Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1-RPYxxjAPTef8rcAv-4EzC8IBAU.roa
File: 1-RPYxxjAPTef8rcAv-4EzC8IBAU.roa (raw, json)
Hash identifier: VdNWJ0U2QVXY4rtDgRWDsrrYufEFNSmha/84a1m1rVM=
Subject key identifier: F9:13:D8:C7:18:C0:3D:37:9F:F2:B7:00:BF:EE:04:CC:2F:08:04:05
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01938648ACA3FF565453819D930D9B021190
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1-RPYxxjAPTef8rcAv-4EzC8IBAU.roa
Signing time: Mon 02 Dec 2024 07:32:09 +0000
ROA not before: Mon 02 Dec 2024 07:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Dec 2024 11:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:48:ac:a3:ff:56:54:53:81:9d:93:0d:9b:02:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Dec 2 07:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f913d8c718c03d379ff2b700bfee04cc2f080405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:e9:e9:8d:92:51:ae:da:ca:15:50:c0:8e:
1c:c1:d3:8f:29:08:4b:6a:57:62:54:e4:af:cd:d6:
c9:24:2c:a1:ee:b7:f0:8c:da:8a:04:a4:6a:c3:57:
66:f0:66:cf:96:b0:b3:92:c2:ca:58:3d:95:0e:6a:
0c:24:f0:2a:17:fd:ab:e3:e7:51:34:6a:b7:d1:0a:
ea:53:33:ac:3b:e9:0c:6b:d3:f7:55:35:c6:c5:73:
d9:10:23:5b:67:2a:2b:8c:4c:6b:7c:30:d4:d9:ec:
b1:41:a6:a7:29:d6:e0:aa:c3:e5:d0:cc:35:9b:de:
ae:21:da:9c:26:9d:1b:e2:7e:39:35:7c:21:3e:66:
d6:95:46:75:9e:f4:a4:55:49:fb:f9:f7:a0:32:c0:
fe:94:5e:49:d0:84:02:b4:7f:df:d5:99:a5:f3:f6:
fb:f5:5c:ab:1e:ea:53:c2:76:25:f4:73:f5:34:e5:
43:a7:a5:23:ea:e9:f3:1e:78:37:5f:97:b4:50:3d:
45:ff:c7:a0:60:31:3d:41:99:0a:f6:b2:91:f6:02:
31:5b:13:1b:ef:73:67:21:82:a9:fc:fd:b7:c4:90:
e3:eb:b7:1a:87:f1:de:45:ad:a0:fa:bb:a1:65:ff:
74:98:e6:52:1e:a6:84:13:6e:df:13:a1:a1:10:38:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:13:D8:C7:18:C0:3D:37:9F:F2:B7:00:BF:EE:04:CC:2F:08:04:05
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1-RPYxxjAPTef8rcAv-4EzC8IBAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
45.153.125.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
185.193.51.0/24
185.195.65.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::/48
2a03:f80:56::/47
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a0:1e:2a:ea:3e:d6:5d:95:92:a8:a3:29:c2:d9:6e:8e:d0:
02:40:83:d3:64:61:2d:78:42:c6:fa:3f:9c:fb:f2:ab:8b:dc:
dd:ef:f9:df:05:6c:b1:0d:3b:49:29:f1:e4:3d:c1:59:a9:58:
30:1c:c2:85:99:a6:0d:c9:ec:e9:dd:60:72:e0:23:4e:8d:59:
aa:4a:7e:89:1a:5e:80:bb:79:49:6b:cb:7f:d6:50:a6:2b:d0:
