Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YFB2mn3jVPzRZhucFB5NcGWNhWY.roa
File: YFB2mn3jVPzRZhucFB5NcGWNhWY.roa (raw, json)
Hash identifier: ApFiya1Kx6t8bFvF044ItWnJBEO07PFaNykLtXoP7C8=
Subject key identifier: 60:50:76:9A:7D:E3:54:FC:D1:66:1B:9C:14:1E:4D:70:65:8D:85:66
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 018D0D8648C7A252AE5730108B4AB1864435
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YFB2mn3jVPzRZhucFB5NcGWNhWY.roa
Signing time: Mon 15 Jan 2024 14:28:40 +0000
ROA not before: Mon 15 Jan 2024 14:28:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50463
IP address blocks: 37.19.112.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.113.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.198.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.210.0/24 maxlen: 24
141.226.209.0/24 maxlen: 24
141.226.208.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
141.226.221.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.8.0/22 maxlen: 22
109.226.7.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.15.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.17.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
185.3.145.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
109.226.29.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.63.0/24 maxlen: 24
109.226.62.0/24 maxlen: 24
5.144.55.0/24 maxlen: 24
5.144.54.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.56.0/24 maxlen: 24
5.144.62.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.63.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
5.22.133.0/24 maxlen: 24
5.22.135.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.22.132.0/24 maxlen: 24
5.22.130.0/23 maxlen: 23
5.22.128.0/21 maxlen: 21
5.22.129.0/24 maxlen: 24
5.22.128.0/24 maxlen: 24
2a00:c281:4::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:1001::/48 maxlen: 48
2a00:c281:2001::/48 maxlen: 48
2a00:c281:3001::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c280::/29 maxlen: 29
2a00:c281:c::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c280:100::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:4000::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:2100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:4100::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3100::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1100::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 16 Jan 2024 16:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:86:48:c7:a2:52:ae:57:30:10:8b:4a:b1:86:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 15 14:28:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6050769a7de354fcd1661b9c141e4d70658d8566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:a3:0b:02:6e:3a:68:57:c8:20:e1:78:94:
3d:72:56:12:58:6b:25:dd:61:9a:3e:9e:f0:35:c9:
4e:7d:44:4f:4f:dc:33:58:05:65:fe:78:6c:4a:26:
87:99:5b:64:8c:c9:cd:cc:1a:9b:9e:8b:d0:76:1c:
79:97:50:cd:87:ad:e4:9f:18:5e:97:b3:96:98:89:
