Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/SSj_i8Zx5E2mUWKlPpls5Egvxxc.roa
File: SSj_i8Zx5E2mUWKlPpls5Egvxxc.roa (raw, json)
Hash identifier: MoHbVWUeKiH204ytSoUoUhHHJD96vem4Yoa6m6coCiU=
Subject key identifier: 49:28:FF:8B:C6:71:E4:4D:A6:51:62:A5:3E:99:6C:E4:48:2F:C7:17
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 018CD3FBC03DD5A23D88D7D0652023CE18D9
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/SSj_i8Zx5E2mUWKlPpls5Egvxxc.roa
Signing time: Thu 04 Jan 2024 10:19:00 +0000
ROA not before: Thu 04 Jan 2024 10:19:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 719
IP address blocks: 194.188.0.0/16 maxlen: 16
213.161.32.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
82.141.64.0/18 maxlen: 18
195.74.0.0/19 maxlen: 19
194.188.151.0/24 maxlen: 24
194.188.150.0/24 maxlen: 24
193.229.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
193.66.0.0/16 maxlen: 16
217.25.96.0/20 maxlen: 20
212.38.224.0/19 maxlen: 19
194.86.0.0/16 maxlen: 16
195.255.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
82.118.192.0/19 maxlen: 19
194.240.0.0/15 maxlen: 15
88.112.0.0/14 maxlen: 14
192.126.35.0/24 maxlen: 24
193.65.129.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
212.50.192.0/19 maxlen: 19
217.77.192.0/20 maxlen: 20
193.199.0.0/16 maxlen: 16
212.226.0.0/16 maxlen: 16
192.77.120.0/22 maxlen: 22
193.64.0.0/15 maxlen: 15
212.246.0.0/16 maxlen: 16
91.152.0.0/13 maxlen: 13
80.186.0.0/16 maxlen: 16
217.24.96.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
213.192.128.0/18 maxlen: 18
213.130.224.0/19 maxlen: 19
195.218.64.0/19 maxlen: 19
139.97.0.0/16 maxlen: 16
82.103.192.0/18 maxlen: 18
109.232.80.0/21 maxlen: 21
195.16.192.0/19 maxlen: 19
195.238.192.0/19 maxlen: 19
83.245.128.0/17 maxlen: 17
194.136.170.0/24 maxlen: 24
178.251.56.0/21 maxlen: 21
77.109.192.0/18 maxlen: 18
85.76.0.0/14 maxlen: 14
194.136.213.0/24 maxlen: 24
85.157.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
195.170.128.0/19 maxlen: 19
94.22.0.0/16 maxlen: 16
192.163.128.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
193.184.0.0/15 maxlen: 15
194.211.5.0/24 maxlen: 24
194.211.0.0/16 maxlen: 16
194.157.58.0/24 maxlen: 24
194.157.60.0/24 maxlen: 24
194.157.59.0/24 maxlen: 24
194.157.63.0/24 maxlen: 24
194.157.62.0/24 maxlen: 24
194.157.61.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.36.0/24 maxlen: 24
85.156.0.0/16 maxlen: 16
192.102.32.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
80.88.176.0/20 maxlen: 20
192.102.42.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
195.236.179.0/24 maxlen: 24
