Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/GL9oqR1Y2GvyEsPWhFKoiqNH5eY.roa
File: GL9oqR1Y2GvyEsPWhFKoiqNH5eY.roa (raw, json)
Hash identifier: TyntmxO0fO1qGaD7IZp+fpElLnkxgbPPvoVSy4l2SBc=
Subject key identifier: 18:BF:68:A9:1D:58:D8:6B:F2:12:C3:D6:84:52:A8:8A:A3:47:E5:E6
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0191D6DD8BFAC49D2E50383E4510148ADB05
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/GL9oqR1Y2GvyEsPWhFKoiqNH5eY.roa
Signing time: Mon 09 Sep 2024 12:58:49 +0000
ROA not before: Mon 09 Sep 2024 12:58:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.125.159.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 26 Sep 2024 05:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:dd:8b:fa:c4:9d:2e:50:38:3e:45:10:14:8a:db:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 9 12:58:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18bf68a91d58d86bf212c3d68452a88aa347e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:bb:34:2e:cc:20:ef:64:db:12:aa:50:0f:
50:27:a6:c5:76:59:b0:7b:de:e8:c2:83:6a:1c:c7:
c8:5d:ea:40:a6:4e:33:55:0a:ad:a4:d8:ca:0f:6b:
90:d6:20:e4:37:bd:93:62:b3:3f:9f:e3:99:2a:78:
06:9f:f5:4f:18:e7:33:b3:ed:5f:d5:7c:23:ae:7f:
52:aa:a7:60:95:7c:8c:aa:f3:86:29:1d:af:de:33:
e2:d2:a0:35:52:c9:23:b4:8f:50:b3:91:12:aa:25:
da:3d:9c:db:8e:97:80:44:1e:84:1b:86:01:23:5b:
14:c3:be:6a:25:62:04:af:c3:c0:e2:00:16:0b:7f:
40:e5:af:c5:d8:ab:29:0b:90:33:76:55:6e:6e:17:
79:96:08:48:1f:d2:cf:9d:8b:63:f0:8c:77:77:72:
d0:cd:91:27:d8:c1:44:a4:03:87:53:2b:df:82:ed:
78:b2:7e:d6:7f:73:3c:7d:9f:9d:a8:6a:4e:bf:de:
a6:12:f8:d1:96:df:58:cf:51:f0:56:8f:b6:91:8d:
10:5a:7c:6d:0c:29:f8:40:df:bc:3a:0a:c6:65:6d:
c0:0f:e8:ac:c9:e7:6e:83:93:86:98:9b:4c:64:63:
f6:0c:93:75:4f:ae:eb:62:1d:8f:a6:be:f9:46:0d:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:68:A9:1D:58:D8:6B:F2:12:C3:D6:84:52:A8:8A:A3:47:E5:E6
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/GL9oqR1Y2GvyEsPWhFKoiqNH5eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0-79.149.255.255
80.24.0.0/14
80.29.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
81.47.0.0/16
83.32.0.0/13
83.47.0.0-83.48.255.255
83.52.0.0-83.63.255.255
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/13
95.121.0.0-95.127.255.255
176.80.0.0/14
176.85.0.0-176.87.255.255
192.101.1.0/24
193.153.0.0/16
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.0.0/16
195.77.57.0/24
195.77.132.0/22
195.235.0.0/16
212.170.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