1f:34:04:7f:24:52:d7:78:8f:89:b9:b8:a2:94:71:
31:7e:d2:87:a2:30:50:6e:01:47:c2:bd:28:46:ae:
6c:7b:19:43:a9:5b:e3:f2:f3:4a:7e:90:fc:d3:d8:
d4:1b:9a:50:3f:01:d9:3d:90:0a:47:03:8e:d1:03:
f1:c2:ac:35:1d:cd:80:24:1d:ac:b0:62:25:8b:b3:
e5:8d:a2:16:7f:df:9f:35:93:2a:2b:f1:10:46:e6:
1d:c6:2e:e9:a2:1e:bd:fe:0a:0f:55:ce:a4:0a:68:
4f:23:7d:f8:4c:22:10:54:89:e0:77:6b:60:df:79:
91:47:bc:57:94:b1:de:75:af:a5:54:12:d2:1b:d2:
4f:f0:34:b0:57:75:94:08:f6:d4:6d:ab:46:6c:c8:
6a:db:26:bb:7a:8c:25:70:b7:f2:5b:24:f1:57:18:
12:b9:cc:7d:5c:99:66:44:75:60:0c:7d:6c:87:3a:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:76:9A:7D:E3:54:FC:D1:66:1B:9C:14:1E:4D:70:65:8D:85:66
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YFB2mn3jVPzRZhucFB5NcGWNhWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
6f:4e:11:10:44:f0:0d:80:27:f1:54:cc:3b:af:c6:8d:4c:b8:
39:3b:f9:cf:1e:82:a4:ee:cf:4d:6f:fd:4a:9f:2c:29:56:c8:
9b:48:d0:ac:34:d1:53:34:01:f1:f5:e8:48:64:8c:f3:6b:64:
30:59:f0:9d:91:7a:2a:cc:f7:d4:8f:27:5a:b4:32:06:b9:22:
bd:13:40:eb:a8:f7:97:5b:76:a1:c6:b4:b3:2c:3e:f7:91:73:
f5:f4:19:49:be:25:87:e2:38:f4:d5:d8:1c:b6:94:ab:89:b3:
fb:63:cb:10:d1:ee:9d:0d:7e:18:26:df:49:b0:52:ec:de:28:
11:1f:ca:13:ef:9a:74:82:01:61:e5:ad:fc:8b:f2:a1:43:fe:
85:49:73:85:30:01:e4:46:92:a5:9b:cf:3a:8a:9f:04:da:a9:
57:5e:b2:aa:8e:a7:cf:2a:f8:56:5c:60:5e:b3:4d:19:4a:d3:
27:86:c0:5f:f6:d4:cc:79:92:e3:89:97:f4:7c:23:1e:e8:2e:
8b:af:ca:79:21:7f:9f:91:94:91:28:81:61:38:ea:43:03:6a:
59:6d:cd:34:22:95:b3:e5:5c:57:5b:aa:1c:3a:35:92:e8:7a:
00:55:7e:94:e2:33:b6:74:62:a0:7d:75:10:68:31:48:5d:74:
c3:c5:cf:aa
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAY0NhkjHolKuVzAQi0qxhkQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjQwMTE1MTQyODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDUwNzY5YTdkZTM1NGZjZDE2NjFiOWMxNDFlNGQ3MDY1OGQ4NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5qjCwJuOmhXyCDheJQ9clYSWGsl
3WGaPp7wNclOfURPT9wzWAVl/nhsSiaHmVtkjMnNzBqbnovQdhx5l1DNh63knxhe
l7OWmIkfNAR/JFLXeI+JubiilHExftKHojBQbgFHwr0oRq5sexlDqVvj8vNKfpD8
09jUG5pQPwHZPZAKRwOO0QPxwqw1Hc2AJB2ssGIli7PljaIWf9+fNZMqK/EQRuYd
xi7poh69/goPVc6kCmhPI334TCIQVIngd2tg33mRR7xXlLHeda+lVBLSG9JP8DSw
V3WUCPbUbatGbMhq2ya7eowlcLfyWyTxVxgSucx9XJlmRHVgDH1shzraEwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFGBQdpp941T80WYbnBQeTXBljYVmMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvWUZCMm1uM2pWUHpSWmh1Y0ZCNU5jR1dOaFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBRaAAwQE
BZAwAwQEJRNwAwQGbeIAAwQFjeLAAwQCuQOQMA0EAgACMAcDBQMqAMKAMA0GCSqG
SIb3DQEBCwUAA4IBAQBvThEQRPANgCfxVMw7r8aNTLg5O/nPHoKk7s9Nb/1Knywp
VsibSNCsNNFTNAHx9ehIZIzza2QwWfCdkXoqzPfUjydatDIGuSK9E0DrqPeXW3ah
xrSzLD73kXP19BlJviWH4jj01dgctpSribP7Y8sQ0e6dDX4YJt9JsFLs3igRH8oT
75p0ggFh5a38i/KhQ/6FSXOFMAHkRpKlm886ip8E2qlXXrKqjqfPKvhWXGBes00Z
StMnhsBf9tTMeZLjiZf0fCMe6C6Lr8p5IX+fkZSRKIFhOOpDA2pZbc00IpWz5VxX
W6ocOjWS6HoAVX6U4jO2dGKgfXUQaDFIXXTDxc+q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org