Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lcWsDedHlJcqedTc_Z8OM9Vc7-g.roa
File: lcWsDedHlJcqedTc_Z8OM9Vc7-g.roa (raw, json)
Hash identifier: /9AhXJIwICs1asMa55MPVggfIVDGQTYG7oY8yrH+hpI=
Subject key identifier: 95:C5:AC:0D:E7:47:94:97:2A:79:D4:DC:FD:9F:0E:33:D5:5C:EF:E8
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D7D55DC6DE8695C99CD5992511F2473D0
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lcWsDedHlJcqedTc_Z8OM9Vc7-g.roa
Signing time: Tue 06 Feb 2024 07:33:15 +0000
ROA not before: Tue 06 Feb 2024 07:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.30.0.0/16 maxlen: 16
192.101.1.0/24 maxlen: 24
194.69.225.0/24 maxlen: 24
194.179.34.0/24 maxlen: 24
194.179.112.0/24 maxlen: 24
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.57.0/24 maxlen: 24
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.96.0.0/16 maxlen: 16
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.124.182.0/24 maxlen: 24
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 09 Feb 2024 09:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:55:dc:6d:e8:69:5c:99:cd:59:92:51:1f:24:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Feb 6 07:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95c5ac0de74794972a79d4dcfd9f0e33d55cefe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:1c:ea:63:d2:08:34:4e:5b:56:92:29:d8:
3a:2d:5e:bc:cf:46:72:7b:a4:09:03:a7:1f:0a:e4:
36:d9:66:3e:bb:c5:09:9a:eb:ca:87:38:49:5e:82:
91:20:9e:e7:09:bf:1d:d4:a2:69:54:32:70:77:d3:
09:ca:7e:fb:d5:cf:a7:e1:f4:58:21:38:cf:64:4f:
3b:17:20:4a:2d:48:a8:02:a9:35:e4:0d:d4:5f:8e:
41:e1:09:44:cd:49:fb:05:c0:e9:ba:48:d5:ba:47:
8c:e7:28:75:92:23:de:58:b2:df:55:56:de:b7:7b:
09:15:cc:a8:8f:a6:1c:d2:c2:7b:0c:cd:58:75:4b:
07:a8:f7:ea:53:94:84:23:10:53:93:fd:5a:f0:2e:
ed:7e:41:5e:d2:08:e0:8a:9e:7c:65:42:cf:8d:55:
6b:e5:0c:ba:41:0d:2e:bb:af:ff:93:4c:95:02:f6:
5c:aa:e8:a2:d7:9e:ee:01:2d:22:5d:ed:d3:b0:e6:
41:14:d2:6b:53:b9:65:35:79:29:fb:98:a3:d3:db:
ab:3c:2e:41:3e:43:7c:31:ee:5f:5a:7b:3f:ef:70:
98:a4:2a:f2:ea:d0:1d:0f:28:d3:53:a3:07:5f:b9:
ad:97:40:4e:53:7c:2f:58:18:45:22:83:37:97:f0:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:AC:0D:E7:47:94:97:2A:79:D4:DC:FD:9F:0E:33:D5:5C:EF:E8
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/lcWsDedHlJcqedTc_Z8OM9Vc7-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/14
79.144.0.0-79.148.255.255
80.24.0.0/15
80.30.0.0-80.39.255.255
80.59.0.0/16
81.32.0.0-81.44.255.255
83.32.0.0/13
83.47.0.0/16
83.52.0.0-83.61.255.255
83.63.0.0/16
88.0.0.0/14
88.8.0.0-88.16.255.255
88.24.0.0/15
88.27.0.0/16
88.30.0.0/16
192.101.1.0/24
194.69.225.0/24
194.179.34.0/24
194.179.112.0/24
194.224.157.0/24
195.53.0.0/16
195.55.78.0/23
195.55.110.0/24
195.57.5.0/24
