Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/XhVkfI3KfzDQ9zq8ub_1brol7qY.roa
File: XhVkfI3KfzDQ9zq8ub_1brol7qY.roa (raw, json)
Hash identifier: KSJQ8qSnCFDWAjrDDwJ1gsWTBA9V3+k+2U9RChhpbTQ=
Subject key identifier: 5E:15:64:7C:8D:CA:7F:30:D0:F7:3A:BC:B9:BF:F5:6E:BA:25:EE:A6
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 018572A7F7C0D52B2C23326566ED71DCF999
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/XhVkfI3KfzDQ9zq8ub_1brol7qY.roa
Signing time: Mon 02 Jan 2023 13:24:48 +0000
ROA not before: Mon 02 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50463
IP address blocks: 37.19.112.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.198.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.210.0/24 maxlen: 24
141.226.209.0/24 maxlen: 24
141.226.208.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
141.226.221.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.8.0/22 maxlen: 22
109.226.7.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.15.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.17.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
185.3.145.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
109.226.29.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.63.0/24 maxlen: 24
109.226.62.0/24 maxlen: 24
5.144.55.0/24 maxlen: 24
5.144.54.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.63.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
5.22.133.0/24 maxlen: 24
5.22.135.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.22.132.0/24 maxlen: 24
5.22.130.0/23 maxlen: 23
5.22.128.0/21 maxlen: 21
5.22.129.0/24 maxlen: 24
5.22.128.0/24 maxlen: 24
2a00:c281:4::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:1001::/48 maxlen: 48
2a00:c281:2001::/48 maxlen: 48
2a00:c281:3001::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c280::/29 maxlen: 29
2a00:c281:c::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c280:100::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:4000::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1700::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:4100::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
2a00:c281:1100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f7:c0:d5:2b:2c:23:32:65:66:ed:71:dc:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 2 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e15647c8dca7f30d0f73abcb9bff56eba25eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:8c:52:6c:a0:84:af:10:d9:60:29:a8:e6:
32:1a:01:22:7b:9c:49:0e:c8:7e:09:b6:25:29:b6:
e1:6d:e5:9b:95:fe:60:74:32:e0:12:3b:b7:25:01:
77:85:54:bf:c6:f9:99:ac:9c:77:f3:2a:a6:69:5d:
90:b1:66:ee:2b:2c:b8:23:e9:ab:03:65:3f:cf:ea:
dc:51:b8:88:21:1b:2e:2e:06:fd:05:9d:2c:06:e0:
3c:c9:7b:85:20:f9:c4:82:e1:9a:2b:f3:d0:99:5f:
0e:c7:1a:81:9a:30:9f:37:76:9e:49:50:24:05:e3:
49:d4:25:7c:c2:ae:f1:c0:31:4a:a3:06:8a:d5:31:
77:7f:e2:bc:05:b3:3d:af:c0:f4:f2:52:2b:5d:fc:
24:ff:5f:5a:d3:4b:bb:1a:1d:ad:7c:b0:e8:1a:7d:
f4:0f:32:fc:8c:5f:4f:db:19:c4:47:32:14:5e:6f:
98:9e:35:7d:66:e5:b4:de:00:40:97:21:88:97:bc:
53:b1:0f:b8:4b:ab:e7:37:d6:f0:b8:83:ba:8b:fa:
4c:12:2a:78:1a:d0:fb:3a:40:c3:2a:94:b7:f8:e0:
fe:8d:d9:33:ee:39:ef:fa:97:cd:d8:da:50:18:09:
f2:de:f8:5a:0f:ab:d6:8d:a0:02:7e:62:37:2f:d3:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:64:7C:8D:CA:7F:30:D0:F7:3A:BC:B9:BF:F5:6E:BA:25:EE:A6
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/XhVkfI3KfzDQ9zq8ub_1brol7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
9d:58:c1:b7:43:40:ef:38:72:cf:47:5a:7a:86:55:6b:0e:35:
b6:12:29:13:25:28:a7:7c:86:61:a0:a3:da:de:00:5b:2a:db:
fe:ed:07:e1:6b:8c:23:ed:07:94:1c:b9:27:59:ea:0e:28:ba:
cf:90:62:67:8b:74:f8:97:54:1d:fb:54:28:7e:49:b7:f4:c0:
ff:bc:ad:bf:ff:34:1c:4e:32:bd:f0:2a:1d:10:f3:0a:11:2b:
ba:60:e0:0b:dd:a0:93:20:1d:f7:ee:c2:a9:ac:d7:17:4c:84:
5e:3f:0a:3b:1a:94:ca:95:59:86:5b:ff:02:71:46:2c:2b:c2:
2a:4f:d3:a3:3d:29:ef:7c:d4:05:be:14:41:7d:31:d5:d4:5e:
98:05:af:fe:b5:55:a1:ab:31:01:ca:5f:f9:4e:3c:bc:55:f6:
f3:74:15:e1:85:87:05:27:07:d6:96:a7:77:88:0c:31:bc:1e:
85:d0:10:7b:e1:a2:24:15:bb:0b:fa:9e:8e:3f:19:cb:cb:c6:
b8:9d:c9:46:be:df:cb:be:fe:2a:85:d1:b5:a4:1a:90:05:84:
8c:de:e7:31:86:ff:ca:0a:41:9c:cf:00:67:d6:2a:82:04:ea:
42:d3:93:52:0f:39:d5:d7:8b:54:ec:8c:a5:b6:98:8f:53:ed:
1b:3b:e4:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVyp/fA1SssIzJlZu1x3PmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjMwMTAyMTMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTE1NjQ3YzhkY2E3ZjMwZDBmNzNhYmNiOWJmZjU2ZWJhMjVlZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNuMUmyghK8Q2WApqOYyGgEie5xJ
Dsh+CbYlKbbhbeWblf5gdDLgEju3JQF3hVS/xvmZrJx38yqmaV2QsWbuKyy4I+mr
A2U/z+rcUbiIIRsuLgb9BZ0sBuA8yXuFIPnEguGaK/PQmV8OxxqBmjCfN3aeSVAk
BeNJ1CV8wq7xwDFKowaK1TF3f+K8BbM9r8D08lIrXfwk/19a00u7Gh2tfLDoGn30
DzL8jF9P2xnERzIUXm+YnjV9ZuW03gBAlyGIl7xTsQ+4S6vnN9bwuIO6i/pMEip4
GtD7OkDDKpS3+OD+jdkz7jnv+pfN2NpQGAny3vhaD6vWjaACfmI3L9PuHQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFF4VZHyNyn8w0Pc6vLm/9W66Je6mMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvWGhWa2ZJM0tmekRROXpxOHViXzFicm9sN3FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBRaAAwQE
BZAwAwQEJRNwAwQGbeIAAwQFjeLAAwQCuQOQMA0EAgACMAcDBQMqAMKAMA0GCSqG
SIb3DQEBCwUAA4IBAQCdWMG3Q0DvOHLPR1p6hlVrDjW2EikTJSinfIZhoKPa3gBb
Ktv+7Qfha4wj7QeUHLknWeoOKLrPkGJni3T4l1Qd+1Qofkm39MD/vK2//zQcTjK9
8CodEPMKESu6YOAL3aCTIB337sKprNcXTIRePwo7GpTKlVmGW/8CcUYsK8IqT9Oj
PSnvfNQFvhRBfTHV1F6YBa/+tVWhqzEByl/5Tjy8VfbzdBXhhYcFJwfWlqd3iAwx
vB6F0BB74aIkFbsL+p6OPxnLy8a4nclGvt/Lvv4qhdG1pBqQBYSM3ucxhv/KCkGc
zwBn1iqCBOpC05NSDznV14tU7IyltpiPU+0bO+S1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:32 2023 by rpki-client on console-fra.rpki-client.org