Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FuTdOLf7hY99jLwygc9EKsZE12s.roa
File: FuTdOLf7hY99jLwygc9EKsZE12s.roa (raw, json)
Hash identifier: +OxR7eqMvtEPYfFuX5WPweA5Y+w6x0LfxbwBw4dZGaE=
Subject key identifier: 16:E4:DD:38:B7:FB:85:8F:7D:8C:BC:32:81:CF:44:2A:C6:44:D7:6B
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0192958E6C3CFFF23DEBB9A95BD1D36BD613
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FuTdOLf7hY99jLwygc9EKsZE12s.roa
Signing time: Wed 16 Oct 2024 13:39:51 +0000
ROA not before: Wed 16 Oct 2024 13:39:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8359
IP address blocks: 5.144.96.0/19 maxlen: 19
31.40.112.0/20 maxlen: 20
37.208.120.0/21 maxlen: 21
62.118.0.0/16 maxlen: 24
62.168.224.0/19 maxlen: 19
80.83.237.0/24 maxlen: 24
81.91.32.0/19 maxlen: 19
81.91.41.0/24 maxlen: 24
81.195.0.0/16 maxlen: 24
82.96.192.0/18 maxlen: 18
83.237.0.0/16 maxlen: 16
85.140.0.0/15 maxlen: 24
85.235.32.0/19 maxlen: 19
89.175.0.0/16 maxlen: 16
89.175.248.0/21 maxlen: 21
91.76.0.0/14 maxlen: 14
92.43.184.0/21 maxlen: 21
93.90.224.0/20 maxlen: 20
93.90.224.0/22 maxlen: 22
94.140.128.0/19 maxlen: 19
95.153.136.0/22 maxlen: 22
95.169.128.0/19 maxlen: 19
109.198.224.0/19 maxlen: 19
141.105.24.0/21 maxlen: 21
176.222.17.0/24 maxlen: 24
178.141.0.0/16 maxlen: 16
178.155.0.0/17 maxlen: 17
178.159.16.0/20 maxlen: 20
185.168.236.0/22 maxlen: 22
193.104.128.0/24 maxlen: 24
195.34.0.0/19 maxlen: 19
195.34.15.0/24 maxlen: 24
195.34.32.0/19 maxlen: 19
195.34.36.0/24 maxlen: 24
195.34.38.0/24 maxlen: 24
195.34.42.0/24 maxlen: 24
212.188.0.0/17 maxlen: 17
213.87.0.0/16 maxlen: 16
213.87.64.0/22 maxlen: 22
213.87.70.0/23 maxlen: 23
213.87.76.0/23 maxlen: 23
213.87.80.0/20 maxlen: 20
213.87.98.0/23 maxlen: 23
213.87.100.0/24 maxlen: 24
213.87.104.0/24 maxlen: 24
213.87.105.0/24 maxlen: 24
213.87.106.0/23 maxlen: 23
213.87.128.0/19 maxlen: 19
213.87.160.0/22 maxlen: 22
213.87.200.0/22 maxlen: 22
213.87.204.0/22 maxlen: 22
213.87.208.0/23 maxlen: 23
213.87.210.0/23 maxlen: 23
213.87.240.0/22 maxlen: 22
213.87.244.0/23 maxlen: 23
213.87.246.0/24 maxlen: 24
213.87.248.0/22 maxlen: 22
213.147.32.0/19 maxlen: 19
213.176.228.0/22 maxlen: 22
217.74.244.0/22 maxlen: 22
217.74.248.0/21 maxlen: 21
2a00:1fa0::/29 maxlen: 29
2a00:1fa0::/33 maxlen: 33
2a00:1fa0:8000::/33 maxlen: 33
