Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VNkf9J8SHJ7bqUdcv5kXrR-pqPM.roa
File: VNkf9J8SHJ7bqUdcv5kXrR-pqPM.roa (raw, json)
Hash identifier: iLeNkh7kdJ0R5fD8pLklG3daXJgSuZNv4sxrmjnpFgg=
Subject key identifier: 54:D9:1F:F4:9F:12:1C:9E:DB:A9:47:5C:BF:99:17:AD:1F:A9:A8:F3
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01856D5407D592028C4D9E4B268CF749146C
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VNkf9J8SHJ7bqUdcv5kXrR-pqPM.roa
Signing time: Sun 01 Jan 2023 12:35:01 +0000
ROA not before: Sun 01 Jan 2023 12:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.193.0/24 maxlen: 24
31.214.196.0/22 maxlen: 22
31.214.195.0/24 maxlen: 24
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/24 maxlen: 24
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.220.0/23 maxlen: 23
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 21
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.161.0/24 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.162.0/23 maxlen: 23
31.214.166.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 21
37.10.107.0/24 maxlen: 24
37.10.106.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.118.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.119.0/24 maxlen: 24
37.10.124.0/22 maxlen: 22
45.159.4.0/23 maxlen: 23
45.159.7.0/24 maxlen: 24
45.159.6.0/24 maxlen: 24
5.83.160.0/22 maxlen: 24
5.83.164.0/24 maxlen: 24
5.83.165.0/24 maxlen: 24
5.83.163.0/24 maxlen: 24
5.83.166.0/24 maxlen: 24
5.83.172.0/23 maxlen: 23
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
85.190.138.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.136.0/24 maxlen: 32
85.190.137.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
85.190.141.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
85.190.140.0/24 maxlen: 24
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.143.0/24 maxlen: 24
85.190.144.0/24 maxlen: 24
85.190.142.0/24 maxlen: 24
85.190.145.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.164.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
85.190.172.0/22 maxlen: 22
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/20 maxlen: 20
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
5.62.112.0/21 maxlen: 21
95.156.198.0/24 maxlen: 24
5.62.120.0/22 maxlen: 22
5.62.124.0/23 maxlen: 23
5.62.127.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
85.190.130.0/23 maxlen: 23
95.156.211.0/24 maxlen: 24
85.190.128.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
95.156.213.0/24 maxlen: 24
5.62.64.0/21 maxlen: 21
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 21
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
5.101.166.0/24 maxlen: 24
2a03:4d45:800::/37 maxlen: 37
2a03:4d45::/37 maxlen: 37
2a03:4d44:2000::/37 maxlen: 37
2a03:4d44:800::/37 maxlen: 37
2a03:4d40::/32 maxlen: 32
2a03:4d43::/32 maxlen: 32
2a03:4d43:2000::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d43::/37 maxlen: 37
2a03:4d41:300::/40 maxlen: 40
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d41::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d47:800::/48 maxlen: 48
2a03:4d47::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:07:d5:92:02:8c:4d:9e:4b:26:8c:f7:49:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jan 1 12:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54d91ff49f121c9edba9475cbf9917ad1fa9a8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:38:69:48:f0:64:46:0f:c7:43:0a:dd:6d:
9d:f7:58:95:78:db:b5:15:88:e5:f1:9b:fd:9d:51:
e5:45:2d:cc:be:45:c3:fb:69:43:5e:0d:e8:b0:2c:
05:01:74:87:87:28:b1:6b:1e:bc:05:4b:c6:7e:12:
28:94:4d:28:a2:26:60:0d:5f:90:48:c6:3e:09:17:
61:79:fd:1d:24:fc:e1:75:cd:f6:90:ec:87:76:e0:
ab:85:ba:f8:0f:7d:76:ec:63:10:61:0b:c4:b1:6b:
b2:26:04:77:e5:8b:12:48:9b:75:19:bb:0a:f6:bc:
05:a3:43:3c:04:0d:c2:22:88:2d:df:a2:88:9f:3a:
95:49:ce:06:71:8d:90:ad:05:96:0e:98:5c:ba:71:
3a:bb:86:dc:74:2d:52:ae:0f:5f:76:a5:ee:bc:a8:
