Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/W4zn5OzmNEQCrdrqfB-Bk7PYtdk.roa
File: W4zn5OzmNEQCrdrqfB-Bk7PYtdk.roa (raw, json)
Hash identifier: mVL9KdIytywW85Rr5sBo6FPJkx8CwwTYkxQ89+pAcu0=
Subject key identifier: 5B:8C:E7:E4:EC:E6:34:44:02:AD:DA:EA:7C:1F:81:93:B3:D8:B5:D9
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01918D9E39D30F1202BC02A326D7F153996A
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/W4zn5OzmNEQCrdrqfB-Bk7PYtdk.roa
Signing time: Mon 26 Aug 2024 07:37:22 +0000
ROA not before: Mon 26 Aug 2024 07:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Oct 2024 13:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:9e:39:d3:0f:12:02:bc:02:a3:26:d7:f1:53:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Aug 26 07:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b8ce7e4ece6344402addaea7c1f8193b3d8b5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:97:b9:26:9d:fd:31:70:fa:3a:5d:9e:f1:
d4:c6:74:14:3d:8b:26:58:6b:7b:de:d6:a2:e5:70:
a2:2f:30:8f:f5:4b:29:81:68:bf:85:49:ce:a8:98:
80:88:52:2d:25:7d:d8:5d:d7:ee:ef:bc:16:67:b2:
7a:fc:8f:c8:90:9b:c1:31:06:28:6f:6a:87:e6:28:
71:b7:b8:bc:9b:90:36:bb:d5:bb:53:dd:14:e4:39:
d4:c6:8c:58:c7:30:9c:0b:2d:e3:cd:e2:3b:83:d4:
7b:48:e0:94:70:6a:71:c3:5e:e6:22:91:4d:71:c8:
00:0b:3f:fa:43:64:42:51:39:68:6f:cb:7f:b0:0d:
08:8d:a1:15:d8:a1:28:61:fb:11:55:63:d1:b4:f2:
14:6d:6c:0b:ba:6b:d5:56:78:2e:39:94:e7:b1:88:
c4:c6:e8:6d:89:1b:70:78:4a:64:19:d2:ab:54:59:
0f:a7:10:7c:f3:49:fd:7b:bf:5a:69:eb:51:1e:ad:
ea:e6:8e:30:58:bb:60:96:0c:9a:87:c3:ca:5d:b7:
a3:e7:3e:6c:36:c2:f0:02:87:b5:4a:bd:ef:6e:b4:
69:43:d0:4b:92:5e:a6:ae:ea:e6:32:b5:36:4d:dd:
63:58:59:82:3e:93:9d:4f:b9:ed:06:85:1e:18:a3:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:E7:E4:EC:E6:34:44:02:AD:DA:EA:7C:1F:81:93:B3:D8:B5:D9
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/W4zn5OzmNEQCrdrqfB-Bk7PYtdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
59:f3:94:4b:99:6e:65:16:69:c3:73:25:8e:16:cf:ea:7d:62:
36:61:19:9f:d7:b6:2f:58:9f:f4:b5:10:bf:45:ab:1e:4b:f3:
1a:b2:fc:c9:e1:6f:46:d6:34:fe:d8:8a:a9:db:bb:e2:78:87:
2a:cf:43:18:30:56:2f:aa:d8:b1:49:c3:8f:02:bf:74:58:ca:
05:10:b4:79:0b:40:f5:8e:df:fe:0a:5c:fd:81:20:bc:22:63:
04:ee:9b:af:f1:91:fa:5f:fc:36:dd:a2:26:fd:ac:ea:ba:0a:
f4:8c:60:1e:58:75:7c:d3:1e:5d:e8:8f:4d:6b:10:88:df:20:
19:53:ef:14:59:5c:1c:50:3c:05:15:e5:cd:2b:a1:99:f2:22:
87:a5:85:45:0d:b0:e5:ad:13:d3:9e:2b:d0:fd:3e:33:e0:0e:
4e:b8:41:2d:af:37:0c:2a:3e:2f:24:97:15:64:40:4b:7f:d1:
c0:c9:5c:3e:75:f3:44:78:c9:ec:41:69:3c:76:3b:c3:81:25:
cf:b8:53:74:63:1f:f1:af:0f:1d:e8:e1:8b:2b:80:90:a0:e4:
e8:9c:34:b5:bf:5f:be:bf:a1:b3:a8:17:66:2d:4d:73:0c:62:
fa:0a:d4:03:e2:cd:55:52:59:1e:db:bc:14:4c:d1:48:a5:76:
20:8b:2f:8b
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISAZGNnjnTDxICvAKjJtfxU5lqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQwODI2MDczNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjhjZTdlNGVjZTYzNDQ0MDJhZGRhZWE3YzFmODE5M2IzZDhiNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhWXuSad/TFw+jpdnvHUxnQUPYsm
WGt73tai5XCiLzCP9UspgWi/hUnOqJiAiFItJX3YXdfu77wWZ7J6/I/IkJvBMQYo
b2qH5ihxt7i8m5A2u9W7U90U5DnUxoxYxzCcCy3jzeI7g9R7SOCUcGpxw17mIpFN
ccgACz/6Q2RCUTlob8t/sA0IjaEV2KEoYfsRVWPRtPIUbWwLumvVVnguOZTnsYjE
xuhtiRtweEpkGdKrVFkPpxB880n9e79aaetRHq3q5o4wWLtglgyah8PKXbej5z5s
NsLwAoe1Sr3vbrRpQ9BLkl6mrurmMrU2Td1jWFmCPpOdT7ntBoUeGKPu+wIDAQAB
o4IDGDCCAxQwHQYDVR0OBBYEFFuM5+Ts5jREAq3a6nwfgZOz2LXZMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvVzR6bjVPem1ORVFDcmRycWZCLUJrN1BZdGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLAYIKwYBBQUHAQcBAf8EggEbMIIBFzCB9wQCAAEwgfAD
AwAuDwMDAC7UAwQFLvngAwQGPknAAwQFPmGgAwQFPnGAAwQFPo2AAwQFTpwAAwQH
UOgAAwQHUO8AAwQFUsLAAwQEVCaQAwMDVNADAwBVEwMEBln+QAMEB118gAMEBW1s
wAMEB22jAAMEA546mAMDALALAwQDsErQAwQEshGQAwMAsugDBAK5LuADBAK5R9AD
BAK5SGADBAK5YVQDBAK5iiADBAK5yXgDBAa8cUADBAW8fIADBAW8fsADBAXDRqAD
BAXUFMADBAXUJeADBAXULaADBAbUfcADBAXVvAADBAbV4UADBAfV7IADBAXZRGAw
GwQCAAIwFQMFACoApUADBQMqAgIoAwUDKgIP4DANBgkqhkiG9w0BAQsFAAOCAQEA
WfOUS5luZRZpw3MljhbP6n1iNmEZn9e2L1if9LUQv0WrHkvzGrL8yeFvRtY0/tiK
qdu74niHKs9DGDBWL6rYsUnDjwK/dFjKBRC0eQtA9Y7f/gpc/YEgvCJjBO6br/GR
+l/8Nt2iJv2s6roK9IxgHlh1fNMeXeiPTWsQiN8gGVPvFFlcHFA8BRXlzSuhmfIi
h6WFRQ2w5a0T054r0P0+M+AOTrhBLa83DCo+LySXFWRAS3/RwMlcPnXzRHjJ7EFp
PHY7w4Elz7hTdGMf8a8PHejhiyuAkKDk6Jw0tb9fvr+hs6gXZi1Ncwxi+grUA+LN
VVJZHtu8FEzRSKV2IIsviw==
-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:39 2024 by rpki-client on console-ams.rpki-client.org