Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ONTsi37iQc98qIPehpXWLME1_xA.roa
File: ONTsi37iQc98qIPehpXWLME1_xA.roa (raw, json)
Hash identifier: VL3ui8jOKIs/4re3cyJkfftsVlFIAwK/WSr70izGc5U=
Subject key identifier: 38:D4:EC:8B:7E:E2:41:CF:7C:A8:83:DE:86:95:D6:2C:C1:35:FF:10
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0189CFC58DFEB49407F86F87B6E838FD24EC
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ONTsi37iQc98qIPehpXWLME1_xA.roa
Signing time: Mon 07 Aug 2023 11:32:57 +0000
ROA not before: Mon 07 Aug 2023 11:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12975
IP address blocks: 213.6.64.0/18 maxlen: 18
213.6.0.0/18 maxlen: 18
213.6.0.0/16 maxlen: 24
118.107.180.0/24 maxlen: 24
46.60.64.0/18 maxlen: 24
185.19.220.0/22 maxlen: 22
103.248.244.0/22 maxlen: 22
45.127.176.0/22 maxlen: 22
213.6.128.0/18 maxlen: 18
158.140.16.0/20 maxlen: 20
158.140.112.0/22 maxlen: 22
158.140.108.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
43.241.159.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
43.241.158.0/24 maxlen: 24
43.241.156.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.68.0/23 maxlen: 23
158.140.64.0/18 maxlen: 24
158.140.80.0/22 maxlen: 22
158.140.84.0/22 maxlen: 22
103.248.36.0/22 maxlen: 22
158.140.88.0/22 maxlen: 22
45.113.108.0/22 maxlen: 22
158.140.96.0/22 maxlen: 22
158.140.92.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
5.11.47.0/24 maxlen: 24
5.11.46.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
115.166.128.0/22 maxlen: 24
103.37.85.0/24 maxlen: 24
103.37.84.0/24 maxlen: 24
1.178.208.0/20 maxlen: 24
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
203.30.104.0/22 maxlen: 22
103.57.108.0/22 maxlen: 22
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
59.152.88.0/21 maxlen: 21
1.179.72.0/21 maxlen: 21
1.179.88.0/21 maxlen: 21
45.117.42.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.43.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
43.245.208.0/22 maxlen: 22
1.178.112.0/20 maxlen: 24
1.178.128.0/20 maxlen: 20
43.245.156.0/22 maxlen: 22
139.190.176.0/20 maxlen: 20
37.75.211.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
213.244.72.0/21 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/22 maxlen: 22
195.123.160.0/23 maxlen: 23
195.123.160.0/21 maxlen: 21
195.123.112.0/21 maxlen: 21
103.216.184.0/22 maxlen: 24
194.176.98.0/23 maxlen: 23
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
43.230.140.0/22 maxlen: 24
83.244.22.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
212.14.224.0/19 maxlen: 24
188.0.96.0/20 maxlen: 24
188.161.184.0/22 maxlen: 22
45.134.202.0/23 maxlen: 23
188.161.200.0/21 maxlen: 21
45.121.104.0/22 maxlen: 22
45.121.106.0/23 maxlen: 23
188.0.112.0/20 maxlen: 24
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/22 maxlen: 22
188.161.24.0/23 maxlen: 23
103.215.4.0/22 maxlen: 22
188.161.30.0/23 maxlen: 23
43.255.108.0/22 maxlen: 22
188.161.40.0/21 maxlen: 21
188.161.48.0/21 maxlen: 21
188.161.56.0/21 maxlen: 21
182.161.60.0/22 maxlen: 22
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
118.107.180.0/22 maxlen: 22
185.19.223.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.220.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.176.0/24 maxlen: 24
103.242.60.0/22 maxlen: 22
188.161.112.0/22 maxlen: 22
188.161.116.0/22 maxlen: 22
43.241.156.0/22 maxlen: 22
103.53.4.0/22 maxlen: 24
103.248.38.0/24 maxlen: 24
103.248.36.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
