Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vaf1ocs6-tqHWI5qS5sZAkC3JLE.roa
File: vaf1ocs6-tqHWI5qS5sZAkC3JLE.roa (raw, json)
Hash identifier: H2IIJMaNU+sgjeYFkJcPc5bR7vFb0/hk+d9AHsgRORA=
Subject key identifier: BD:A7:F5:A1:CB:3A:FA:DA:87:58:8E:6A:4B:9B:19:02:40:B7:24:B1
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCC65054757D29A1F76B322FE5BD25008
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vaf1ocs6-tqHWI5qS5sZAkC3JLE.roa
Signing time: Wed 21 Feb 2024 15:59:48 +0000
ROA not before: Wed 21 Feb 2024 15:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 Feb 2024 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:65:05:47:57:d2:9a:1f:76:b3:22:fe:5b:d2:50:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 15:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bda7f5a1cb3afada87588e6a4b9b190240b724b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:c8:cb:dc:b8:d4:1f:02:58:d6:d8:cf:8a:
f2:a2:51:5a:b7:82:d6:aa:31:04:6e:24:78:eb:83:
65:1b:bd:c9:a8:f5:fd:46:7d:e9:c8:a4:33:ee:4f:
c6:19:fa:7b:60:d4:a0:69:83:f5:54:a8:4a:4e:58:
d7:89:7f:f8:94:a2:a3:0b:96:f9:8c:e3:bf:92:90:
64:2c:33:b6:8a:ed:1c:60:50:1f:fb:6c:83:c6:3f:
45:79:ab:c7:61:2d:44:c9:01:16:45:71:69:34:ba:
a8:6f:a4:3f:95:17:43:7f:45:17:5d:5e:a2:e5:55:
4d:87:e0:49:4f:37:65:09:37:0b:98:be:0a:47:59:
c3:d9:d0:a4:8b:9d:70:de:2a:ba:8e:fe:e2:3e:2e:
ec:35:04:66:08:0d:87:7e:b9:83:0d:59:72:73:42:
68:7b:c9:c5:30:a1:3c:b2:5d:44:15:6f:8e:27:da:
c3:e0:1c:b4:66:fa:87:9c:e3:6d:10:e8:f7:0b:71:
9c:eb:5e:56:97:65:a7:a9:f2:b9:c6:d0:0d:a0:38:
b9:c0:4e:39:ca:2a:e4:3f:12:42:d2:d3:a3:5e:b2:
a5:5e:a2:4a:d9:c1:17:56:4c:33:a8:91:55:ae:42:
15:d9:0c:92:32:f0:cd:74:41:88:96:05:cb:de:91:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:F5:A1:CB:3A:FA:DA:87:58:8E:6A:4B:9B:19:02:40:B7:24:B1
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vaf1ocs6-tqHWI5qS5sZAkC3JLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.48.0/24
89.107.12.0/24
91.206.68.0/24
91.236.121.0/24
176.116.12.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
47:37:53:69:2c:57:57:8b:8a:45:81:13:87:c1:7a:80:21:68:
d1:2c:0b:e5:1c:45:c5:75:c9:ff:1b:77:5e:6a:16:d0:ba:42:
24:0f:66:be:fa:93:a9:be:b1:07:cc:d2:94:85:cf:82:b4:a7:
f9:31:4e:58:da:a9:8f:9d:53:c6:6d:0a:59:f9:e9:74:d3:c4:
6e:cf:49:ce:54:a7:9b:e1:36:b8:9d:cf:0f:34:bb:c0:c8:c2:
0e:85:2f:fd:1e:36:77:4b:42:79:f5:27:f5:93:42:7a:74:28:
b7:fb:83:82:f0:9a:6f:95:7c:bd:4e:a4:00:0e:0b:a1:c8:f2:
3f:42:4e:c9:f9:1b:cf:7b:71:53:fb:e1:45:b5:02:bf:57:a7:
12:2c:13:24:cc:3d:24:03:cc:47:27:94:f9:1f:e2:9d:82:c8:
a3:e4:9c:a5:b1:49:92:80:65:4d:f8:94:85:95:bc:b0:fc:a5:
55:96:0d:99:2b:6b:b4:6e:1f:ab:8e:c9:cb:07:29:77:c7:44:
7f:12:14:57:bf:73:55:56:7d:83:8b:79:91:b0:e0:1c:66:b4:
3a:2b:c1:b7:80:a4:52:10:37:41:7a:0e:48:a1:27:13:6b:d4:
ec:01:52:5c:90:08:8a:12:48:d3:9a:20:3c:59:5b:a5:04:17:
5b:de:08:96
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAY3MZQVHV9KaH3azIv5b0lAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjIxMTU1OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGE3ZjVhMWNiM2FmYWRhODc1ODhlNmE0YjliMTkwMjQwYjcyNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq3Iy9y41B8CWNbYz4ryolFat4LW
qjEEbiR464NlG73JqPX9Rn3pyKQz7k/GGfp7YNSgaYP1VKhKTljXiX/4lKKjC5b5
jOO/kpBkLDO2iu0cYFAf+2yDxj9FeavHYS1EyQEWRXFpNLqob6Q/lRdDf0UXXV6i
5VVNh+BJTzdlCTcLmL4KR1nD2dCki51w3iq6jv7iPi7sNQRmCA2HfrmDDVlyc0Jo
e8nFMKE8sl1EFW+OJ9rD4By0ZvqHnONtEOj3C3Gc615Wl2WnqfK5xtANoDi5wE45
yirkPxJC0tOjXrKlXqJK2cEXVkwzqJFVrkIV2QySMvDNdEGIlgXL3pGlAQIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFL2n9aHLOvrah1iOakubGQJAtySxMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvdmFmMW9jczYtdHFIV0k1cVM1c1pBa0MzSkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIDBAAC
OzEDBAEl3VIDBAItCkADBAItClADBAAtC8QDBAAtD+4DBAAtXVAwDAMEAi2EJAME
AC2EJgMEAS2EgDAMAwQALYrVAwQALYrWAwQBLYs0AwQALYs3AwQALYxAAwQCLYxI
AwQBLZIYAwQALZIbAwQCLZMMAwQALZWBAwQBLZh0AwQALZ9UAwQALZ9XAwQAPukw
AwQAWWsMAwQAW85EAwQAW+x5AwQAsHQMAwQBsN44AwQAsN47AwQAubwpAwQAwQUc
AwQBwR8EAwQAwTqqAwQCw9iEAwQAw+FjAwQC1aZAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHN1NpLFdXi4pFgROHwXqAIWjRLAvlHEXFdcn/G3deahbQukIkD2a++pOpvrEH
zNKUhc+CtKf5MU5Y2qmPnVPGbQpZ+el008Ruz0nOVKeb4Ta4nc8PNLvAyMIOhS/9
HjZ3S0J59Sf1k0J6dCi3+4OC8JpvlXy9TqQADguhyPI/Qk7J+RvPe3FT++FFtQK/
V6cSLBMkzD0kA8xHJ5T5H+Kdgsij5JylsUmSgGVN+JSFlbyw/KVVlg2ZK2u0bh+r
jsnLByl3x0R/EhRXv3NVVn2Di3mRsOAcZrQ6K8G3gKRSEDdBeg5IoScTa9TsAVJc
kAiKEkjTmiA8WVulBBdb3giW
-----END CERTIFICATE-----
Generated at Thu Feb 22 20:52:04 2024 by rpki-client on console-fra.rpki-client.org