Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/_2Y1HjVxGBuXGyguz4_NlDavgTc.roa
File: _2Y1HjVxGBuXGyguz4_NlDavgTc.roa (raw, json)
Hash identifier: hXMif5/PFOyuEpVxJJNogbt3MIN9gSDt8h4bHabmkvM=
Subject key identifier: FF:66:35:1E:35:71:18:1B:97:1B:28:2E:CF:8F:CD:94:36:AF:81:37
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 018D41449B477B2EB4537C9C083A03249996
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/_2Y1HjVxGBuXGyguz4_NlDavgTc.roa
Signing time: Thu 25 Jan 2024 15:37:11 +0000
ROA not before: Thu 25 Jan 2024 15:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13156
IP address blocks: 84.90.0.0/15 maxlen: 15
84.90.0.0/21 maxlen: 21
84.90.8.0/22 maxlen: 22
84.90.12.0/22 maxlen: 22
84.90.16.0/22 maxlen: 22
84.90.20.0/24 maxlen: 24
84.90.21.0/24 maxlen: 24
84.90.24.0/21 maxlen: 21
84.90.32.0/22 maxlen: 22
84.90.36.0/22 maxlen: 22
84.90.40.0/21 maxlen: 21
84.90.48.0/21 maxlen: 21
84.90.56.0/22 maxlen: 22
84.90.60.0/22 maxlen: 22
84.90.64.0/24 maxlen: 24
84.90.65.0/24 maxlen: 24
84.90.68.0/22 maxlen: 22
84.90.72.0/21 maxlen: 21
84.90.80.0/21 maxlen: 21
84.90.88.0/21 maxlen: 21
84.90.96.0/21 maxlen: 21
84.90.104.0/21 maxlen: 21
84.90.112.0/21 maxlen: 21
84.90.120.0/22 maxlen: 22
84.90.124.0/22 maxlen: 22
84.90.128.0/21 maxlen: 21
84.90.136.0/21 maxlen: 21
84.90.144.0/22 maxlen: 22
84.90.148.0/22 maxlen: 22
84.90.152.0/22 maxlen: 22
84.90.156.0/22 maxlen: 22
84.90.160.0/21 maxlen: 21
84.90.168.0/22 maxlen: 22
84.90.176.0/22 maxlen: 22
84.90.180.0/22 maxlen: 22
84.90.184.0/22 maxlen: 22
84.90.188.0/23 maxlen: 23
84.90.190.0/23 maxlen: 23
84.90.200.0/21 maxlen: 21
84.90.208.0/21 maxlen: 21
84.90.216.0/22 maxlen: 22
84.90.220.0/22 maxlen: 22
84.90.224.0/22 maxlen: 22
84.90.228.0/23 maxlen: 23
84.90.230.0/23 maxlen: 23
84.90.232.0/22 maxlen: 22
84.90.236.0/22 maxlen: 22
84.90.240.0/22 maxlen: 22
84.90.244.0/22 maxlen: 22
84.90.248.0/22 maxlen: 22
84.91.4.0/22 maxlen: 22
84.91.8.0/22 maxlen: 22
84.91.12.0/23 maxlen: 23
84.91.14.0/23 maxlen: 23
84.91.16.0/22 maxlen: 22
84.91.20.0/22 maxlen: 22
84.91.24.0/22 maxlen: 22
84.91.28.0/22 maxlen: 22
84.91.32.0/22 maxlen: 22
84.91.36.0/22 maxlen: 22
84.91.40.0/22 maxlen: 22
84.91.48.0/22 maxlen: 22
84.91.52.0/22 maxlen: 22
84.91.56.0/21 maxlen: 21
84.91.64.0/21 maxlen: 21
84.91.72.0/22 maxlen: 22
84.91.76.0/22 maxlen: 22
84.91.80.0/22 maxlen: 22
84.91.84.0/22 maxlen: 22
84.91.100.0/22 maxlen: 22
84.91.104.0/22 maxlen: 22
84.91.108.0/22 maxlen: 22
84.91.112.0/22 maxlen: 22
84.91.116.0/22 maxlen: 22
84.91.120.0/22 maxlen: 22
84.91.124.0/22 maxlen: 22
