Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/izB3t01HUDk2q641mllIqSukFdM.roa
File: izB3t01HUDk2q641mllIqSukFdM.roa (raw, json)
Hash identifier: A1oc4DUB05Gv8bwO5d6bhMu/33WFAG0kWVRMpnHoTfQ=
Subject key identifier: 8B:30:77:B7:4D:47:50:39:36:AB:AE:35:9A:59:48:A9:2B:A4:15:D3
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FA50102D4BCC0E9CC3AA6E791FCA09A8E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/izB3t01HUDk2q641mllIqSukFdM.roa
Signing time: Thu 23 May 2024 10:30:57 +0000
ROA not before: Thu 23 May 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.1.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.68.85.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.211.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.226.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.163.20.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.229.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 10:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:01:02:d4:bc:c0:e9:cc:3a:a6:e7:91:fc:a0:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 23 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3077b74d47503936abae359a5948a92ba415d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:f7:97:e8:8a:54:3c:72:a6:bf:11:c9:20:
38:f4:83:75:46:4a:54:b6:be:ae:a9:5a:57:a7:ed:
a2:bf:ae:fa:c2:df:ce:84:c8:ba:a9:c1:d5:2b:20:
0f:4d:43:2d:8e:10:f2:81:ac:a4:18:a3:6c:5e:92:
f2:9c:b7:0b:96:c8:42:54:7f:0a:0a:ed:47:53:d3:
72:46:5b:32:02:7d:e3:dc:b4:fc:b4:10:8e:1b:ff:
93:b0:6c:c8:2c:67:e9:44:2d:e7:3c:2b:7a:eb:05:
29:69:e6:61:0a:e9:33:3e:45:49:88:1c:bf:7b:9c:
f4:5d:8b:dc:3b:36:e7:4c:e4:30:6d:f1:5d:d8:7c:
02:33:34:ed:45:cd:40:e0:8b:c8:6c:bb:aa:04:c3:
84:64:4c:8c:e5:da:41:de:05:d8:03:cd:9f:ac:2c:
a6:f8:fe:cf:04:b4:57:20:69:f2:61:75:b0:29:46:
33:52:72:88:45:08:59:63:7e:78:a7:6c:07:a7:da:
c5:39:5a:cc:01:70:53:b6:b7:bd:f0:00:2f:af:ef:
eb:8e:a8:eb:43:ce:46:6d:2d:11:b5:47:89:36:5f:
82:4a:16:19:71:d0:5d:f7:56:98:e7:e7:08:5e:50:
7f:55:e8:73:f2:4a:50:93:20:95:be:fd:49:d8:39:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:77:B7:4D:47:50:39:36:AB:AE:35:9A:59:48:A9:2B:A4:15:D3
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/izB3t01HUDk2q641mllIqSukFdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.138.159.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.1.0-62.3.4.255
62.3.23.0/24
62.68.85.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.211.0-80.91.212.255
84.246.81.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.226.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.163.20.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.229.0/24
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f2:65:e4:5d:af:31:a9:90:cd:b5:cd:cf:89:38:43:26:cd:
cd:f6:29:a0:b0:b9:39:81:1f:77:b8:a5:e8:22:f7:81:66:6c:
6a:bb:cf:b9:c2:de:52:ea:be:8f:68:9f:e5:01:98:a4:56:e5:
65:60:34:07:42:c0:59:43:15:7a:69:87:d1:77:03:81:03:39:
e6:6e:1a:3e:c3:81:f7:46:a7:3a:87:dc:d4:0e:96:1f:28:d0:
ea:d1:26:75:20:aa:7d:97:ae:37:cd:30:ab:4f:ef:ed:de:e3:
5d:e2:83:16:9e:47:20:52:31:28:62:18:af:6d:c5:19:d6:64:
6f:54:45:4d:dc:7a:96:8a:9a:a6:ed:8d:b6:4b:57:ed:5d:19:
8e:36:9c:78:71:d1:a9:17:44:20:7e:8b:b7:9b:68:68:3b:d4:
04:b6:ef:7b:25:34:b3:7f:db:2a:f4:59:be:92:c2:07:a8:56:
af:a0:46:85:af:8f:09:af:55:a8:4a:66:95:fe:13:c5:fa:d2:
83:04:ad:90:9f:80:92:43:79:22:9d:ed:56:5c:50:cf:25:5f:
8a:2f:ec:44:27:96:41:78:96:24:23:65:7a:ab:57:4b:ba:17:
04:e9:b5:80:22:d6:f3:27:d5:39:aa:35:a5:8f:2e:b9:2a:bf:
6c:37:b0:d8
-----BEGIN CERTIFICATE-----
MIIHhzCCBm+gAwIBAgISAY+lAQLUvMDpzDqm55H8oJqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwNTIzMTAzMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjMwNzdiNzRkNDc1MDM5MzZhYmFlMzU5YTU5NDhhOTJiYTQxNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpf3l+iKVDxypr8RySA49IN1RkpU
tr6uqVpXp+2iv676wt/OhMi6qcHVKyAPTUMtjhDygaykGKNsXpLynLcLlshCVH8K
Cu1HU9NyRlsyAn3j3LT8tBCOG/+TsGzILGfpRC3nPCt66wUpaeZhCukzPkVJiBy/
e5z0XYvcOzbnTOQwbfFd2HwCMzTtRc1A4IvIbLuqBMOEZEyM5dpB3gXYA82frCym
+P7PBLRXIGnyYXWwKUYzUnKIRQhZY354p2wHp9rFOVrMAXBTtre98AAvr+/rjqjr
Q85GbS0RtUeJNl+CShYZcdBd91aY5+cIXlB/Vehz8kpQkyCVvv1J2DnlAwIDAQAB
o4IEkzCCBI8wHQYDVR0OBBYEFIswd7dNR1A5NquuNZpZSKkrpBXTMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvaXpCM3QwMUhVRGsycTY0MW1sbElxU3VrRmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICpwYIKwYBBQUHAQcBAf8EggKWMIICkjCCAo4EAgABMIIC
hgMEAAUBLgMEAAU50gMEAB/YPAMEAB/e7TAMAwQCH970AwQAH972AwQAJYz/AwQA
LVSyAwQALYEBMAwDBAAtgYEDBAItgYADBAAthDMDBAAthyIwDAMEAi2KBAMEAC2K
BgMEAC2KnAMEAC2KnwMEAS2MQgMEAC2OJQMEAC2QAAMEAC2SGgMEAC2fVTAMAwQA
PgMBAwQAPgMEAwQAPgMXAwQAPkRVAwQAPmpFAwQAPswiAwQAPswmAwQATfb0AwQA
UESUAwQAUESWAwQAUEnyAwQAUEn0MAwDBABQW9MDBABQW9QDBABU9lEDBABZawwD
BABZ+EQDBABb1VUDBABb8uIDBABb8u0DBABb8u8DBABb904DBABcd8ADBABdXc4D
BABdnW8DBAFdvngDBABeZ7MDBABeZ74DBABefEsDBABefE0DBABej+ADBACSEwoD
BACSEw8DBACSExkDBACSEx8DBACSEy8DBACSEz0DBAGSE0ADBACSE0QDBACSE0gD
BACSE0wDBACSE2ADBACSE2sDBACSE20DBACSE34DBACSE4gDBACwZC8DBACwdAgD
BACwdAwDBAGwdBgDBACwdBwDBACw3joDBACy1IgDBACy1IoDBAC5UUcDBAC5jK4D
BAC5uxADBAC5uxMDBAC5z9UDBAC53ikDBALBIKQDBADBJOcDBADBNakDBAHBOrAw
DAMEA8Gg2AMEAMGg2jAMAwQEwaMQAwQAwaMSAwQAwaMUAwQAwcl/AwQAwhqIAwQA
whrpAwQBwmiOAwQAwmjlMAwDBADCaO0DBADCaO4DBADDQG8DBADDYJUDBADDv2MD
BADD4WMDBADUNBsDBAHUNB4DBADVbcQwDQYJKoZIhvcNAQELBQADggEBAAfyZeRd
rzGpkM21zc+JOEMmzc32KaCwuTmBH3e4pegi94FmbGq7z7nC3lLqvo9on+UBmKRW
5WVgNAdCwFlDFXpph9F3A4EDOeZuGj7DgfdGpzqH3NQOlh8o0OrRJnUgqn2XrjfN
MKtP7+3e413igxaeRyBSMShiGK9txRnWZG9URU3cepaKmqbtjbZLV+1dGY42nHhx
0akXRCB+i7ebaGg71AS273slNLN/2yr0Wb6SwgeoVq+gRoWvjwmvVahKZpX+E8X6
0oMErZCfgJJDeSKd7VZcUM8lX4ov7EQnlkF4liQjZXqrV0u6FwTptYAi1vMn1Tmq
NaWPLrkqv2w3sNg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org