Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/73VREhUol5IsgtlfvG8x3ZMd6kk.roa
File: 73VREhUol5IsgtlfvG8x3ZMd6kk.roa (raw, json)
Hash identifier: f882/ZOTcJlPL+ZIXVRhrVsNRVSJrgbZbtETXry6RzY=
Subject key identifier: EF:75:51:12:15:28:97:92:2C:82:D9:5F:BC:6F:31:DD:93:1D:EA:49
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 018FCEA70457DC669E4A6FAC77D62EC3D5A7
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/73VREhUol5IsgtlfvG8x3ZMd6kk.roa
Signing time: Fri 31 May 2024 12:36:43 +0000
ROA not before: Fri 31 May 2024 12:36:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198317
IP address blocks: 91.200.104.0/22 maxlen: 22
91.200.104.0/23 maxlen: 23
91.200.104.0/24 maxlen: 24
91.200.105.0/24 maxlen: 24
91.200.106.0/23 maxlen: 23
91.200.106.0/24 maxlen: 24
91.200.107.0/24 maxlen: 24
91.239.196.0/22 maxlen: 22
91.239.196.0/23 maxlen: 23
91.239.196.0/24 maxlen: 24
91.239.197.0/24 maxlen: 24
91.239.198.0/23 maxlen: 23
91.239.198.0/24 maxlen: 24
91.239.199.0/24 maxlen: 24
155.133.56.0/22 maxlen: 22
155.133.56.0/23 maxlen: 23
155.133.56.0/24 maxlen: 24
155.133.57.0/24 maxlen: 24
155.133.58.0/23 maxlen: 23
155.133.58.0/24 maxlen: 24
155.133.59.0/24 maxlen: 24
185.96.120.0/22 maxlen: 22
185.96.120.0/23 maxlen: 23
185.96.120.0/24 maxlen: 24
185.96.121.0/24 maxlen: 24
185.96.122.0/23 maxlen: 23
185.96.122.0/24 maxlen: 24
185.96.123.0/24 maxlen: 24
185.235.124.0/22 maxlen: 22
185.235.124.0/23 maxlen: 23
185.235.124.0/24 maxlen: 24
185.235.125.0/24 maxlen: 24
185.235.126.0/23 maxlen: 23
185.235.126.0/24 maxlen: 24
185.235.127.0/24 maxlen: 24
193.106.216.0/22 maxlen: 22
193.106.216.0/23 maxlen: 23
193.106.216.0/24 maxlen: 24
193.106.217.0/24 maxlen: 24
193.106.218.0/23 maxlen: 23
193.106.218.0/24 maxlen: 24
193.106.219.0/24 maxlen: 24
195.88.144.0/23 maxlen: 23
195.88.144.0/24 maxlen: 24
195.88.145.0/24 maxlen: 24
2a05:ffc0::/32 maxlen: 32
2a05:ffc0::/33 maxlen: 33
2a05:ffc0::/34 maxlen: 34
2a05:ffc0::/48 maxlen: 48
2a05:ffc0:4000::/34 maxlen: 34
2a05:ffc0:8000::/33 maxlen: 33
2a05:ffc0:8000::/34 maxlen: 34
2a05:ffc0:c000::/34 maxlen: 34
2a05:ffc1::/32 maxlen: 32
2a05:ffc1::/33 maxlen: 33
2a05:ffc1::/34 maxlen: 34
2a05:ffc1:4000::/34 maxlen: 34
2a05:ffc1:8000::/33 maxlen: 33
2a05:ffc1:8000::/34 maxlen: 34
2a05:ffc1:c000::/34 maxlen: 34
2a05:ffc2::/32 maxlen: 32
2a05:ffc2::/33 maxlen: 33
2a05:ffc2::/34 maxlen: 34
2a05:ffc2:4000::/34 maxlen: 34
2a05:ffc2:8000::/33 maxlen: 33
2a05:ffc2:8000::/34 maxlen: 34
2a05:ffc2:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:a7:04:57:dc:66:9e:4a:6f:ac:77:d6:2e:c3:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: May 31 12:36:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef755112152897922c82d95fbc6f31dd931dea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:4e:a3:3e:c6:9b:00:78:d2:82:3a:87:2c:
05:bf:35:16:08:31:31:8e:2b:d6:e1:c1:93:6d:af:
c4:55:ef:71:5a:3f:a8:e4:02:db:2f:76:46:69:d6:
f8:65:89:a0:48:05:25:a7:57:cb:c2:44:ae:95:53:
9f:f1:ba:b5:ec:0f:85:f6:47:a4:79:cc:07:96:78:
2e:8a:d2:f1:cc:04:dd:7a:ab:a9:f7:ad:f2:0c:38:
e3:e9:8c:d7:74:fd:12:b5:4a:dd:99:4c:72:85:4c:
88:a5:80:c1:b3:78:75:e4:f8:2f:e7:5a:cf:39:1c:
ff:c5:34:20:31:3e:74:82:dc:3a:81:6a:d5:9f:ec:
fd:69:d0:e9:bc:55:51:5f:40:be:09:67:32:c1:d9:
10:99:80:6e:38:a8:24:01:0e:1b:09:ce:0e:67:5b:
46:ec:b3:90:7b:47:06:3e:f7:88:f4:6f:4c:84:9b:
91:27:3c:80:07:55:53:4a:f0:21:7f:7c:a5:30:d9:
46:f9:b7:b7:c5:87:59:d8:99:20:99:5c:80:c8:10:
52:04:7f:19:72:6e:a4:1e:e2:8c:8e:08:01:cf:19:
a3:24:5c:79:55:44:20:8d:9f:ba:a6:29:2f:c0:36:
f0:5c:4a:9e:f4:e5:ca:00:3e:1f:12:47:2c:43:a1:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:51:12:15:28:97:92:2C:82:D9:5F:BC:6F:31:DD:93:1D:EA:49
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/73VREhUol5IsgtlfvG8x3ZMd6kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.104.0/22
91.239.196.0/22
155.133.56.0/22
185.96.120.0/22
185.235.124.0/22
193.106.216.0/22
195.88.144.0/23
IPv6:
2a05:ffc0::-2a05:ffc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:34:69:33:ad:18:1f:c4:24:6d:41:ce:62:9f:67:b6:ca:67:
bf:6a:85:53:53:42:81:cb:18:3d:c1:f0:9f:ad:ea:3f:b4:9e:
f3:ed:d5:f4:18:f3:a9:77:79:7e:b1:96:11:d4:12:29:11:44:
ed:2c:11:c5:50:1e:95:29:80:04:37:ed:e8:5d:b6:06:bc:83:
b7:44:80:44:66:8d:ce:fe:04:e8:6f:83:f7:98:8c:b3:59:51:
d4:4f:71:e0:49:12:0d:88:37:d6:b9:5e:23:bc:2d:96:4f:8f:
77:d3:f8:75:d4:6c:09:3d:e8:20:79:70:17:2e:83:f0:54:7b:
8e:b6:c1:82:e0:06:38:33:15:c5:eb:8a:83:0c:0a:be:46:0d:
f7:fb:05:31:79:04:2c:8d:c2:d0:10:74:1f:b9:97:48:ec:1f:
2a:80:18:be:24:3b:61:46:48:22:d4:b8:3b:72:90:36:c0:bb:
3b:75:d5:e1:84:4e:a6:1d:5e:d7:c5:5f:6c:95:42:2d:ba:f8:
27:1f:aa:12:80:9d:27:74:e1:d0:98:f9:7a:a5:f1:9b:3e:10:
5f:62:2d:d2:5d:33:73:5d:ff:72:7a:00:2c:50:0f:b4:91:f4:
cc:9f:b6:41:5a:81:03:d9:33:5a:6f:a9:a6:c5:35:95:cd:b5:
ee:5f:b6:d7
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAY/OpwRX3GaeSm+sd9Yuw9WnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NWY1NTYwZDc5ZjA0YTkyZDdhMTUwZjNlZDhkYTQzMDhh
YmVhMzMwHhcNMjQwNTMxMTIzNjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjc1NTExMjE1Mjg5NzkyMmM4MmQ5NWZiYzZmMzFkZDkzMWRlYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/lOoz7GmwB40oI6hywFvzUWCDEx
jivW4cGTba/EVe9xWj+o5ALbL3ZGadb4ZYmgSAUlp1fLwkSulVOf8bq17A+F9kek
ecwHlnguitLxzATdequp963yDDjj6YzXdP0StUrdmUxyhUyIpYDBs3h15Pgv51rP
ORz/xTQgMT50gtw6gWrVn+z9adDpvFVRX0C+CWcywdkQmYBuOKgkAQ4bCc4OZ1tG
7LOQe0cGPveI9G9MhJuRJzyAB1VTSvAhf3ylMNlG+be3xYdZ2JkgmVyAyBBSBH8Z
cm6kHuKMjggBzxmjJFx5VUQgjZ+6pikvwDbwXEqe9OXKAD4fEkcsQ6E8AwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFO91URIVKJeSLILZX7xvMd2THepJMB8GA1UdIwQY
MBaAFLRfVWDXnwSpLXoVDz7Y2kMIq+ozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2Njkt
YzMyMjI0NzRlZWYxLzEvNzNWUkVoVW9sNUlzZ3RsZnZHOHgzWk1kNmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2NjktYzMyMjI0NzRlZWYx
LzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQCW8hoAwQC
W+/EAwQCm4U4AwQCuWB4AwQCuet8AwQCwWrYAwQBw1iQMBYEAgACMBAwDgMFBioF
/8ADBQAqBf/CMA0GCSqGSIb3DQEBCwUAA4IBAQCANGkzrRgfxCRtQc5in2e2yme/
aoVTU0KByxg9wfCfreo/tJ7z7dX0GPOpd3l+sZYR1BIpEUTtLBHFUB6VKYAEN+3o
XbYGvIO3RIBEZo3O/gTob4P3mIyzWVHUT3HgSRINiDfWuV4jvC2WT4930/h11GwJ
PeggeXAXLoPwVHuOtsGC4AY4MxXF64qDDAq+Rg33+wUxeQQsjcLQEHQfuZdI7B8q
gBi+JDthRkgi1Lg7cpA2wLs7ddXhhE6mHV7XxV9slUItuvgnH6oSgJ0ndOHQmPl6
pfGbPhBfYi3SXTNzXf9yegAsUA+0kfTMn7ZBWoED2TNab6mmxTWVzbXuX7bX
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:14 2025 by rpki-client