Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/I84X-hxBHaKd_VIft57PraMNRmw.roa
File: I84X-hxBHaKd_VIft57PraMNRmw.roa (raw, json)
Hash identifier: ice2WNUK2RA/1DLORzNfuHIfhm2Z5oo8X9Lty/c4Wgw=
Subject key identifier: 23:CE:17:FA:1C:41:1D:A2:9D:FD:52:1F:B7:9E:CF:AD:A3:0D:46:6C
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01944D58E55D0C1FAAB28D7542AC81DD94D3
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/I84X-hxBHaKd_VIft57PraMNRmw.roa
Signing time: Thu 09 Jan 2025 23:14:18 +0000
ROA not before: Thu 09 Jan 2025 23:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 17:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4d:58:e5:5d:0c:1f:aa:b2:8d:75:42:ac:81:dd:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 9 23:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23ce17fa1c411da29dfd521fb79ecfada30d466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:11:a5:66:5c:76:60:ed:11:51:26:6a:40:
59:52:bc:8e:d1:59:8f:83:c9:c5:7a:7e:5b:ba:58:
76:42:87:10:48:7a:88:90:4e:78:99:bb:27:f7:a1:
92:57:36:7d:7e:08:9d:2e:46:01:f4:a0:25:f5:32:
1a:46:01:4f:44:46:c7:fa:0f:fe:f2:27:ac:fe:5d:
aa:48:db:40:6a:02:a8:04:bc:78:5a:61:a4:34:90:
6c:32:25:a3:9a:00:82:63:fa:b7:4c:ec:63:7c:bb:
cd:cb:f2:c8:f6:be:c3:c1:ff:e4:f9:e9:8c:ce:32:
9f:91:68:77:eb:68:9e:ef:47:b4:e4:74:8a:95:4f:
c3:e7:a3:af:97:e5:6f:59:d6:1c:7c:44:f9:79:c5:
5f:5c:fd:52:6e:4b:53:86:bc:99:1c:1f:86:9f:f1:
35:d3:b1:81:8c:3b:8a:be:57:3a:79:41:84:b9:6c:
0e:01:b0:52:ea:d9:d2:a0:7b:e2:1d:8a:9e:2b:70:
02:08:0e:d5:52:20:69:df:b7:e4:db:dd:60:b6:ba:
25:c2:a6:3d:cd:88:41:dd:02:6a:14:88:33:75:c7:
c9:ff:27:7f:11:2d:99:72:74:b1:2b:85:66:ff:6e:
e1:4a:43:7c:43:b2:87:35:2b:43:01:05:f0:a3:f4:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CE:17:FA:1C:41:1D:A2:9D:FD:52:1F:B7:9E:CF:AD:A3:0D:46:6C
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/I84X-hxBHaKd_VIft57PraMNRmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/47
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
39:4f:25:f6:c0:8e:55:ec:3f:29:37:7b:26:c2:56:92:03:fd:
11:75:65:61:6d:c6:4d:e3:ff:1f:53:b4:46:f9:9a:de:d8:1d:
10:cd:66:b4:9b:f5:77:6e:f9:71:1c:63:26:e7:c0:b0:a7:67:
ba:8e:75:0f:88:fe:c3:41:6c:3b:04:7d:44:a4:58:40:a8:2c:
d7:bb:fc:00:d8:48:de:b8:0a:d5:b6:dc:de:eb:5c:68:e8:ee:
43:ac:e5:3e:59:cc:c2:9d:50:8e:9e:7c:7b:f7:20:4d:bf:28:
2d:fd:15:0c:2f:7c:3b:92:cb:16:0d:74:92:e6:84:5c:0a:47:
c0:df:80:70:57:73:e2:a9:80:88:60:14:98:93:a1:db:43:b3:
b6:82:bc:f2:9f:ad:28:fd:f9:54:8d:28:fa:da:7c:66:d1:1e:
0a:2b:a4:ea:3f:11:b2:82:27:47:88:6d:b1:ec:68:6d:aa:cb:
30:56:b2:e5:8a:24:95:0e:52:02:0c:45:e9:e6:84:1b:37:00:
50:c6:50:64:5e:77:90:90:c3:90:5c:ec:cd:34:d2:35:3b:aa:
cb:06:8e:2f:fc:96:f8:9a:38:8d:37:08:dd:65:e1:74:0a:1e:
d6:a5:01:f9:da:cc:da:97:6e:44:d7:c2:3e:ae:13:31:7a:3b:
ed:3a:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:18:12 2025 by rpki-client