Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1k0zOUPoPbEXZDv5mFuB48OrCDk.roa
File: 1k0zOUPoPbEXZDv5mFuB48OrCDk.roa (raw, json)
Hash identifier: cVP384k3fRmwxyGI8hSI8+0ugKGyOD2xYTGjCEwmng0=
Subject key identifier: D6:4D:33:39:43:E8:3D:B1:17:64:3B:F9:98:5B:81:E3:C3:AB:08:39
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01927B02C53B59DC0B74C4CBA977A17962DB
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1k0zOUPoPbEXZDv5mFuB48OrCDk.roa
Signing time: Fri 11 Oct 2024 09:57:11 +0000
ROA not before: Fri 11 Oct 2024 09:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.90.7.0/24 maxlen: 24
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:2000:4000::/56 maxlen: 56
Validation: Failed, certificate revoked on Mon 18 Nov 2024 10:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:02:c5:3b:59:dc:0b:74:c4:cb:a9:77:a1:79:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Oct 11 09:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d64d333943e83db117643bf9985b81e3c3ab0839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:4f:d5:48:7e:76:8d:fe:23:d0:03:6f:d1:
fa:4b:82:ed:ff:86:be:4b:44:0c:13:b8:5b:07:35:
9c:a2:c6:bf:fd:eb:14:90:54:1e:42:42:34:63:d4:
29:6d:7d:0f:5d:a8:69:0b:c6:b3:25:b0:99:31:63:
50:f3:a5:3b:03:a9:72:11:2b:d4:eb:eb:09:58:94:
cf:ce:71:69:62:07:56:2b:88:e8:8b:9f:4f:c0:cd:
7b:5c:8b:d5:16:9a:50:9d:27:2a:55:b9:72:29:7a:
af:8d:5e:33:89:3e:db:f1:1b:91:50:24:0d:e5:e5:
46:9b:47:8e:35:83:35:5c:9f:26:9b:51:39:0e:a1:
18:9b:a1:3f:cf:3e:70:4e:5c:fe:c7:b2:ed:d2:ff:
cc:0e:4b:aa:bf:42:4f:28:a3:a5:1c:51:c1:69:94:
6c:28:f2:f0:c7:3f:a4:fb:13:2f:33:3f:5f:19:0a:
2b:bb:b6:aa:b5:49:dc:04:2c:cc:42:92:05:83:36:
0d:8f:3b:06:b5:b2:0a:5c:5f:d8:c5:21:91:db:fb:
25:9a:61:aa:2d:41:c7:f5:a6:63:c7:c5:d7:0b:7b:
92:6f:fa:4f:84:c0:b4:a5:ff:83:27:1e:1d:aa:98:
cf:79:c0:ec:5c:bb:8f:f1:33:ab:b1:64:b5:fc:eb:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:33:39:43:E8:3D:B1:17:64:3B:F9:98:5B:81:E3:C3:AB:08:39
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1k0zOUPoPbEXZDv5mFuB48OrCDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:2000:4000::/56
Signature Algorithm: sha256WithRSAEncryption
aa:90:e4:d4:a9:8c:9d:eb:a0:e9:ed:9b:3d:aa:de:8d:cd:53:
bc:88:3f:b1:be:56:24:fd:bc:f8:aa:a4:30:1f:9a:c8:7e:93:
f6:b2:bb:b1:ac:4b:83:6a:33:68:fd:6b:25:20:6b:88:51:dc:
44:de:28:7b:d8:5b:09:7c:90:8a:5c:2b:f7:48:13:ee:86:f1:
30:4b:05:7f:39:7b:08:9d:b4:c2:ef:d7:2e:f1:38:38:e3:eb:
78:df:01:3e:ad:41:dc:c8:a9:6d:fe:8f:a3:7b:e4:3d:b7:1f:
c1:4b:aa:1d:39:9b:bd:35:c0:da:51:d1:8f:01:09:8f:a3:ec:
6b:1a:80:ec:32:c7:cf:51:5e:0d:9d:76:50:7d:47:31:d1:cb:
65:e1:04:36:3f:43:2e:cf:1f:76:b2:d7:ad:86:e8:c0:79:f1:
76:94:e5:fe:f3:fa:fc:bc:9c:0d:73:a9:1c:1f:fc:04:16:56:
5e:cc:fd:0e:75:2d:bc:50:a9:7d:1d:5f:0c:5b:b6:5c:b5:99:
3e:74:6c:2f:53:7b:9a:56:6d:92:7c:c4:59:20:bd:1f:2a:7a:
f4:2a:c3:7e:a2:b3:1a:45:58:bf:82:27:16:79:cc:c9:2a:61:
89:4a:59:c8:d0:37:30:43:43:61:8b:b7:16:43:f6:c2:09:bc:
1b:9b:f9:f0
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISAZJ7AsU7WdwLdMTLqXeheWLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjQxMDExMDk1NzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjRkMzMzOTQzZTgzZGIxMTc2NDNiZjk5ODViODFlM2MzYWIwODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdlP1Uh+do3+I9ADb9H6S4Lt/4a+
S0QME7hbBzWcosa//esUkFQeQkI0Y9QpbX0PXahpC8azJbCZMWNQ86U7A6lyESvU
6+sJWJTPznFpYgdWK4joi59PwM17XIvVFppQnScqVblyKXqvjV4ziT7b8RuRUCQN
5eVGm0eONYM1XJ8mm1E5DqEYm6E/zz5wTlz+x7Lt0v/MDkuqv0JPKKOlHFHBaZRs
KPLwxz+k+xMvMz9fGQoru7aqtUncBCzMQpIFgzYNjzsGtbIKXF/YxSGR2/slmmGq
LUHH9aZjx8XXC3uSb/pPhMC0pf+DJx4dqpjPecDsXLuP8TOrsWS1/OsU1QIDAQAB
o4IDRjCCA0IwHQYDVR0OBBYEFNZNMzlD6D2xF2Q7+ZhbgePDqwg5MB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvMWswek9VUG9QYkVYWkR2NW1GdUI0OE9yQ0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWgYIKwYBBQUHAQcBAf8EggFJMIIBRTCCARYEAgABMIIB
DgMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T
aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o
+AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x
QAMEAphZaAMEArkQPAMEArmi+AMEArmjdAMEArmqcAMEArm3nAMEArnCjAMEArnP
aAMEArnkiAMEArnpaAMEArnzCAMEArn0wAMEBbxEIAMEAsCRLAMEAsEeeAMEAsEf
GAMEAsINUAMEAsI3DAMEAsI7zAMEAsOAZAMEAtVtoDApBAIAAjAjAwUBKgNAADAQ
AwUGKgpMwAMHACoKTMABAAMIACoKTMAgAEAwDQYJKoZIhvcNAQELBQADggEBAKqQ
5NSpjJ3roOntmz2q3o3NU7yIP7G+ViT9vPiqpDAfmsh+k/ayu7GsS4NqM2j9ayUg
a4hR3ETeKHvYWwl8kIpcK/dIE+6G8TBLBX85ewidtMLv1y7xODjj63jfAT6tQdzI
qW3+j6N75D23H8FLqh05m701wNpR0Y8BCY+j7GsagOwyx89RXg2ddlB9RzHRy2Xh
BDY/Qy7PH3ay162G6MB58XaU5f7z+vy8nA1zqRwf/AQWVl7M/Q51LbxQqX0dXwxb
tly1mT50bC9Te5pWbZJ8xFkgvR8qevQqw36isxpFWL+CJxZ5zMkqYYlKWcjQNzBD
Q2GLtxZD9sIJvBub+fA=
-----END CERTIFICATE-----
Generated at Mon Nov 18 12:16:04 2024 by rpki-client on console-fra.rpki-client.org