Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/RIJmMbk0HQ6a9b3192sFsVYcvGg.roa
File: RIJmMbk0HQ6a9b3192sFsVYcvGg.roa (raw, json)
Hash identifier: v30unMBghTEdlt3yhMr1nkfxo611TRS9PiidVu1pX5Y=
Subject key identifier: 44:82:66:31:B9:34:1D:0E:9A:F5:BD:F5:F7:6B:05:B1:56:1C:BC:68
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0191C1A5515E945BDE135D53BBF2095D7EBF
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/RIJmMbk0HQ6a9b3192sFsVYcvGg.roa
Signing time: Thu 05 Sep 2024 10:05:22 +0000
ROA not before: Thu 05 Sep 2024 10:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Sep 2024 00:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:a5:51:5e:94:5b:de:13:5d:53:bb:f2:09:5d:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Sep 5 10:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44826631b9341d0e9af5bdf5f76b05b1561cbc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:8a:f5:c3:2e:4d:30:4b:82:d0:33:56:45:
e3:90:f0:8d:37:97:ce:d8:80:18:d8:73:ec:f9:2f:
05:d0:f8:66:ea:5e:4d:60:cf:69:64:57:26:0b:04:
85:cf:f1:1a:38:78:73:db:ee:e5:d2:fb:12:71:d9:
5f:f0:d7:16:c4:b7:ab:79:3f:77:19:cf:32:88:c5:
d3:a8:39:ac:c6:ce:d0:ea:23:02:96:32:67:5c:54:
1b:d1:eb:42:d5:97:9c:05:c1:1c:ae:53:0f:76:79:
49:cf:31:95:16:2e:90:13:c8:bd:43:82:26:0e:4e:
ca:22:f8:b1:52:83:4c:e5:60:af:72:95:27:36:00:
96:f7:21:0a:b0:ff:7d:f2:c7:d1:96:e8:9d:23:e3:
4a:9d:27:50:6d:ce:fb:2f:1a:17:4a:e1:dd:17:34:
d7:91:a5:d5:44:9e:96:40:35:c8:bd:2b:91:2d:70:
9d:1d:ea:ae:3e:db:32:aa:30:52:28:7d:bf:f8:29:
4e:af:7f:e7:f7:7a:12:99:b4:eb:25:e5:3f:90:c5:
ba:7c:18:6b:1c:00:c1:61:21:33:a2:d3:e3:54:50:
d8:c1:eb:5a:71:0b:30:d1:56:2d:bd:ec:1e:89:75:
0c:01:8a:db:de:73:6b:8a:6a:a1:47:a3:ff:00:0b:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:66:31:B9:34:1D:0E:9A:F5:BD:F5:F7:6B:05:B1:56:1C:BC:68
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/RIJmMbk0HQ6a9b3192sFsVYcvGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c47:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/48
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
73:1b:d8:0b:16:e2:35:af:ff:da:70:74:4c:28:4a:0e:0d:26:
c6:27:da:be:ec:56:40:e9:f7:91:93:c5:8b:34:4d:51:71:d9:
cf:10:83:c3:6e:2d:a4:5d:84:48:6e:c0:98:b9:d5:a5:dd:3d:
19:17:61:81:cd:cf:50:b6:c5:b9:2c:ed:6a:f3:13:9c:76:3c:
5e:ce:3a:53:95:1c:f4:7b:0a:bb:a0:30:30:08:ed:36:04:16:
88:d4:f5:7b:a7:bc:07:c2:32:24:58:0d:d1:ee:fa:98:23:ef:
7d:9d:45:b6:38:22:8d:b5:9b:e3:6d:dc:8b:66:61:f8:0f:c5:
cd:39:56:92:5b:d9:5b:60:13:bf:6a:5d:eb:d9:71:79:7f:16:
81:ac:86:2d:42:18:d8:92:28:8e:d9:b8:14:47:66:07:9c:65:
7c:57:fc:d7:89:64:22:a3:bc:cf:1b:0b:b6:e4:d2:b1:0c:cf:
44:05:a1:9f:64:d7:36:96:bb:e5:94:81:d5:66:53:52:ff:7e:
59:d0:c0:65:2b:cf:e5:5e:4e:83:da:f6:75:c7:4f:c2:59:7f:
d6:d7:3e:6f:68:55:b4:68:e6:6e:c3:0e:6f:a2:69:66:32:27:
1a:4d:fa:c7:af:ec:67:d8:09:d0:06:07:63:03:19:b3:18:4b:
af:af:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 02:21:02 2024 by rpki-client on console-fra.rpki-client.org