84.91.128.0/22 maxlen: 22
84.91.132.0/22 maxlen: 22
84.91.136.0/22 maxlen: 22
84.91.140.0/22 maxlen: 22
84.91.144.0/22 maxlen: 22
84.91.148.0/22 maxlen: 22
84.91.152.0/24 maxlen: 24
84.91.153.0/24 maxlen: 24
84.91.155.0/24 maxlen: 24
84.91.162.0/23 maxlen: 23
84.91.164.0/23 maxlen: 23
84.91.166.0/23 maxlen: 23
84.91.168.0/23 maxlen: 23
84.91.176.0/22 maxlen: 22
84.91.180.0/22 maxlen: 22
84.91.184.0/22 maxlen: 22
84.91.188.0/23 maxlen: 23
84.91.192.0/22 maxlen: 22
84.91.208.0/23 maxlen: 23
84.91.210.0/24 maxlen: 24
84.91.211.0/24 maxlen: 24
84.91.212.0/22 maxlen: 22
84.91.216.0/22 maxlen: 22
84.91.220.0/22 maxlen: 22
84.91.224.0/23 maxlen: 23
84.91.226.0/24 maxlen: 24
84.91.227.0/24 maxlen: 24
84.91.228.0/22 maxlen: 22
84.91.232.0/22 maxlen: 22
84.91.236.0/22 maxlen: 22
84.91.248.0/22 maxlen: 22
84.91.252.0/22 maxlen: 22
91.194.170.0/23 maxlen: 23
91.194.182.0/23 maxlen: 23
213.228.128.0/18 maxlen: 18
213.228.128.0/22 maxlen: 22
213.228.132.0/24 maxlen: 24
213.228.136.0/24 maxlen: 24
213.228.137.0/24 maxlen: 24
213.228.139.0/24 maxlen: 24
213.228.141.0/24 maxlen: 24
213.228.142.0/24 maxlen: 24
213.228.149.0/24 maxlen: 24
213.228.150.0/24 maxlen: 24
213.228.151.0/24 maxlen: 24
213.228.153.0/24 maxlen: 24
213.228.154.0/24 maxlen: 24
213.228.155.0/24 maxlen: 24
213.228.156.0/24 maxlen: 24
213.228.157.0/24 maxlen: 24
213.228.163.0/24 maxlen: 24
213.228.164.0/24 maxlen: 24
213.228.166.0/24 maxlen: 24
213.228.167.0/24 maxlen: 24
213.228.168.0/24 maxlen: 24
213.228.169.0/24 maxlen: 24
213.228.170.0/24 maxlen: 24
213.228.171.0/24 maxlen: 24
213.228.178.0/24 maxlen: 24
213.228.180.0/24 maxlen: 24
213.228.181.0/24 maxlen: 24
213.228.184.0/24 maxlen: 24
213.228.185.0/24 maxlen: 24
213.228.187.0/24 maxlen: 24
217.129.0.0/16 maxlen: 16
217.129.0.0/21 maxlen: 21
217.129.8.0/21 maxlen: 21
217.129.16.0/21 maxlen: 21
217.129.24.0/21 maxlen: 21
217.129.32.0/21 maxlen: 21
217.129.40.0/21 maxlen: 21
217.129.48.0/20 maxlen: 20
217.129.64.0/21 maxlen: 21
217.129.72.0/21 maxlen: 21
217.129.80.0/22 maxlen: 22
217.129.84.0/22 maxlen: 22
217.129.88.0/22 maxlen: 22
217.129.92.0/22 maxlen: 22
217.129.96.0/21 maxlen: 21
217.129.104.0/21 maxlen: 21
217.129.112.0/20 maxlen: 20
217.129.128.0/20 maxlen: 20
217.129.144.0/22 maxlen: 22
217.129.148.0/22 maxlen: 22
217.129.152.0/22 maxlen: 22
217.129.156.0/22 maxlen: 22
217.129.160.0/21 maxlen: 21
217.129.168.0/21 maxlen: 21
217.129.176.0/21 maxlen: 21
217.129.184.0/21 maxlen: 21
217.129.192.0/21 maxlen: 21
217.129.200.0/21 maxlen: 21
217.129.208.0/21 maxlen: 21
217.129.216.0/21 maxlen: 21
217.129.224.0/21 maxlen: 21
