Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J2uGh2GghbKyuQZH68aOtvQ1A8Q.roa
File: J2uGh2GghbKyuQZH68aOtvQ1A8Q.roa (raw, json)
Hash identifier: vA9TDzxNYji+JGwezMFdlVO87jImV7tpkoy+r2J8nIo=
Subject key identifier: 27:6B:86:87:61:A0:85:B2:B2:B9:06:47:EB:C6:8E:B6:F4:35:03:C4
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0193D8C0EEB85FC5480CA22DBFF414824848
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J2uGh2GghbKyuQZH68aOtvQ1A8Q.roa
Signing time: Wed 18 Dec 2024 07:52:22 +0000
ROA not before: Wed 18 Dec 2024 07:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.192.0/20 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.208.0/21 maxlen: 24
37.114.216.0/22 maxlen: 24
37.114.220.0/22 maxlen: 24
37.114.224.0/22 maxlen: 24
37.114.225.0/24 maxlen: 24
37.114.228.0/22 maxlen: 24
37.114.232.0/21 maxlen: 24
37.114.240.0/22 maxlen: 24
37.114.244.0/22 maxlen: 24
37.114.246.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.252.0/24 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
37.191.87.0/24 maxlen: 24
37.191.90.0/23 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.19.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/22 maxlen: 24
46.34.188.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
213.207.193.0/24 maxlen: 24
213.207.194.0/24 maxlen: 24
213.207.201.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:c0:ee:b8:5f:c5:48:0c:a2:2d:bf:f4:14:82:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Dec 18 07:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276b868761a085b2b2b90647ebc68eb6f43503c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:f8:88:04:5f:04:1b:e4:94:13:8f:0d:90:
47:a7:a6:83:83:ce:dc:54:22:de:16:5f:73:26:8a:
34:d6:af:3c:ed:b0:d3:8a:fe:fb:03:8b:6c:76:ed:
69:13:ba:96:44:90:ea:29:18:8c:75:22:0a:f3:47:
e8:49:82:08:e5:b3:2c:96:45:be:4d:e7:37:d4:25:
32:f6:60:6e:82:72:16:13:59:4e:3a:0c:1e:85:75:
77:36:c2:aa:35:a0:5d:03:a5:78:e8:ce:d4:8f:47:
ae:33:6a:2e:55:f0:32:01:57:9b:36:c2:db:10:c9:
fe:0d:24:98:4f:c1:ce:f0:dc:a0:bf:22:f6:db:3f:
55:3b:fa:3e:97:ec:02:b3:a9:00:58:cb:ce:13:2c:
08:f2:bd:6f:18:73:91:f9:69:79:b2:b7:58:a5:e3:
ca:39:66:91:41:29:cb:28:1f:bf:fc:94:66:6a:4c:
a1:dd:3e:d1:40:75:d4:ee:f6:a5:0c:ef:14:5a:a6:
e3:f5:a9:fb:45:57:68:64:35:32:15:ca:15:1e:ea:
26:03:87:e1:12:ba:d5:62:6d:68:ce:a8:aa:15:0e:
75:2b:4b:22:95:cd:9a:5d:9c:6e:ee:f3:b0:94:ac:
dd:92:9d:57:aa:17:53:b0:d2:d0:78:a1:97:7a:af:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6B:86:87:61:A0:85:B2:B2:B9:06:47:EB:C6:8E:B6:F4:35:03:C4
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J2uGh2GghbKyuQZH68aOtvQ1A8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.87.0/24
37.191.90.0/23
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.148.0/24
188.136.158.0/24
188.136.174.0/24
188.136.176.0-188.136.184.255
188.136.186.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.199.255
188.136.201.0-188.136.203.255
188.136.208.0/24
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
