Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/N5iyvJh8-CAHx-eQLdU-5q02qGU.roa
File: N5iyvJh8-CAHx-eQLdU-5q02qGU.roa (raw, json)
Hash identifier: YLOr6LEOAfLlT595FuxF+LKgnWN+2NJsl7h8ufg2h3E=
Subject key identifier: 37:98:B2:BC:98:7C:F8:20:07:C7:E7:90:2D:D5:3E:E6:AD:36:A8:65
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0186DF4B85C24C74AEAAA626A558C36E74B0
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/N5iyvJh8-CAHx-eQLdU-5q02qGU.roa
Signing time: Tue 14 Mar 2023 08:45:13 +0000
ROA not before: Tue 14 Mar 2023 08:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198610
IP address blocks: 45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.49.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.208.0/22 maxlen: 24
81.200.114.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.33.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
5.101.153.244/32 maxlen: 32
87.236.17.122/32 maxlen: 32
5.101.153.242/32 maxlen: 32
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.41.0/24 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
31.129.96.0/20 maxlen: 24
31.129.98.0/24 maxlen: 24
31.129.96.0/24 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.154.0/24 maxlen: 24
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 27 Mar 2023 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:4b:85:c2:4c:74:ae:aa:a6:26:a5:58:c3:6e:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 14 08:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3798b2bc987cf82007c7e7902dd53ee6ad36a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:6a:56:bf:29:84:0b:b1:ac:c1:61:d1:ba:
6e:04:50:ea:ad:e2:0a:98:4d:e0:01:b5:ef:51:6d:
80:d4:ef:93:c9:04:d9:a0:64:4c:08:14:ba:0c:e7:
f7:1b:5c:ca:a0:bb:6e:ac:c0:32:b0:90:ba:e6:c5:
00:91:f7:99:9e:83:60:4f:3c:94:d5:ec:f4:2e:85:
62:8c:9f:d8:ca:41:a9:c8:d6:39:e8:e9:55:11:f0:
f6:b3:9d:73:15:6b:05:a7:4b:51:ac:86:7b:22:f7:
b5:98:5d:a3:85:fd:f9:95:cf:b5:1a:79:d1:5c:c3:
88:e3:ff:3e:0c:d7:5d:89:04:6b:4c:f8:73:8f:b8:
92:0a:41:40:2b:ae:e3:5b:ac:ee:f3:c2:c1:40:a7:
e9:c5:de:d8:9c:97:e0:c6:09:05:1d:37:2b:ff:89:
10:d9:d7:9a:3c:48:3b:61:d4:cd:ac:d0:93:10:c8:
a7:8f:4a:95:76:49:26:56:f2:45:45:99:37:de:8e:
3e:5c:d7:f3:45:35:2c:43:97:95:19:5b:42:d9:5a:
83:39:c4:64:33:6f:34:53:de:71:2f:94:9f:e6:0c:
87:dc:0b:5c:df:6b:9a:ef:2a:6e:31:7b:59:ed:a5:
f7:38:fa:3e:7e:e8:5c:77:b1:dc:dc:97:5b:72:b8:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:B2:BC:98:7C:F8:20:07:C7:E7:90:2D:D5:3E:E6:AD:36:A8:65
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/N5iyvJh8-CAHx-eQLdU-5q02qGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.152.0/21
