Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/wJPaJZkBI4vR2dX2xLEWcWcMnA4.roa
File: wJPaJZkBI4vR2dX2xLEWcWcMnA4.roa (raw, json)
Hash identifier: lq4K1QaglyNGx2344ElEF1wvxc8bL7SSdx9XbIj1xT4=
Subject key identifier: C0:93:DA:25:99:01:23:8B:D1:D9:D5:F6:C4:B1:16:71:67:0C:9C:0E
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018E2E53E518B91E4330007A559E421E14EF
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/wJPaJZkBI4vR2dX2xLEWcWcMnA4.roa
Signing time: Mon 11 Mar 2024 16:23:53 +0000
ROA not before: Mon 11 Mar 2024 16:23:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31363
IP address blocks: 86.62.75.0/24 maxlen: 24
86.62.79.0/24 maxlen: 24
86.62.84.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.94.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.98.0/24 maxlen: 24
86.62.99.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.103.0/24 maxlen: 24
86.62.110.0/24 maxlen: 24
86.62.112.0/24 maxlen: 24
86.62.113.0/24 maxlen: 24
86.62.114.0/24 maxlen: 24
86.62.115.0/24 maxlen: 24
86.62.116.0/24 maxlen: 24
86.62.117.0/24 maxlen: 24
86.62.118.0/24 maxlen: 24
86.62.119.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.54.210.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.144.0/24 maxlen: 24
195.91.145.0/24 maxlen: 24
195.91.146.0/24 maxlen: 24
195.91.147.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.150.0/24 maxlen: 24
195.91.151.0/24 maxlen: 24
195.91.153.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.165.0/24 maxlen: 24
195.91.166.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.178.0/24 maxlen: 24
195.91.179.0/24 maxlen: 24
195.91.180.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.182.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.188.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.192.0/24 maxlen: 24
195.91.195.0/24 maxlen: 24
195.91.196.0/24 maxlen: 24
195.91.197.0/24 maxlen: 24
195.91.204.0/24 maxlen: 24
195.91.207.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.227.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
195.91.252.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, certificate revoked on Fri 31 May 2024 04:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:53:e5:18:b9:1e:43:30:00:7a:55:9e:42:1e:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Mar 11 16:23:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c093da259901238bd1d9d5f6c4b11671670c9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:a3:f7:89:b9:b0:84:e8:74:d9:cf:01:99:
de:52:f4:25:97:01:fd:c8:c8:a7:27:4b:1b:40:39:
1d:09:c1:2a:bc:ee:91:47:1a:fc:8a:81:fc:10:76:
eb:58:a4:81:8b:56:77:f6:bc:e6:39:54:69:32:7a:
42:1a:60:29:52:a8:73:d6:43:26:41:79:eb:78:b8:
6d:4f:c4:43:5c:f1:26:fd:46:b1:95:43:9b:fc:1e:
3b:61:05:42:ea:fe:2e:da:6e:e7:96:40:f2:1a:23:
b8:16:27:68:cf:96:c8:b5:c4:63:be:2d:fb:f5:0d:
37:42:de:15:17:5e:f2:0b:26:cd:4a:53:5d:d4:76:
38:80:57:9f:61:cf:41:0f:39:3b:87:5d:d7:8f:95:
94:3a:87:06:5b:dd:1c:0d:66:70:2b:60:f3:76:a8:
27:04:e7:ac:bd:c2:7a:7b:c9:eb:14:82:42:5a:c6:
2c:1d:a9:bc:c9:f8:4c:de:93:fb:7d:62:52:9f:2c:
4a:b8:b5:66:fe:3f:18:b9:de:07:f2:fd:09:d0:b0:
96:77:01:05:43:ad:8a:eb:56:2b:92:ec:63:a4:04:
96:3e:50:85:c2:5a:f9:a1:53:55:9f:37:f3:1c:99:
b9:5e:7a:f1:e1:ed:5d:02:b2:71:3c:a5:b7:12:2b:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:DA:25:99:01:23:8B:D1:D9:D5:F6:C4:B1:16:71:67:0C:9C:0E
