Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/IGJ2EfABK_SV1lJSPpanKcqQzyU.roa
File: IGJ2EfABK_SV1lJSPpanKcqQzyU.roa (raw, json)
Hash identifier: RHFkAUjHoWe+ktulSDVb7aTARcfN50SCuMQDMIZHBoA=
Subject key identifier: 20:62:76:11:F0:01:2B:F4:95:D6:52:52:3E:96:A7:29:CA:90:CF:25
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 01856B77A9A0563AE3DD5F3D244FE739E061
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/IGJ2EfABK_SV1lJSPpanKcqQzyU.roa
Signing time: Sun 01 Jan 2023 03:54:42 +0000
ROA not before: Sun 01 Jan 2023 03:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13156
IP address blocks: 213.228.132.0/24 maxlen: 24
213.228.128.0/18 maxlen: 18
213.228.128.0/22 maxlen: 22
213.228.139.0/24 maxlen: 24
213.228.136.0/24 maxlen: 24
213.228.137.0/24 maxlen: 24
213.228.142.0/24 maxlen: 24
213.228.141.0/24 maxlen: 24
213.228.149.0/24 maxlen: 24
213.228.150.0/24 maxlen: 24
213.228.151.0/24 maxlen: 24
213.228.156.0/24 maxlen: 24
213.228.157.0/24 maxlen: 24
213.228.153.0/24 maxlen: 24
213.228.154.0/24 maxlen: 24
213.228.155.0/24 maxlen: 24
91.194.170.0/23 maxlen: 23
91.194.182.0/23 maxlen: 23
213.228.166.0/24 maxlen: 24
213.228.163.0/24 maxlen: 24
213.228.164.0/24 maxlen: 24
213.228.167.0/24 maxlen: 24
213.228.168.0/24 maxlen: 24
213.228.169.0/24 maxlen: 24
213.228.170.0/24 maxlen: 24
213.228.171.0/24 maxlen: 24
213.228.178.0/24 maxlen: 24
213.228.184.0/24 maxlen: 24
213.228.185.0/24 maxlen: 24
213.228.180.0/24 maxlen: 24
213.228.181.0/24 maxlen: 24
213.228.187.0/24 maxlen: 24
84.91.210.0/24 maxlen: 24
84.91.211.0/24 maxlen: 24
84.91.212.0/22 maxlen: 22
84.91.208.0/23 maxlen: 23
84.91.216.0/22 maxlen: 22
84.91.224.0/23 maxlen: 23
84.91.226.0/24 maxlen: 24
84.91.220.0/22 maxlen: 22
84.91.232.0/22 maxlen: 22
84.91.228.0/22 maxlen: 22
84.91.227.0/24 maxlen: 24
84.91.236.0/22 maxlen: 22
84.91.252.0/22 maxlen: 22
84.91.248.0/22 maxlen: 22
84.91.40.0/22 maxlen: 22
84.91.48.0/22 maxlen: 22
84.91.56.0/21 maxlen: 21
84.91.52.0/22 maxlen: 22
84.91.64.0/21 maxlen: 21
84.91.76.0/22 maxlen: 22
84.91.72.0/22 maxlen: 22
84.91.80.0/22 maxlen: 22
84.91.84.0/22 maxlen: 22
84.90.244.0/22 maxlen: 22
84.90.248.0/22 maxlen: 22
84.91.4.0/22 maxlen: 22
84.91.8.0/22 maxlen: 22
84.91.16.0/22 maxlen: 22
84.91.12.0/23 maxlen: 23
84.91.14.0/23 maxlen: 23
84.91.24.0/22 maxlen: 22
84.91.20.0/22 maxlen: 22
84.91.28.0/22 maxlen: 22
84.91.36.0/22 maxlen: 22
84.91.32.0/22 maxlen: 22
84.91.152.0/24 maxlen: 24
84.91.148.0/22 maxlen: 22
84.91.155.0/24 maxlen: 24
84.91.153.0/24 maxlen: 24
84.91.162.0/23 maxlen: 23
84.91.164.0/23 maxlen: 23
84.91.166.0/23 maxlen: 23
84.91.168.0/23 maxlen: 23
84.91.176.0/22 maxlen: 22
84.91.184.0/22 maxlen: 22
84.91.180.0/22 maxlen: 22
84.91.192.0/22 maxlen: 22
84.91.188.0/23 maxlen: 23
84.91.104.0/22 maxlen: 22
84.91.100.0/22 maxlen: 22
84.91.112.0/22 maxlen: 22
84.91.108.0/22 maxlen: 22
84.91.116.0/22 maxlen: 22
84.91.124.0/22 maxlen: 22
84.91.120.0/22 maxlen: 22
84.91.132.0/22 maxlen: 22
84.91.128.0/22 maxlen: 22
