Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/l0WOpgXD3hLp-z1i2bHbwQxbeGU.roa
File: l0WOpgXD3hLp-z1i2bHbwQxbeGU.roa (raw, json)
Hash identifier: EOXZKR7ETc6FZf4EURqOYJFhybZRpaW9cIIGrbQooC4=
Subject key identifier: 97:45:8E:A6:05:C3:DE:12:E9:FB:3D:62:D9:B1:DB:C1:0C:5B:78:65
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018D88CB6C2F722E207C61026ED7029F283E
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/l0WOpgXD3hLp-z1i2bHbwQxbeGU.roa
Signing time: Thu 08 Feb 2024 12:57:29 +0000
ROA not before: Thu 08 Feb 2024 12:57:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Feb 2024 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:cb:6c:2f:72:2e:20:7c:61:02:6e:d7:02:9f:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Feb 8 12:57:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97458ea605c3de12e9fb3d62d9b1dbc10c5b7865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:95:54:e4:e0:27:37:cd:f7:1b:94:0d:42:
4e:54:8b:f6:ab:bb:f4:7d:33:0f:df:a9:58:e4:d4:
45:bf:5a:fa:4b:c1:7e:52:9f:27:4e:7d:a6:0c:a2:
fc:7a:e8:14:22:96:7b:f7:dc:a3:59:82:f6:d8:78:
9d:99:16:ed:b3:15:f2:2f:8f:89:6b:14:b4:06:a4:
5d:46:9b:db:8f:e6:51:38:6e:20:a8:91:de:aa:e1:
40:7b:03:08:b4:93:26:1e:17:11:16:ae:9d:60:70:
17:89:8a:06:a0:21:aa:51:90:d1:7c:67:16:f6:95:
91:48:3c:7a:b6:6c:d9:e8:59:06:3a:fb:3c:b5:86:
26:59:75:0b:b1:c2:ab:7c:4d:dd:d2:7c:29:4e:e4:
62:d2:07:dd:3b:88:d8:75:2e:95:49:3a:c9:65:93:
90:65:73:f9:ae:a3:d3:57:9a:67:85:f9:5c:af:e3:
37:0a:49:85:66:96:94:70:19:85:4d:08:50:74:ee:
b9:b4:2e:d0:90:a1:34:e7:cd:a6:a6:b5:8a:1f:b8:
ce:b3:08:8a:64:a0:28:ea:df:d5:8b:f8:33:d3:2d:
80:87:97:bc:08:9e:2a:60:23:76:18:c7:e4:e7:a4:
e3:f6:92:39:49:60:d5:21:52:70:b2:34:0c:b6:95:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:8E:A6:05:C3:DE:12:E9:FB:3D:62:D9:B1:DB:C1:0C:5B:78:65
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/l0WOpgXD3hLp-z1i2bHbwQxbeGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
37.235.51.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
185.76.78.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a0:65:39:21:fc:25:0a:69:c6:41:6d:c2:c8:2f:fc:0e:c4:
f1:ff:9b:96:23:f6:8a:ed:6d:cf:70:c3:fe:ad:0f:87:15:d5:
df:75:05:0c:47:0f:b7:ca:da:bb:a8:06:41:88:96:ce:bc:bf:
a0:51:15:66:11:e4:db:81:03:db:3c:8e:09:c7:e5:b0:e9:17:
5d:77:97:45:a3:a5:62:7a:1c:d8:e8:25:93:13:e4:10:b5:60:
e9:5a:b4:ea:71:5b:31:a0:9c:8f:e7:32:32:4e:08:49:8a:64:
c0:db:7f:a5:88:b0:f2:80:b3:19:22:7c:67:e5:7f:f4:b6:0e:
b9:3a:72:91:95:21:2a:60:44:b7:f5:9f:09:b1:b1:70:49:8e:
c4:ee:18:97:b3:d9:2c:cb:f6:ef:2c:5c:02:09:91:02:db:a9:
58:23:c3:96:b3:33:31:cd:24:c3:1d:29:54:df:e3:44:e0:e7:
73:c0:a2:a9:f8:b4:2a:9c:63:22:77:fc:69:d0:ed:88:6c:31:
6c:be:fa:37:55:11:02:14:30:6e:a4:f0:80:cd:bf:0c:54:7f:
7d:b2:83:d2:50:36:b0:9e:3f:7a:68:c8:df:93:13:e2:83:f9:
89:a6:c5:99:ee:80:78:3d:96:f3:6f:86:78:f4:5c:42:d4:e6:
d5:ec:f5:d6
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgISAY2Iy2wvci4gfGECbtcCnyg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjQwMjA4MTI1NzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQ1OGVhNjA1YzNkZTEyZTlmYjNkNjJkOWIxZGJjMTBjNWI3ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q2VVOTgJzfN9xuUDUJOVIv2q7v0
fTMP36lY5NRFv1r6S8F+Up8nTn2mDKL8eugUIpZ799yjWYL22HidmRbtsxXyL4+J
axS0BqRdRpvbj+ZROG4gqJHequFAewMItJMmHhcRFq6dYHAXiYoGoCGqUZDRfGcW
9pWRSDx6tmzZ6FkGOvs8tYYmWXULscKrfE3d0nwpTuRi0gfdO4jYdS6VSTrJZZOQ
ZXP5rqPTV5pnhflcr+M3CkmFZpaUcBmFTQhQdO65tC7QkKE0582mprWKH7jOswiK
ZKAo6t/Vi/gz0y2Ah5e8CJ4qYCN2GMfk56Tj9pI5SWDVIVJwsjQMtpX0LwIDAQAB
o4IDLTCCAykwHQYDVR0OBBYEFJdFjqYFw94S6fs9Ytmx28EMW3hlMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvbDBXT3BnWEQzaExwLXoxaTJiSGJ3UXhiZUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCBnwQCAAEwgZgD
BAAl6zADBAAl6zMDBAAut7sDBAFT83gDBAFZH3gDBABZH3sDBAFbhFwDBABbhF8D
BABc80ADBAFnOfgDBABnOfsDBACG/9MwDAMEAJWanQMEBZWagDAMAwQAl+wPAwQA
l+wSMAwDBAKX7BQDBACX7BYDBACX7BkDBACe/9AwDAMEAJ7/1QMEA57/0AMEALka
7wMEALlMTjCBhwQCAAIwgYADBwEqAw+AADIDBwAqAw+AADkDBwAqAw+AAEADBwEq
Aw+AAEQwEgMHACoDD4AARwMHASoDD4AASAMHACoDD4AAYQMHACoDD4AAZQMHACoD
D4AAgQMHACoDD4ADgQMHACoDD4AIUgMHACoDD4AJcQMHACoDD4BEFgMHACoDD4Dt
UTANBgkqhkiG9w0BAQsFAAOCAQEAn6BlOSH8JQppxkFtwsgv/A7E8f+bliP2iu1t
z3DD/q0PhxXV33UFDEcPt8rau6gGQYiWzry/oFEVZhHk24ED2zyOCcflsOkXXXeX
RaOlYnoc2OglkxPkELVg6Vq06nFbMaCcj+cyMk4ISYpkwNt/pYiw8oCzGSJ8Z+V/
9LYOuTpykZUhKmBEt/WfCbGxcEmOxO4Yl7PZLMv27yxcAgmRAtupWCPDlrMzMc0k
wx0pVN/jRODnc8Ciqfi0KpxjInf8adDtiGwxbL76N1URAhQwbqTwgM2/DFR/fbKD
0lA2sJ4/emjI35MT4oP5iabFme6AeD2W82+GePRcQtTm1ez11g==
-----END CERTIFICATE-----
Generated at Wed Feb 14 12:13:19 2024 by rpki-client on console-ams.rpki-client.org