Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lzpQwtgX1QQNMSbDcXYS8QrhoGk.roa
File: lzpQwtgX1QQNMSbDcXYS8QrhoGk.roa (raw, json)
Hash identifier: H40flJJaegn99m//uiGbRA1VmLHSZgqtpI6aPTj/liY=
Subject key identifier: 97:3A:50:C2:D8:17:D5:04:0D:31:26:C3:71:76:12:F1:0A:E1:A0:69
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E144A0EB8E7F9F93B1623F1C65F858419
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lzpQwtgX1QQNMSbDcXYS8QrhoGk.roa
Signing time: Wed 06 Mar 2024 15:03:01 +0000
ROA not before: Wed 06 Mar 2024 15:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 08 Mar 2024 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:4a:0e:b8:e7:f9:f9:3b:16:23:f1:c6:5f:85:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 6 15:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=973a50c2d817d5040d3126c3717612f10ae1a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:60:ca:09:94:e6:40:a6:39:ae:15:79:29:
e4:31:79:12:a7:42:f4:a1:6f:90:39:dd:83:10:70:
ce:d3:b1:62:33:a3:7b:5f:93:fe:92:4c:eb:82:86:
69:f2:c6:78:fb:7c:a6:6f:9e:96:46:5f:16:f7:75:
30:69:af:96:26:d0:33:f8:09:60:e0:70:c2:45:ee:
2a:3d:7b:b6:3d:0a:37:5a:6a:d5:07:6d:43:0a:e4:
bb:ab:0a:ae:13:ed:a4:68:06:c1:e9:55:5c:ce:a4:
1f:95:38:c0:3e:84:99:c6:61:36:45:65:40:75:5e:
26:7a:69:c1:cd:fa:35:ce:a8:fc:02:a4:37:c4:92:
b5:a5:7e:1d:c8:22:6b:51:9f:40:18:fe:3e:01:42:
c0:b0:79:a0:15:79:bf:bc:ee:f5:31:c1:dc:47:b3:
7a:a7:b6:89:57:17:bf:54:fc:6a:a1:10:a7:88:a1:
e7:79:2e:c7:22:21:49:7b:99:c3:08:f5:ba:d1:30:
53:91:40:d1:3a:aa:44:be:0c:c9:f1:16:d5:2e:b7:
0e:08:a9:21:54:45:89:a7:f2:f4:c9:e3:eb:b0:91:
65:be:6b:ad:4a:02:aa:6b:6b:b6:aa:d0:7b:43:b5:
f0:97:0b:5a:13:e5:74:ee:1c:b1:ee:5d:69:6f:2f:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:50:C2:D8:17:D5:04:0D:31:26:C3:71:76:12:F1:0A:E1:A0:69
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lzpQwtgX1QQNMSbDcXYS8QrhoGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.190.120.0/24
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:53:52:28:9f:22:74:bf:57:aa:b3:2e:f1:55:f3:df:19:48:
5a:dc:d8:e7:0e:99:33:0f:fe:93:88:b1:a9:a9:2f:e3:c2:6e:
6f:3d:a7:e5:01:3c:ef:9c:ef:00:8f:10:df:88:00:83:c4:f4:
46:c5:14:f6:1a:fd:67:64:7f:2b:d0:5d:9f:e9:d5:e2:ee:06:
fa:62:6b:e1:c8:71:0c:3d:05:32:b2:9f:72:de:92:51:e4:e4:
ed:1b:16:e4:a7:57:79:87:75:dd:52:dd:c5:bd:12:83:f6:d9:
cf:35:bd:dd:87:0c:c0:2e:3d:2f:6e:aa:05:0d:cf:ac:3c:21:
92:b6:4b:fc:10:64:e1:7b:55:90:95:82:19:19:cc:76:49:04:
50:1b:c4:d4:92:7e:ac:41:9c:d8:45:89:ba:f3:b8:e7:38:3f:
95:0e:74:e5:27:92:75:c4:9d:96:58:a7:d6:f1:d4:ad:cd:66:
98:7a:3e:79:c2:3c:16:4d:4f:ee:41:de:ae:4c:db:2f:00:d9:
a7:2a:a2:cf:ed:6d:52:1e:fb:bc:e2:4d:45:29:2a:db:1a:c4:
9f:c1:8f:b9:fe:3a:fa:e1:85:69:50:08:77:bc:d9:77:a9:ae:
84:41:2b:90:19:67:3b:61:17:75:07:9d:42:64:d0:ae:61:4f:
c9:8b:c6:42
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgISAY4USg645/n5OxYj8cZfhYQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMzA2MTUwMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNhNTBjMmQ4MTdkNTA0MGQzMTI2YzM3MTc2MTJmMTBhZTFhMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/JgygmU5kCmOa4VeSnkMXkSp0L0
oW+QOd2DEHDO07FiM6N7X5P+kkzrgoZp8sZ4+3ymb56WRl8W93Uwaa+WJtAz+Alg
4HDCRe4qPXu2PQo3WmrVB21DCuS7qwquE+2kaAbB6VVczqQflTjAPoSZxmE2RWVA
dV4memnBzfo1zqj8AqQ3xJK1pX4dyCJrUZ9AGP4+AULAsHmgFXm/vO71McHcR7N6
p7aJVxe/VPxqoRCniKHneS7HIiFJe5nDCPW60TBTkUDROqpEvgzJ8RbVLrcOCKkh
VEWJp/L0yePrsJFlvmutSgKqa2u2qtB7Q7XwlwtaE+V07hyx7l1pby/lMwIDAQAB
o4IDKzCCAycwHQYDVR0OBBYEFJc6UMLYF9UEDTEmw3F2EvEK4aBpMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvbHpwUXd0Z1gxUVFOTVNiRGNYWVM4UXJob0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPwYIKwYBBQUHAQcBAf8EggEuMIIBKjCCASYEAgABMIIB
HgMEAAI7MQMEAB/YPAMEASXdUgMEAi0KQAMEAi0KUAMEAC0LxAMEAC0P7gMEAC1d
UDAMAwQCLYQkAwQALYQmAwQBLYSAMAwDBAAtitUDBAAtitYDBAEtizQDBAAtizcD
BAAtjEADBAItjEgDBAEtkhgDBAAtkhsDBAItkwwDBAAtlYEDBAEtmHQDBAAtn1QD
BAAtn1cDBAA+6SIDBAA+6TADBABU9lEDBABZawwDBABbx70DBABbzkQDBABb7HkD
BABdvngDBABefEsDBABefE0DBACwdAgDBACwdAwDBAGw3jgDBACw3jsDBAC5vCkD
BADBBRwDBAHBHwQDBADBOqoDBADBaxYDBADCaOQDBALD2IQDBADD4WMDBALVpkAw
DQYJKoZIhvcNAQELBQADggEBADpTUiifInS/V6qzLvFV898ZSFrc2OcOmTMP/pOI
sampL+PCbm89p+UBPO+c7wCPEN+IAIPE9EbFFPYa/WdkfyvQXZ/p1eLuBvpia+HI
cQw9BTKyn3LeklHk5O0bFuSnV3mHdd1S3cW9EoP22c81vd2HDMAuPS9uqgUNz6w8
IZK2S/wQZOF7VZCVghkZzHZJBFAbxNSSfqxBnNhFibrzuOc4P5UOdOUnknXEnZZY
p9bx1K3NZph6PnnCPBZNT+5B3q5M2y8A2acqos/tbVIe+7ziTUUpKtsaxJ/Bj7n+
OvrhhWlQCHe82XeproRBK5AZZzthF3UHnUJk0K5hT8mLxkI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org