89:a7:32:1c:2c:36:54:fd:cf:ed:1a:f5:30:92:88:
0a:2f:d4:e8:5e:7c:2f:89:51:06:ee:39:bb:f9:ff:
8d:fd:6d:a6:df:10:72:4b:a0:5b:d4:d1:4c:ff:4e:
21:c7:e4:07:a4:76:73:c2:46:a2:3c:23:10:95:e6:
ab:f8:a7:3e:5a:ae:70:c9:de:6e:9a:b6:b0:1d:f6:
8e:08:ac:8f:c8:d1:20:44:4a:01:5b:6f:eb:d5:c0:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:1F:F4:9F:12:1C:9E:DB:A9:47:5C:BF:99:17:AD:1F:A9:A8:F3
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VNkf9J8SHJ7bqUdcv5kXrR-pqPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0/20
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.163.255
31.214.166.0/24
31.214.193.0/24
31.214.195.0-31.214.199.255
31.214.202.0-31.214.211.255
31.214.216.0/24
31.214.218.0-31.214.221.255
31.214.224.0/22
31.214.232.0/21
37.10.96.0/21
37.10.106.0/23
37.10.115.0/24
37.10.118.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0/21
85.190.128.0/22
85.190.134.0-85.190.150.255
85.190.152.0-85.190.175.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/31
2a03:4d44:800::/37
2a03:4d44:2000::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
78:b4:ea:cc:36:f8:98:86:b8:84:1b:5d:07:49:10:64:31:ee:
3c:5e:e5:f6:0e:7e:a0:7a:51:a1:b0:c4:3a:05:4b:c6:69:3a:
ed:54:4b:65:33:b4:6c:b7:be:09:f3:c5:03:23:85:ef:e0:b3:
bd:93:24:a7:3b:2e:1d:46:07:f9:ed:e0:29:6a:60:ce:17:8c:
a7:59:ee:45:33:bc:34:92:8d:e5:aa:ea:29:20:32:c5:c9:6f:
19:8d:07:27:65:3c:aa:3b:bf:39:d2:b5:13:9f:b2:74:ab:3b:
58:f9:06:a3:d9:fc:15:2c:00:22:0a:a9:f9:ac:a8:71:86:a6:
3c:1a:34:ad:37:20:e0:db:0a:d9:44:d6:ce:05:4b:c5:6a:a2:
0e:ba:01:8c:14:a8:52:9f:4a:22:cb:0a:4b:9b:87:2e:69:fe:
78:c1:42:9e:65:40:bf:c4:18:12:15:bc:87:c2:12:7d:33:c0:
c7:12:c4:32:f6:c7:06:f4:36:46:a0:c9:3c:74:c3:1f:2d:55:
59:fd:d0:39:f0:4f:81:2c:a0:c7:f5:9e:25:23:33:c0:b1:56:
e7:cf:a9:1e:88:cd:84:c2:bc:b1:49:5c:57:32:10:82:ce:0e:
8e:06:7b:35:36:a3:e6:0b:19:4b:d0:f3:c7:ee:40:23:ae:70:
6b:5e:2f:63
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgISAYVtVAfVkgKMTZ5LJoz3SRRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjMwMTAxMTIzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGQ5MWZmNDlmMTIxYzllZGJhOTQ3NWNiZjk5MTdhZDFmYTlhOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznk4aUjwZEYPx0MK3W2d91iVeNu1
FYjl8Zv9nVHlRS3MvkXD+2lDXg3osCwFAXSHhyixax68BUvGfhIolE0ooiZgDV+Q
SMY+CRdhef0dJPzhdc32kOyHduCrhbr4D3127GMQYQvEsWuyJgR35YsSSJt1GbsK
9rwFo0M8BA3CIogt36KInzqVSc4GcY2QrQWWDphcunE6u4bcdC1Srg9fdqXuvKiJ
pzIcLDZU/c/tGvUwkogKL9ToXnwviVEG7jm7+f+N/W2m3xByS6Bb1NFM/04hx+QH
pHZzwkaiPCMQlear+Kc+Wq5wyd5umrawHfaOCKyPyNEgREoBW2/r1cDaaQIDAQAB
o4IEFTCCBBEwHQYDVR0OBBYEFFTZH/SfEhye26lHXL+ZF60fqajzMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvVk5rZjlKOFNISjdicVVkY3Y1a1hyUi1wcVBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICKQYIKwYBBQUHAQcBAf8EggIYMIICFDCCAb4EAgABMIIB
tgMEAwU+QAMEBQU+YAMEBAVToAMEAwVloAMEAB/WgAMEAR/WgjAMAwQBH9aGAwQA
H9aIAwQBH9aOAwQAH9aUMAwDBAEf1p4DBAIf1qADBAAf1qYDBAAf1sEwDAMEAB/W
wwMEAx/WwDAMAwQBH9bKAwQCH9bQAwQAH9bYMAwDBAEf1toDBAEf1twDBAIf1uAD
BAMf1ugDBAMlCmADBAElCmoDBAAlCnMwDAMEASUKdgMEByUKAAMEAS2MgAMEAC2M
gwMEAi2fBAMEAS775DAMAwQALvvnAwQALvvsAwQALvvuAwQDLvvwAwQCVb6AMAwD
BAFVvoYDBABVvpYwDAMEA1W+mAMEBFW+oDAMAwQAX5zBAwQAX5zCAwQAX5zGMAwD
BABfnNEDBAJfnNADBABfnNUDBAFfnNwDBABfnOADBAFfnO4DBABfnPoDBABt5sUD
BABt5tADBABt5tMDBABt5tYDBAFt5vADBABt5vMDBAFt5vgDBAKAAHADBACG/8YD
BAGG/9AwDAMEAob/1AMEAIb/1gMEAIb/8AMEAIb/+wMEArkJaAMEAMKp0wMEAcNS
ngMEA9lywDBQBAIAAjBKMA8DBQYqA01AAwYAKgNNQQYDBgAqA01BCQMFASoDTUID
BgMqA01ECAMGAyoDTUQgAwYEKgNNRQADBwAqA01HAAADBwAqA01HCAAwDQYJKoZI
hvcNAQELBQADggEBAHi06sw2+JiGuIQbXQdJEGQx7jxe5fYOfqB6UaGwxDoFS8Zp
Ou1US2UztGy3vgnzxQMjhe/gs72TJKc7Lh1GB/nt4ClqYM4XjKdZ7kUzvDSSjeWq
6ikgMsXJbxmNBydlPKo7vznStROfsnSrO1j5BqPZ/BUsACIKqfmsqHGGpjwaNK03
IODbCtlE1s4FS8Vqog66AYwUqFKfSiLLCkubhy5p/njBQp5lQL/EGBIVvIfCEn0z
wMcSxDL2xwb0NkagyTx0wx8tVVn90DnwT4EsoMf1niUjM8CxVufPqR6IzYTCvLFJ
XFcyEILODo4GezU2o+YLGUvQ88fuQCOucGteL2M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org