Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-yI2EA55Hc0e1uY6HDmHZXO-Z24.roa
File: 1-yI2EA55Hc0e1uY6HDmHZXO-Z24.roa (raw, json)
Hash identifier: 7mR4pMfriiweOwcgETDVgomuWd61Vwh2cu/Amyn4Ks0=
Subject key identifier: FB:22:36:10:0E:79:1D:CD:1E:D6:E6:3A:1C:39:87:65:73:BE:67:6E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D55B76989BA13CD725A63129BC720B5EC
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-yI2EA55Hc0e1uY6HDmHZXO-Z24.roa
Signing time: Mon 29 Jan 2024 14:54:59 +0000
ROA not before: Mon 29 Jan 2024 14:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
5.56.64.0/24 maxlen: 24
5.56.72.0/24 maxlen: 24
5.56.73.0/24 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
46.55.0.0/18 maxlen: 18
46.55.64.0/18 maxlen: 18
46.55.111.0/24 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 20
86.106.213.0/24 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.114.128.0/18 maxlen: 18
92.114.144.0/20 maxlen: 20
92.114.160.0/20 maxlen: 20
92.114.176.0/20 maxlen: 20
92.114.192.0/18 maxlen: 18
92.114.192.0/20 maxlen: 20
92.115.0.0/16 maxlen: 24
92.115.0.0/18 maxlen: 18
92.115.64.0/18 maxlen: 18
92.115.128.0/18 maxlen: 18
92.115.192.0/18 maxlen: 18
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.116.0.0/18 maxlen: 18
93.116.64.0/18 maxlen: 18
93.116.128.0/18 maxlen: 18
93.116.192.0/18 maxlen: 24
93.117.48.0/20 maxlen: 20
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
109.185.0.0/18 maxlen: 18
109.185.64.0/18 maxlen: 18
109.185.128.0/18 maxlen: 24
109.185.192.0/18 maxlen: 18
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
188.237.0.0/18 maxlen: 18
188.237.24.0/22 maxlen: 24
188.237.64.0/18 maxlen: 18
188.237.128.0/18 maxlen: 18
188.237.168.0/24 maxlen: 24
188.237.192.0/18 maxlen: 18
212.0.192.0/19 maxlen: 32
212.0.192.0/22 maxlen: 22
212.0.193.0/24 maxlen: 24
212.0.195.0/24 maxlen: 24
212.0.196.0/24 maxlen: 24
212.0.198.0/24 maxlen: 24
212.0.199.0/24 maxlen: 24
212.0.200.0/21 maxlen: 24
212.0.203.0/24 maxlen: 24
212.0.208.0/20 maxlen: 24
212.0.210.0/24 maxlen: 24
212.0.215.0/24 maxlen: 24
212.0.219.0/24 maxlen: 24
2a02:a30::/32 maxlen: 32
2a02:a30:172::/48 maxlen: 48
2a02:a30:1600::/48 maxlen: 48
2a02:a30:6330:103::/64 maxlen: 64