84.91.136.0/22 maxlen: 22
84.91.144.0/22 maxlen: 22
84.91.140.0/22 maxlen: 22
84.90.80.0/21 maxlen: 21
84.90.88.0/21 maxlen: 21
84.90.96.0/21 maxlen: 21
84.90.104.0/21 maxlen: 21
84.90.112.0/21 maxlen: 21
84.90.124.0/22 maxlen: 22
84.90.120.0/22 maxlen: 22
84.90.128.0/21 maxlen: 21
84.90.36.0/22 maxlen: 22
84.90.32.0/22 maxlen: 22
84.90.40.0/21 maxlen: 21
84.90.48.0/21 maxlen: 21
84.90.56.0/22 maxlen: 22
84.90.64.0/24 maxlen: 24
84.90.60.0/22 maxlen: 22
84.90.68.0/22 maxlen: 22
84.90.72.0/21 maxlen: 21
84.90.188.0/23 maxlen: 23
84.90.190.0/23 maxlen: 23
84.90.200.0/21 maxlen: 21
84.90.208.0/21 maxlen: 21
84.90.216.0/22 maxlen: 22
84.90.224.0/22 maxlen: 22
84.90.220.0/22 maxlen: 22
84.90.230.0/23 maxlen: 23
84.90.232.0/22 maxlen: 22
84.90.228.0/23 maxlen: 23
84.90.240.0/22 maxlen: 22
84.90.236.0/22 maxlen: 22
84.90.136.0/21 maxlen: 21
84.90.144.0/22 maxlen: 22
84.90.152.0/22 maxlen: 22
84.90.148.0/22 maxlen: 22
84.90.156.0/22 maxlen: 22
84.90.160.0/21 maxlen: 21
84.90.168.0/22 maxlen: 22
84.90.176.0/22 maxlen: 22
84.90.184.0/22 maxlen: 22
84.90.180.0/22 maxlen: 22
217.129.232.0/22 maxlen: 22
217.129.236.0/22 maxlen: 22
217.129.240.0/21 maxlen: 21
217.129.252.0/22 maxlen: 22
217.129.248.0/22 maxlen: 22
217.129.176.0/21 maxlen: 21
217.129.184.0/21 maxlen: 21
217.129.192.0/21 maxlen: 21
217.129.200.0/21 maxlen: 21
217.129.208.0/21 maxlen: 21
217.129.216.0/21 maxlen: 21
217.129.224.0/21 maxlen: 21
84.90.0.0/21 maxlen: 21
84.90.8.0/22 maxlen: 22
84.90.0.0/15 maxlen: 15
84.90.16.0/22 maxlen: 22
84.90.12.0/22 maxlen: 22
84.90.21.0/24 maxlen: 24
84.90.24.0/21 maxlen: 21
84.90.20.0/24 maxlen: 24
217.129.16.0/21 maxlen: 21
217.129.24.0/21 maxlen: 21
217.129.32.0/21 maxlen: 21
217.129.40.0/21 maxlen: 21
217.129.48.0/20 maxlen: 20
217.129.64.0/21 maxlen: 21
217.129.0.0/21 maxlen: 21
217.129.0.0/16 maxlen: 16
217.129.8.0/21 maxlen: 21
217.129.128.0/20 maxlen: 20
217.129.144.0/22 maxlen: 22
217.129.152.0/22 maxlen: 22
217.129.148.0/22 maxlen: 22
217.129.156.0/22 maxlen: 22
217.129.160.0/21 maxlen: 21
217.129.168.0/21 maxlen: 21
217.129.72.0/21 maxlen: 21
217.129.84.0/22 maxlen: 22
217.129.80.0/22 maxlen: 22
217.129.88.0/22 maxlen: 22
217.129.96.0/21 maxlen: 21
217.129.92.0/22 maxlen: 22
217.129.104.0/21 maxlen: 21
217.129.112.0/20 maxlen: 20
2a02:26c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:a9:a0:56:3a:e3:dd:5f:3d:24:4f:e7:39:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jan 1 03:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20627611f0012bf495d652523e96a729ca90cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:2b:19:48:4d:6d:35:9c:02:3a:c9:13:ae:
7f:07:93:7a:5c:5b:33:9d:fb:29:f8:13:96:b4:b3:
f6:b9:d4:93:45:90:0d:d5:df:59:67:70:c3:f7:87:
61:89:c0:ec:fe:a9:bf:d3:df:a7:7d:a6:9b:3d:a1:
bc:cf:5d:f7:0f:45:fd:c4:f7:af:fd:ee:94:3e:88:
c1:48:81:72:7a:66:00:75:5b:d8:d5:22:dd:07:a1:
b8:e6:ff:e8:b3:a7:59:75:28:e1:85:51:d6:20:b7:
fa:57:73:ea:1e:18:0b:ed:91:3a:13:c6:79:47:77:
24:4f:e0:0f:86:03:21:ef:77:c5:34:d3:00:15:4f:
74:11:d2:2a:27:75:3b:6d:6b:55:c0:01:12:fd:ed:
56:b9:2b:c9:a2:94:22:99:7b:32:b1:8e:c2:44:30:
61:58:bc:7b:66:ca:86:80:04:6e:30:72:96:20:6c:
03:63:8e:8e:fd:fc:26:d1:96:59:2f:4e:9d:01:00:
c8:d6:f3:a3:47:c3:ee:a2:68:b1:40:df:45:2f:01:
0f:0b:b5:b8:16:1e:38:26:8d:80:bf:79:54:1f:ee:
0b:09:00:c5:9b:f6:58:37:a1:26:74:1e:7b:a8:d7:
01:20:b5:7c:30:62:17:33:70:89:3c:e4:03:92:0b:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:76:11:F0:01:2B:F4:95:D6:52:52:3E:96:A7:29:CA:90:CF:25
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/IGJ2EfABK_SV1lJSPpanKcqQzyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.90.0.0/15
91.194.170.0/23
91.194.182.0/23
213.228.128.0/18
217.129.0.0/16
IPv6:
2a02:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
5a:2c:2e:7b:c0:54:23:77:2e:bc:10:90:89:ea:ca:07:e9:3b:
ba:6e:82:7c:53:c7:e4:3c:aa:f8:eb:db:67:55:72:a4:3c:a9:
ca:93:b1:eb:f1:25:ce:93:ab:a7:d1:75:f9:37:f3:a6:f5:8b:
ac:bb:a6:4d:9f:27:4a:43:26:09:0c:e6:4d:b6:36:2d:26:b9:
12:55:82:34:28:51:af:9b:c0:92:89:bf:61:1d:7f:65:8e:0e:
77:04:98:50:e4:bd:6e:67:f8:11:27:d8:f6:8e:ef:49:2d:de:
93:d0:af:0a:9f:ed:ea:09:f0:2e:33:53:f9:c5:dd:6d:1d:e4:
d8:9d:24:0f:e3:9c:12:e3:e9:26:24:af:93:52:87:40:79:94:
54:95:c5:bc:8d:b8:df:21:22:7c:9e:0e:b0:17:53:a5:d1:f9:
60:8c:f8:74:01:20:c3:da:cf:51:ad:68:97:45:b3:f6:4f:88:
7f:6b:c5:e0:76:6f:68:c7:8b:b2:50:c5:34:e5:97:12:72:25:
b7:1c:7b:29:95:c3:d1:bc:4e:25:66:d3:83:7c:0a:f6:49:9e:
dd:30:2d:fa:73:4c:39:8e:e2:ce:0a:5b:39:5f:d9:e6:cd:72:
46:2e:0e:14:08:37:c7:4c:2e:a2:f4:a0:53:cb:47:f4:e8:76:
19:7a:41:dd
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAYVrd6mgVjrj3V89JE/nOeBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjMwMTAxMDM1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDYyNzYxMWYwMDEyYmY0OTVkNjUyNTIzZTk2YTcyOWNhOTBjZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnUrGUhNbTWcAjrJE65/B5N6XFsz
nfsp+BOWtLP2udSTRZAN1d9ZZ3DD94dhicDs/qm/09+nfaabPaG8z133D0X9xPev
/e6UPojBSIFyemYAdVvY1SLdB6G45v/os6dZdSjhhVHWILf6V3PqHhgL7ZE6E8Z5
R3ckT+APhgMh73fFNNMAFU90EdIqJ3U7bWtVwAES/e1WuSvJopQimXsysY7CRDBh
WLx7ZsqGgARuMHKWIGwDY46O/fwm0ZZZL06dAQDI1vOjR8PuomixQN9FLwEPC7W4
Fh44Jo2Av3lUH+4LCQDFm/ZYN6EmdB57qNcBILV8MGIXM3CJPOQDkguFoQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFCBidhHwASv0ldZSUj6WpynKkM8lMB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEvSUdKMkVmQUJLX1NWMWxKU1BwYW5LY3FRenlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAiBAIAATAcAwMBVFoDBAFb
wqoDBAFbwrYDBAbV5IADAwDZgTANBAIAAjAHAwUAKgImyDANBgkqhkiG9w0BAQsF
AAOCAQEAWiwue8BUI3cuvBCQierKB+k7um6CfFPH5Dyq+OvbZ1VypDypypOx6/El
zpOrp9F1+TfzpvWLrLumTZ8nSkMmCQzmTbY2LSa5ElWCNChRr5vAkom/YR1/ZY4O
dwSYUOS9bmf4ESfY9o7vSS3ek9CvCp/t6gnwLjNT+cXdbR3k2J0kD+OcEuPpJiSv
k1KHQHmUVJXFvI243yEifJ4OsBdTpdH5YIz4dAEgw9rPUa1ol0Wz9k+If2vF4HZv
aMeLslDFNOWXEnIltxx7KZXD0bxOJWbTg3wK9kme3TAt+nNMOY7izgpbOV/Z5s1y
Ri4OFAg3x0wuovSgU8tH9Oh2GXpB3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:08 2024 by rpki-client on console-ams.rpki-client.org