Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/y8ZVinXf8YBY6rA5L52-E3M2jFo.roa
File: y8ZVinXf8YBY6rA5L52-E3M2jFo.roa (raw, json)
Hash identifier: 8g8SrJwLjeHyQ6X1mphnd4YTN3eWnxRUnicLXTRwlzg=
Subject key identifier: CB:C6:55:8A:75:DF:F1:80:58:EA:B0:39:2F:9D:BE:13:73:36:8C:5A
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 0193BB01916C16923C18C02CBDF5F763A9EB
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/y8ZVinXf8YBY6rA5L52-E3M2jFo.roa
Signing time: Thu 12 Dec 2024 13:14:22 +0000
ROA not before: Thu 12 Dec 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.81.224.0/22 maxlen: 22
45.82.68.0/22 maxlen: 22
45.82.176.0/22 maxlen: 22
45.87.0.0/22 maxlen: 22
45.136.84.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
46.18.107.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
81.31.197.0/24 maxlen: 24
91.201.25.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
91.209.226.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
94.124.78.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
185.23.108.0/24 maxlen: 24
185.51.121.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.232.164.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.216.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.206.0/24 maxlen: 24
193.22.21.0/24 maxlen: 24
193.56.8.0/24 maxlen: 24
193.163.7.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
194.29.53.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
212.8.246.0/24 maxlen: 24
212.23.221.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.162.152.0/24 maxlen: 24
212.162.153.0/24 maxlen: 24
212.162.154.0/24 maxlen: 24
212.162.155.0/24 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:01:91:6c:16:92:3c:18:c0:2c:bd:f5:f7:63:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Dec 12 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbc6558a75dff18058eab0392f9dbe1373368c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:04:a2:13:12:61:0e:c6:24:79:f7:eb:67:14:
81:e4:14:dd:7f:c9:b7:e7:de:df:6d:60:65:e6:15:
6a:84:d2:76:c4:b2:ab:9d:be:c3:eb:cd:35:94:ff:
92:b0:20:7e:e6:79:a7:97:05:ed:b1:84:f7:a1:7c:
c3:c4:51:30:ea:77:8d:2d:f0:58:1d:5e:11:f7:61:
b1:e8:3e:33:13:21:d1:af:8d:5e:1d:ac:28:63:03:
0e:7c:1e:74:82:0b:a7:99:15:3a:0d:32:09:f1:c6:
ae:7a:00:d6:c1:d7:39:62:2d:78:3c:ea:d3:a3:1f:
ca:57:fc:d2:4e:bb:ab:2f:8a:c8:60:a6:c9:50:be:
65:d6:65:48:05:44:bd:1d:6e:b9:d1:e2:2f:d7:9a:
d7:92:cc:22:54:e9:63:1c:11:fa:ee:20:26:45:78:
9a:a8:9b:b7:4f:ff:0e:40:0b:d8:3f:08:11:d0:c1:
ea:02:9d:f2:db:49:75:c8:57:7a:44:a0:33:0c:db:
11:7f:74:ab:e9:38:86:18:1a:fb:51:5c:ea:42:a8:
cc:a3:aa:19:83:dc:67:c2:9e:86:8e:ad:6c:3f:e2:
8e:d9:49:1b:f2:7c:e3:71:1c:bf:de:e7:4f:48:91:
14:8d:9d:b3:7d:14:b1:3b:83:35:16:5f:79:44:be:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:55:8A:75:DF:F1:80:58:EA:B0:39:2F:9D:BE:13:73:36:8C:5A
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/y8ZVinXf8YBY6rA5L52-E3M2jFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.136.84.0/22
45.137.64.0/22
46.18.107.0/24
46.21.250.0/24
77.220.214.0/23
81.31.197.0/24
91.201.25.0/24