80:83:04:d8:56:49:0d:3b:71:80:07:6b:8e:2d:be:38:68:71:
01:9d:ed:ee:35:46:7f:bc:03:29:10:90:c0:b7:fa:d6:2e:ef:
43:45:c8:0f:34:f8:aa:e2:d4:84:68:c0:0f:90:b7:d7:50:b5:
8f:0c:ee:89:27:47:e8:03:b1:e5:c3:70:78:40:36:a6:22:f3:
fa:66:35:d0:89:da:a6:e0:43:23:74:b9:6b:a8:e8:9d:5f:bc:
5f:8e:6b:3a:2b:ab:5a:15:d4:17:5a:38:ec:45:d7:d6:cf:a7:
45:4c:bb:4d:8d:80:83:bc:a1:a6:62:e9:c8:0f:58:22:16:25:
fb:eb:e9:0a:d1:ad:e9:21:0b:6f:90:08:3e:77:ad:10:4f:65:
0a:fe:7d:69:6d:37:28:e6:a0:c3:99:bd:e1:7a:b0:9d:9a:da:
6e:bc:39:8d:17:2f:a2:c1:ed:79:54:fc:21:77:c4:60:e1:84:
bd:a6:04:b2:9e:59:1d:ed:e4:39:c2:c3:da:03:3b:34:7c:00:
6b:cd:cc:43:28:de:a7:98:e6:49:46:cc:98:7d:57:b3:36:44:
74:94:5b:a0:2e:69:b0:73:a2:ae:78:85:a8:29:3e:c1:e9:0a:
47:53:62:17:d1:f2:ef:e4:ac:05:64:2e:41:29:b3:1e:8f:ab:
58:36:7d:60
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAZHW3Yv6xJ0uUDg+RRAUitsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwOTA5MTI1ODQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGJmNjhhOTFkNThkODZiZjIxMmMzZDY4NDUyYTg4YWEzNDdlNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwi7NC7MIO9k2xKqUA9QJ6bFdlmw
e97owoNqHMfIXepApk4zVQqtpNjKD2uQ1iDkN72TYrM/n+OZKngGn/VPGOczs+1f
1Xwjrn9SqqdglXyMqvOGKR2v3jPi0qA1UskjtI9Qs5ESqiXaPZzbjpeARB6EG4YB
I1sUw75qJWIEr8PA4gAWC39A5a/F2KspC5AzdlVubhd5lghIH9LPnYtj8Ix3d3LQ
zZEn2MFEpAOHUyvfgu14sn7Wf3M8fZ+dqGpOv96mEvjRlt9Yz1HwVo+2kY0QWnxt
DCn4QN+8OgrGZW3AD+isyedug5OGmJtMZGP2DJN1T67rYh2Ppr75Rg0LQQIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFBi/aKkdWNhr8hLD1oRSqIqjR+XmMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvR0w5b3FSMVkyR3Z5RXNQV2hGS29pcU5INWVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB
CAMDAwKIAwMABc0DBAclCoADAwElDAMDACWeMAoDAwRPkAMDAU+UAwMCUBgwCgMD
AFAdAwMDUCADAwBQOzAKAwMFUSADAwBRLAMDAFEvAwMDUyAwCgMDAFMvAwMAUzAw
CgMDAlM0AwMGUwADAwJYADAKAwMDWAgDAwBYEAMDA1gYMAoDAwBfeQMDB18AAwMC
sFAwCgMDALBVAwMDsFADBADAZQEDAwDBmQMEAMJF4QMEAMKzIgMEAMKzcAMEAMLg
nQMDAMM1AwQBwzdOAwQAwzduAwQAwzkFAwQAwzkbAwMAw0wDBADDTTkDBALDTYQD
AwDD6wMDANSqAwMC1WADBAXZC2ADAwLZfDANBgkqhkiG9w0BAQsFAAOCAQEAgIME
2FZJDTtxgAdrji2+OGhxAZ3t7jVGf7wDKRCQwLf61i7vQ0XIDzT4quLUhGjAD5C3
11C1jwzuiSdH6AOx5cNweEA2piLz+mY10InapuBDI3S5a6jonV+8X45rOiurWhXU
F1o47EXX1s+nRUy7TY2Ag7yhpmLpyA9YIhYl++vpCtGt6SELb5AIPnetEE9lCv59
aW03KOagw5m94XqwnZrabrw5jRcvosHteVT8IXfEYOGEvaYEsp5ZHe3kOcLD2gM7
NHwAa83MQyjep5jmSUbMmH1XszZEdJRboC5psHOirniFqCk+wekKR1NiF9Hy7+Ss
BWQuQSmzHo+rWDZ9YA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:38 2025 by rpki-client