217.129.232.0/22 maxlen: 22
217.129.236.0/22 maxlen: 22
217.129.240.0/21 maxlen: 21
217.129.248.0/22 maxlen: 22
217.129.252.0/22 maxlen: 22
2a02:26c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 15:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:44:9b:47:7b:2e:b4:53:7c:9c:08:3a:03:24:99:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jan 25 15:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff66351e3571181b971b282ecf8fcd9436af8137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:37:2b:da:dc:ec:5f:f1:be:02:82:14:48:
a3:80:a5:18:41:9c:46:cf:3b:01:e8:c8:a9:82:ac:
92:d0:0b:41:19:84:6a:c5:94:74:7d:01:f8:3f:3a:
5d:5b:55:44:4a:ad:3d:cf:42:4f:56:0d:ef:0e:46:
07:6c:45:14:f3:c6:28:2d:89:13:21:35:7d:e7:61:
83:46:08:c7:9a:13:08:e2:15:9b:28:d7:77:09:38:
0c:72:7a:14:f8:c9:08:c1:aa:fb:9b:76:5c:f9:75:
3f:c6:66:18:b0:b3:55:e4:cc:6a:28:e8:45:f1:bd:
26:ac:07:a3:95:37:fd:24:cb:3f:0d:b6:85:16:e9:
2e:60:84:5c:f2:d3:20:9f:bc:77:e2:70:e0:70:9d:
f6:3b:26:b3:fa:e2:62:03:90:2e:5f:58:6f:6b:8a:
7b:ff:8a:cf:74:4f:24:b3:bc:75:a2:c2:49:e6:ef:
70:cd:40:84:95:e9:aa:51:64:33:24:3e:62:b4:45:
71:c3:a7:ff:d6:09:19:b9:36:d3:da:5b:e2:a0:b7:
3a:78:29:d3:b7:76:0a:d6:37:09:f1:05:8c:5e:ed:
0d:68:55:3a:de:a1:e4:f3:a0:c2:22:60:9f:bb:eb:
bb:12:f1:04:51:7a:f0:25:5a:2e:50:ff:56:ae:33:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:35:1E:35:71:18:1B:97:1B:28:2E:CF:8F:CD:94:36:AF:81:37
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/_2Y1HjVxGBuXGyguz4_NlDavgTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.90.0.0/15
91.194.170.0/23
91.194.182.0/23
213.228.128.0/18
217.129.0.0/16
IPv6:
2a02:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
c3:e8:84:d6:ec:e6:62:13:e3:f7:7a:35:f1:e0:c9:7b:f3:d3:
c1:3d:3e:51:6e:86:46:68:44:20:2f:b4:09:12:29:7a:77:e7:
58:de:9a:a7:94:66:ab:39:5f:24:86:62:b1:43:ab:ea:a9:0b:
5b:9a:88:e3:6a:f7:57:4e:8b:58:4a:38:72:69:0c:d4:29:97:
85:18:f1:e8:ee:c3:af:6c:c0:ea:71:e0:fc:32:64:8e:60:b0:
1f:d7:67:da:08:ba:24:0a:d9:b1:86:c9:51:05:dc:ba:22:b5:
82:d6:a5:b4:67:98:3f:1b:1e:50:bd:f1:98:46:25:66:e1:0b:
78:99:40:0c:a7:39:9b:58:bd:5c:8e:c9:bd:8e:cf:23:18:78:
b2:de:57:14:93:cb:74:88:ab:a8:fd:db:77:d4:85:81:f8:df:
96:f8:2e:f7:94:ad:84:b0:e9:1f:b9:d5:25:19:0a:7f:c6:51:
39:f7:dd:49:02:82:38:61:3a:4b:89:6b:ae:30:8f:51:9e:1b:
ee:90:74:42:e8:87:71:c2:ec:ce:c1:f0:e5:42:ec:c7:b6:aa:
c4:e8:bc:bb:ae:93:ae:62:22:66:1d:4b:f0:a7:80:34:f4:18:
7d:41:15:41:ef:4c:d8:6d:03:53:03:54:bd:3f:55:04:9d:43:
71:1d:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:02 2024 by rpki-client on console-fra.rpki-client.org