5a:98:f3:4b:3a:aa:46:bb:2d:db:f6:e7:6d:57:23:ae:f1:14:
90:9f:33:5f:4e:2f:8b:28:f4:4c:da:ab:56:fb:89:37:40:36:
7b:6b:3b:f9:fd:4e:4f:d7:2a:13:ca:67:96:1c:e0:7f:97:01:
fa:cc:f1:8a:21:aa:c8:30:20:ea:0c:4e:4a:dd:ba:05:2f:02:
ac:56:df:81:57:3f:1d:e0:3a:be:e4:c2:1b:29:f6:ba:a4:02:
54:12:bb:2d:04:1f:ed:25:83:4f:03:79:eb:87:6a:ea:78:af:
11:61:52:d2:e8:6a:52:46:57:63:92:3b:54:27:26:ec:7f:46:
38:eb:4a:0b:ec:b3:e6:b4:6a:59:34:f3:84:20:12:38:18:0d:
9d:c9:d0:98:76:47:16:2f:2b:0c:b7:1a:e1:0f:a4:70:31:ca:
28:7e:4f:1d
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISAZOGSKyj/1ZUU4Gdkw2bAhGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjQxMjAyMDczMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTEzZDhjNzE4YzAzZDM3OWZmMmI3MDBiZmVlMDRjYzJmMDgwNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyybp6Y2SUa7ayhVQwI4cwdOPKQhL
aldiVOSvzdbJJCyh7rfwjNqKBKRqw1dm8GbPlrCzksLKWD2VDmoMJPAqF/2r4+dR
NGq30QrqUzOsO+kMa9P3VTXGxXPZECNbZyorjExrfDDU2eyxQaanKdbgqsPl0Mw1
m96uIdqcJp0b4n45NXwhPmbWlUZ1nvSkVUn7+fegMsD+lF5J0IQCtH/f1Zml8/b7
9VyrHupTwnYl9HP1NOVDp6Uj6unzHng3X5e0UD1F/8egYDE9QZkK9rKR9gIxWxMb
73NnIYKp/P23xJDj67cah/HeRa2g+ruhZf90mOZSHqaEE27fE6GhEDh/zwIDAQAB
o4IDYDCCA1wwHQYDVR0OBBYEFPkT2McYwD03n/K3AL/uBMwvCAQFMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvMS1SUFl4eGpBUFRlZjhyY0F2LTRFekM4SUJBVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTAvMjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNk
Yy8xLzBoZTBjc2hCd2RhRlVLSlBHVGJTbk1iQ2oyby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAXMGCCsGAQUFBwEHAQH/BIIBYjCCAV4wgb8EAgABMIG4
AwQABbRyAwQEJeswAwQALZl9AwQAU/N4AwQBU/N6AwQAVPc9AwQAVmp3AwQAWR97
AwQAWS7uAwQAW4ReAwQBW+PMAwQAXPNCAwQAX5zNAwQAZzn6AwQAhv/SMAwDBAOV
mpgDBACVmpwDBAWX7AAwDAMEAJ7/0QMEAJ7/1DAMAwQCuRrsAwQAuRruAwQAucEz
AwQAucNBMAwDBAC81iEDBAC81iIDBAG81iYwDAMEAdW3NgMEAdW3ODCBmQQCAAIw
gZIDBwAqAw+AAAcDBwAqAw+AADEDBwEqAw+AAFYDBwAqAw+AAHADBwAqAw+AA1QD
BwAqAw+AA1cDBwAqAw+AA1kDBwEqAw+AA3ADBwAqAw+AOZEDBwAqAw+ArRUwEgMH
ACoDD4DtFQMHAyoDD4DtEAMHACoDD4DtMQMHACoDD4DtUQMHACoDD4KrzQMHACoD
D4f//zANBgkqhkiG9w0BAQsFAAOCAQEArqAeKuo+1l2VkqijKcLZbo7QAkCD02Rh
LXhCxvo/nPvyq4vc3e/53wVssQ07SSnx5D3BWalYMBzChZmmDcns6d1gcuAjTo1Z
qkp+iRpegLt5SWvLf9ZQpivQWpjzSzqqRrst2/bnbVcjrvEUkJ8zX04viyj0TNqr
VvuJN0A2e2s7+f1OT9cqE8pnlhzgf5cB+szxiiGqyDAg6gxOSt26BS8CrFbfgVc/
HeA6vuTCGyn2uqQCVBK7LQQf7SWDTwN564dq6nivEWFS0uhqUkZXY5I7VCcm7H9G
OOtKC+yz5rRqWTTzhCASOBgNncnQmHZHFi8rDLca4Q+kcDHKKH5PHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 08:57:45 2025 by rpki-client