Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/GxvF7uEDgECxjYPeBBS16hfh9SE.roa
File: GxvF7uEDgECxjYPeBBS16hfh9SE.roa (raw, json)
Hash identifier: yh1aMoObsM9Cqqq5IyRs0U/ae2LmmdWbhHvdbx2FI0Y=
Subject key identifier: 1B:1B:C5:EE:E1:03:80:40:B1:8D:83:DE:04:14:B5:EA:17:E1:F5:21
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194DA06CE2BD858642A6F650E6769A52001
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/GxvF7uEDgECxjYPeBBS16hfh9SE.roa
Signing time: Thu 06 Feb 2025 06:51:06 +0000
ROA not before: Thu 06 Feb 2025 06:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.61.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
212.98.31.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.237.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Feb 2025 11:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:06:ce:2b:d8:58:64:2a:6f:65:0e:67:69:a5:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Feb 6 06:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1bc5eee1038040b18d83de0414b5ea17e1f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:19:8f:b6:05:52:c9:f4:cb:c9:71:0b:1f:
7d:7d:58:34:43:4c:8a:be:c0:42:e3:a7:07:30:14:
ea:d2:fe:22:55:29:0c:b5:f4:de:0e:70:9a:f6:cd:
ac:05:74:f9:36:99:0d:42:87:87:85:59:24:ef:61:
e0:fd:5a:cb:ce:4d:62:61:f7:f8:4b:ad:8b:f5:7c:
16:8a:5f:9c:94:73:05:2e:85:2c:f4:53:75:5c:67:
74:05:3a:ab:e1:a0:aa:df:c9:dc:19:a0:56:fb:49:
4c:1b:5a:6a:c1:ec:c7:df:6b:50:84:e9:c1:46:3e:
25:46:c5:5b:77:17:20:2c:03:ea:38:60:37:65:8e:
30:f2:8b:a6:f4:05:c0:be:90:df:dc:d7:19:11:c9:
f6:0a:65:8b:47:fd:51:2b:6d:06:5a:0e:d3:e2:4f:
b6:27:7b:be:1a:d0:75:1c:74:c2:c1:62:d9:ea:a0:
63:52:f3:68:54:d9:cc:ed:89:18:fc:b3:df:19:0f:
05:ea:21:6e:e6:01:e0:c1:88:89:7c:de:79:4e:70:
a2:b1:4e:80:2f:bd:fd:4e:62:41:64:25:f1:3a:82:
a4:c6:9d:76:d9:15:de:a8:29:27:72:9d:f8:55:44:
f6:09:42:6b:d2:df:3a:00:e1:62:f0:8d:6c:4c:6b:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:C5:EE:E1:03:80:40:B1:8D:83:DE:04:14:B5:EA:17:E1:F5:21
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/GxvF7uEDgECxjYPeBBS16hfh9SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
93:de:fb:88:83:6d:d5:86:b8:bc:ac:f0:38:b2:56:ae:7e:cf:
a8:c3:ef:bb:e6:a5:51:4d:de:c3:9d:df:bf:02:21:8c:66:b0:
48:b9:63:dd:2e:02:69:36:b7:78:8c:a8:14:4e:0a:6b:27:ac:
9f:c6:af:5f:2a:2d:2d:dc:5f:5b:55:5d:06:6d:5b:38:59:c9:
0e:09:61:50:75:c1:a7:4a:55:6c:04:e1:7d:46:2a:08:4d:25:
89:f9:2c:17:71:f9:8c:32:0d:cf:b9:fa:ec:9d:ab:db:14:9b:
91:b9:47:14:0b:3f:a9:df:3c:00:f5:8d:86:ba:13:ee:0b:90:
80:e6:e1:8d:5a:01:b9:6f:59:40:d5:5e:cb:d5:8c:78:1a:b4:
b0:6f:90:c2:73:bc:29:4f:4d:d9:81:11:20:94:2f:2e:e6:d7:
5a:78:fc:06:b7:57:af:bc:70:b2:f2:22:ea:e6:44:f5:fc:1e:
04:97:68:48:87:70:4a:5e:00:df:ee:88:30:07:e8:f2:c7:53:
ca:fd:84:6f:42:aa:97:4b:39:4c:61:45:4b:ed:e9:37:a5:a2:
c7:91:0b:3d:31:ac:e8:69:d7:b2:06:62:18:5b:13:de:cc:f1:
26:c8:66:6f:7a:0a:d7:2e:bd:6f:91:ff:ce:d5:21:5a:c3:9d:
08:1c:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:16:50 2025 by rpki-client