2a02:a30:f090::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 19:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:b7:69:89:ba:13:cd:72:5a:63:12:9b:c7:20:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 29 14:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2236100e791dcd1ed6e63a1c39876573be676e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:7b:16:31:30:3e:a0:f2:d9:b5:ed:e0:bb:
80:01:f8:0a:97:51:ca:72:2b:3f:b4:d3:5d:2d:ac:
a5:53:89:2c:df:97:a6:66:95:bb:0b:1a:ac:26:76:
ff:28:2b:d9:0a:ca:43:37:e0:96:1b:4d:dc:02:98:
6f:af:5a:a4:8c:67:07:c1:6a:0a:af:31:82:dc:ee:
8f:e3:cc:0b:64:91:f6:65:49:df:6c:6a:47:6c:04:
7b:bc:bc:8d:33:27:df:01:8d:92:91:3b:37:9b:e4:
ea:67:1c:20:0e:41:40:79:ba:f9:3b:25:b7:98:26:
8e:06:cb:9b:4e:08:3f:68:f5:aa:9d:be:6a:73:12:
72:2e:1e:13:66:f2:c2:50:d2:13:ae:c9:8c:7d:aa:
83:ef:0f:0e:41:75:d1:80:d6:ce:ff:f7:f3:c2:39:
ff:83:a7:45:fa:1f:81:14:a7:c1:d5:81:c9:74:1c:
c8:8d:8e:f4:a4:f9:92:5e:bf:0e:12:62:8d:43:64:
da:06:49:6c:fe:a3:03:c0:bb:9c:b6:86:84:36:d2:
23:e3:3c:9d:95:57:89:88:f4:cc:d7:52:84:c3:2b:
3d:1f:bb:9c:b3:d2:de:ea:43:f6:08:d1:de:51:69:
ea:c5:ad:ae:67:ad:9c:9e:d7:66:48:da:3d:b0:67:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:36:10:0E:79:1D:CD:1E:D6:E6:3A:1C:39:87:65:73:BE:67:6E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-yI2EA55Hc0e1uY6HDmHZXO-Z24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/32
Signature Algorithm: sha256WithRSAEncryption
91:4e:dd:07:16:f7:ab:e7:0b:6a:54:f3:66:d8:65:8e:6b:b4:
02:db:2d:fc:0f:a1:a0:07:e5:d4:7d:2d:f4:d6:37:88:6c:fb:
d2:15:93:25:24:64:6d:81:13:32:f7:22:57:ac:37:19:dc:8d:
92:7d:e6:b4:8a:f6:ca:06:07:14:de:06:7e:42:ae:4d:ad:4b:
4e:a0:93:38:6c:1a:1a:28:26:d3:c5:c1:f9:08:7a:46:95:ec:
6b:05:45:53:9d:32:f1:77:0f:fb:4d:1f:ec:92:44:13:72:9d:
c1:ce:b5:9b:f7:85:f1:ce:77:f0:b9:ba:84:e3:35:01:57:0c:
05:c5:58:00:e9:ad:46:71:ae:a7:78:5e:a2:6d:8d:64:d8:b6:
61:cc:5d:ed:03:4d:b0:01:59:70:04:29:f9:48:aa:b3:47:52:
d2:12:69:64:5a:d7:14:26:b3:08:35:4f:d5:65:1f:df:fd:a0:
35:a3:93:fe:bd:c9:cb:1c:70:e2:b6:e7:cd:93:8d:73:2f:2a:
1c:dd:f9:76:97:59:08:e9:f8:57:32:c6:56:38:58:a0:bc:30:
88:40:d8:ab:43:dc:4c:2e:76:31:93:8d:8d:37:b7:61:a1:f2:
bb:72:e4:16:99:34:6b:f7:a6:4d:81:84:4d:bf:b6:7a:a8:7c:
d0:00:9b:c9
-----BEGIN CERTIFICATE-----