103.248.37.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
103.248.39.0/24 maxlen: 24
5.11.40.0/21 maxlen: 21
103.199.176.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/22 maxlen: 22
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
103.57.111.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.110.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
82.213.0.0/18 maxlen: 24
150.253.32.0/19 maxlen: 24
162.212.180.0/22 maxlen: 24
77.91.128.0/18 maxlen: 24
77.91.128.0/21 maxlen: 21
77.91.136.0/21 maxlen: 21
45.117.40.0/22 maxlen: 22
103.49.208.0/22 maxlen: 24
85.184.240.0/22 maxlen: 22
103.102.252.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
37.75.208.0/21 maxlen: 21
213.244.71.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.79.0/24 maxlen: 24
203.89.108.0/22 maxlen: 24
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
103.231.107.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
45.116.248.0/22 maxlen: 22
45.117.4.0/22 maxlen: 22
195.123.112.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.119.0/24 maxlen: 24
66.9.0.0/19 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
103.209.204.0/22 maxlen: 22
193.223.252.0/23 maxlen: 24
194.169.188.0/23 maxlen: 23
213.6.192.0/18 maxlen: 18
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
103.47.68.0/22 maxlen: 24
45.121.105.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.32.0/24 maxlen: 24
43.243.35.0/24 maxlen: 24
2a00:d2c0:32::/48 maxlen: 48
2a00:d2c0:4::/48 maxlen: 48
2a00:d2c0::/32 maxlen: 32
2a00:d2c0:1e::/48 maxlen: 48
2a00:d2c0:31::/48 maxlen: 48
2a00:d2c0:1d::/48 maxlen: 48
2a00:d2c0:33::/48 maxlen: 48
2a00:d2c0:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 24 Sep 2023 06:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:c5:8d:fe:b4:94:07:f8:6f:87:b6:e8:38:fd:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Aug 7 11:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38d4ec8b7ee241cf7ca883de8695d62cc135ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:1f:f7:93:5a:5c:67:2c:d3:66:80:ad:5f:
1f:87:34:38:02:77:aa:be:f7:04:e7:e4:aa:c7:58:
52:4e:a0:28:27:7f:71:34:04:26:26:d4:ca:fd:e9:
35:08:56:66:eb:d2:92:15:be:03:e2:03:6d:0c:dc:
73:e5:b7:6e:28:fb:13:f4:ba:9b:3a:2b:06:77:da:
ae:0e:39:8b:38:7a:d7:1c:84:b0:29:7f:4d:ad:f4:
23:fb:38:c2:e2:cd:8a:62:73:3d:ac:89:70:17:23:
65:43:60:16:7c:b8:b0:a2:ea:b2:4d:08:67:cb:12:
95:5e:e2:9d:fd:58:58:e5:85:d8:fa:6d:a4:92:27:
f5:01:06:84:87:72:80:e9:86:e0:46:5b:f4:73:38:
3c:c1:c0:19:76:bf:30:e9:3f:82:6f:0a:14:7e:37:
fe:f9:a1:7a:09:cc:d8:16:66:89:cc:a7:44:10:30:
e7:2f:b8:02:68:0f:51:60:18:69:ab:31:9d:4e:e2:
0d:65:c0:68:99:1e:28:d8:8b:32:06:f9:9f:60:72:
53:21:30:a9:f5:4e:67:42:6c:1f:2f:d9:97:54:83:
f3:1c:2f:50:73:f0:4e:e4:4b:0f:8f:9e:c4:be:e3:
a1:e0:36:17:cd:07:b1:4a:b2:45:18:18:c3:8f:ca:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:EC:8B:7E:E2:41:CF:7C:A8:83:DE:86:95:D6:2C:C1:35:FF:10
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ONTsi37iQc98qIPehpXWLME1_xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.178.208.0/20
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.230.140.0/22
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.245.156.0/22
43.245.208.0/22
43.255.108.0/22
45.113.108.0/22
45.116.248.0/22
45.117.4.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
59.152.88.0/21
66.9.0.0/19
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
85.184.240.0/22
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.47.68.0/22
103.49.208.0/22
