Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/AB5YwbFuRd9UQ7c5MPQfWP4NlCI.roa
File: AB5YwbFuRd9UQ7c5MPQfWP4NlCI.roa (raw, json)
Hash identifier: DA/zPwlUqOD7FpTg5YX8HNf6AZ5SYCpcihLa+KTMlN8=
Subject key identifier: 00:1E:58:C1:B1:6E:45:DF:54:43:B7:39:30:F4:1F:58:FE:0D:94:22
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0193F7AC9D1DE26E18D5A9B8AD28A13E30C7
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/AB5YwbFuRd9UQ7c5MPQfWP4NlCI.roa
Signing time: Tue 24 Dec 2024 07:58:24 +0000
ROA not before: Tue 24 Dec 2024 07:58:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 24 Dec 2024 09:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:ac:9d:1d:e2:6e:18:d5:a9:b8:ad:28:a1:3e:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Dec 24 07:58:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=001e58c1b16e45df5443b73930f41f58fe0d9422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:da:57:9b:fc:85:a1:d4:ef:eb:6d:4f:58:
09:7c:43:e5:11:e2:ad:41:9a:ea:6b:44:c9:f5:e1:
d0:f6:12:db:d5:08:bf:ac:d1:9b:e6:9d:03:a8:aa:
66:eb:2a:b2:da:3f:93:c2:fa:24:d6:3e:b6:13:5f:
1b:ce:70:d8:82:c5:93:b7:10:71:32:5c:b1:b6:6f:
0c:d2:92:06:83:f2:3e:66:b0:c6:f2:69:ab:01:8d:
1b:55:5f:58:96:4e:d0:00:59:f7:e4:f9:b6:d3:a9:
22:2e:f7:c1:d6:33:9e:3b:aa:de:d3:16:8c:65:f1:
e3:3c:f5:7a:40:b5:7e:8d:9c:3c:6e:30:36:52:c5:
64:bc:fb:c6:5c:da:f8:fc:f3:4b:6c:31:2f:68:2d:
b0:51:6f:07:ea:ec:e5:54:c9:87:21:29:f6:d2:fe:
d0:36:d7:23:d7:e5:94:35:d9:03:82:ba:69:24:e3:
1a:32:1c:15:04:15:ab:a5:a6:98:6f:03:3e:0b:1f:
43:d8:19:1a:cb:52:77:cd:c6:61:a4:61:d9:9e:7c:
b2:88:f4:05:a6:a2:60:b9:cd:1e:ec:77:00:b1:91:
3d:ff:25:b3:5c:f2:93:eb:a7:31:5c:05:38:03:9c:
78:d7:9f:ec:6a:04:d2:92:0c:cf:dc:d4:6b:9d:dd:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:58:C1:B1:6E:45:DF:54:43:B7:39:30:F4:1F:58:FE:0D:94:22
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/AB5YwbFuRd9UQ7c5MPQfWP4NlCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
06:92:30:06:0b:52:24:fa:6e:02:a6:5f:a5:d0:d1:ab:92:0c:
14:a8:64:f9:a3:59:24:9a:e8:91:53:e6:f6:24:8e:c3:4c:f7:
48:e7:fe:4f:2e:76:38:56:5e:e9:6e:e8:c3:e7:70:17:32:01:
c5:b8:62:be:f3:d1:a1:a8:ba:b3:21:25:e4:ba:b2:f5:ab:19:
16:f3:59:20:51:10:0c:3a:de:a0:67:cf:52:bc:98:9b:dc:63:
c0:c6:6e:18:70:22:74:7f:cb:99:00:39:59:1f:ef:00:2b:d1:
c9:64:46:5f:b8:59:e3:dc:69:bb:6c:1e:e3:bd:ee:12:f4:e7:
cc:a4:f8:b2:98:39:89:55:30:9b:1b:fb:80:1e:84:8e:09:ef:
a5:13:f4:eb:01:1b:58:2d:48:e2:3d:cc:5c:f7:59:07:0b:08:
96:32:b7:7d:0e:1c:8c:c9:7f:ff:49:ad:17:55:21:e6:ad:6a:
ff:46:db:ed:68:46:61:ce:28:a6:93:bd:6e:66:89:62:58:89:
4c:2a:2b:bc:a1:c5:be:21:39:88:d8:80:19:a0:bc:6e:f4:0a:
17:a8:af:79:22:1c:b1:cf:47:d1:ad:1b:6c:7a:44:8e:77:0a:
e2:2f:93:61:9f:6b:80:90:98:20:6f:e7:42:76:07:55:0b:8c:
fe:89:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:01:25 2025 by rpki-client