195.57.27.0/24
195.76.141.0/24
195.76.164.0/24
195.77.57.0/24
195.235.95.0/24
195.235.188.0/24
195.235.225.0/24
212.170.156.0/24
212.170.159.0/24
213.96.0.0/16
213.99.44.0/24
213.99.59.0/24
217.124.182.0/24
217.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:94:48:12:63:5d:7d:30:02:05:c7:ed:76:81:eb:4c:cc:b2:
7a:4d:3d:2a:48:88:41:e9:b3:8d:0b:c0:b1:a2:24:f9:49:9e:
1c:a2:d1:0c:bc:e1:6a:06:99:b1:56:ce:b3:07:1b:00:26:cd:
fa:ca:d5:db:76:2d:96:9d:ea:98:9c:3c:a2:9a:04:42:06:c4:
90:ba:50:a0:fa:37:37:4b:d2:f2:c6:1f:15:8d:4a:f8:44:9e:
ce:a7:a6:17:eb:ba:ed:b3:da:2c:f0:f3:e0:da:5c:f0:c4:2f:
1d:47:61:14:dc:35:ad:7d:31:55:9a:c5:8e:a8:1f:5f:59:25:
8b:ef:52:b3:d1:d2:0b:16:29:76:d8:44:1a:8d:5d:2f:bd:3c:
07:21:c6:3e:91:3f:0b:2e:5e:db:25:83:9a:4e:f5:9e:4d:c0:
2d:94:7b:dc:30:ec:1d:d8:92:5f:62:31:58:b7:f2:1a:f3:77:
b2:14:fb:59:ce:a9:8f:96:0e:9f:c9:95:ec:65:7f:9a:da:33:
72:52:0a:4c:19:ec:f9:ea:72:ed:20:83:76:52:01:be:1d:96:
e5:0e:25:2d:73:0b:4f:99:63:d8:df:31:05:bc:cf:70:c9:8d:
20:f5:de:99:3a:5b:10:6e:ab:cd:62:63:bb:e5:40:3e:42:0b:
f7:e1:b5:f1
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAY19Vdxt6Glcmc1ZklEfJHPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMjA2MDczMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM1YWMwZGU3NDc5NDk3MmE3OWQ0ZGNmZDlmMGUzM2Q1NWNlZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhboc6mPSCDROW1aSKdg6LV68z0Zy
e6QJA6cfCuQ22WY+u8UJmuvKhzhJXoKRIJ7nCb8d1KJpVDJwd9MJyn771c+n4fRY
ITjPZE87FyBKLUioAqk15A3UX45B4QlEzUn7BcDpukjVukeM5yh1kiPeWLLfVVbe
t3sJFcyoj6Yc0sJ7DM1YdUsHqPfqU5SEIxBTk/1a8C7tfkFe0gjgip58ZULPjVVr
5Qy6QQ0uu6//k0yVAvZcquii157uAS0iXe3TsOZBFNJrU7llNXkp+5ij09urPC5B
PkN8Me5fWns/73CYpCry6tAdDyjTU6MHX7mtl0BOU3wvWBhFIoM3l/B1SQIDAQAB
o4IC/zCCAvswHQYDVR0OBBYEFJXFrA3nR5SXKnnU3P2fDjPVXO/oMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvbGNXc0RlZEhsSmNxZWRUY19aOE9NOVZjNy1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEwYIKwYBBQUHAQcBAf8EggECMIH/MIH8BAIAATCB9QMD
AgKIMAoDAwRPkAMDAE+UAwMBUBgwCgMDAVAeAwMDUCADAwBQOzAKAwMFUSADAwBR
LAMDA1MgAwMAUy8wCgMDAlM0AwMBUzwDAwBTPwMDAlgAMAoDAwNYCAMDAFgQAwMB
WBgDAwBYGwMDAFgeAwQAwGUBAwQAwkXhAwQAwrMiAwQAwrNwAwQAwuCdAwMAwzUD
BAHDN04DBADDN24DBADDOQUDBADDORsDBADDTI0DBADDTKQDBADDTTkDBADD618D
BADD67wDBADD6+EDBADUqpwDBADUqp8DAwDVYAMEANVjLAMEANVjOwMEANl8tgMD
Adl+MA0GCSqGSIb3DQEBCwUAA4IBAQBJlEgSY119MAIFx+12getMzLJ6TT0qSIhB
6bONC8CxoiT5SZ4cotEMvOFqBpmxVs6zBxsAJs36ytXbdi2WneqYnDyimgRCBsSQ
ulCg+jc3S9Lyxh8VjUr4RJ7Op6YX67rts9os8PPg2lzwxC8dR2EU3DWtfTFVmsWO
qB9fWSWL71Kz0dILFil22EQajV0vvTwHIcY+kT8LLl7bJYOaTvWeTcAtlHvcMOwd
2JJfYjFYt/Ia83eyFPtZzqmPlg6fyZXsZX+a2jNyUgpMGez56nLtIIN2UgG+HZbl
DiUtcwtPmWPY3zEFvM9wyY0g9d6ZOlsQbqvNYmO75UA+Qgv34bXx
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:10 2025 by rpki-client