Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/e9C7emsiTeb5Nz3Xd_Mu7Ufy5qU.roa
File: e9C7emsiTeb5Nz3Xd_Mu7Ufy5qU.roa (raw, json)
Hash identifier: YQRz9fa5IdreN7IQvqKHJEwCcyZ/bNSrH0pYVOFO6OQ=
Subject key identifier: 7B:D0:BB:7A:6B:22:4D:E6:F9:37:3D:D7:77:F3:2E:ED:47:F2:E6:A5
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018D7D76D2F5B579C44986A7692391B8764E
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/e9C7emsiTeb5Nz3Xd_Mu7Ufy5qU.roa
Signing time: Tue 06 Feb 2024 08:09:15 +0000
ROA not before: Tue 06 Feb 2024 08:09:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 37.235.3.0/24 maxlen: 24
37.235.4.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
94.16.98.0/24 maxlen: 24
94.16.100.0/24 maxlen: 24
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.204.0/24 maxlen: 24
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.207.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.216.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.238.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
178.255.152.0/21 maxlen: 32
185.2.176.0/22 maxlen: 32
185.2.176.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.228.148.0/22 maxlen: 22
188.65.72.0/21 maxlen: 32
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
188.172.247.0/24 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
193.33.114.0/23 maxlen: 32
194.1.206.0/24 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
217.146.0.0/19 maxlen: 24
217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
2a00:11c0::/32 maxlen: 128
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:46::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:88::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a01:aea0::/32 maxlen: 32
2a01:aea0::/40 maxlen: 40
2a01:aea0:dd1::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a05:8900:28::/48 maxlen: 48
2a05:8900:36::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 08:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:76:d2:f5:b5:79:c4:49:86:a7:69:23:91:b8:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Feb 6 08:09:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd0bb7a6b224de6f9373dd777f32eed47f2e6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:30:8c:ad:d0:f2:f8:ba:9e:4f:ca:8f:70:
62:5c:c9:d6:ba:06:fb:87:fb:f0:ee:a6:7a:d5:94:
72:88:84:1b:98:06:cc:22:2e:44:c3:de:84:79:1c:
76:db:52:27:2d:f2:48:5a:48:0d:2d:e4:ff:39:17:
38:e8:c5:7e:8d:58:db:0c:82:9b:4f:75:21:8f:a5:
16:21:eb:92:30:60:e1:0e:cc:24:1b:1b:ae:a2:0c:
90:0c:62:0d:d9:a3:cb:75:bd:0c:1b:7b:ee:59:bf:
7d:b6:e1:77:95:fc:8c:d0:6c:8b:8f:c1:d1:72:b4:
c7:a3:84:99:99:51:2d:48:4d:a9:6a:ef:fa:84:f2:
5e:a8:27:a8:e2:88:8e:33:35:fa:79:a4:bb:86:f9:
cd:90:d4:bf:0a:35:59:f8:54:cf:2e:a4:da:be:ce:
22:e0:d1:c0:7f:b6:76:a6:df:bc:88:80:26:bc:6c:
37:1d:79:66:f5:55:20:2d:05:58:08:36:4d:f9:42:
5c:da:37:e4:40:37:ae:d4:79:ed:77:74:59:03:93:
e3:9b:13:da:11:88:ca:1f:17:63:a3:83:b7:19:56:
fe:9a:97:d3:bb:a3:24:d1:ae:cb:09:7c:63:49:54:
30:b7:48:2c:df:93:35:39:b3:0a:9a:0b:d2:5c:3f:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:BB:7A:6B:22:4D:E6:F9:37:3D:D7:77:F3:2E:ED:47:F2:E6:A5
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/e9C7emsiTeb5Nz3Xd_Mu7Ufy5qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.252.224.0/19
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.100.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
2a05:8900:28::/48
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
cd:e3:1a:e2:ff:f0:f9:c6:20:15:2e:e1:e4:63:c6:62:dc:f3:
3c:77:55:f2:a3:2a:c5:d9:1a:56:28:08:86:3b:9a:46:45:d7:
c6:a0:92:f8:23:d7:3d:63:f5:12:7b:a8:84:aa:ba:36:aa:cd:
a9:b6:32:e5:ac:ac:e0:c2:7b:13:82:e2:b2:24:4e:38:30:fc:
fd:05:e8:3c:4d:9d:14:a2:60:e3:b6:ab:29:18:7c:e6:53:57:
5a:1e:a9:ed:23:0c:c7:55:af:d1:b0:25:04:8b:7b:1d:86:63:
46:40:cf:90:44:7f:b6:e5:7b:0d:41:e0:05:bc:15:c3:4a:45:
f7:80:8a:12:3c:a6:11:10:1c:99:71:01:b0:32:58:05:31:26:
98:e1:8a:68:c5:bb:28:58:42:4a:41:32:a5:fb:6a:25:82:b1:
8a:b3:d6:e7:f1:10:9a:86:ed:07:77:b4:19:cf:c6:5b:8c:35:
ba:f5:95:d4:8d:52:6f:fb:e7:d7:82:49:f0:49:f5:e4:6e:70:
84:77:6b:a1:ec:a8:8d:fd:ff:e4:ef:42:4e:3f:09:ad:61:22:
66:6a:55:06:0e:92:ee:1a:fa:d5:94:26:dd:01:6d:c1:52:00:
42:b5:64:f6:6e:3d:13:b0:58:8d:e8:fc:bd:fb:ae:36:8f:c4:
ac:44:7a:45
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAY19dtL1tXnESYanaSORuHZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjQwMjA2MDgwOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmQwYmI3YTZiMjI0ZGU2ZjkzNzNkZDc3N2YzMmVlZDQ3ZjJlNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw4wjK3Q8vi6nk/Kj3BiXMnWugb7
h/vw7qZ61ZRyiIQbmAbMIi5Ew96EeRx221InLfJIWkgNLeT/ORc46MV+jVjbDIKb
T3Uhj6UWIeuSMGDhDswkGxuuogyQDGIN2aPLdb0MG3vuWb99tuF3lfyM0GyLj8HR
crTHo4SZmVEtSE2pau/6hPJeqCeo4oiOMzX6eaS7hvnNkNS/CjVZ+FTPLqTavs4i
4NHAf7Z2pt+8iIAmvGw3HXlm9VUgLQVYCDZN+UJc2jfkQDeu1Hntd3RZA5PjmxPa
EYjKHxdjo4O3GVb+mpfTu6Mk0a7LCXxjSVQwt0gs35M1ObMKmgvSXD/nOQIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFHvQu3prIk3m+Tc913fzLu1H8ualMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvZTlDN2Vtc2lUZWI1TnozWGRfTXU3VWZ5NXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBowQCAAEwgZwwDAME
ACXrAwMEASXrBAMEBSX84DAMAwQALYQ9AwQGLYQAAwQAXhBiAwQAXhBkMAwDBABe
EH0DBABeEH4DBAaQ0MADBAGwezYDBAOy/5gDBAK5ArADBAG5MugDBAC5MusDBAC5
Uc4DBAC5UdEDBAK5dGADBAK55JQDBAO8QUgDBAa8rMADBAHBIXIDBADCAc4DBAXV
46ADBAXZkgAwJgQCAAIwIAMFACoAEcADBQAqAa6gAwcAKgWJAAAoAwcAKgWJAAA2
MA0GCSqGSIb3DQEBCwUAA4IBAQDN4xri//D5xiAVLuHkY8Zi3PM8d1XyoyrF2RpW
KAiGO5pGRdfGoJL4I9c9Y/USe6iEqro2qs2ptjLlrKzgwnsTguKyJE44MPz9Beg8
TZ0UomDjtqspGHzmU1daHqntIwzHVa/RsCUEi3sdhmNGQM+QRH+25XsNQeAFvBXD
SkX3gIoSPKYREByZcQGwMlgFMSaY4YpoxbsoWEJKQTKl+2olgrGKs9bn8RCahu0H
d7QZz8ZbjDW69ZXUjVJv++fXgknwSfXkbnCEd2uh7KiN/f/k70JOPwmtYSJmalUG
DpLuGvrVlCbdAW3BUgBCtWT2bj0TsFiN6Py9+642j8SsRHpF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org