a:9e:bb:cf:53:6d:fb:f4:41:42:b6:d5:
02:b6:76:e9:1d:b8:ec:89:c4:91:82:59:da:f7:9f:
80:b3:9f:a6:50:95:c5:d0:72:9f:c7:80:5f:8e:90:
26:1e:0e:85:8a:6a:47:94:dc:76:5a:42:8c:d8:4d:
e1:29:39:3b:29:d6:2e:09:f9:ce:89:25:e4:ae:0a:
a1:9b:7d:86:e6:5d:7a:06:a4:a7:40:fe:9d:1f:04:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:4F:09:A7:7E:E2:E7:E6:78:78:56:F6:6C:5B:A2:49:63:F5:E3
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/859PCad-4ufmeHhW9mxboklj9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
97:f1:7b:43:d5:58:94:45:61:74:27:b7:6d:af:8c:5d:06:0d:
52:28:ea:9e:0e:85:a5:09:90:22:38:76:3d:ed:c2:58:92:37:
fc:74:6d:4d:f3:ef:ae:54:2b:59:3f:e8:46:76:e3:9a:1b:42:
2a:ea:58:2c:29:88:6a:e9:56:55:83:3f:ae:38:87:8c:5c:2f:
6b:4a:e1:4d:9c:97:c9:c7:b2:95:4d:5a:7d:cf:a3:a1:49:d1:
28:82:90:08:b4:90:77:18:5b:57:15:b0:88:13:ec:a6:21:15:
80:ad:c6:7b:86:f9:ef:24:09:0d:50:b2:27:20:f8:37:ee:e6:
55:96:b2:0c:18:c8:69:64:5c:0f:d1:90:3d:f8:44:53:1c:44:
fa:5a:87:d7:22:22:c7:b2:46:96:74:b8:29:7f:7d:ee:d2:c5:
74:bf:4a:3a:99:7a:79:d6:2c:dc:d6:19:12:42:a6:f2:ff:b1:
e9:7c:fd:c9:22:fb:eb:b6:3c:84:b2:b9:b8:11:69:b9:f2:b3:
89:c8:33:37:a1:a1:cb:ed:f0:1f:fc:27:21:67:00:2f:69:2c:
82:ed:90:d3:c7:be:7f:c1:cd:3c:6d:19:03:ae:49:51:21:c0:
b0:43:ab:16:34:2a:49:8a:08:6c:19:d8:90:00:34:7e:f1:a2:
0b:0b:c4:2f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZPfQ9HKjPAzRk26FoGU6H7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQxMjE5MTQxMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzlmNGYwOWE3N2VlMmU3ZTY3ODc4NTZmNjZjNWJhMjQ5NjNmNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIEc6MCerlZpSGpwhU7vNGh/IqwK
SpIPHV961nVFQHwqqivtkYbaym0+D0X9fGRD0YzUq48NDxCAik5yiZx5jNBkP763
iCdU7XXcDeJ51s37cdyAUC/iePJTTgj3H0OqakG0p9tZv/lkdVOtSMmu+QRUq/T/
Pwg11vHRBWL39lIspUn46erdO0CpXBjao1D6Sza93GPyoYi6POsBNn5r9mysq4q+
XJIanrvPU2379EFCttUCtnbpHbjsicSRglna95+As5+mUJXF0HKfx4BfjpAmHg6F
impHlNx2WkKM2E3hKTk7KdYuCfnOiSXkrgqhm32G5l16BqSnQP6dHwQghQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFPOfTwmnfuLn5nh4VvZsW6JJY/XjMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvODU5UENhZC00dWZtZUhoVzlteGJva2xqOWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB
MgMEBwU1gAMEByU/AAMEAy7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3s
oAMDAE5TAwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AAD
BAVVW4ADBAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgD
BAVZvsADAwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAM
AAMEAMEWZwMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AMEBdQkAAMEBdQyAAMEBdRb
oAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ
4AMEBNkK8AMEBNkS8AMEBNlPIDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZI
hvcNAQELBQADggEBAJfxe0PVWJRFYXQnt22vjF0GDVIo6p4OhaUJkCI4dj3twliS
N/x0bU3z765UK1k/6EZ245obQirqWCwpiGrpVlWDP644h4xcL2tK4U2cl8nHspVN
Wn3Po6FJ0SiCkAi0kHcYW1cVsIgT7KYhFYCtxnuG+e8kCQ1Qsicg+Dfu5lWWsgwY
yGlkXA/RkD34RFMcRPpah9ciIseyRpZ0uCl/fe7SxXS/SjqZennWLNzWGRJCpvL/
sel8/cki++u2PISyubgRabnys4nIMzehocvt8B/8JyFnAC9pLILtkNPHvn/BzTxt
GQOuSVEhwLBDqxY0KkmKCGwZ2JAANH7xogsLxC8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:35:53 2025 by rpki-client