Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/4ARZ8dWAkFsIG5nHlYIl4eO30UU.roa
File: 4ARZ8dWAkFsIG5nHlYIl4eO30UU.roa (raw, json)
Hash identifier: VhbAnQRyrddfTU82pmBwr/cMlzIybzIQPv4XOUfr6pE=
Subject key identifier: E0:04:59:F1:D5:80:90:5B:08:1B:99:C7:95:82:25:E1:E3:B7:D1:45
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018F32BF4B26153563017A44AEC576B49E8A
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/4ARZ8dWAkFsIG5nHlYIl4eO30UU.roa
Signing time: Wed 01 May 2024 06:02:28 +0000
ROA not before: Wed 01 May 2024 06:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.192.0/19 maxlen: 20
77.121.192.0/20 maxlen: 21
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.122.128.0/17 maxlen: 18
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/19 maxlen: 20
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
95.69.208.0/20 maxlen: 24
95.69.224.0/21 maxlen: 22
95.69.232.0/24 maxlen: 24
95.69.240.0/21 maxlen: 22
95.69.252.0/24 maxlen: 24
95.69.253.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.7.0/24 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
188.230.26.0/23 maxlen: 24
188.230.28.0/22 maxlen: 23
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.92.0/23 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 09:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:bf:4b:26:15:35:63:01:7a:44:ae:c5:76:b4:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: May 1 06:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e00459f1d580905b081b99c7958225e1e3b7d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:eb:99:b8:ae:f3:ef:61:b1:f2:bc:61:31:
12:42:d1:c2:12:68:07:9b:15:bf:3d:26:91:bf:1b:
1c:04:8f:dd:50:34:9b:fa:01:bc:d0:eb:92:4a:ed:
5b:98:26:77:92:57:c0:10:7e:3c:0b:f9:65:3f:51:
a9:1b:dc:86:67:1c:76:ce:0a:b6:35:9e:45:ea:61:
8b:dc:0f:37:44:32:0b:d2:b6:6b:0b:ef:74:6b:a4:
a6:d2:7c:c3:3a:7a:f5:b0:9a:89:b6:c8:56:e0:ce:
06:14:6a:a2:01:a3:7c:bd:37:5f:f0:74:08:6d:a8:
12:d2:69:bb:e9:ea:af:a5:79:cc:e8:bf:a4:e6:9c:
09:8b:9d:d2:53:a7:af:f4:5d:6f:2f:a4:73:86:c9:
d0:eb:7e:ae:e3:6b:4e:19:69:91:70:1b:ec:6f:cc:
c8:17:8d:89:ee:68:57:b8:ec:c8:40:90:04:92:42:
42:95:52:57:e9:e0:b9:16:55:dc:fe:2e:f5:eb:42:
62:61:9f:b5:10:1f:5a:1e:b7:a8:ad:60:ee:8f:79:
1d:51:d7:ff:79:d5:85:dc:83:cc:4f:8f:42:cf:f9:
f6:22:b1:a4:cc:d0:7e:6f:90:26:69:9c:6f:1c:43:
4e:da:48:90:d8:80:38:89:c1:c3:cb:6a:a3:b4:14:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:59:F1:D5:80:90:5B:08:1B:99:C7:95:82:25:E1:E3:B7:D1:45
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/4ARZ8dWAkFsIG5nHlYIl4eO30UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0-77.121.255.255
