Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JFILA4vNwUeFk_vmTWmKl0uEAwE.roa
File: JFILA4vNwUeFk_vmTWmKl0uEAwE.roa (raw, json)
Hash identifier: qrSJrXPuAMY2iDGQ8cQSD1Tax/EIeKUIWmW2FzWo1q8=
Subject key identifier: 24:52:0B:03:8B:CD:C1:47:85:93:FB:E6:4D:69:8A:97:4B:84:03:01
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FA113885DE1847B4DA8590303C772D0C3
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JFILA4vNwUeFk_vmTWmKl0uEAwE.roa
Signing time: Wed 22 May 2024 16:12:42 +0000
ROA not before: Wed 22 May 2024 16:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 May 2024 10:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:13:88:5d:e1:84:7b:4d:a8:59:03:03:c7:72:d0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 22 16:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24520b038bcdc1478593fbe64d698a974b840301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:a7:30:c0:05:e8:ff:da:69:2c:7e:b5:28:
a8:cb:c9:4f:96:ac:5f:6d:78:a4:f3:72:34:31:91:
b8:82:47:32:12:f8:45:14:94:f8:d1:a5:42:e4:7f:
e6:0e:4d:b2:80:28:8f:cb:1c:e3:a6:6f:33:8b:70:
35:c2:6f:9f:af:c1:f8:84:11:39:97:16:ae:64:1f:
f6:2a:14:6f:52:c4:46:11:be:cc:fc:7f:a5:f1:94:
b1:8b:04:36:7e:e1:15:9b:5e:c7:b3:e0:7e:cc:d2:
23:4c:4c:fa:49:74:a0:ea:92:d3:38:98:81:9e:dc:
04:bd:f8:81:17:9f:2c:6b:62:78:a1:6d:b8:de:ac:
d5:fd:dd:bd:17:d2:00:57:52:37:d0:28:9d:3b:5b:
76:5f:1d:e2:4b:21:4f:b5:7c:f9:a6:a6:cf:e5:06:
06:47:2d:ae:08:bc:80:c3:5c:fa:8f:6d:7d:56:29:
89:98:59:6b:07:8d:ac:3b:a5:d8:16:51:15:66:a0:
44:07:3d:04:f1:fa:2e:4b:3d:ab:ba:df:d0:f4:d3:
cc:0f:b0:2c:a0:6c:90:9d:f9:7d:5b:ba:db:04:12:
d0:c0:b6:8d:ef:e5:47:50:1a:b8:3f:ea:ad:02:78:
17:15:a3:ed:dd:05:86:fa:71:73:d2:ba:f2:8b:9d:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:0B:03:8B:CD:C1:47:85:93:FB:E6:4D:69:8A:97:4B:84:03:01
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JFILA4vNwUeFk_vmTWmKl0uEAwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
87.236.150.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.116.28.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
193.187.97.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f1:1e:b9:ae:29:09:75:71:ba:66:45:a9:0e:a0:b8:b9:f0:
59:13:07:c6:5f:ce:2f:f7:1f:8a:d0:b9:22:c5:90:d6:34:22:
0e:29:2d:5e:69:db:f5:f8:06:5e:b6:68:35:84:ff:cc:cd:05:
0f:eb:bb:33:86:30:85:24:1c:76:e4:94:11:fa:99:03:c9:1e:
e4:cf:ef:68:f7:cb:6b:09:e1:a8:c0:a2:96:fe:6e:95:52:82:
77:43:57:cd:74:0f:01:64:f7:cc:57:51:87:aa:a6:3c:06:e7:
ed:23:ef:32:48:de:74:a4:ab:01:15:c2:ff:f6:19:eb:82:08:
ec:ac:9e:6e:f1:b0:e7:cb:eb:a2:62:03:44:12:9c:a1:c9:b2:
e2:98:33:c9:0c:3d:a7:3c:de:48:92:90:de:42:b8:4a:87:cd:
0f:89:0a:ba:67:79:0e:6e:a6:b4:e6:48:dc:51:6e:14:60:e8:
e5:60:b7:c2:83:3b:03:5a:61:0e:2b:c1:9b:13:45:19:51:c6:
d1:59:53:ca:d8:a6:79:44:18:e4:57:28:8e:6e:21:01:ff:8b:
e8:13:43:27:d9:0d:09:58:fa:ea:20:34:48:8e:7a:34:8f:4d:
40:7d:09:ad:4a:23:13:9f:ea:a8:73:52:21:09:9f:0c:e8:6a:
db:0a:f5:aa
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAY+hE4hd4YR7TahZAwPHctDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwNTIyMTYxMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUyMGIwMzhiY2RjMTQ3ODU5M2ZiZTY0ZDY5OGE5NzRiODQwMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCnMMAF6P/aaSx+tSioy8lPlqxf
bXik83I0MZG4gkcyEvhFFJT40aVC5H/mDk2ygCiPyxzjpm8zi3A1wm+fr8H4hBE5
lxauZB/2KhRvUsRGEb7M/H+l8ZSxiwQ2fuEVm17Hs+B+zNIjTEz6SXSg6pLTOJiB
ntwEvfiBF58sa2J4oW243qzV/d29F9IAV1I30CidO1t2Xx3iSyFPtXz5pqbP5QYG
Ry2uCLyAw1z6j219VimJmFlrB42sO6XYFlEVZqBEBz0E8fouSz2rut/Q9NPMD7As
oGyQnfl9W7rbBBLQwLaN7+VHUBq4P+qtAngXFaPt3QWG+nFz0rryi53ZzQIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFCRSCwOLzcFHhZP75k1pipdLhAMBMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvSkZJTEE0dk53VWVGa192bVRXbUtsMHVFQXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAAI7MQMEAB/YPAMEASXdUgMEAi0KQAMEAi0KUAMEAC0LxAMEAC0P7gMEAC1d
UDAMAwQCLYQkAwQALYQmAwQBLYSAMAwDBAAtitUDBAAtitYDBAEtizQDBAAtizcD
BAAtjEADBAItjEgDBAEtkhgDBAAtkhsDBAItkwwDBAAtlYEDBAEtmHQDBAAtn1QD
BAAtn1cDBAA+6SIDBAA+6TADBABU9lEDBABX7JYDBABZawwDBABbx70DBABbzkQD
BABb7HkDBABdnW8DBAFdvngDBABefEsDBABefE0DBACwdAgDBACwdAwDBACwdBgD
BACwdBwDBAGw3jgDBACw3jsDBAC5vCkDBADBBRwDBAHBHwQDBADBOqoDBADBaxYD
BADBu2EDBADCaOQDBALD2IQDBADD4WMDBALVpkAwDQYJKoZIhvcNAQELBQADggEB
AD/xHrmuKQl1cbpmRakOoLi58FkTB8Zfzi/3H4rQuSLFkNY0Ig4pLV5p2/X4Bl62
aDWE/8zNBQ/ruzOGMIUkHHbklBH6mQPJHuTP72j3y2sJ4ajAopb+bpVSgndDV810
DwFk98xXUYeqpjwG5+0j7zJI3nSkqwEVwv/2GeuCCOysnm7xsOfL66JiA0QSnKHJ
suKYM8kMPac83kiSkN5CuEqHzQ+JCrpneQ5uprTmSNxRbhRg6OVgt8KDOwNaYQ4r
wZsTRRlRxtFZU8rYpnlEGORXKI5uIQH/i+gTQyfZDQlY+uogNEiOejSPTUB9Ca1K
IxOf6qhzUiEJnwzoatsK9ao=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org