Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/TlDrX2o35Im0c_1VdBM4aHZhpw0.roa
File: TlDrX2o35Im0c_1VdBM4aHZhpw0.roa (raw, json)
Hash identifier: C9lUXjsLYQ3OdDOIMLBVs9GC/alXr93IMjFT/K1k9P4=
Subject key identifier: 4E:50:EB:5F:6A:37:E4:89:B4:73:FD:55:74:13:38:68:76:61:A7:0D
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019460CFFF34CBA348D0DF35FA0BE333F1D8
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/TlDrX2o35Im0c_1VdBM4aHZhpw0.roa
Signing time: Mon 13 Jan 2025 17:57:11 +0000
ROA not before: Mon 13 Jan 2025 17:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c59::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 19:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:cf:ff:34:cb:a3:48:d0:df:35:fa:0b:e3:33:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 13 17:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e50eb5f6a37e489b473fd55741338687661a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:6a:c2:c1:b0:7e:6d:82:86:17:1d:18:57:
b8:7c:62:9e:40:0a:f4:16:0f:93:0b:8e:a4:9d:60:
6b:8e:15:7b:1c:cb:ee:c9:37:4e:29:79:94:08:56:
6f:2d:e8:3d:a4:24:f6:ce:94:f7:03:0e:9b:51:a2:
76:9e:fe:a5:63:f3:4b:92:e5:dc:43:53:f3:b9:5d:
a8:c1:42:86:db:2a:1a:c1:9d:31:39:24:8b:8c:d6:
33:b9:25:7d:f2:91:78:c5:3a:b7:4a:c0:4b:be:f7:
5d:21:b6:f7:96:c9:71:25:e0:f3:25:45:3a:26:5e:
ff:f1:b9:60:f8:3c:f3:9e:82:fb:45:ee:cb:a6:e7:
c1:9f:ed:c9:d8:6a:15:66:8d:28:21:6a:b0:50:ed:
07:72:77:17:7f:a7:8e:50:8f:42:e2:13:4c:e1:96:
e4:98:ee:f0:b9:83:ac:d4:19:60:21:b1:70:dd:3a:
6b:0b:c3:48:87:c5:9e:74:3e:bd:a3:86:bf:7a:15:
1b:f2:b5:a2:ec:fd:f3:2f:ef:0d:9e:53:d7:e2:14:
76:4e:42:d9:30:a3:42:0f:53:98:c7:92:8b:58:5e:
6e:d5:a0:a2:b2:f8:75:37:db:90:7c:a5:cc:be:9c:
95:a2:98:7a:8a:0d:5c:3c:55:f1:1b:fc:e7:92:9b:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:EB:5F:6A:37:E4:89:B4:73:FD:55:74:13:38:68:76:61:A7:0D
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/TlDrX2o35Im0c_1VdBM4aHZhpw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c59:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/47
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
56:68:3c:18:ed:1a:27:a3:44:0b:05:84:9d:4c:b7:f2:d8:ab:
01:a9:51:4f:b8:c5:36:f2:1d:81:38:ba:ab:50:d4:79:49:39:
0f:7d:8f:1b:f4:89:ea:a1:d2:1b:c8:70:b2:07:b2:7a:4b:41:
42:e1:3e:df:59:8c:a1:4e:28:44:84:19:eb:19:de:4b:fa:45:
1c:73:02:f3:85:37:f7:a5:c2:4a:79:21:b9:49:b9:22:07:43:
eb:1b:6b:5b:61:94:f7:51:86:6a:e9:34:1c:93:ff:15:0f:fb:
13:bc:af:89:61:31:72:63:5f:a3:c6:77:00:8e:53:02:c5:a0:
3c:21:2a:5b:42:1b:47:35:1e:b8:a7:45:19:6a:2f:04:88:ee:
de:d1:4d:cc:1c:c9:d1:a4:d2:85:f3:b1:62:1e:f2:3b:8d:c8:
b1:5b:5a:a4:f5:b0:b5:f2:d9:d4:1c:6c:69:95:7d:93:1c:ed:
83:2e:4e:98:55:4a:e8:91:b5:65:77:4c:5a:f4:c5:cc:bd:b2:
82:a1:d8:a3:67:bb:33:bc:3e:e1:33:d4:7b:7e:76:a0:8d:d4:
43:d0:3b:2e:eb:f6:3f:7a:76:a2:29:f1:aa:95:97:33:e2:a7:
2f:4b:52:1c:c5:91:76:78:14:cc:9b:c3:ee:19:03:3e:2a:c2:
09:72:66:72
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgISAZRgz/80y6NI0N81+gvjM/HYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjUwMTEzMTc1NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTUwZWI1ZjZhMzdlNDg5YjQ3M2ZkNTU3NDEzMzg2ODc2NjFhNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ohqwsGwfm2ChhcdGFe4fGKeQAr0
Fg+TC46knWBrjhV7HMvuyTdOKXmUCFZvLeg9pCT2zpT3Aw6bUaJ2nv6lY/NLkuXc
Q1PzuV2owUKG2yoawZ0xOSSLjNYzuSV98pF4xTq3SsBLvvddIbb3lslxJeDzJUU6
Jl7/8blg+DzznoL7Re7LpufBn+3J2GoVZo0oIWqwUO0HcncXf6eOUI9C4hNM4Zbk
mO7wuYOs1BlgIbFw3TprC8NIh8WedD69o4a/ehUb8rWi7P3zL+8NnlPX4hR2TkLZ
MKNCD1OYx5KLWF5u1aCisvh1N9uQfKXMvpyVoph6ig1cPFXxG/znkptwnQIDAQAB
o4IC7jCCAuowHQYDVR0OBBYEFE5Q619qN+SJtHP9VXQTOGh2YacNMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvVGxEclgybzM1SW0wY18xVmRCTTRhSFpocHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wPgQCAAEwODAMAwQG
jWVAAwQBjWVMMAwDBAGNZVIDBAeNZQAwDAMEBbxyYAMEALxyaDAMAwQBvHJqAwQE
vHJgMIGsBAIAAjCBpTASAwcAKgaYwBwBAwcAKgaYwBwKMBIDBwIqBpjAHAwDBwAq
BpjAHBAwEgMHBSoGmMAcIAMHASoGmMAcSDASAwcAKgaYwBxLAwcBKgaYwBxYMBID
BwAqBpjANhkDBwAqBpjANhoDBwIqBpjBAEADBwEqBpjBAEgwEgMHBCoGmMEAUAMH
ACoGmMEAWAMHBCoGmMExAAMHAioGmMExIAMHACoGmMEyADANBgkqhkiG9w0BAQsF
AAOCAQEAVmg8GO0aJ6NECwWEnUy38tirAalRT7jFNvIdgTi6q1DUeUk5D32PG/SJ
6qHSG8hwsgeyektBQuE+31mMoU4oRIQZ6xneS/pFHHMC84U396XCSnkhuUm5IgdD
6xtrW2GU91GGauk0HJP/FQ/7E7yviWExcmNfo8Z3AI5TAsWgPCEqW0IbRzUeuKdF
GWovBIju3tFNzBzJ0aTShfOxYh7yO43IsVtapPWwtfLZ1BxsaZV9kxztgy5OmFVK
6JG1ZXdMWvTFzL2ygqHYo2e7M7w+4TPUe352oI3UQ9A7Luv2P3p2oinxqpWXM+Kn
L0tSHMWRdngUzJvD7hkDPirCCXJmcg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:23:33 2025 by rpki-client