76:8e:ab:3b:c1:70:a7:0a:0e:62:cf:98:fe:ae:f7:7d:73:70:
53:92:16:16:9b:9c:71:b0:7d:9b:99:9f:a4:80:b7:a8:12:8b:
98:99:ec:79:de:f5:56:7e:2f:0d:5e:76:17:fc:76:fe:07:05:
7f:be:00:f0:2a:04:36:2f:2a:b0:0e:8c:50:7b:a6:c4:99:0f:
be:9b:1a:0a:19:bc:86:53:80:ec:54:1d:5b:a4:09:5a:45:d8:
e4:82:93:44:6a:ff:d9:8b:0a:a5:f2:83:c6:d5:a4:87:02:2c:
9e:b7:cc:f0:9a:3b:d2:50:6f:6a:6b:3b:af:1a:bd:c1:e4:47:
b8:10:1d:e9:09:1c:66:dd:6a:3d:ea:82:bf:6d:d0:ac:20:40:
68:80:2c:71:45:59:bc:cd:9b:31:96:bd:be:68:a4:96:34:b2:
c7:d8:0c:3a:fa:18:9e:79:f6:39:47:0e:18:bf:16:7f:a0:2b:
55:d1:d8:e3:70:2a:de:8e:5e:98:e8:96:2e:61:47:c9:a4:48:
5c:a1:f0:a6:fc:12:99:28:98:0e:5b:e6:95:65:f0:85:06:e3:
b9:aa:49:1e:6b:ca:f6:4f:d3:46:fc:60:f4:17:0d:50:7c:78:
c9:70:22:f2:0e:ed:dc:12:ca:73:cf:34:82:67:4d:89:57:c9:
28:a8:0d:9b
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgISAZPYwO64X8VIDKItv/QUgkhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjQxMjE4MDc1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzZiODY4NzYxYTA4NWIyYjJiOTA2NDdlYmM2OGViNmY0MzUwM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ74iARfBBvklBOPDZBHp6aDg87c
VCLeFl9zJoo01q887bDTiv77A4tsdu1pE7qWRJDqKRiMdSIK80foSYII5bMslkW+
Tec31CUy9mBugnIWE1lOOgwehXV3NsKqNaBdA6V46M7Uj0euM2ouVfAyAVebNsLb
EMn+DSSYT8HO8NygvyL22z9VO/o+l+wCs6kAWMvOEywI8r1vGHOR+Wl5srdYpePK
OWaRQSnLKB+//JRmakyh3T7RQHXU7valDO8UWqbj9an7RVdoZDUyFcoVHuomA4fh
ErrVYm1ozqiqFQ51K0silc2aXZxu7vOwlKzdkp1XqhdTsNLQeKGXeq+hawIDAQAB
o4IEPDCCBDgwHQYDVR0OBBYEFCdrhodhoIWysrkGR+vGjrb0NQPEMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvSjJ1R2gyR2doYkt5dVFaSDY4YU90dlExQThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICUAYIKwYBBQUHAQcBAf8EggI/MIICOzCCAigEAgABMIIC
IAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/VwMEASW/WgMEBiXdAAMEBCXrEAMEAi2A
jAMEAi2QfAMEAC4gBQMEAC4gCQMEAC4gDjAMAwQCLiKkAwQELiKgMAwDBAEuIrID
BAYuIoADBAFOnrYDBAJPhMgDBABPhNUwDAMEAE+E2QMEAU+E3AMEAFBHcTAMAwQB
UEd6AwQBUEd8AwQAUEd/AwQAUR3zAwQDUR34AwQEUVuQAwQBVm0gAwQCVm0kAwQA
Vm0pAwQBVm0uAwQAVm01AwQCVm04AwQBVm0+AwQBV/e0AwQEW7hAAwQDXD24AwQC
XHdEAwQEXougAwQDbeZAAwQEbeZQAwQAsN1BAwQAuQw+AwQCuRVMAwQCuR5MAwQC
uSjwAwQCuS28AwQCuUY8AwQBuVKkAwQCuVVEAwQAuWjkAwQCuYWYMAwDBAC5jukD
BAK5jugDBAK5rAADBAK5vhQDBAK5xUQDBAG50JYDBAC8S1wDBAC8S14DBAG8S2YD
BAC8S2sDBAG8S24wDAMEALxLcQMEAbxLdAMEAbxLegMEBbx5gAMEALyIlAMEALyI
ngMEALyIrjAMAwQEvIiwAwQAvIi4MAwDBAG8iLoDBAG8iLwDBAK8iMAwDAMEALyI
xQMEA7yIwDAMAwQAvIjJAwQCvIjIAwQAvIjQMAwDBAK8iNQDBAW8iMADBALVwxAD
BATVz8ADBADZQtADBADZQtMwDQQCAAIwBwMFAyoMAQAwDQYJKoZIhvcNAQELBQAD
ggEBAHaOqzvBcKcKDmLPmP6u931zcFOSFhabnHGwfZuZn6SAt6gSi5iZ7Hne9VZ+
Lw1edhf8dv4HBX++APAqBDYvKrAOjFB7psSZD76bGgoZvIZTgOxUHVukCVpF2OSC
k0Rq/9mLCqXyg8bVpIcCLJ63zPCaO9JQb2prO68avcHkR7gQHekJHGbdaj3qgr9t
0KwgQGiALHFFWbzNmzGWvb5opJY0ssfYDDr6GJ559jlHDhi/Fn+gK1XR2ONwKt6O
Xpjoli5hR8mkSFyh8Kb8EpkomA5b5pVl8IUG47mqSR5ryvZP00b8YPQXDVB8eMlw
IvIO7dwSynPPNIJnTYlXySioDZs=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:31 2025 by rpki-client