Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa
File: G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa (raw, json)
Hash identifier: AAaZ05kHLovPyHI8gxb4evI+3ZDi4XzWpmIahUsvd1o=
Subject key identifier: 1B:BB:B4:1E:69:24:AC:73:16:46:EC:67:22:AA:70:6A:41:F9:C2:E4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0193E3BB8EC3449BE2DB3EF6C8FB660F7492
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa
Signing time: Fri 20 Dec 2024 11:02:20 +0000
ROA not before: Fri 20 Dec 2024 11:02:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
45.81.127.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.145.132.0/22 maxlen: 22
45.145.132.0/23 maxlen: 23
45.145.132.0/24 maxlen: 24
45.145.133.0/24 maxlen: 24
45.145.134.0/23 maxlen: 23
45.145.134.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:bb:8e:c3:44:9b:e2:db:3e:f6:c8:fb:66:0f:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Dec 20 11:02:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bbbb41e6924ac731646ec6722aa706a41f9c2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:3b:df:84:d2:8b:1f:df:2a:c8:0a:8e:04:
fa:7b:75:db:a5:3e:b5:6d:40:2b:df:44:12:15:f0:
f5:fe:2c:76:8f:28:86:b2:2c:45:53:11:7b:13:42:
19:70:d5:39:ef:56:11:eb:8e:9e:eb:ff:69:95:99:
76:36:a5:cc:af:94:24:05:43:ef:3e:49:a1:22:7c:
c2:eb:97:c0:52:8c:a4:08:44:30:d3:71:0c:9f:03:
de:7c:75:b3:fa:12:72:7e:94:69:52:04:d9:cf:5a:
ac:35:a9:ee:e7:9f:c3:b8:a2:a0:6e:a7:82:80:9e:
e1:79:68:96:13:f9:55:fc:73:a3:33:08:f1:f2:b8:
0f:1f:19:b6:73:14:e6:ed:04:f1:70:89:d2:40:7a:
14:39:55:dd:81:af:a4:de:5c:be:bc:60:6a:74:a1:
9f:b8:1a:8a:9c:d2:be:87:01:88:85:4b:37:9a:5d:
ec:b9:da:1a:c9:53:a3:a1:ff:73:3e:90:2d:cf:c9:
30:c8:29:3f:d5:93:be:53:df:7e:e4:48:3a:be:87:
1f:69:bc:56:41:41:17:a1:d6:fd:55:c8:2a:27:0b:
28:2c:08:30:62:44:63:85:d0:d2:d4:33:28:af:d6:
aa:6b:15:46:52:c3:0e:44:70:b2:b3:45:9a:cb:d3:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:B4:1E:69:24:AC:73:16:46:EC:67:22:AA:70:6A:41:F9:C2:E4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
98:c7:2e:ff:de:54:46:8a:1f:3a:24:69:e1:8a:9f:cb:23:14:
93:17:bd:56:af:85:0e:3e:59:28:fc:88:d6:93:68:75:3b:cf:
23:68:3f:67:0d:78:83:d9:37:f0:04:3e:6b:60:fa:32:8c:ad:
08:3c:5a:b0:92:fb:61:53:3b:d1:39:9d:10:c0:ed:ff:22:10:
ac:d0:a6:79:11:57:af:a2:b8:8a:7a:ce:a9:3d:7f:02:b6:d2:
d4:d1:37:9f:31:bb:a3:51:bc:27:7b:56:8d:34:7c:5b:08:43:
e8:82:e9:8c:c7:7c:44:70:ef:2f:2e:44:3e:23:70:9a:8a:e4:
16:50:19:5f:2c:7b:b4:b2:d3:21:79:2e:27:96:4b:14:f5:1b:
b7:36:4c:ab:49:c0:0b:17:69:03:83:cf:12:ba:a1:f6:40:9e:
ec:15:ea:e3:b9:81:56:7b:4d:91:5b:f1:da:43:d9:8a:95:0f:
94:06:45:82:da:da:c1:e7:5f:9f:ca:4c:c1:37:08:89:78:53:
7d:45:11:f7:03:95:13:16:2b:73:8a:d9:3c:9f:cf:91:08:12:
44:9e:0e:de:06:8a:c5:26:66:28:75:a4:88:67:65:d5:46:93:
fc:69:5f:3e:4a:51:d5:af:fc:5f:57:52:5d:b2:62:d5:a0:38:
74:94:2b:d4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZPju47DRJvi2z72yPtmD3SSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQxMjIwMTEwMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmJiYjQxZTY5MjRhYzczMTY0NmVjNjcyMmFhNzA2YTQxZjljMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEg734TSix/fKsgKjgT6e3XbpT61
bUAr30QSFfD1/ix2jyiGsixFUxF7E0IZcNU571YR646e6/9plZl2NqXMr5QkBUPv
PkmhInzC65fAUoykCEQw03EMnwPefHWz+hJyfpRpUgTZz1qsNanu55/DuKKgbqeC
gJ7heWiWE/lV/HOjMwjx8rgPHxm2cxTm7QTxcInSQHoUOVXdga+k3ly+vGBqdKGf
uBqKnNK+hwGIhUs3ml3sudoayVOjof9zPpAtz8kwyCk/1ZO+U99+5Eg6vocfabxW
QUEXodb9VcgqJwsoLAgwYkRjhdDS1DMor9aqaxVGUsMORHCys0Way9NWpwIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFBu7tB5pJKxzFkbsZyKqcGpB+cLkMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvRzd1MEhta2tySE1XUnV4bklxcHdha0g1d3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAIC
O8ADBAMfDwADBAItUWgDBAItUXwDBAIthTwDBAEtiQwDBAItkYQDBAItllQDBAIt
mIwDBAItmzgDBAJZvpgDBAJcdrQwDAMEA7ITKAMEALITKgMEALkcMwMEArnh9AME
Arnl2AMEAbnnugMEArn05AMEArn2DAMEAsIfaAMEAsIgcDANBgkqhkiG9w0BAQsF
AAOCAQEAmMcu/95URoofOiRp4YqfyyMUkxe9Vq+FDj5ZKPyI1pNodTvPI2g/Zw14
g9k38AQ+a2D6MoytCDxasJL7YVM70TmdEMDt/yIQrNCmeRFXr6K4inrOqT1/ArbS
1NE3nzG7o1G8J3tWjTR8WwhD6ILpjMd8RHDvLy5EPiNwmorkFlAZXyx7tLLTIXku
J5ZLFPUbtzZMq0nACxdpA4PPErqh9kCe7BXq47mBVntNkVvx2kPZipUPlAZFgtra
wedfn8pMwTcIiXhTfUUR9wOVExYrc4rZPJ/PkQgSRJ4O3gaKxSZmKHWkiGdl1UaT
/GlfPkpR1a/8X1dSXbJi1aA4dJQr1A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:55 2025 by rpki-client