Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DvOkJikuFDtQOQw1_ncIh_1bIys.roa
File: DvOkJikuFDtQOQw1_ncIh_1bIys.roa (raw, json)
Hash identifier: dlSZ65Gqp1wtBQZkVtMdgAmmTRJsYi3HeoeEK3pos8o=
Subject key identifier: 0E:F3:A4:26:29:2E:14:3B:50:39:0C:35:FE:77:08:87:FD:5B:23:2B
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 018DF015F95F53F611164E7AE1E39CAE1923
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DvOkJikuFDtQOQw1_ncIh_1bIys.roa
Signing time: Wed 28 Feb 2024 14:19:48 +0000
ROA not before: Wed 28 Feb 2024 14:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 20
5.52.0.0/16 maxlen: 20
5.106.0.0/16 maxlen: 21
5.106.0.0/17 maxlen: 24
5.106.4.0/24 maxlen: 24
5.106.5.0/24 maxlen: 24
5.106.6.0/23 maxlen: 23
5.106.6.0/24 maxlen: 24
5.106.10.0/24 maxlen: 24
5.106.11.0/24 maxlen: 24
5.106.20.0/24 maxlen: 24
5.106.128.0/17 maxlen: 20
5.201.192.0/18 maxlen: 20
5.208.0.0/16 maxlen: 20
5.209.0.0/16 maxlen: 20
5.210.0.0/16 maxlen: 20
5.211.0.0/16 maxlen: 20
5.212.0.0/16 maxlen: 20
5.213.0.0/16 maxlen: 20
5.214.0.0/16 maxlen: 20
5.215.0.0/16 maxlen: 20
5.216.0.0/16 maxlen: 20
5.217.0.0/16 maxlen: 20
5.218.0.0/16 maxlen: 20
5.250.0.0/17 maxlen: 20
31.2.128.0/17 maxlen: 20
37.63.128.0/17 maxlen: 20
37.63.128.0/18 maxlen: 20
37.63.192.0/18 maxlen: 20
37.98.0.0/18 maxlen: 20
37.129.0.0/16 maxlen: 20
37.129.0.0/17 maxlen: 20
37.129.128.0/17 maxlen: 20
46.51.0.0/17 maxlen: 20
46.51.0.0/19 maxlen: 20
46.51.16.0/22 maxlen: 22
46.51.20.0/22 maxlen: 22
46.51.24.0/22 maxlen: 22
46.51.28.0/22 maxlen: 22
46.51.32.0/22 maxlen: 22
46.51.33.0/24 maxlen: 24
46.51.34.0/24 maxlen: 24
46.51.36.0/22 maxlen: 22
46.51.36.0/24 maxlen: 24
46.51.37.0/24 maxlen: 24
46.51.38.0/24 maxlen: 24
46.51.40.0/22 maxlen: 22
46.51.44.0/22 maxlen: 22
46.51.64.0/18 maxlen: 20
46.51.80.0/22 maxlen: 22
46.51.84.0/22 maxlen: 22
46.51.88.0/22 maxlen: 22
46.51.92.0/22 maxlen: 22
46.51.98.0/24 maxlen: 24
46.51.104.0/24 maxlen: 24
46.51.105.0/24 maxlen: 24
46.51.108.0/23 maxlen: 23
46.51.110.0/23 maxlen: 23
46.51.112.0/22 maxlen: 22
46.51.116.0/22 maxlen: 22
46.51.120.0/22 maxlen: 22
46.51.124.0/22 maxlen: 22
46.164.64.0/18 maxlen: 20
69.194.64.0/18 maxlen: 20
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 20
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 20
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 20
83.122.0.0/16 maxlen: 20
83.123.0.0/16 maxlen: 20
83.123.129.0/24 maxlen: 24
85.239.192.0/19 maxlen: 20
86.55.0.0/16 maxlen: 20
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 20
86.107.209.0/24 maxlen: 24
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 20
89.198.0.0/15 maxlen: 20
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 20
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 20
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 22
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 20
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 20
