Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/g1nt8SUWWxs_oAFiegCUzZGr4sU.roa
File: g1nt8SUWWxs_oAFiegCUzZGr4sU.roa (raw, json)
Hash identifier: ZnRYVSpvqrgdp0vt86ZDYMouD/uvhYKJgDFjNzunhBs=
Subject key identifier: 83:59:ED:F1:25:16:5B:1B:3F:A0:01:62:7A:00:94:CD:91:AB:E2:C5
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0191BBE9BB7F4240710291484DC8CE31A226
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/g1nt8SUWWxs_oAFiegCUzZGr4sU.roa
Signing time: Wed 04 Sep 2024 07:22:22 +0000
ROA not before: Wed 04 Sep 2024 07:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:e9:bb:7f:42:40:71:02:91:48:4d:c8:ce:31:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Sep 4 07:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8359edf125165b1b3fa001627a0094cd91abe2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:6f:6b:46:f9:d0:46:28:9a:33:cd:8c:0a:
37:d9:32:5f:a6:e2:bf:bc:2e:1f:40:20:ed:ba:5e:
f6:8a:bf:81:bf:db:79:d5:99:4e:1f:77:74:f4:6f:
4f:39:34:07:cb:35:9d:e2:a5:84:95:e4:51:b5:0c:
e1:df:b2:ea:cf:41:d4:04:64:c9:69:8a:7b:7a:8a:
45:e0:f4:f9:36:db:15:b7:87:21:7e:bf:e1:09:61:
22:50:2f:35:ee:1d:34:db:66:43:e7:71:2d:51:0d:
e9:15:3f:77:9a:0a:8f:f8:fa:f8:6a:aa:67:26:18:
93:a2:ee:b2:cf:b3:98:8b:6f:42:65:5e:72:59:2c:
a8:3f:a9:ad:50:b5:e5:0f:12:f4:74:0e:1c:d9:aa:
1f:53:6a:ce:d1:e8:df:96:d8:50:70:ab:d6:be:72:
38:59:1a:b6:26:08:83:83:e8:4c:69:4a:a7:5f:ea:
10:52:41:03:b0:94:58:fa:e9:55:47:9a:ba:f9:c3:
8d:cd:c1:32:90:53:bf:38:91:0d:ae:74:46:c6:4b:
5b:76:0b:20:62:c9:62:11:2c:ba:6d:e4:c7:9f:c9:
90:a7:de:97:54:5c:fc:ee:12:41:e1:58:54:43:fb:
a4:db:4d:ab:be:de:7c:74:4c:a2:a4:48:c5:7b:53:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:ED:F1:25:16:5B:1B:3F:A0:01:62:7A:00:94:CD:91:AB:E2:C5
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/g1nt8SUWWxs_oAFiegCUzZGr4sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
37.235.51.0/24
45.153.127.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.46.233.0-89.46.235.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
188.214.32.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
3a:34:61:34:13:7b:21:fc:8a:89:59:78:d6:56:03:ae:ea:fd:
17:c0:4c:ad:13:db:73:19:66:76:0f:2a:cf:9c:31:14:f0:33:
4d:f2:e9:23:5e:38:6a:2e:d2:3d:1d:68:b2:95:9e:6d:da:ee:
07:a4:7b:3e:08:e6:7d:19:31:98:f7:5d:9a:4a:be:df:fb:1e:
0c:20:a6:a2:eb:32:46:90:6d:07:04:c6:20:5b:74:6a:79:3b:
ec:a8:d2:3a:8e:61:f9:b3:a0:ba:4e:3e:8f:e0:dd:b5:95:e7:
88:0e:d1:e9:95:fb:ae:4f:d0:84:9b:0c:90:a5:df:d2:d2:f3:
8d:94:d0:56:44:48:b8:2b:bd:6e:21:b6:23:80:a3:bf:a2:74:
e4:0e:d7:14:34:e2:0e:d4:f3:39:a7:07:8a:f0:bb:a7:01:e2:
b7:10:bf:4d:cb:35:60:2b:15:cc:4a:e1:65:f8:74:2a:db:fb:
3c:40:51:9a:96:3c:c9:91:21:01:ac:0d:ae:03:ae:b5:f7:52:
5b:6a:45:84:85:f1:e2:ee:60:02:cb:1c:0e:55:93:01:33:41:
46:73:b6:1a:e4:48:76:36:b6:4f:95:07:c2:5c:96:5f:5c:ec:
24:7d:ff:b1:a9:0b:4d:64:44:50:62:7c:88:97:42:a8:e0:3d:
d9:a9:c9:ae
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISAZG76bt/QkBxApFITcjOMaImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjQwOTA0MDcyMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU5ZWRmMTI1MTY1YjFiM2ZhMDAxNjI3YTAwOTRjZDkxYWJlMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdva0b50EYomjPNjAo32TJfpuK/
vC4fQCDtul72ir+Bv9t51ZlOH3d09G9POTQHyzWd4qWEleRRtQzh37Lqz0HUBGTJ
aYp7eopF4PT5NtsVt4chfr/hCWEiUC817h0022ZD53EtUQ3pFT93mgqP+Pr4aqpn
JhiTou6yz7OYi29CZV5yWSyoP6mtULXlDxL0dA4c2aofU2rO0ejflthQcKvWvnI4
WRq2JgiDg+hMaUqnX+oQUkEDsJRY+ulVR5q6+cONzcEykFO/OJENrnRGxktbdgsg
YsliESy6beTHn8mQp96XVFz87hJB4VhUQ/uk202rvt58dEyipEjFe1MfqQIDAQAB
o4IDZTCCA2EwHQYDVR0OBBYEFINZ7fElFlsbP6ABYnoAlM2Rq+LFMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvZzFudDhTVVdXeHNfb0FGaWVnQ1V6WkdyNHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeQYIKwYBBQUHAQcBAf8EggFoMIIBZDCB1wQCAAEwgdAD
BAAl6zADBAAl6zMDBAAtmX8DBAAut7sDBAFT83gDBAFZH3gDBABZH3swDAMEAFku
6QMEAlku6AMEAVuEXAMEAFuEXwMEAFzzQAMEAF+czAMEAF+czwMEAWc5+AMEAGc5
+wMEAIb/0zAMAwQAlZqdAwQFlZqAMAwDBACX7A8DBACX7BIwDAMEApfsFAMEAJfs
FgMEAJfsGQMEAJ7/0DAMAwQAnv/VAwQDnv/QAwQAsH5jAwQAuRrsAwQBuRruAwQB
uUxOAwQAvNYgAwQA1bc3MIGHBAIAAjCBgAMHASoDD4AAMgMHACoDD4AAOQMHACoD
D4AAQAMHASoDD4AARDASAwcAKgMPgABHAwcBKgMPgABIAwcAKgMPgABhAwcAKgMP
gABlAwcAKgMPgACBAwcAKgMPgAOBAwcAKgMPgAhSAwcAKgMPgAlxAwcAKgMPgEQW
AwcAKgMPgO1RMA0GCSqGSIb3DQEBCwUAA4IBAQA6NGE0E3sh/IqJWXjWVgOu6v0X
wEytE9tzGWZ2DyrPnDEU8DNN8ukjXjhqLtI9HWiylZ5t2u4HpHs+COZ9GTGY912a
Sr7f+x4MIKai6zJGkG0HBMYgW3RqeTvsqNI6jmH5s6C6Tj6P4N21leeIDtHplfuu
T9CEmwyQpd/S0vONlNBWREi4K71uIbYjgKO/onTkDtcUNOIO1PM5pweK8LunAeK3
EL9NyzVgKxXMSuFl+HQq2/s8QFGaljzJkSEBrA2uA66191JbakWEhfHi7mACyxwO
VZMBM0FGc7Ya5Eh2NrZPlQfCXJZfXOwkff+xqQtNZERQYnyIl0Ko4D3Zqcmu
-----END CERTIFICATE-----
Generated at Thu Sep 12 07:53:21 2024 by rpki-client on console-fra.rpki-client.org