Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/PC-9uBdE3MtAS7Ssl5F6li1eisQ.roa
File: PC-9uBdE3MtAS7Ssl5F6li1eisQ.roa (raw, json)
Hash identifier: U5J8I0IS6b0rmPGUNnrwS7CALU3ET48jhBAPPeM9ae4=
Subject key identifier: 3C:2F:BD:B8:17:44:DC:CB:40:4B:B4:AC:97:91:7A:96:2D:5E:8A:C4
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E423E6873E71E9DF20A3789ABECF1
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/PC-9uBdE3MtAS7Ssl5F6li1eisQ.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:42:3e:68:73:e7:1e:9d:f2:0a:37:89:ab:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c2fbdb81744dccb404bb4ac97917a962d5e8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:a1:05:2e:41:45:4b:89:3f:94:24:07:f6:
a1:0b:12:49:80:c7:b0:6c:6c:10:cd:17:ac:e5:25:
dd:fd:b5:41:cd:cf:ab:d6:1f:20:bb:26:fd:37:c3:
9f:03:a7:8c:24:38:c0:ab:8e:3c:a4:67:22:03:e5:
bd:b8:77:89:ed:3c:09:51:a9:25:b1:27:11:8e:c5:
c2:58:1e:ff:86:bc:b3:1a:be:0a:8f:79:10:c9:0b:
f8:01:19:80:04:79:8a:30:86:3f:55:d1:fd:6a:2b:
85:39:15:be:c5:53:95:6d:3b:6a:43:05:40:19:a9:
46:6a:bb:fa:cb:6f:2c:d2:58:66:3f:5b:69:0d:47:
1a:6c:d2:6b:10:f1:07:ce:d5:3b:b0:48:cf:e9:0e:
de:a7:8f:38:83:23:85:15:65:0b:f1:12:84:cc:79:
af:ba:11:8b:aa:68:b0:5b:bd:ea:cf:f2:29:ef:e3:
bc:e1:c3:36:7f:05:88:e1:9c:0a:21:4d:d2:63:a9:
d2:34:73:35:e0:ad:ad:64:32:c1:b4:9e:9a:9d:36:
d0:54:43:80:d9:4d:90:f4:41:df:dc:95:a9:86:0f:
56:3b:ed:c0:ce:9e:b7:46:4e:ed:6d:9f:9a:0b:2c:
91:56:eb:60:5f:4a:b2:bc:77:bf:f3:e5:f2:f3:34:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:BD:B8:17:44:DC:CB:40:4B:B4:AC:97:91:7A:96:2D:5E:8A:C4
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/PC-9uBdE3MtAS7Ssl5F6li1eisQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
0b:b0:cd:07:ce:bf:d5:a4:08:1e:db:27:c1:44:9f:a2:0f:2f:
16:1f:85:52:f9:19:6f:12:7a:d4:66:64:6f:06:4c:56:75:08:
6e:bc:c7:bb:cc:66:5a:7f:a5:ed:34:df:69:48:e7:79:42:e1:
ca:f5:4f:f9:a5:9e:a5:11:4d:a1:75:35:2c:7f:de:8e:78:1a:
5e:71:c5:02:d9:ed:bc:af:80:a9:98:d7:72:24:96:25:34:45:
09:6e:ea:e1:e8:1d:c1:07:78:bd:fd:d1:cc:69:38:22:90:53:
d4:fa:13:65:e3:1e:ca:4b:64:eb:0f:d6:13:49:6d:64:61:f5:
b2:15:33:66:02:d5:74:21:43:4f:9e:a3:39:14:d6:9a:55:21:
2a:e0:da:aa:aa:be:04:0d:c8:ae:e1:7b:2b:86:b0:64:1d:59:
38:a3:06:cb:a5:61:c7:20:d6:eb:97:79:c6:01:44:20:3c:85:
83:c9:39:37:21:be:be:60:ef:dd:ea:66:11:47:1b:75:69:6e:
7b:67:80:03:b8:91:79:8c:50:54:f6:d1:50:b1:39:49:b5:bc:
42:09:64:8b:c0:d4:c1:15:bb:6c:49:46:67:c4:87:64:ca:37:
43:1a:de:fc:e1:ac:f2:4d:63:3a:bb:7d:67:74:5d:23:f1:4c:
0e:71:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:29:50 2025 by rpki-client