MIIHtDCCBpygAwIBAgISAY1Vt2mJuhPNclpjEpvHILXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjQwMTI5MTQ1NDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjIyMzYxMDBlNzkxZGNkMWVkNmU2M2ExYzM5ODc2NTczYmU2NzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldd7FjEwPqDy2bXt4LuAAfgKl1HK
cis/tNNdLaylU4ks35emZpW7CxqsJnb/KCvZCspDN+CWG03cAphvr1qkjGcHwWoK
rzGC3O6P48wLZJH2ZUnfbGpHbAR7vLyNMyffAY2SkTs3m+TqZxwgDkFAebr5OyW3
mCaOBsubTgg/aPWqnb5qcxJyLh4TZvLCUNITrsmMfaqD7w8OQXXRgNbO//fzwjn/
g6dF+h+BFKfB1YHJdBzIjY70pPmSXr8OEmKNQ2TaBkls/qMDwLuctoaENtIj4zyd
lVeJiPTM11KEwys9H7ucs9Le6kP2CNHeUWnqxa2uZ62cntdmSNo9sGf/9wIDAQAB
o4IEwDCCBLwwHQYDVR0OBBYEFPsiNhAOeR3NHtbmOhw5h2VzvmduMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvMS15STJFQTU1SGMwZTF1WTZIRG1IWlhPLVoyNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTEvYjQ1ZDc5LWE0ZDctNDQ2MC1iZmU3LWJiZWEyOTE4ZTEw
Mi8xL29naU9CdFZUel9LVDBuZjAxMnc2Y1F2WXN2Yy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAtMGCCsGAQUFBwEHAQH/BIICwjCCAr4wggKrBAIAATCC
AqMDBAYFOEADBAQlSxADBAYlS0ADBAcuNwADBANVzLADBAJWaMQDBANWaTgDBANW
aVADBAJWaawDBAJWadADBANWapAwCwMEBFZq0AMDAFZqAwQCVmtAAwQDVmugAwQD
WSA4AwQDWSCIAwQCWSCsAwQCWSD8AwQDWSJAAwQDWSJwAwQDWSLAAwQCWSLMAwQC
WSLoAwQDWSMIAwQDWSMoAwQCWSNUAwQCWSPIAwQCWSScAwQCWSUsAwQAWSVoAwQC
WSYgAwQCWSZAAwQCWSZMAwQCWSdMAwQCWSdUAwQDWSdgAwQDWSdwAwQCWSjkAwQG
WSlAAwQCWSpAAwQDWSpIAwQCWSpoAwQCWSqAAwQCWSq0AwQCWSrgAwQCWSuAAwQC
WSuoAwQCWSyYAwQCWS0oAwQCWS6kMAsDBAdccoADAwJccAMEA11xQAMEA11xUAME
Al1xXAMEAl1x9AMEA11ziAMDAF10AwQEXXUwMAwDBAJddUQDBARddUADBANddYAw
DAMEAl11jAMEA111kDAMAwQCXXWcAwQCXXWoAwQCXXawAwQCXXa8AwQDXXdgAwQC
XXdsAwQDXXeAMAwDBAJdd4wDBANdd5ADBANdd6AwDAMEAl13xAMEBF13wDAMAwQC
XXfkAwQEXXfgAwQEXrBAAwMAbbkwDAMEBLKEcAMEBrKEgAMEArkcaAMEArzQYAME
ArzQaAMEArzQcAMEA7zQeAMEArzQwAMEArzQzAMEA7zR2DAMAwQEvNLwAwQCvNL4
AwQCvNQAAwQDvNQIAwQDvNQYAwQDvNQoAwQCvNUkAwQCvNU0AwQCvNXcAwQCvNXs
AwQCvNX0AwQCvNY8AwQBvNaSAwQDvNbIAwQCvNbkAwQCvNfsAwQCvNf8AwMAvO0D
BAXUAMAwDQQCAAIwBwMFACoCCjAwDQYJKoZIhvcNAQELBQADggEBAJFO3QcW96vn
C2pU82bYZY5rtALbLfwPoaAH5dR9LfTWN4hs+9IVkyUkZG2BEzL3IlesNxncjZJ9
5rSK9soGBxTeBn5Crk2tS06gkzhsGhooJtPFwfkIekaV7GsFRVOdMvF3D/tNH+yS
RBNyncHOtZv3hfHOd/C5uoTjNQFXDAXFWADprUZxrqd4XqJtjWTYtmHMXe0DTbAB
WXAEKflIqrNHUtISaWRa1xQmswg1T9VlH9/9oDWjk/69ycsccOK2582TjXMvKhzd
+XaXWQjp+FcyxlY4WKC8MIhA2KtD3EwudjGTjY03t2Gh8rty5BaZNGv3pk2BhE2/
tnqofNAAm8k=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:46 2025 by rpki-client