Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7mUO6f3XydYwYv2xlGLULNpHXfs.roa
File: 7mUO6f3XydYwYv2xlGLULNpHXfs.roa (raw, json)
Hash identifier: 1Mys0g2V7zELGONFkHIFFRM0gdlyoQlqgHPdqLx/+IA=
Subject key identifier: EE:65:0E:E9:FD:D7:C9:D6:30:62:FD:B1:94:62:D4:2C:DA:47:5D:FB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EBD9882D932B592B6F4ABF887EC5E2CCF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7mUO6f3XydYwYv2xlGLULNpHXfs.roa
Signing time: Mon 08 Apr 2024 12:04:32 +0000
ROA not before: Mon 08 Apr 2024 12:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.136.0/24 maxlen: 24
45.43.137.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
45.43.142.0/24 maxlen: 24
45.43.143.0/24 maxlen: 24
45.43.144.0/24 maxlen: 24
45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.147.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/24 maxlen: 24
104.233.33.0/24 maxlen: 24
104.233.34.0/24 maxlen: 24
104.233.35.0/24 maxlen: 24
104.233.36.0/24 maxlen: 24
104.233.37.0/24 maxlen: 24
104.233.38.0/24 maxlen: 24
104.233.39.0/24 maxlen: 24
104.233.40.0/24 maxlen: 24
104.233.41.0/24 maxlen: 24
104.233.42.0/24 maxlen: 24
104.233.43.0/24 maxlen: 24
104.233.44.0/24 maxlen: 24
104.233.45.0/24 maxlen: 24
104.233.46.0/24 maxlen: 24
104.233.47.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.57.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
104.239.72.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.87.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.103.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
216.173.77.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 09:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:98:82:d9:32:b5:92:b6:f4:ab:f8:87:ec:5e:2c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 8 12:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee650ee9fdd7c9d63062fdb19462d42cda475dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:e0:5d:aa:34:60:b9:98:be:8b:bc:6f:a3:
f0:21:63:ab:ff:f5:d0:41:c3:48:d2:be:f2:96:0c:
eb:a3:cc:4a:e2:ad:47:ca:bc:88:d8:69:3b:b2:c3:
a3:1a:c7:86:54:34:5a:e5:d2:38:7b:0c:cc:f9:04:
c2:d8:b7:ab:f4:13:e6:56:87:c7:4a:33:12:fc:7c:
0c:0e:93:2d:93:b9:18:17:f2:00:0a:09:86:34:5d:
f9:ca:8c:7e:d4:60:3d:f0:18:98:91:27:8b:31:2e:
ad:42:1c:94:fb:33:dc:16:6a:fd:05:3f:8c:4e:0d:
f1:37:b3:1d:e8:b3:1c:6b:43:92:31:dc:45:fc:b9:
43:d1:1e:69:68:1a:52:b3:18:bd:34:cb:84:5a:93:
cb:17:ea:f3:c4:e1:d8:cd:58:25:0a:9e:05:9c:09:
19:94:fe:83:bd:80:39:8f:13:f9:99:9d:92:57:74:
9e:50:fc:07:b4:d2:db:65:4e:81:61:b7:95:fd:8e:
96:bd:c5:b5:af:48:16:a4:05:52:aa:88:df:1d:f8:
94:23:69:9c:4f:df:0c:ab:66:b1:f0:49:4c:69:80:
2f:18:03:5d:91:97:e2:8c:bf:cd:4f:f4:bf:cf:53:
2c:c9:73:5b:60:1b:2d:fb:dd:bf:6e:3d:bb:64:b4:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:0E:E9:FD:D7:C9:D6:30:62:FD:B1:94:62:D4:2C:DA:47:5D:FB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7mUO6f3XydYwYv2xlGLULNpHXfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0-45.43.152.255
45.43.154.0-45.43.162.255
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.28.0/24
104.233.31.0-104.233.47.255
104.233.56.0/22
104.238.6.0/24
104.238.11.0-104.238.13.255