77.122.128.0-77.123.95.255
77.123.128.0/18
77.244.32.0/20
82.144.192.0/19
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
4e:15:f9:bd:1c:a5:ab:86:45:f5:6a:d1:92:ee:9e:96:d9:61:
3b:fc:ee:bb:a1:08:89:72:6b:ac:a2:31:a0:4e:73:8b:20:07:
f0:12:c4:c6:dc:df:31:35:2d:b8:3d:64:06:5a:9b:15:30:4c:
09:c2:7a:a3:01:ce:cd:9c:af:d7:78:49:76:ed:ff:b7:e8:37:
9c:02:40:02:9e:24:3c:8a:61:ab:00:41:6f:e7:3d:55:4a:d0:
73:39:35:3b:80:dd:dc:80:85:26:a5:08:14:47:2d:7a:b9:9a:
a6:85:6e:e9:f6:3f:47:3e:9b:93:7d:68:06:52:91:32:de:be:
2d:14:df:e8:b9:a3:52:6b:c4:e0:d8:f3:85:2d:7a:10:ee:5e:
a2:0b:a1:bd:dc:63:47:db:d5:10:e6:74:9d:aa:26:90:d8:6d:
a4:98:a0:f4:58:87:2a:ae:25:3c:c2:89:d1:17:88:f5:e4:b7:
05:57:73:40:a4:3a:8a:76:ed:52:a7:a1:42:e6:47:d7:fc:9c:
04:14:6d:37:14:53:d8:93:50:89:e4:49:b7:1c:db:ee:cb:01:
98:df:93:52:8c:a3:cf:e6:e4:83:3f:42:8b:9b:48:2b:d5:cd:
ee:3c:52:78:32:a4:68:a9:05:f5:c6:d9:2e:00:5b:fa:1e:e3:
cb:56:a8:27
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAY8yv0smFTVjAXpErsV2tJ6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjQwNTAxMDYwMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA0NTlmMWQ1ODA5MDViMDgxYjk5Yzc5NTgyMjVlMWUzYjdkMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Prmbiu8+9hsfK8YTESQtHCEmgH
mxW/PSaRvxscBI/dUDSb+gG80OuSSu1bmCZ3klfAEH48C/llP1GpG9yGZxx2zgq2
NZ5F6mGL3A83RDIL0rZrC+90a6Sm0nzDOnr1sJqJtshW4M4GFGqiAaN8vTdf8HQI
bagS0mm76eqvpXnM6L+k5pwJi53SU6ev9F1vL6RzhsnQ636u42tOGWmRcBvsb8zI
F42J7mhXuOzIQJAEkkJClVJX6eC5FlXc/i7160JiYZ+1EB9aHreorWDuj3kdUdf/
edWF3IPMT49Cz/n2IrGkzNB+b5AmaZxvHENO2kiQ2IA4icHDy2qjtBSXQQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFOAEWfHVgJBbCBuZx5WCJeHjt9FFMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvNEFSWjhkV0FrRnNJRzVuSGxZSWw0ZU8zMFVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHWBggrBgEFBQcBBwEB/wSBxjCBwzCBwAQCAAEwgbkwCwMD
A014AwQETXggAwQCTXg0MAwDBAJNeDwDBAFNeQwwDAMEAE15DwMEAE15HjALAwQG
TXlAAwMBTXgwDAMEB016gAMEBU17QAMEBk17gAMEBE30IAMEBVKQwDAMAwQHX0WA
AwQAX0XoAwQDX0XwAwQCX0X8AwQFbcngAwQFjargMAsDAwG85gMEALzmZDAMAwQB
vOZmAwQBvOZsMAwDBAC85m8DBAG85nAwDAMEALzmcwMEAbzmdDANBgkqhkiG9w0B
AQsFAAOCAQEAThX5vRylq4ZF9WrRku6eltlhO/zuu6EIiXJrrKIxoE5ziyAH8BLE
xtzfMTUtuD1kBlqbFTBMCcJ6owHOzZyv13hJdu3/t+g3nAJAAp4kPIphqwBBb+c9
VUrQczk1O4Dd3ICFJqUIFEctermapoVu6fY/Rz6bk31oBlKRMt6+LRTf6LmjUmvE
4NjzhS16EO5eoguhvdxjR9vVEOZ0naomkNhtpJig9FiHKq4lPMKJ0ReI9eS3BVdz
QKQ6inbtUqehQuZH1/ycBBRtNxRT2JNQieRJtxzb7ssBmN+TUoyjz+bkgz9Ci5tI
K9XN7jxSeDKkaKkF9cbZLgBb+h7jy1aoJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org