113.203.0.0/17 maxlen: 20
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 20
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 20
164.138.128.0/18 maxlen: 20
164.138.128.0/19 maxlen: 20
172.80.128.0/18 maxlen: 20
172.80.128.0/19 maxlen: 20
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 20
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 22
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 20
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 20
188.210.192.0/20 maxlen: 20
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 20
204.18.0.0/16 maxlen: 20
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 18 May 2024 08:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:15:f9:5f:53:f6:11:16:4e:7a:e1:e3:9c:ae:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 28 14:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ef3a426292e143b50390c35fe770887fd5b232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:71:6d:b6:92:1b:61:3c:7d:40:a7:c3:57:
c1:90:f5:39:e0:64:84:9f:b7:f9:5f:27:f6:ad:a9:
24:c7:4a:78:70:d5:d0:e9:59:8e:16:28:69:4b:44:
bf:5e:26:e7:5b:16:1c:d2:ec:5b:49:f3:3a:61:3a:
64:19:f8:87:cf:d1:4a:fe:6c:f1:47:85:d0:ba:0f:
76:f3:1a:0b:fc:c6:68:49:1d:a3:de:30:e4:1c:8e:
a9:80:b1:a6:0b:04:de:b0:68:50:01:b8:e5:61:93:
a7:99:a9:a5:7a:e5:ec:73:25:1d:91:d3:97:27:a7:
65:a6:53:69:7e:2b:9c:a4:80:90:6f:eb:ec:24:39:
2d:11:61:44:75:fc:ec:17:ff:9b:15:91:66:35:5d:
09:01:b1:38:ca:81:fd:42:10:c4:cc:55:fe:eb:bd:
17:0a:52:73:b7:57:e2:52:3d:83:98:93:1a:e0:f4:
e9:0c:58:9a:fd:15:df:6c:c5:e1:33:59:dd:74:ec:
17:d2:b3:0b:0f:b9:e1:fd:76:ef:e3:5c:d3:d3:ed:
f3:5b:8d:2a:25:2b:8f:80:9b:68:01:b2:83:60:4a:
e9:9c:d6:51:a1:55:9c:30:24:cf:a8:16:3e:84:a6:
5f:6c:88:81:a4:32:54:20:cc:d1:70:0a:6e:dc:c2:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:A4:26:29:2E:14:3B:50:39:0C:35:FE:77:08:87:FD:5B:23:2B
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/DvOkJikuFDtQOQw1_ncIh_1bIys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:100::/46
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
51:e7:f0:3a:05:ec:33:72:04:a8:02:14:88:68:51:2d:d9:09:
5b:b8:03:c5:c2:73:c4:38:1a:c7:0f:f3:2c:6c:3b:f9:16:d0:
d2:a9:b0:de:d7:27:78:f2:3d:4f:64:24:1d:65:1a:89:b8:95:
8f:eb:23:83:90:2e:7f:44:51:c1:06:48:39:6a:f3:dc:c5:2a:
b1:37:1d:fc:dc:38:ca:e4:03:dc:b4:26:b7:da:0c:bb:55:a0:
03:3a:87:d1:96:65:4d:86:6c:b2:dd:f8:c7:c0:95:57:8f:b4:
e0:dc:95:c5:90:e3:aa:17:04:cf:47:d4:fd:7a:8c:00:4f:01:
65:f1:4f:91:13:53:47:c5:43:73:be:9d:21:07:22:92:b6:c9:
72:07:9d:23:d9:13:91:8d:4a:fd:a7:b1:9d:6a:8d:f8:a0:80:
28:4f:21:c2:17:01:a6:6d:49:f9:07:38:d4:a2:51:e8:2e:cb:
7a:16:65:af:2f:a0:b6:60:1f:ef:e4:77:1f:ce:7f:41:4b:53:
cb:fe:bb:7e:a8:88:89:e1:09:cf:d8:37:14:be:0a:c0:71:1c:
82:1c:e9:9c:71:a9:8d:d6:cc:ae:46:9e:84:04:76:7c:10:10:
f2:e9:ad:1d:89:2b:e5:eb:18:3a:cc:52:65:65:d9:d4:d6:8a:
b9:e6:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:09:08 2024 by rpki-client on console-ams.rpki-client.org