2a00:1fa1::/33 maxlen: 33
2a00:1fa2::/33 maxlen: 33
2a00:1fa3::/33 maxlen: 33
2a00:1fa3:8000::/40 maxlen: 40
2a02:28::/29 maxlen: 29
2a02:28::/32 maxlen: 32
2a02:28:1::/48 maxlen: 48
2a02:28:a::/48 maxlen: 48
2a02:29::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 04 Dec 2024 16:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:8e:6c:3c:ff:f2:3d:eb:b9:a9:5b:d1:d3:6b:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Oct 16 13:39:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e4dd38b7fb858f7d8cbc3281cf442ac644d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:66:96:25:d2:5b:8c:88:92:66:6d:bc:82:
e2:64:4a:e9:00:9c:99:5a:ad:15:71:86:26:7c:94:
5e:56:ba:bf:20:f0:04:aa:f3:95:2b:50:a9:49:a5:
12:e4:2f:c4:93:c4:bf:87:41:45:0c:1d:34:1f:cf:
33:ac:81:78:8c:dd:e6:63:ae:3f:ea:dd:54:7f:96:
15:c3:8e:4f:3b:7c:18:d0:7a:c2:30:70:88:b2:2b:
40:f1:d0:15:e1:c5:11:c1:0a:a0:f2:15:17:d4:d2:
2a:18:d5:81:a0:68:40:0e:4b:e9:b7:cc:da:df:b0:
60:d1:cc:42:96:33:03:16:4d:05:80:8a:c5:99:eb:
2f:f9:e5:72:d1:ca:41:c1:3b:84:79:b2:9a:ab:c2:
50:0a:8e:ec:71:d0:ba:b2:cb:8d:d7:89:bc:1c:57:
ea:db:8d:d3:d9:a8:1d:4c:8f:c0:a3:a3:4c:9b:80:
cc:bb:20:38:84:40:f2:e8:b1:ff:25:c5:ac:b0:0a:
e3:36:a8:f8:f6:3d:ab:d3:30:b0:83:18:89:77:0b:
d7:bf:0d:7e:0b:ae:e1:57:95:1a:05:c9:0a:96:ee:
81:84:0c:94:4a:1d:44:c3:b3:ae:ae:10:86:a4:c5:
7b:8b:e4:24:27:7c:0e:28:43:1e:da:bb:84:61:4f:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:DD:38:B7:FB:85:8F:7D:8C:BC:32:81:CF:44:2A:C6:44:D7:6B
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FuTdOLf7hY99jLwygc9EKsZE12s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.96.0/19
31.40.112.0/20
37.208.120.0/21
62.118.0.0/16
62.168.224.0/19
80.83.237.0/24
81.91.32.0/19
81.195.0.0/16
82.96.192.0/18
83.237.0.0/16
85.140.0.0/15
85.235.32.0/19
89.175.0.0/16
91.76.0.0/14
92.43.184.0/21
93.90.224.0/20
94.140.128.0/19
95.153.136.0/22
95.169.128.0/19
109.198.224.0/19
141.105.24.0/21
176.222.17.0/24
178.141.0.0/16
178.155.0.0/17
178.159.16.0/20
185.168.236.0/22
193.104.128.0/24
195.34.0.0/18
212.188.0.0/17
213.87.0.0/16
213.147.32.0/19
213.176.228.0/22
217.74.244.0-217.74.255.255
IPv6:
2a00:1fa0::/29
2a02:28::/29
Signature Algorithm: sha256WithRSAEncryption
46:15:fa:4e:0c:ee:64:2f:f2:39:0c:ad:43:5d:67:c4:a4:0f:
97:13:9f:da:19:c0:c5:8d:b9:0c:4e:25:37:b4:0d:f5:65:15:
5c:09:10:12:1f:89:2d:3f:6b:cd:62:7c:e5:da:2a:34:d1:60:
1b:25:38:5d:87:bf:fd:46:48:e8:de:c9:20:f1:ba:92:44:6f:
12:13:ff:b1:ee:2a:4d:ac:88:f6:45:1c:8e:0e:2d:48:09:6b:
b4:0a:84:a1:6b:bd:fd:3a:b0:7f:34:5f:68:74:20:b5:7f:df:
a0:5c:b0:c9:24:cc:12:9e:c4:ee:92:43:da:d7:29:fd:83:d5:
02:73:97:f1:76:da:44:63:69:8b:fe:0d:16:a0:07:48:65:d0:
53:e4:26:b2:dc:2d:53:c7:0f:4e:64:b8:af:52:43:1c:15:d0:
3f:07:bd:c6:cd:e1:3c:1f:b7:39:b4:11:0d:8d:4d:2c:0c:f7:
c2:8d:54:27:58:87:77:1d:4f:76:71:64:88:db:fd:cf:19:ea:
22:46:9e:8a:94:39:e2:16:3c:d8:4b:c1:94:7c:4a:dc:b0:9d:
a8:d5:ec:81:9c:a3:ee:2f:38:48:3a:47:3f:f5:9f:30:d1:e3:
f7:4c:5e:71:18:4e:0c:a1:1e:87:fa:b9:53:6e:2a:2a:c3:d3:
d2:30:d7:9b
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZKVjmw8//I967mpW9HTa9YTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjQxMDE2MTMzOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmU0ZGQzOGI3ZmI4NThmN2Q4Y2JjMzI4MWNmNDQyYWM2NDRkNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lxmliXSW4yIkmZtvILiZErpAJyZ
Wq0VcYYmfJReVrq/IPAEqvOVK1CpSaUS5C/Ek8S/h0FFDB00H88zrIF4jN3mY64/
6t1Uf5YVw45PO3wY0HrCMHCIsitA8dAV4cURwQqg8hUX1NIqGNWBoGhADkvpt8za
37Bg0cxCljMDFk0FgIrFmesv+eVy0cpBwTuEebKaq8JQCo7scdC6ssuN14m8HFfq
243T2agdTI/Ao6NMm4DMuyA4hEDy6LH/JcWssArjNqj49j2r0zCwgxiJdwvXvw1+
C67hV5UaBckKlu6BhAyUSh1Ew7OurhCGpMV7i+QkJ3wOKEMe2ruEYU+hlQIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFBbk3Ti3+4WPfYy8MoHPRCrGRNdrMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvRnVUZE9MZjdoWTk5akx3eWdjOUVLc1pFMTJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCBzAQCAAEwgcUDBAUF
kGADBAQfKHADBAMl0HgDAwA+dgMEBT6o4AMEAFBT7QMEBVFbIAMDAFHDAwQGUmDA
AwMAU+0DAwFVjAMEBVXrIAMDAFmvAwMCW0wDBANcK7gDBARdWuADBAVejIADBAJf
mYgDBAVfqYADBAVtxuADBAONaRgDBACw3hEDAwCyjQMEB7KbAAMEBLKfEAMEArmo
7AMEAMFogAMEBsMiAAMEB9S8AAMDANVXAwQF1ZMgAwQC1bDkMAsDBALZSvQDAwDZ
SjAUBAIAAjAOAwUDKgAfoAMFAyoCACgwDQYJKoZIhvcNAQELBQADggEBAEYV+k4M
7mQv8jkMrUNdZ8SkD5cTn9oZwMWNuQxOJTe0DfVlFVwJEBIfiS0/a81ifOXaKjTR
YBslOF2Hv/1GSOjeySDxupJEbxIT/7HuKk2siPZFHI4OLUgJa7QKhKFrvf06sH80
X2h0ILV/36BcsMkkzBKexO6SQ9rXKf2D1QJzl/F22kRjaYv+DRagB0hl0FPkJrLc
LVPHD05kuK9SQxwV0D8HvcbN4Twftzm0EQ2NTSwM98KNVCdYh3cdT3ZxZIjb/c8Z
6iJGnoqUOeIWPNhLwZR8StywnajV7IGco+4vOEg6Rz/1nzDR4/dMXnEYTgyhHof6
uVNuKirD09Iw15s=
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:19 2025 by rpki-client