Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/n6o1sj23OagOCDL3ohHrbQlCIyE.roa
File: n6o1sj23OagOCDL3ohHrbQlCIyE.roa (raw, json)
Hash identifier: O7CfFjbZrKELt5Z/621u9F+ak0rnRA+LT1BJlqGjSm8=
Subject key identifier: 9F:AA:35:B2:3D:B7:39:A8:0E:08:32:F7:A2:11:EB:6D:09:42:23:21
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018BCCD81EF11C75C88B9D577AB0574D56AD
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/n6o1sj23OagOCDL3ohHrbQlCIyE.roa
Signing time: Tue 14 Nov 2023 07:59:57 +0000
ROA not before: Tue 14 Nov 2023 07:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.117.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.251.0/24 maxlen: 24
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.4.0/23 maxlen: 23
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:d8:1e:f1:1c:75:c8:8b:9d:57:7a:b0:57:4d:56:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Nov 14 07:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9faa35b23db739a80e0832f7a211eb6d09422321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:be:af:92:37:94:34:2e:70:8f:02:f1:24:
d9:09:42:4e:66:f4:51:b4:a2:a0:88:d5:cc:17:e0:
4a:d8:a1:d5:6b:25:f3:e2:f6:fa:0d:50:b3:ca:2a:
19:7a:fa:2f:a4:fb:bd:80:3a:38:e3:96:57:0d:0f:
97:09:0b:24:3c:0e:55:d1:23:71:6b:ab:74:5c:fd:
22:02:18:8a:d2:28:c8:dc:de:e3:c8:5c:a1:6a:51:
41:7f:9d:a2:e2:4e:d7:1e:4d:33:bc:ce:7d:9d:e4:
65:31:d2:3d:32:c7:bc:60:64:3b:d0:0e:2f:85:06:
6a:a5:b3:5f:7f:4c:2b:3a:16:3b:4c:27:a9:dc:37:
c8:5c:f8:b3:5d:df:89:9f:62:72:bf:09:0d:2c:b1:
99:21:ea:e9:4d:61:50:68:93:7d:5e:25:bf:bb:6a:
0e:b3:b7:17:2a:b1:9c:66:e9:73:e0:72:41:b8:0f:
ca:15:f8:8c:e7:f2:03:8e:1b:26:ce:7b:6a:cd:92:
a5:f3:56:d7:25:12:cc:ab:ee:68:5d:f9:78:7f:33:
e7:39:5f:3c:66:2a:e7:b9:91:f9:0e:3f:df:bb:53:
b5:71:fa:5a:b9:70:3b:a0:3f:8e:ce:b3:94:1a:fa:
7e:02:9d:b6:09:52:c6:e9:81:d6:7e:d9:42:88:c8:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:35:B2:3D:B7:39:A8:0E:08:32:F7:A2:11:EB:6D:09:42:23:21
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/n6o1sj23OagOCDL3ohHrbQlCIyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
76:2b:a6:66:76:c9:37:ec:51:f6:29:e8:62:5f:fc:e6:d6:a0:
88:40:b3:01:3d:b6:d4:37:7a:22:63:d5:38:18:7b:30:b9:c9:
1d:ed:58:ba:d6:60:2b:a5:f6:06:db:3c:70:4f:3d:2f:0e:14:
6a:b1:a8:56:19:cf:f5:0b:6d:61:ba:a2:b6:25:07:b0:94:a6:
9a:38:45:36:a6:3d:a9:61:14:b8:40:0c:f6:b6:21:2f:be:09:
4e:25:de:ba:15:c9:af:d1:83:0b:29:c4:a6:3b:e8:c4:05:b0:
43:0a:2a:6b:30:40:e2:12:25:97:fa:c2:c9:0b:4c:38:64:73:
2e:55:36:1a:3e:79:e5:8f:2b:87:18:fe:e5:0c:c4:f4:7c:f0:
cb:1f:46:29:a7:88:86:5a:f3:8f:b1:69:4f:9d:9d:c5:3c:be:
71:7d:9f:c8:e7:40:df:0d:e0:4a:c3:74:79:b4:5d:82:de:78:
4c:b2:19:3e:d7:9a:54:be:41:3f:4c:d9:f5:50:0c:6b:7c:fc:
df:76:a0:54:d7:e8:72:be:da:32:94:3d:f1:b3:75:a7:94:68:
c2:5b:39:32:53:2c:62:04:c3:b6:ef:5a:43:5a:49:5d:d8:5b:
85:4c:03:bc:51:13:d6:68:08:e7:4b:bf:ed:78:27:5b:5e:1c:
cb:00:65:04
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYvM2B7xHHXIi51XerBXTVatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjMxMTE0MDc1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmFhMzViMjNkYjczOWE4MGUwODMyZjdhMjExZWI2ZDA5NDIyMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT2+r5I3lDQucI8C8STZCUJOZvRR
tKKgiNXMF+BK2KHVayXz4vb6DVCzyioZevovpPu9gDo445ZXDQ+XCQskPA5V0SNx
a6t0XP0iAhiK0ijI3N7jyFyhalFBf52i4k7XHk0zvM59neRlMdI9Mse8YGQ70A4v
hQZqpbNff0wrOhY7TCep3DfIXPizXd+Jn2JyvwkNLLGZIerpTWFQaJN9XiW/u2oO
s7cXKrGcZulz4HJBuA/KFfiM5/IDjhsmzntqzZKl81bXJRLMq+5oXfl4fzPnOV88
ZirnuZH5Dj/fu1O1cfpauXA7oD+OzrOUGvp+Ap22CVLG6YHWftlCiMhcewIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJ+qNbI9tzmoDggy96IR620JQiMhMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvbjZvMXNqMjNPYWdPQ0RMM29oSHJiUWxDSXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBWp4DBAXU
YgADBAXVj+ADBAXVoYAwDQQCAAIwBwMFACoAH5AwDQYJKoZIhvcNAQELBQADggEB
AHYrpmZ2yTfsUfYp6GJf/ObWoIhAswE9ttQ3eiJj1TgYezC5yR3tWLrWYCul9gbb
PHBPPS8OFGqxqFYZz/ULbWG6orYlB7CUppo4RTamPalhFLhADPa2IS++CU4l3roV
ya/RgwspxKY76MQFsEMKKmswQOISJZf6wskLTDhkcy5VNho+eeWPK4cY/uUMxPR8
8MsfRimniIZa84+xaU+dncU8vnF9n8jnQN8N4ErDdHm0XYLeeEyyGT7XmlS+QT9M
2fVQDGt8/N92oFTX6HK+2jKUPfGzdaeUaMJbOTJTLGIEw7bvWkNaSV3YW4VMA7xR
E9ZoCOdLv+14J1teHMsAZQQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org