104.238.15.0-104.238.18.255
104.238.21.0-104.238.25.255
104.238.28.0/24
104.238.30.0/24
104.239.8.0/23
104.239.12.0/24
104.239.14.0/23
104.239.29.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.54.0-104.239.67.255
104.239.72.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.87.0/24
104.239.89.0/24
104.239.99.0-104.239.100.255
104.239.102.0/23
104.239.109.0-104.239.110.255
104.239.127.0/24
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.64.0/22
216.173.77.0/24
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
07:a3:dd:a9:d6:12:ad:2b:a7:92:89:55:f2:f4:7a:c5:22:40:
d7:20:97:fe:9c:27:89:ae:54:02:2d:0f:48:15:fc:61:16:98:
23:fd:f0:06:28:a0:78:96:a0:00:50:fe:e6:dc:8f:d7:b5:34:
f2:21:36:5b:0f:2e:71:88:99:f0:8f:a2:ac:ac:80:90:b1:4f:
86:b3:db:df:b9:01:7f:09:c5:01:f7:23:1d:71:9b:0b:ed:66:
17:cd:b1:58:e5:6c:92:a2:8f:67:d8:a6:5c:d7:07:07:9a:05:
2e:98:42:58:ed:32:9a:66:ca:24:43:95:1e:9e:fb:16:b0:93:
09:10:8d:07:70:dc:69:7f:cf:90:47:f4:9f:ca:74:34:c8:df:
ce:c8:b8:41:c6:51:5c:f1:d1:a2:b0:cf:4f:83:89:10:20:68:
25:2d:4a:75:fa:f5:78:44:98:8e:25:b0:05:fb:42:aa:56:43:
50:ba:3a:ad:d3:9e:c1:49:76:3e:59:b9:4b:15:92:5c:4a:9e:
32:fe:6e:9e:c6:80:c6:0f:99:ba:18:ee:72:09:5a:10:02:35:
a3:84:ce:a5:e5:8d:57:b2:0c:3c:c9:06:4d:8f:37:27:f5:80:
65:f2:e5:92:0b:21:8c:35:a2:30:59:87:d7:e6:23:dd:da:3a:
e3:cb:62:f9
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISAY69mILZMrWStvSr+IfsXizPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQwNDA4MTIwNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTY1MGVlOWZkZDdjOWQ2MzA2MmZkYjE5NDYyZDQyY2RhNDc1ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijrgXao0YLmYvou8b6PwIWOr//XQ
QcNI0r7ylgzro8xK4q1HyryI2Gk7ssOjGseGVDRa5dI4ewzM+QTC2Ler9BPmVofH
SjMS/HwMDpMtk7kYF/IACgmGNF35yox+1GA98BiYkSeLMS6tQhyU+zPcFmr9BT+M
Tg3xN7Md6LMca0OSMdxF/LlD0R5paBpSsxi9NMuEWpPLF+rzxOHYzVglCp4FnAkZ
lP6DvYA5jxP5mZ2SV3SeUPwHtNLbZU6BYbeV/Y6WvcW1r0gWpAVSqojfHfiUI2mc
T98Mq2ax8ElMaYAvGANdkZfijL/NT/S/z1MsyXNbYBst+92/bj27ZLQHkwIDAQAB
o4IDUzCCA08wHQYDVR0OBBYEFO5lDun918nWMGL9sZRi1CzaR137MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvN21VTzZmM1h5ZFl3WXYyeGxHTFVMTnBIWGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZwYIKwYBBQUHAQcBAf8EggFWMIIBUjCCAU4EAgABMIIB
RjAMAwQDLSuIAwQALSuYMAwDBAEtK5oDBAAtK6IDBABAiRADBANo3rADBABo3r0D
BAFo6QgDBABo6RwwDAMEAGjpHwMEBGjpIAMEAmjpOAMEAGjuBjAMAwQAaO4LAwQB
aO4MMAwDBABo7g8DBABo7hIwDAMEAGjuFQMEAWjuGAMEAGjuHAMEAGjuHgMEAWjv
CAMEAGjvDAMEAWjvDgMEAGjvHTAMAwQAaO8tAwQAaO8uAwQAaO8wMAwDBAFo7zYD
BAJo70ADBABo70gDBABo70oDBABo708DBABo71MDBABo71cDBABo71kwDAMEAGjv
YwMEAGjvZAMEAWjvZjAMAwQAaO9tAwQAaO9uAwQAaO9/MAwDBANo+QgDBANo+RAw
DAMEAWj5KgMEAGj5NgMEAtitQAMEANitTTAMAwQB2K1aAwQF2K1AMA0GCSqGSIb3
DQEBCwUAA4IBAQAHo92p1hKtK6eSiVXy9HrFIkDXIJf+nCeJrlQCLQ9IFfxhFpgj
/fAGKKB4lqAAUP7m3I/XtTTyITZbDy5xiJnwj6KsrICQsU+Gs9vfuQF/CcUB9yMd
cZsL7WYXzbFY5WySoo9n2KZc1wcHmgUumEJY7TKaZsokQ5UenvsWsJMJEI0HcNxp
f8+QR/SfynQ0yN/OyLhBxlFc8dGisM9Pg4kQIGglLUp1+vV4RJiOJbAF+0KqVkNQ
ujqt057BSXY+WblLFZJcSp4y/m6exoDGD5m6GO5yCVoQAjWjhM6l5Y1Xsgw8yQZN
jzcn9YBl8uWSCyGMNaIwWYfX5iPd2jrjy2L5
-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:12 2024 by rpki-client on console-ams.rpki-client.org