5.181.108.0/22
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
87.236.16.0/21
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
213.139.208.0/22
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
11:e4:b4:c6:17:68:0a:47:14:8d:c8:33:1a:a2:89:60:1f:7a:
06:4b:8f:46:8f:e7:7c:48:9f:c1:ef:1f:e3:8a:f4:8c:af:d1:
9d:0d:c6:0b:2c:32:a5:62:9b:26:f4:cb:0e:c6:fd:40:67:58:
c7:2c:83:7b:8d:69:3f:c5:a8:df:91:e0:c2:8c:57:90:3a:59:
98:66:4f:c5:55:94:32:03:f8:10:aa:2e:bb:cc:3a:6e:ce:ab:
a4:78:b5:14:53:5e:ad:3f:a6:a8:00:82:29:ed:8b:76:6b:5b:
78:04:fd:b9:41:57:47:51:67:33:d0:37:51:b6:98:8d:c6:9c:
08:6e:57:9d:60:c2:2a:d7:f1:08:d4:a1:ec:3b:a3:5b:2a:09:
04:56:37:e7:d6:db:98:97:0b:9f:fa:b8:87:3e:08:2a:78:aa:
e4:fb:23:a9:c1:85:bf:1e:03:0a:2e:2b:b9:ce:41:98:36:3a:
62:ae:61:9c:41:f4:e5:72:92:60:f4:fe:21:e1:1b:12:14:73:
fd:1d:48:29:52:12:89:c4:a9:26:a7:51:fd:f9:dc:c7:96:06:
80:1c:ba:2a:d8:7c:e5:2d:12:0a:a3:f5:3b:2a:47:e3:0c:0e:
e3:83:46:f3:a0:35:14:1d:42:a4:70:e7:df:f1:0c:09:24:5d:
24:09:3c:e6
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYbfS4XCTHSuqqYmpVjDbnSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjMwMzE0MDg0NTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk4YjJiYzk4N2NmODIwMDdjN2U3OTAyZGQ1M2VlNmFkMzZhODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJxqVr8phAuxrMFh0bpuBFDqreIK
mE3gAbXvUW2A1O+TyQTZoGRMCBS6DOf3G1zKoLturMAysJC65sUAkfeZnoNgTzyU
1ez0LoVijJ/YykGpyNY56OlVEfD2s51zFWsFp0tRrIZ7Ive1mF2jhf35lc+1GnnR
XMOI4/8+DNddiQRrTPhzj7iSCkFAK67jW6zu88LBQKfpxd7YnJfgxgkFHTcr/4kQ
2deaPEg7YdTNrNCTEMinj0qVdkkmVvJFRZk33o4+XNfzRTUsQ5eVGVtC2VqDOcRk
M280U95xL5Sf5gyH3Atc32ua7ypuMXtZ7aX3OPo+fuhcd7Hc3Jdbcrg3qwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFDeYsryYfPggB8fnkC3VPuatNqhlMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvTjVpeXZKaDgtQ0FIeC1lUUxkVS01cTAycUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHiBggrBgEFBQcBBwEB/wSB0jCBzzCBvQQCAAEwgbYDBAMF
ZZgDBAIFtWwDBAQfgWADBAItCSgDBAItDBADBAItQzgDBAItUEQDBAItVOADBAIt
WiADBAItgigDBAItjUwDBAItkqQDBAItk7ADBAQ+cWADBAM+2bADBANRyHADBANX
7BADBANbasgDBAJf1jwDBAK5E8wDBAK5MhgDBAK5ThwDBAC5m3YDBAK54SAwDAME
AcGoLgMEAcGoMAMEAsGwTAMEAsHISAMEAtWL0AMEAtmsGDANBAIAAjAHAwUDKgS6
wDANBgkqhkiG9w0BAQsFAAOCAQEAEeS0xhdoCkcUjcgzGqKJYB96BkuPRo/nfEif
we8f44r0jK/RnQ3GCywypWKbJvTLDsb9QGdYxyyDe41pP8Wo35HgwoxXkDpZmGZP
xVWUMgP4EKouu8w6bs6rpHi1FFNerT+mqACCKe2LdmtbeAT9uUFXR1FnM9A3UbaY
jcacCG5XnWDCKtfxCNSh7DujWyoJBFY359bbmJcLn/q4hz4IKniq5PsjqcGFvx4D
Ci4ruc5BmDY6Yq5hnEH05XKSYPT+IeEbEhRz/R1IKVISicSpJqdR/fncx5YGgBy6
Kth85S0SCqP1OypH4wwO44NG86A1FB1CpHDn3/EMCSRdJAk85g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org