103.53.4.0/22
103.57.108.0/22
103.102.252.0/22
103.193.132.0/22
103.196.120.0/22
103.199.176.0/22
103.206.36.0/22
103.206.108.0/22
103.209.204.0/22
103.215.4.0/22
103.216.184.0/22
103.231.104.0/22
103.239.96.0/22
103.242.60.0/22
103.248.36.0/22
103.248.244.0/22
113.212.64.0/22
115.166.128.0/22
118.107.180.0/22
139.190.128.0/18
144.48.236.0/22
150.253.32.0/19
158.140.16.0/20
158.140.64.0/18
162.212.180.0/22
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.0.96.0/19
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.89.108.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
IPv6:
2a00:d2c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:4a:75:c5:13:af:cd:41:97:52:0d:bf:dd:f6:f8:89:ab:03:
52:46:60:db:52:72:56:15:95:f2:1f:81:2e:0f:e3:dd:28:c8:
b8:be:d9:bd:1c:18:d0:c1:7d:6e:72:cf:a3:f3:27:21:54:1e:
4b:3a:a6:98:5a:cd:84:8d:b9:89:1e:6c:bc:2a:2e:e0:48:2c:
ac:93:52:5b:cb:af:d4:08:21:12:7b:0e:dd:b4:d1:e9:c3:e8:
26:1a:95:74:9d:b9:d1:18:46:14:2c:74:9a:7c:41:da:fa:cc:
ee:04:de:4c:8e:2a:85:19:38:ac:9e:6e:cc:8b:5c:5a:f7:ba:
b6:60:5d:8a:6f:65:07:40:f3:a3:cf:f2:ea:63:ce:78:0a:d9:
39:5f:06:35:ad:9c:5b:9e:c0:45:0a:b6:4a:74:4b:3b:aa:27:
df:80:92:1e:87:3d:d4:bd:b4:9e:44:46:5c:94:b3:1a:0b:48:
da:e7:8c:e8:f9:66:6e:52:6c:2e:3c:93:51:22:e4:de:1b:7a:
72:d7:43:e1:84:b2:72:8a:2a:26:a6:a0:24:2a:57:66:57:d7:
95:bc:c6:45:cd:36:65:1c:c7:b4:9a:f2:e9:24:ac:dd:45:42:
a8:5d:73:12:50:3a:9d:d0:67:d7:40:c5:7b:bb:0f:e2:c8:15:
db:00:ab:cf
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgISAYnPxY3+tJQH+G+Htug4/STsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjMwODA3MTEzMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGQ0ZWM4YjdlZTI0MWNmN2NhODgzZGU4Njk1ZDYyY2MxMzVmZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYf95NaXGcs02aArV8fhzQ4Aneq
vvcE5+Sqx1hSTqAoJ39xNAQmJtTK/ek1CFZm69KSFb4D4gNtDNxz5bduKPsT9Lqb
OisGd9quDjmLOHrXHISwKX9NrfQj+zjC4s2KYnM9rIlwFyNlQ2AWfLiwouqyTQhn
yxKVXuKd/VhY5YXY+m2kkif1AQaEh3KA6YbgRlv0czg8wcAZdr8w6T+CbwoUfjf+
+aF6CczYFmaJzKdEEDDnL7gCaA9RYBhpqzGdTuINZcBomR4o2IsyBvmfYHJTITCp
9U5nQmwfL9mXVIPzHC9Qc/BO5EsPj57EvuOh4DYXzQexSrJFGBjDj8onkwIDAQAB
o4ID/TCCA/kwHQYDVR0OBBYEFDjU7It+4kHPfKiD3oaV1izBNf8QMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvT05Uc2kzN2lRYzk4cUlQZWhwWFdMTUUxX3hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEQYIKwYBBQUHAQcBAf8EggIAMIIB/DCCAekEAgABMIIB
4TAMAwQEAbJwAwQEAbKAAwQEAbLQAwQDAbMoAwQDAbNIAwQDAbNYAwQDBQsoAwQG
GCpAAwQDJUvQAwQCK+aMAwQCK/GcAwQCK/MYAwQCK/MgAwQCK/NcAwQCK/WcAwQC
K/XQAwQCK/9sAwQCLXFsAwQCLXT4AwQCLXUEAwQCLXUoAwQCLXloAwQCLX+wAwQB
LYbKAwQGLjxAAwQDO5hYAwQFQgkAAwQGTVuAAwQGUtUAAwQHU/QAAwQCVbjwAwQC
Vmi8AwQCZxuQAwQCZyVUAwQCZy9EAwQCZzHQAwQCZzUEAwQCZzlsAwQCZ2b8AwQC
Z8GEAwQCZ8R4AwQCZ8ewAwQCZ84kAwQCZ85sAwQCZ9HMAwQCZ9cEAwQCZ9i4AwQC
Z+doAwQCZ+9gAwQCZ/I8AwQCZ/gkAwQCZ/j0AwQCcdRAAwQCc6aAAwQCdmu0AwQG
i76AAwQCkDDsAwQFlv0gAwQEnowQAwQGnoxAAwQCotS0MAsDAwCwQQMEArBBCAME
ArahPAMEArkT3AMEBbwAYAMDALyhAwQBwd/8AwQBwePsAwQBwqm8AwQBwrBiAwQD
w3twAwQDw3ugAwQAyxwTAwQCyx5oAwQCy1lsAwQCy73sAwQF1A7gAwMA1QYDBAbV
9EAwDQQCAAIwBwMFACoA0sAwDQYJKoZIhvcNAQELBQADggEBADxKdcUTr81Bl1IN
v932+ImrA1JGYNtSclYVlfIfgS4P490oyLi+2b0cGNDBfW5yz6PzJyFUHks6ppha
zYSNuYkebLwqLuBILKyTUlvLr9QIIRJ7Dt200enD6CYalXSdudEYRhQsdJp8Qdr6
zO4E3kyOKoUZOKyebsyLXFr3urZgXYpvZQdA86PP8upjzngK2TlfBjWtnFuewEUK
tkp0SzuqJ9+Akh6HPdS9tJ5ERlyUsxoLSNrnjOj5Zm5SbC48k1Ei5N4benLXQ+GE
snKKKiamoCQqV2ZX15W8xkXNNmUcx7Sa8ukkrN1FQqhdcxJQOp3QZ9dAxXu7D+LI
FdsAq88=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:20 2024 by rpki-client on console-fra.rpki-client.org