Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/mOVz2S-nBF_xTbpBHZqSfFzX0vg.roa
File: mOVz2S-nBF_xTbpBHZqSfFzX0vg.roa (raw, json)
Hash identifier: Q4LjNi7OiM5W++a6xOgWEHFexYkqePQ00kp+4hNKE6o=
Subject key identifier: 98:E5:73:D9:2F:A7:04:5F:F1:4D:BA:41:1D:9A:92:7C:5C:D7:D2:F8
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0193F29FE44C746226393F9AA6ADA656894F
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/mOVz2S-nBF_xTbpBHZqSfFzX0vg.roa
Signing time: Mon 23 Dec 2024 08:26:25 +0000
ROA not before: Mon 23 Dec 2024 08:26:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.187.33.0/24 maxlen: 24
37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:9f:e4:4c:74:62:26:39:3f:9a:a6:ad:a6:56:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Dec 23 08:26:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98e573d92fa7045ff14dba411d9a927c5cd7d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:b2:f4:17:0c:a4:c5:7e:da:99:1c:ef:0c:
02:4c:79:49:99:7d:28:3c:65:45:c9:26:be:e0:ea:
6b:f2:7f:64:e2:a2:00:96:9b:ee:a7:85:bc:5b:1d:
74:58:ec:16:9b:6e:ca:28:a2:d8:84:db:7f:bc:99:
2a:02:ad:e9:64:a1:01:13:cc:f7:31:bb:52:b6:26:
29:ea:b4:a0:1f:11:23:d5:3a:1b:a1:db:5d:78:89:
ce:1b:c8:eb:4d:2e:cb:ea:1c:aa:ad:4c:9d:bc:92:
16:56:d7:a5:c0:4d:5b:30:7a:af:01:4c:db:60:cf:
00:3a:59:84:4e:a5:33:b7:bd:6c:45:67:d2:cf:9b:
b9:9c:7f:f6:2e:d9:1f:fa:43:6f:70:c1:d4:7a:07:
16:c9:31:19:33:9d:0e:07:a5:8f:93:08:45:5b:ce:
94:50:94:fe:cd:67:0f:eb:95:4c:81:8d:89:e7:0a:
be:9c:d2:21:30:6d:f6:4d:42:15:18:91:d1:32:37:
ae:0e:49:a7:92:15:94:64:c8:cb:f7:18:02:e0:b0:
99:6c:81:7a:1a:07:67:a0:27:34:df:b5:1a:ba:83:
0d:b4:85:1e:f5:37:c5:cb:71:54:28:01:24:5f:39:
c5:ca:ac:e9:11:2c:71:a6:a6:9b:21:72:03:d1:63:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:73:D9:2F:A7:04:5F:F1:4D:BA:41:1D:9A:92:7C:5C:D7:D2:F8
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/mOVz2S-nBF_xTbpBHZqSfFzX0vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.33.0/24
37.235.48.0/24
37.235.51.0/24
45.153.127.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.214.32.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e3:88:b0:36:e9:cc:6b:41:4f:65:c0:e3:8c:59:09:de:52:
3f:c0:85:6f:c2:92:9a:8a:d3:67:25:34:a3:6c:b8:6b:98:4d:
43:4e:8e:1c:55:62:c5:94:07:ab:e6:e5:78:13:9b:4e:ac:f2:
91:d8:3c:23:6e:cb:bd:d6:2d:43:27:00:30:a6:f5:18:7f:27:
90:15:f3:c3:c3:77:43:35:b5:29:94:6b:39:95:78:90:72:dd:
85:90:c0:c3:fc:18:e1:c9:6b:aa:5a:19:07:77:a0:85:99:e8:
72:d0:7f:f9:d6:25:6b:0f:05:f7:27:4b:fc:cd:b0:04:94:a4:
70:4a:14:94:44:5c:56:4d:8c:0c:8d:73:db:d4:10:52:e7:d6:
c2:2b:62:e8:71:55:3b:58:45:51:42:0e:63:a9:d9:e6:df:c8:
44:8d:92:23:78:e3:d8:d8:85:8b:4e:0f:33:11:00:7a:8b:e4:
81:d4:a1:77:a0:e8:71:5e:4b:0b:c1:c3:04:b7:d5:60:d7:01:
95:df:a4:a1:e3:6d:27:e9:bf:04:6c:84:0c:b3:ac:44:83:72:
62:01:34:c6:6a:64:83:e1:46:3e:41:fe:29:c4:f1:e0:ca:42:
18:94:8e:21:40:3f:be:5f:76:9e:a3:7d:01:37:4a:6b:22:d8:
a3:33:c6:c2
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgISAZPyn+RMdGImOT+apq2mVolPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjQxMjIzMDgyNjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU1NzNkOTJmYTcwNDVmZjE0ZGJhNDExZDlhOTI3YzVjZDdkMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuWy9BcMpMV+2pkc7wwCTHlJmX0o
PGVFySa+4Opr8n9k4qIAlpvup4W8Wx10WOwWm27KKKLYhNt/vJkqAq3pZKEBE8z3
MbtStiYp6rSgHxEj1TobodtdeInOG8jrTS7L6hyqrUydvJIWVtelwE1bMHqvAUzb
YM8AOlmETqUzt71sRWfSz5u5nH/2Ltkf+kNvcMHUegcWyTEZM50OB6WPkwhFW86U
UJT+zWcP65VMgY2J5wq+nNIhMG32TUIVGJHRMjeuDkmnkhWUZMjL9xgC4LCZbIF6
GgdnoCc037UauoMNtIUe9TfFy3FUKAEkXznFyqzpESxxpqabIXID0WNzlwIDAQAB
o4IDiTCCA4UwHQYDVR0OBBYEFJjlc9kvpwRf8U26QR2aknxc19L4MB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvbU9WejJTLW5CRl94VGJwQkhacVNmRnpYMHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnQYIKwYBBQUHAQcBAf8EggGMMIIBiDCB+wQCAAEwgfQD
BAAFuyEDBAAl6zADBAAl6zMDBAAtmX8DBAAut7sDBAFT83gDBAFZH3gDBABZH3sw
DAMEA1ku6AMEAFku7AMEAVuEXAMEAFuEXwMEAFzzQAMEAF+czAMEAF+czwMEAWc5
+AMEAGc5+wMEAIb/0zAMAwQAlZqdAwQFlZqAAwQAl+wEMAwDBACX7A8DBACX7BIw
DAMEApfsFAMEAJfsFgMEAJfsGQMEAJ7/0DAMAwQAnv/VAwQDnv/QAwQAsH5jAwQA
uRrsAwQBuRruAwQBuUxOAwQAuXq7AwQAucEwAwQAucNAAwQAucNCAwQAvNYgAwQA
1bc3MIGHBAIAAjCBgAMHASoDD4AAMgMHACoDD4AAOQMHASoDD4AAQAMHASoDD4AA
RDASAwcAKgMPgABHAwcBKgMPgABIAwcAKgMPgABhAwcAKgMPgABlAwcAKgMPgACB
AwcAKgMPgAOBAwcAKgMPgAhSAwcAKgMPgAlxAwcAKgMPgEQWAwcAKgMPgO1RMA0G
CSqGSIb3DQEBCwUAA4IBAQCb44iwNunMa0FPZcDjjFkJ3lI/wIVvwpKaitNnJTSj
bLhrmE1DTo4cVWLFlAer5uV4E5tOrPKR2Dwjbsu91i1DJwAwpvUYfyeQFfPDw3dD
NbUplGs5lXiQct2FkMDD/BjhyWuqWhkHd6CFmehy0H/51iVrDwX3J0v8zbAElKRw
ShSURFxWTYwMjXPb1BBS59bCK2LocVU7WEVRQg5jqdnm38hEjZIjeOPY2IWLTg8z
EQB6i+SB1KF3oOhxXksLwcMEt9Vg1wGV36Sh420n6b8EbIQMs6xEg3JiATTGamSD
4UY+Qf4pxPHgykIYlI4hQD++X3aeo30BN0prItijM8bC
-----END CERTIFICATE-----
Generated at Sun Apr 13 09:52:48 2025 by rpki-client