Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/F7qCqznl3zB44MDfgdLXGu8v1uw.roa
File: F7qCqznl3zB44MDfgdLXGu8v1uw.roa (raw, json)
Hash identifier: WJeG8s98Kmt3PN+p/lCKTnBB5a2rHbL+3GkJl5lGgZI=
Subject key identifier: 17:BA:82:AB:39:E5:DF:30:78:E0:C0:DF:81:D2:D7:1A:EF:2F:D6:EC
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0192564B9CC8B62B02DF5E0187B8CA8CC85B
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/F7qCqznl3zB44MDfgdLXGu8v1uw.roa
Signing time: Fri 04 Oct 2024 06:50:48 +0000
ROA not before: Fri 04 Oct 2024 06:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Nov 2024 12:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:4b:9c:c8:b6:2b:02:df:5e:01:87:b8:ca:8c:c8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Oct 4 06:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ba82ab39e5df3078e0c0df81d2d71aef2fd6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:95:79:f8:b4:53:6e:9b:30:9a:68:14:46:
9a:16:ec:1c:02:78:51:fd:24:f4:f8:31:dd:3d:a8:
9a:e6:e2:87:c4:e9:d2:1d:23:19:2c:74:be:0a:24:
89:d3:45:3d:54:b7:3d:44:95:0f:61:70:5c:32:8e:
01:20:c6:36:a2:f0:01:05:82:4c:3a:63:75:51:4a:
46:57:04:62:eb:ec:5d:5d:00:f2:10:71:3a:39:fd:
84:38:0b:33:1b:8c:4f:90:5a:e3:c9:01:ce:d1:40:
32:ac:77:9e:30:94:a5:f5:b8:39:5b:34:ac:38:48:
00:76:25:e0:38:7d:64:f6:0b:fd:e7:88:3d:62:b9:
25:d8:35:2a:ce:60:56:94:e9:88:af:82:ae:fa:ed:
a4:99:fd:e8:2b:93:4e:28:ae:98:d3:80:cb:e6:04:
ac:28:be:d2:72:57:01:91:1a:0b:87:5d:82:98:de:
8a:71:ff:17:1e:4b:1e:c8:01:31:9a:10:dc:b2:4e:
e7:b2:42:3c:d8:55:df:4b:ce:05:85:29:af:a0:d7:
f6:f8:b7:16:e0:50:3b:97:a6:57:53:41:79:f8:56:
82:4c:74:ef:85:1b:8e:06:a3:e1:f6:20:1c:50:b8:
c4:e7:40:05:98:fb:f4:7e:42:06:aa:3f:6b:ea:fb:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:82:AB:39:E5:DF:30:78:E0:C0:DF:81:D2:D7:1A:EF:2F:D6:EC
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/F7qCqznl3zB44MDfgdLXGu8v1uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
c4:80:f3:53:ed:80:33:fc:14:d7:e2:1f:b4:21:91:32:3f:50:
26:54:20:96:7c:ec:f9:fc:42:3d:f4:87:cf:6a:ba:f9:3a:b0:
2b:20:ef:52:70:c8:91:91:ac:76:86:1f:d0:eb:41:56:6c:21:
4a:b4:54:ee:58:9c:59:eb:5e:2b:a8:b3:bc:9b:86:a1:de:bb:
81:7f:87:3b:8b:39:6f:a8:88:21:2e:93:6c:e2:5b:82:ad:22:
6b:1c:23:34:38:39:bb:67:aa:74:52:52:f7:1d:70:90:ef:f5:
09:69:ad:7d:68:25:0d:13:58:eb:3a:83:7d:78:f5:d5:ea:c3:
dd:11:36:07:ce:9b:ed:a1:86:16:a9:bf:9b:88:ab:1b:4c:b0:
bc:93:21:9c:2a:e9:69:b8:0c:3b:86:19:5e:86:fd:02:34:e0:
1e:69:6b:03:ac:4b:c0:a2:97:cf:c9:df:5a:d3:f3:f0:a8:9c:
49:e3:50:84:af:c2:ba:53:80:67:c4:84:5e:89:52:32:b1:65:
68:57:98:1a:d6:16:8b:18:9b:c5:8a:68:7e:b0:1a:34:51:57:
b1:8b:c8:ed:9e:9e:b3:c0:d5:69:99:2d:7c:a4:30:32:09:15:
be:58:36:dc:8b:c9:10:66:92:34:e7:98:a4:2d:be:fe:3c:8b:
93:08:6e:f7
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISAZJWS5zItisC314Bh7jKjMhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQxMDA0MDY1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2JhODJhYjM5ZTVkZjMwNzhlMGMwZGY4MWQyZDcxYWVmMmZkNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OWVefi0U26bMJpoFEaaFuwcAnhR
/ST0+DHdPaia5uKHxOnSHSMZLHS+CiSJ00U9VLc9RJUPYXBcMo4BIMY2ovABBYJM
OmN1UUpGVwRi6+xdXQDyEHE6Of2EOAszG4xPkFrjyQHO0UAyrHeeMJSl9bg5WzSs
OEgAdiXgOH1k9gv954g9Yrkl2DUqzmBWlOmIr4Ku+u2kmf3oK5NOKK6Y04DL5gSs
KL7SclcBkRoLh12CmN6Kcf8XHkseyAExmhDcsk7nskI82FXfS84FhSmvoNf2+LcW
4FA7l6ZXU0F5+FaCTHTvhRuOBqPh9iAcULjE50AFmPv0fkIGqj9r6vvuewIDAQAB
o4IDGDCCAxQwHQYDVR0OBBYEFBe6gqs55d8weODA34HS1xrvL9bsMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvRjdxQ3F6bmwzekI0NE1EZmdkTFhHdTh2MXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLAYIKwYBBQUHAQcBAf8EggEbMIIBFzCB9wQCAAEwgfAD
AwAuDwMDAC7UAwQFLvngAwQGPknAAwQFPmGgAwQFPnGAAwQFPo2AAwQFTpwAAwQH
UOgAAwQHUO8AAwQFUsLAAwQEVCaQAwMDVNADAwBVEwMEBln+QAMEB118gAMEBW1s
wAMEB22jAAMEA546mAMDALALAwQDsErQAwQEshGQAwMAsugDBAK5LuADBAK5R9AD
BAK5SGADBAK5YVQDBAK5iiADBAK5yXgDBAa8cUADBAW8fIADBAW8fsADBAXDRqAD
BAXUFMADBAXUJeADBAXULaADBAbUfcADBAXVvAADBAbV4UADBAfV7IADBAXZRGAw
GwQCAAIwFQMFACoApUADBQMqAgIoAwUDKgIP4DANBgkqhkiG9w0BAQsFAAOCAQEA
xIDzU+2AM/wU1+IftCGRMj9QJlQglnzs+fxCPfSHz2q6+TqwKyDvUnDIkZGsdoYf
0OtBVmwhSrRU7licWeteK6izvJuGod67gX+HO4s5b6iIIS6TbOJbgq0iaxwjNDg5
u2eqdFJS9x1wkO/1CWmtfWglDRNY6zqDfXj11erD3RE2B86b7aGGFqm/m4irG0yw
vJMhnCrpabgMO4YZXob9AjTgHmlrA6xLwKKXz8nfWtPz8KicSeNQhK/CulOAZ8SE
XolSMrFlaFeYGtYWixibxYpofrAaNFFXsYvI7Z6es8DVaZktfKQwMgkVvlg23IvJ
EGaSNOeYpC2+/jyLkwhu9w==
-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:35 2024 by rpki-client on console-fra.rpki-client.org