Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qDoWC2soCD8xY9-IuS9AOhiemnw.roa
File: qDoWC2soCD8xY9-IuS9AOhiemnw.roa (raw, json)
Hash identifier: vF+XIk1CjEV19OlisjriYkFVvbN1+KpUm2g88gwXKng=
Subject key identifier: A8:3A:16:0B:6B:28:08:3F:31:63:DF:88:B9:2F:40:3A:18:9E:9A:7C
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018D8DAEBCCF69B9C86E587F3CC55D065B7B
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qDoWC2soCD8xY9-IuS9AOhiemnw.roa
Signing time: Fri 09 Feb 2024 11:44:15 +0000
ROA not before: Fri 09 Feb 2024 11:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
62.72.64.0/19 maxlen: 19
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.201.0/24 maxlen: 24
87.123.202.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.206.0/24 maxlen: 24
87.123.207.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.32.0/20 maxlen: 20
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.54.0/23 maxlen: 23
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
88.130.59.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/21 maxlen: 21
88.130.160.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/20 maxlen: 20
89.245.80.0/20 maxlen: 20
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.120.0/24 maxlen: 24
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.124.0/24 maxlen: 24
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.236.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.144.0/20 maxlen: 20
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:ae:bc:cf:69:b9:c8:6e:58:7f:3c:c5:5d:06:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Feb 9 11:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a83a160b6b28083f3163df88b92f403a189e9a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:32:78:24:ea:3d:a8:39:96:d0:27:7a:d2:
24:93:16:f3:3e:d1:ec:24:8a:ae:f0:6f:e6:51:b6:
89:69:4c:08:33:8e:80:63:ac:cf:4e:dd:0b:c7:2c:
98:1c:ad:01:f8:5c:e5:33:ba:05:da:22:57:ff:a6:
24:06:b7:c2:38:e6:58:29:22:72:d7:f6:b7:a4:7d:
58:09:f8:6f:87:73:ab:4a:70:c3:95:2b:c6:34:46:
dd:6a:6a:6e:8f:08:68:47:09:f4:00:5b:f6:c1:5a:
f8:15:ac:f3:38:00:d9:1b:08:2b:1b:ac:7d:2c:6d:
7f:a2:38:26:06:30:48:e0:e7:72:0b:a7:eb:2b:a6:
64:42:91:03:2e:d7:c9:9f:a1:e1:80:0e:a4:5b:34:
a3:25:88:86:d3:43:79:b1:21:81:65:a0:99:b2:d9:
52:1a:5c:62:5d:ad:5b:b8:71:d6:be:2b:12:5d:de:
19:10:cb:9c:c4:ac:3a:19:22:51:14:04:e0:ad:22:
05:75:d8:14:75:e7:b7:f4:f8:d1:5f:c1:bd:e6:c4:
9f:26:f5:2d:53:2d:5d:4d:f4:c5:76:40:0b:a3:bd:
04:47:b0:b9:1f:51:4e:75:9b:48:0e:73:d5:38:eb:
62:58:20:9a:1b:62:45:a5:15:a5:47:45:ef:7f:bb:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3A:16:0B:6B:28:08:3F:31:63:DF:88:B9:2F:40:3A:18:9E:9A:7C
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qDoWC2soCD8xY9-IuS9AOhiemnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
3a:62:99:03:91:ad:86:62:ac:67:64:5f:7d:75:c0:d5:e0:29:
0a:bf:57:50:78:4b:21:80:5f:42:b1:89:96:ef:29:d7:d5:58:
56:1a:17:8b:d3:91:87:99:f4:3b:ba:cd:fa:30:47:56:f4:d6:
5e:d8:60:5d:dc:8a:ed:a6:7d:2e:9c:85:5a:0b:9d:92:37:ca:
f1:81:4b:b1:38:28:a1:cd:57:92:57:c1:96:b3:a6:ae:98:4d:
7a:12:d5:34:cc:fb:b5:de:af:06:b8:1f:75:e0:38:06:87:1e:
fc:6f:4a:27:cd:8c:8b:c7:86:dd:07:da:cd:b9:65:8a:96:61:
09:40:1c:e0:d2:83:05:0c:b9:29:bd:36:eb:fc:79:a4:64:aa:
32:89:4d:7f:7e:0b:58:8e:b4:f7:5d:e7:14:af:ff:db:c6:6a:
0b:54:10:8a:b1:b9:00:40:ef:1f:b0:5a:3f:b3:69:cd:a4:a7:
c8:ff:d4:57:5c:64:b8:02:a6:05:7f:42:76:bf:57:3d:5b:d9:
21:f7:ed:d1:21:a2:40:6f:dc:45:62:04:c6:86:5c:ef:e9:d1:
c8:9e:b2:16:82:e4:67:74:de:37:7d:e0:6a:37:38:80:97:a1:
10:14:22:f8:70:70:96:72:cd:d3:43:9f:15:b8:0f:e8:ac:51:
83:7e:7e:15
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAY2NrrzPabnIblh/PMVdBlt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjQwMjA5MTE0NDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODNhMTYwYjZiMjgwODNmMzE2M2RmODhiOTJmNDAzYTE4OWU5YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcwyeCTqPag5ltAnetIkkxbzPtHs
JIqu8G/mUbaJaUwIM46AY6zPTt0LxyyYHK0B+FzlM7oF2iJX/6YkBrfCOOZYKSJy
1/a3pH1YCfhvh3OrSnDDlSvGNEbdampujwhoRwn0AFv2wVr4FazzOADZGwgrG6x9
LG1/ojgmBjBI4OdyC6frK6ZkQpEDLtfJn6HhgA6kWzSjJYiG00N5sSGBZaCZstlS
GlxiXa1buHHWvisSXd4ZEMucxKw6GSJRFATgrSIFddgUdee39PjRX8G95sSfJvUt
Uy1dTfTFdkALo70ER7C5H1FOdZtIDnPVOOtiWCCaG2JFpRWlR0Xvf7s0zQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFKg6FgtrKAg/MWPfiLkvQDoYnpp8MB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvcURvV0Myc29DRDh4WTktSXVTOUFPaGllbW53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCASEEAgABMIIB
GQMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD
BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD
AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA
AwQGjzpAAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+Kg
AwQEykeAAwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1YogAwQF1YuA
AwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdAMCkEAgAC
MCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkqhkiG9w0B
AQsFAAOCAQEAOmKZA5GthmKsZ2RffXXA1eApCr9XUHhLIYBfQrGJlu8p19VYVhoX
i9ORh5n0O7rN+jBHVvTWXthgXdyK7aZ9LpyFWgudkjfK8YFLsTgooc1XklfBlrOm
rphNehLVNMz7td6vBrgfdeA4Boce/G9KJ82Mi8eG3QfazbllipZhCUAc4NKDBQy5
Kb026/x5pGSqMolNf34LWI60913nFK//28ZqC1QQirG5AEDvH7BaP7NpzaSnyP/U
V1xkuAKmBX9Cdr9XPVvZIfft0SGiQG/cRWIExoZc7+nRyJ6yFoLkZ3TeN33gajc4
gJehEBQi+HBwlnLN00OfFbgP6KxRg35+FQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 15:26:41 2025 by rpki-client