84.230.0.0/15 maxlen: 15
213.250.64.0/18 maxlen: 18
192.163.64.0/18 maxlen: 18
81.197.0.0/16 maxlen: 16
195.197.0.0/16 maxlen: 16
194.136.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
192.163.32.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
31.7.16.0/20 maxlen: 20
212.54.0.0/19 maxlen: 19
81.209.0.0/17 maxlen: 17
82.215.192.0/18 maxlen: 18
193.142.51.0/24 maxlen: 24
80.81.160.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.148.192.0/19 maxlen: 19
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
213.169.0.0/19 maxlen: 19
2a00:1dd0::/29 maxlen: 32
2001:670::/29 maxlen: 32
2001:1658::/29 maxlen: 32
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 10:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:fb:c0:3d:d5:a2:3d:88:d7:d0:65:20:23:ce:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 4 10:19:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4928ff8bc671e44da65162a53e996ce4482fc717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:fe:7b:d2:e2:b7:24:bf:dd:ff:d6:9f:4b:
4c:90:c7:c3:7e:d2:41:5c:2d:0a:84:31:3b:d8:d0:
d7:8e:27:e8:0a:d9:3a:73:b3:93:5f:95:96:df:88:
4a:e8:ba:b0:dd:42:1e:f8:81:5b:83:e4:b5:1d:8e:
67:bc:01:05:88:af:e7:e3:fc:66:39:2c:a5:c9:3c:
e6:91:f1:da:b4:a0:ca:b7:ae:e6:31:25:f7:10:27:
4b:ad:ea:04:16:82:8b:47:b3:2b:3f:31:2e:a5:8e:
cb:4f:60:0b:9f:dc:24:d5:f4:a6:bb:7a:c6:6f:c2:
6c:7d:41:f2:e7:58:d7:38:1e:44:74:74:b2:89:30:
bf:a2:1f:c2:86:fd:68:70:84:6e:fb:f5:8f:93:24:
28:2e:f8:30:15:a2:a2:9f:92:7f:3e:8f:81:1d:45:
3f:47:46:b2:92:74:5c:c3:6e:3b:e8:02:4a:79:9a:
17:55:91:c0:db:ff:96:b1:9e:13:a6:fa:db:03:14:
93:d9:35:87:a2:66:5a:db:d4:be:b3:4e:54:c0:70:
4a:a5:b7:f8:1f:7c:7e:82:89:c0:1a:ec:1b:3f:0b:
e7:62:1d:c5:34:fe:fd:58:20:4c:45:8a:8a:d9:85:
72:84:e4:bd:6c:be:ee:69:1b:7d:60:be:b0:51:77:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:FF:8B:C6:71:E4:4D:A6:51:62:A5:3E:99:6C:E4:48:2F:C7:17
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/SSj_i8Zx5E2mUWKlPpls5Egvxxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.32.0/24
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
193.64.0.0-193.66.255.255
193.94.0.0/16
193.142.51.0/24
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:670::/29
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:61:38:9f:d2:ba:af:22:13:48:e5:a5:57:f3:69:5b:e1:e0:
bb:30:99:a9:ad:02:40:98:f9:92:ef:58:c9:0f:59:c1:87:8d:
18:1f:59:e7:64:a6:de:b5:ba:53:cc:b8:0a:13:f1:de:0a:1c:
5a:c7:c1:99:4d:05:05:9b:99:5e:71:ea:f5:9a:89:2e:64:13:
ff:d0:6e:d2:5a:21:46:c1:96:e5:2d:ac:63:21:33:f5:ed:b7:
a6:f9:3a:96:3d:d4:41:f6:1e:7a:7b:19:00:bc:eb:37:c6:c0:
86:6a:15:ba:ed:0c:91:37:83:78:5d:95:a4:88:c6:34:c0:15:
b8:70:89:6a:98:7a:ec:c1:15:3f:3e:9f:0c:dc:39:4d:e2:66:
42:ab:c9:35:85:74:96:c8:42:87:0e:7b:6c:e0:db:11:61:14:
91:61:88:1d:cd:87:ca:43:d3:85:7c:87:4a:d4:8e:fd:22:44:
e3:d3:4e:74:46:5c:81:c4:a5:b6:a6:ac:1e:74:e5:ec:46:ce:
23:1b:b6:5d:4c:11:aa:e8:88:47:57:af:47:b6:93:14:37:2d:
ef:6a:fc:e5:04:35:cb:9e:22:d9:7e:65:8c:e9:85:d0:ac:17:
24:fd:34:0d:fc:bf:b3:83:83:e3:2a:27:eb:aa:c4:70:8c:1f:
38:66:5d:df
-----BEGIN CERTIFICATE-----
MIIG9DCCBdygAwIBAgISAYzT+8A91aI9iNfQZSAjzhjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj
YjJiNzMwHhcNMjQwMTA0MTAxOTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTI4ZmY4YmM2NzFlNDRkYTY1MTYyYTUzZTk5NmNlNDQ4MmZjNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtb+e9LityS/3f/Wn0tMkMfDftJB
XC0KhDE72NDXjifoCtk6c7OTX5WW34hK6Lqw3UIe+IFbg+S1HY5nvAEFiK/n4/xm
OSylyTzmkfHatKDKt67mMSX3ECdLreoEFoKLR7MrPzEupY7LT2ALn9wk1fSmu3rG
b8JsfUHy51jXOB5EdHSyiTC/oh/Chv1ocIRu+/WPkyQoLvgwFaKin5J/Po+BHUU/
R0ayknRcw2476AJKeZoXVZHA2/+WsZ4TpvrbAxST2TWHomZa29S+s05UwHBKpbf4
H3x+gonAGuwbPwvnYh3FNP79WCBMRYqK2YVyhOS9bL7uaRt9YL6wUXcBfQIDAQAB
o4IEADCCA/wwHQYDVR0OBBYEFEko/4vGceRNplFipT6ZbORIL8cXMB8GA1UdIwQY
MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt
MTVlOTBiZjg3ZmFiLzEvU1NqX2k4Wng1RTJtVVdLbFBwbHM1RWd2eHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi
LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFAYIKwYBBQUHAQcBAf8EggIDMIIB/zCCAdAEAgABMIIB
yAMEBB8HEAMEAy62cAMDAD6OAwQFPpTAAwQFPthgAwQFPvBAAwQHPviAAwQGTW3A
AwQFUFGgAwQEUFiwAwMAULoDBAVQ+GADAwBRxQMEB1HRAAMEBlJnwAMEBVJ2wAME
BlKNQAMEBlLXwAMEB1P1gAMDAVTmAwMCVUwDAwFVnAMEB1XZAAMDAlhwAwMDW5gD
AwBeFgMEA23oUAMDAIthAwQDsvs4AwQCwE14AwQAwGYgMAwDBALAZiQDBADAZiow
DAMEAMBmMQMEAMBmMgMEAMB+ATAMAwQAwH4XAwQAwH4YAwQAwH4jAwQAwH4sAwQA
wH4uMAwDBAXAoyADBAXAo4AwCgMDBsFAAwMAwUIDAwDBXgMEAMGOMwMDAcG4AwMA
wccDAwDB5QMDAMJWAwMAwogDAwDCnQMDAMK8AwMAwtMDAwHC8AMEBcMQwAMEBcNK
AAMEBcOqgAMDAMPFAwQFw9pAAwMBw+wDBAXD7sADAwDD/wMEBdQm4AMEBdQywAME
BdQ2AAMEBdQ/AAMDANTiAwMA1PYDBAXVguADBAXVoSADBAXVqQADBAbVwIADBAbV
+kADBATZGGADBATZGWADBATZTcADAwDZmDApBAIAAjAjAwUDIAEGcAMFAyABCZgD
BQMgAQnwAwUDIAEWWAMFAyoAHdAwDQYJKoZIhvcNAQELBQADggEBAE5hOJ/Suq8i
E0jlpVfzaVvh4LswmamtAkCY+ZLvWMkPWcGHjRgfWedkpt61ulPMuAoT8d4KHFrH
wZlNBQWbmV5x6vWaiS5kE//QbtJaIUbBluUtrGMhM/Xtt6b5OpY91EH2Hnp7GQC8
6zfGwIZqFbrtDJE3g3hdlaSIxjTAFbhwiWqYeuzBFT8+nwzcOU3iZkKryTWFdJbI
QocOe2zg2xFhFJFhiB3Nh8pD04V8h0rUjv0iROPTTnRGXIHEpbamrB505exGziMb
tl1MEaroiEdXr0e2kxQ3Le9q/OUENcueItl+ZYzphdCsFyT9NA38v7ODg+MqJ+uq
xHCMHzhmXd8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:56 2025 by rpki-client