91.208.127.0/24
91.209.226.0/24
91.228.56.0/24
94.124.78.0/24
178.159.38.0/23
178.159.42.0/24
185.23.108.0/24
185.51.121.0/24
185.51.246.0/23
185.107.237.0/24
185.204.109.0/24
185.232.164.0/24
185.235.129.0-185.235.131.255
185.241.52.0/22
185.244.216.0/22
185.250.204.0-185.250.206.255
193.22.21.0/24
193.56.8.0/24
193.163.7.0/24
193.163.113.0/24
194.29.53.0/24
212.8.244.0/24
212.8.246.0/24
212.23.221.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
91:cd:85:15:ad:43:85:65:bc:cc:81:49:d1:af:68:0d:ab:bb:
60:33:b5:bc:db:33:61:76:6d:39:af:db:23:83:8a:92:01:f5:
9a:63:c2:b7:85:a0:3e:fd:bf:ac:a5:13:c4:d0:24:f1:8f:3f:
52:72:dd:54:65:41:c2:31:65:5f:ad:33:b3:fe:e0:dc:1b:4a:
a5:83:79:ed:4c:54:f9:24:eb:71:25:be:a3:28:fe:8d:b1:04:
9f:32:c4:fe:34:e3:28:f3:5a:44:2d:41:5a:e8:b2:bf:82:7b:
7c:c8:11:ae:8d:0f:07:81:fc:90:42:84:a1:d4:b5:56:01:f7:
dc:f8:90:ac:49:ac:ab:a3:32:ae:96:c7:0f:78:9e:ba:42:77:
f4:f9:f3:01:17:76:5d:70:bf:77:93:19:72:d9:eb:1c:25:90:
4a:2a:65:21:23:d3:9c:e9:76:45:05:fd:cc:cc:12:2a:b5:64:
6f:8b:73:90:23:93:77:40:2e:b3:b9:1f:42:ab:4d:d9:81:0c:
d4:2c:6e:2c:80:06:49:3d:eb:c6:78:50:bf:b1:64:47:f3:36:
8a:1a:4f:d0:53:55:93:00:e0:d6:6d:b8:6b:6c:e6:18:3c:a2:
30:b7:59:f3:b1:29:9a:ff:d6:68:a0:3f:71:bd:1d:8a:62:42:
d5:cd:b4:0a
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISAZO7AZFsFpI8GMAsvfX3Y6nrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw
Mjc1MzMwHhcNMjQxMjEyMTMxNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmM2NTU4YTc1ZGZmMTgwNThlYWIwMzkyZjlkYmUxMzczMzY4YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gSiExJhDsYkeffrZxSB5BTdf8m3
597fbWBl5hVqhNJ2xLKrnb7D6801lP+SsCB+5nmnlwXtsYT3oXzDxFEw6neNLfBY
HV4R92Gx6D4zEyHRr41eHawoYwMOfB50ggunmRU6DTIJ8cauegDWwdc5Yi14POrT
ox/KV/zSTrurL4rIYKbJUL5l1mVIBUS9HW650eIv15rXkswiVOljHBH67iAmRXia
qJu3T/8OQAvYPwgR0MHqAp3y20l1yFd6RKAzDNsRf3Sr6TiGGBr7UVzqQqjMo6oZ
g9xnwp6Gjq1sP+KO2Ukb8nzjcRy/3udPSJEUjZ2zfRSxO4M1Fl95RL74XQIDAQAB
o4IDHjCCAxowHQYDVR0OBBYEFMvGVYp13/GAWOqwOS+dvhNzNoxaMB8GA1UdIwQY
MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt
MDE1ZDlmMWI0YjUwLzEveThaVmluWGY4WUJZNnJBNUw1Mi1FM00yakZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw
LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMgYIKwYBBQUHAQcBAf8EggEhMIIBHTCCAQoEAgABMIIB
AgMEAi1R4AMEAi1SRAMEAi1SsAMEAi1XAAMEAi2IVAMEAi2JQAMEAC4SawMEAC4V
+gMEAU3c1gMEAFEfxQMEAFvJGQMEAFvQfwMEAFvR4gMEAFvkOAMEAF58TgMEAbKf
JgMEALKfKgMEALkXbAMEALkzeQMEAbkz9gMEALlr7QMEALnMbQMEALnopDAMAwQA
ueuBAwQCueuAAwQCufE0AwQCufTYMAwDBAK5+swDBAC5+s4DBADBFhUDBADBOAgD
BADBowcDBADBo3EDBADCHTUDBADUCPQDBADUCPYDBADUF90wDAMEANRWZQMEANRW
ZgMEAdRWbAMEAtSimAMEAtWmRDANBAIAAjAHAwUDKgdZgDANBgkqhkiG9w0BAQsF
AAOCAQEAkc2FFa1DhWW8zIFJ0a9oDau7YDO1vNszYXZtOa/bI4OKkgH1mmPCt4Wg
Pv2/rKUTxNAk8Y8/UnLdVGVBwjFlX60zs/7g3BtKpYN57UxU+STrcSW+oyj+jbEE
nzLE/jTjKPNaRC1BWuiyv4J7fMgRro0PB4H8kEKEodS1VgH33PiQrEmsq6MyrpbH
D3ieukJ39PnzARd2XXC/d5MZctnrHCWQSiplISPTnOl2RQX9zMwSKrVkb4tzkCOT
d0Aus7kfQqtN2YEM1CxuLIAGST3rxnhQv7FkR/M2ihpP0FNVkwDg1m24a2zmGDyi
MLdZ87Epmv/WaKA/cb0dimJC1c20Cg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:01:00 2025 by rpki-client