Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/tVNg1-BxsmbLA1tk-asZ-z74BtA.roa
File: tVNg1-BxsmbLA1tk-asZ-z74BtA.roa (raw, json)
Hash identifier: 3HMpjavRVcg7vyUN3bo0XEgRZ67UzNPYIfhXGzVw+PM=
Subject key identifier: B5:53:60:D7:E0:71:B2:66:CB:03:5B:64:F9:AB:19:FB:3E:F8:06:D0
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 01945EE8062A7AB2E7FA9F35274D2809A136
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/tVNg1-BxsmbLA1tk-asZ-z74BtA.roa
Signing time: Mon 13 Jan 2025 09:04:11 +0000
ROA not before: Mon 13 Jan 2025 09:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:e8:06:2a:7a:b2:e7:fa:9f:35:27:4d:28:09:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 13 09:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b55360d7e071b266cb035b64f9ab19fb3ef806d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:f3:f7:1b:b0:2e:d3:9c:d7:64:1f:96:66:
92:c5:df:54:a8:8e:4a:78:bc:ed:6b:eb:1b:d8:e3:
82:e0:23:18:57:f6:12:5d:e0:e9:f9:c5:f0:66:92:
94:96:45:42:5b:6c:9f:6f:92:62:2d:1b:45:63:65:
bb:73:f6:29:2d:da:23:6d:73:1c:88:b7:a3:2c:c5:
03:c8:3a:db:4c:70:2d:92:09:b2:fa:c4:30:ae:5a:
b2:2b:43:3d:94:f1:78:8c:a5:20:99:9f:5b:60:bd:
39:df:a5:19:fd:48:57:84:d7:f4:67:01:f0:e4:f8:
5b:b8:99:0a:4e:33:f9:52:2b:d5:d7:f4:b6:2e:f0:
0d:1d:f2:62:82:33:6e:1d:ec:bd:53:40:74:ec:4b:
dc:06:70:dc:6b:5d:96:11:99:43:37:d8:e6:2d:44:
52:2c:9f:5a:7c:9d:ea:6c:33:61:57:a9:2c:7c:3b:
9b:76:26:c8:a4:fe:c9:ca:37:7b:92:53:bc:7c:6b:
72:8c:bd:45:2b:d8:9a:23:9d:4d:1e:cb:52:85:89:
88:a4:d2:e6:39:ae:6a:d4:c0:1e:be:2b:f4:c2:85:
7c:1a:11:b0:f4:59:a3:db:42:cb:cd:fa:7d:ca:4f:
0e:1f:e3:0f:02:1c:76:6e:77:26:a9:1c:6c:58:83:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:60:D7:E0:71:B2:66:CB:03:5B:64:F9:AB:19:FB:3E:F8:06:D0
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/tVNg1-BxsmbLA1tk-asZ-z74BtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
a4:3c:12:79:a9:06:f8:19:38:55:8f:80:12:b2:ef:59:39:09:
69:50:b4:3d:7a:46:0a:84:91:26:d9:79:e5:49:5d:6e:4f:4a:
5f:b9:94:2f:20:6a:ce:45:68:1e:d2:81:22:09:2c:9d:9d:69:
d7:04:9c:7a:2e:a9:e5:98:3f:5c:6b:bd:b9:a0:69:3d:29:1c:
b6:a7:44:d1:d4:97:93:49:dd:af:46:58:b8:9f:ad:19:ae:72:
f2:2c:db:09:10:3c:4c:56:af:36:73:71:65:b1:2d:11:74:d3:
80:4c:0a:2d:22:ba:b6:1b:18:15:23:a5:22:3c:44:09:6d:b0:
ef:7d:96:d0:b0:ee:51:14:65:fb:d6:74:f3:fb:39:07:23:6d:
92:ad:23:fb:cf:d7:0e:a4:11:77:a5:7a:5e:e5:ac:fa:1f:04:
48:4a:d8:cb:70:d3:9a:39:11:57:01:49:5e:df:24:72:f5:9b:
aa:51:bf:50:78:e6:b4:4d:22:ed:3d:48:74:d1:2b:a4:c0:e2:
ab:c9:bf:79:2c:37:70:a3:f5:4a:17:66:e5:ec:6b:51:59:80:
47:31:b3:50:42:88:e4:13:14:b4:d6:c8:91:27:55:b0:9a:b5:
31:a4:20:bb:92:03:3b:0a:82:bd:74:62:54:f2:67:1a:0a:69:
78:3b:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:34:33 2025 by rpki-client