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/wJPaJZkBI4vR2dX2xLEWcWcMnA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.75.0/24
86.62.79.0/24
86.62.84.0/24
86.62.92.0/24
86.62.94.0/24
86.62.96.0/24
86.62.98.0/23
86.62.102.0/23
86.62.110.0/24
86.62.112.0/21
86.62.125.0/24
195.54.210.0/24
195.91.133.0/24
195.91.138.0/24
195.91.144.0/21
195.91.153.0/24
195.91.156.0/24
195.91.160.0/24
195.91.165.0-195.91.166.255
195.91.168.0/21
195.91.178.0-195.91.182.255
195.91.184.0/24
195.91.187.0-195.91.188.255
195.91.191.0-195.91.192.255
195.91.195.0-195.91.197.255
195.91.204.0/24
195.91.207.0-195.91.211.255
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.247.255
195.91.252.0/24
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
57:b4:91:d0:f3:99:7c:2c:d7:76:b7:4d:7c:f0:af:5c:a0:29:
62:af:42:80:01:12:65:e4:b1:30:fe:d4:5c:b3:30:a7:7d:4c:
e6:44:49:cc:fc:5d:7c:56:57:a2:fe:d4:c0:25:97:d3:a4:fb:
4c:f8:d9:ca:4e:e6:95:01:76:af:9c:da:30:68:14:9a:a8:f4:
54:f6:4d:ba:c7:e5:28:b6:43:94:84:c6:e7:e3:65:a2:d5:51:
df:42:53:42:69:90:cd:06:62:cf:4a:a8:e3:10:29:ac:76:00:
16:65:ff:85:73:ab:7c:26:79:81:7d:a6:3a:c9:4c:51:57:b1:
63:9c:52:49:a1:60:83:0c:e6:c0:62:d6:e2:34:aa:d1:51:60:
ae:33:19:39:4c:ad:cb:00:fe:7f:62:ce:28:8f:38:20:6a:a7:
8f:d1:98:a9:81:0f:28:de:31:64:7f:a6:bb:61:72:97:56:5a:
39:29:c4:4e:61:23:f9:dc:8a:1b:b1:92:e7:68:05:6c:26:6f:
d4:73:7c:fb:0d:ff:4a:8d:af:29:fd:39:f1:74:b9:a0:5b:ba:
92:c0:d9:46:06:d2:ff:dd:85:52:d2:d5:59:d8:97:97:68:c9:
c4:2c:89:cc:8c:86:c4:86:ca:d0:d9:b7:6d:a5:3d:6b:92:e6:
5f:8b:08:b7
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgISAY4uU+UYuR5DMAB6VZ5CHhTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMzExMTYyMzUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDkzZGEyNTk5MDEyMzhiZDFkOWQ1ZjZjNGIxMTY3MTY3MGM5YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD+j94m5sITodNnPAZneUvQllwH9
yMinJ0sbQDkdCcEqvO6RRxr8ioH8EHbrWKSBi1Z39rzmOVRpMnpCGmApUqhz1kMm
QXnreLhtT8RDXPEm/UaxlUOb/B47YQVC6v4u2m7nlkDyGiO4Fidoz5bItcRjvi37
9Q03Qt4VF17yCybNSlNd1HY4gFefYc9BDzk7h13Xj5WUOocGW90cDWZwK2Dzdqgn
BOesvcJ6e8nrFIJCWsYsHam8yfhM3pP7fWJSnyxKuLVm/j8Yud4H8v0J0LCWdwEF
Q62K61YrkuxjpASWPlCFwlr5oVNVnzfzHJm5Xnrx4e1dArJxPKW3Eis+tQIDAQAB
o4IDEzCCAw8wHQYDVR0OBBYEFMCT2iWZASOL0dnV9sSxFnFnDJwOMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvd0pQYUpaa0JJNHZSMmRYMnhMRVdjV2NNbkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCB/wQCAAEwgfgD
BABWPksDBABWPk8DBABWPlQDBABWPlwDBABWPl4DBABWPmADBAFWPmIDBAFWPmYD
BABWPm4DBANWPnADBABWPn0DBADDNtIDBADDW4UDBADDW4oDBAPDW5ADBADDW5kD
BADDW5wDBADDW6AwDAMEAMNbpQMEAMNbpgMEA8NbqDAMAwQBw1uyAwQAw1u2AwQA
w1u4MAwDBADDW7sDBADDW7wwDAMEAMNbvwMEAMNbwDAMAwQAw1vDAwQBw1vEAwQA
w1vMMAwDBADDW88DBALDW9ADBADDW9UDBADDW9cwDAMEAMNb2QMEA8Nb8AMEAMNb
/AMEAcNb/jAOBAIAAjAIAwYCKgImmJgwDQYJKoZIhvcNAQELBQADggEBAFe0kdDz
mXws13a3TXzwr1ygKWKvQoABEmXksTD+1FyzMKd9TOZEScz8XXxWV6L+1MAll9Ok
+0z42cpO5pUBdq+c2jBoFJqo9FT2TbrH5Si2Q5SExufjZaLVUd9CU0JpkM0GYs9K
qOMQKax2ABZl/4Vzq3wmeYF9pjrJTFFXsWOcUkmhYIMM5sBi1uI0qtFRYK4zGTlM
rcsA/n9iziiPOCBqp4/RmKmBDyjeMWR/prthcpdWWjkpxE5hI/ncihuxkudoBWwm
b9RzfPsN/0qNryn9OfF0uaBbupLA2UYG0v/dhVLS1VnYl5doycQsicyMhsSGytDZ
t22lPWuS5l+LCLc=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:01 2025 by rpki-client