Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DHXimt4avy8BuhEjJDNcOYxQjFw.roa
File: DHXimt4avy8BuhEjJDNcOYxQjFw.roa (raw, json)
Hash identifier: JC6/Jxd3jlXSCSrshIvF56R3LNi3EHJaFb9nLYoQ3oI=
Subject key identifier: 0C:75:E2:9A:DE:1A:BF:2F:01:BA:11:23:24:33:5C:39:8C:50:8C:5C
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0192F16639F972E0A77296F07708C62FBA84
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DHXimt4avy8BuhEjJDNcOYxQjFw.roa
Signing time: Sun 03 Nov 2024 09:41:01 +0000
ROA not before: Sun 03 Nov 2024 09:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 24
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:f::/49 maxlen: 49
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:f8::/45 maxlen: 49
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Dec 2024 08:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:66:39:f9:72:e0:a7:72:96:f0:77:08:c6:2f:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Nov 3 09:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c75e29ade1abf2f01ba112324335c398c508c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:bf:41:08:a7:93:8c:aa:71:cd:86:86:7e:
99:29:74:98:8c:4d:22:84:cc:d9:ab:41:28:5d:99:
fe:46:65:48:d7:6e:7f:a0:78:14:49:ce:9b:59:b3:
8e:2d:f2:73:7e:a1:6d:96:bf:31:84:1f:32:f7:1d:
53:96:05:45:9d:5f:36:9e:0d:49:30:5c:01:b3:85:
1c:66:1e:8b:ed:8b:a5:93:e2:76:a6:3f:e1:5d:96:
a7:7f:ab:c0:e7:24:90:1d:ae:61:da:03:c1:5d:6d:
ea:a8:40:68:20:b3:e3:28:26:7d:ed:2e:af:6f:2a:
da:1a:b1:84:7c:ee:27:27:c3:93:79:df:dd:c5:37:
9b:c8:43:58:1f:bc:32:7a:00:74:f6:7d:19:84:27:
1b:5d:4a:97:7b:9a:71:1d:58:bb:73:92:18:6a:09:
18:7f:a9:70:79:8f:73:2b:66:75:8a:16:f5:53:cb:
d0:c5:05:b0:d4:1b:14:49:68:ae:64:b2:57:76:f3:
fa:73:9b:b1:ce:72:c7:35:d3:1d:30:5a:fb:83:e3:
ac:96:b1:55:51:b6:18:b3:f3:ab:28:6a:27:19:22:
05:5d:83:bb:b7:68:b5:37:b0:f0:e8:3f:84:19:4d:
97:61:21:d4:12:b2:34:af:b7:93:7f:d2:0e:2e:97:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:E2:9A:DE:1A:BF:2F:01:BA:11:23:24:33:5C:39:8C:50:8C:5C
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DHXimt4avy8BuhEjJDNcOYxQjFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:f8::-2a02:4540:103:ffff:ffff:ffff:ffff:ffff
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
3d:e1:7c:f1:ef:c9:31:5c:e8:87:a9:65:b9:43:da:97:4a:59:
ba:5f:a8:c3:0d:eb:d1:b8:8d:c9:38:4b:a5:26:ab:a4:d2:04:
e0:b1:cc:4b:78:17:1e:bc:24:23:d4:88:81:0e:0a:46:0e:e6:
70:af:31:26:35:03:b6:4a:a1:83:7f:50:1b:cd:74:33:5e:03:
be:3d:06:d3:38:00:61:13:61:4b:f7:4b:b7:84:ad:3b:26:64:
e3:5f:18:86:80:84:99:39:77:64:fa:07:5a:03:ae:78:0c:b5:
31:fd:2d:96:38:e2:eb:48:ba:e2:94:b1:13:65:bf:aa:34:f1:
32:20:e6:ba:34:5a:ea:f1:35:9a:8d:e4:21:d6:ea:33:a6:6b:
4a:a2:62:e8:e7:8d:8b:cd:4c:36:ab:56:a9:16:51:b9:11:40:
b8:1d:a2:4c:cc:8a:f6:34:00:be:03:48:44:ce:15:51:58:4c:
90:67:f6:59:fe:6f:50:1e:9a:2c:9a:3c:1d:9a:db:02:c8:01:
c0:84:cf:24:08:43:5a:26:49:5c:e9:3c:ea:a4:b3:03:72:4d:
ae:47:3b:4a:58:1c:44:7f:65:f5:bc:89:20:d6:85:13:bb:6d:
54:5a:89:72:9d:6e:36:3f:dc:23:de:f0:74:03:33:f4:d1:50:
5b:5a:72:4b
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgISAZLxZjn5cuCncpbwdwjGL7qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjQxMTAzMDk0MTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzc1ZTI5YWRlMWFiZjJmMDFiYTExMjMyNDMzNWMzOThjNTA4YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zy/QQink4yqcc2Ghn6ZKXSYjE0i
hMzZq0EoXZn+RmVI125/oHgUSc6bWbOOLfJzfqFtlr8xhB8y9x1TlgVFnV82ng1J
MFwBs4UcZh6L7Yulk+J2pj/hXZanf6vA5ySQHa5h2gPBXW3qqEBoILPjKCZ97S6v
byraGrGEfO4nJ8OTed/dxTebyENYH7wyegB09n0ZhCcbXUqXe5pxHVi7c5IYagkY
f6lweY9zK2Z1ihb1U8vQxQWw1BsUSWiuZLJXdvP6c5uxznLHNdMdMFr7g+OslrFV
UbYYs/OrKGonGSIFXYO7t2i1N7Dw6D+EGU2XYSHUErI0r7eTf9IOLpc+iQIDAQAB
o4ID4zCCA98wHQYDVR0OBBYEFAx14preGr8vAboRIyQzXDmMUIxcMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvREhYaW10NGF2eThCdWhFakpETmNPWXhRakZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB9wYIKwYBBQUHAQcBAf8EggHmMIIB4jCCATEEAgABMIIB
KQMEBwUWAAMDAAU0AwMABWoDBAYFycAwCgMDBAXQAwMABdoDBAcF+gADBAcfAoAD
BAclP4ADBAYlYgADAwAlgQMEBy4zAAMEBi6kQDAMAwQHPmaAAwQCPmaIAwQGRcJA
AwQEUPIAAwQGUrTAAwMCU3gDBAVV78ADAwBWNwMEBFZrAAMEBFZr0AMEBFktMAMD
AFnEAwMBWcYDBAdbhYADAwBb+wMDAF1uAwQEXmXwAwQHX0AAAwQFbWygAwQFbcuA
AwQGbeGAAwQHccsAAwQGgv/AAwQHnjoAAwQGpIqAAwQHrFCAAwQFsEHAAwQGsoPA
AwQCuQWcAwQBuRYcAwQFvHpgAwQEvNHAAwQEvNJAAwQEvNLAAwQEvNQwAwQHvOUA
AwMAwA8DAwDMEjCBqgQCAAIwgaMwEAMFBioCRUADBwUqAkVAAMAwEgMHAyoCRUAA
+AMHAioCRUABADARAwYEKgJFQFADBwUqAkVAUIADCQAqAkVAb8AAADARAwYEKgJF
QHADBwYqAkVAcIADBgAqAkVAkAMHByoCRUDAADARAwYFKgJFQOADBwAqAkVA4IAD
CQAqAkVEABACADASAwcFKgJFRADgAwcCKgJFRADoAwcCKgJFRQDgMA0GCSqGSIb3
DQEBCwUAA4IBAQA94Xzx78kxXOiHqWW5Q9qXSlm6X6jDDevRuI3JOEulJquk0gTg
scxLeBcevCQj1IiBDgpGDuZwrzEmNQO2SqGDf1AbzXQzXgO+PQbTOABhE2FL90u3
hK07JmTjXxiGgISZOXdk+gdaA654DLUx/S2WOOLrSLrilLETZb+qNPEyIOa6NFrq
8TWajeQh1uozpmtKomLo542LzUw2q1apFlG5EUC4HaJMzIr2NAC+A0hEzhVRWEyQ
Z/ZZ/m9QHposmjwdmtsCyAHAhM8kCENaJklc6TzqpLMDck2uRztKWBxEf2X1vIkg
1oUTu21UWolynW42P9wj3vB0AzP00VBbWnJL
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:20 2025 by rpki-client