Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/IXxFiWsv4d2yzgba5KWzCfs5wmg.roa
File: IXxFiWsv4d2yzgba5KWzCfs5wmg.roa (raw, json)
Hash identifier: uare5VxfGMN4QbDWCTqprCWk0iVYO+0fJXYCm2Via9A=
Subject key identifier: 21:7C:45:89:6B:2F:E1:DD:B2:CE:06:DA:E4:A5:B3:09:FB:39:C2:68
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0192CDAA83039AA7E07387A98A842BFB6D98
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/IXxFiWsv4d2yzgba5KWzCfs5wmg.roa
Signing time: Sun 27 Oct 2024 11:09:16 +0000
ROA not before: Sun 27 Oct 2024 11:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/20 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 20
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 20
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 20
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 20
83.122.0.0/16 maxlen: 20
83.123.0.0/16 maxlen: 20
83.123.129.0/24 maxlen: 24
85.239.192.0/19 maxlen: 20
86.55.0.0/16 maxlen: 20
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 20
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 20
89.198.0.0/15 maxlen: 20
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 20
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 20
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 22
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 20
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 20
113.203.0.0/17 maxlen: 20
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 20
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 20
164.138.128.0/18 maxlen: 20
164.138.128.0/24 maxlen: 24
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 20
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 20
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 22
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 20
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 20
188.210.192.0/20 maxlen: 20
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 20
204.18.0.0/16 maxlen: 20
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 27 Oct 2024 11:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:aa:83:03:9a:a7:e0:73:87:a9:8a:84:2b:fb:6d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Oct 27 11:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=217c45896b2fe1ddb2ce06dae4a5b309fb39c268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:4f:8b:1b:1b:a3:ea:4a:dc:22:e6:a0:bb:
77:18:6c:ca:59:3d:97:de:1a:c4:87:f9:3a:45:f3:
bf:9a:fc:3a:5e:4a:41:ea:73:1f:f5:6f:87:ba:bd:
66:88:54:ae:78:76:d4:de:63:e6:40:04:b5:46:71:
65:89:46:75:9f:9e:0f:41:37:ab:ea:26:e5:e4:6b:
6b:b0:74:c4:a2:f6:74:96:95:46:34:a4:b2:9d:56:
d6:49:c4:ca:12:25:4e:ec:eb:1d:db:51:25:6b:03:
95:46:94:65:90:88:82:b4:4d:cc:35:84:30:50:58:
f2:f3:7a:8a:d9:eb:fd:0d:cf:11:8b:d4:f8:52:df:
2c:ca:7e:85:32:22:e1:51:52:af:f4:21:99:30:14:
99:db:97:56:b0:1e:41:a9:33:ef:4c:27:8a:00:08:
a9:aa:4e:cf:df:bf:c6:0d:50:29:57:7d:99:ee:c6:
c9:ec:30:bb:00:95:69:9e:0b:92:08:ac:b3:c8:51:
35:55:58:e9:b8:05:80:d2:de:11:fa:b8:b9:f1:44:
fe:68:69:7e:c4:a0:ce:78:12:14:15:2d:59:b9:3e:
ff:4c:0b:59:af:7d:95:64:9b:6b:23:ae:79:e3:38:
a3:79:6b:dd:bc:be:20:a4:f0:60:e9:cc:a8:2d:30:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:45:89:6B:2F:E1:DD:B2:CE:06:DA:E4:A5:B3:09:FB:39:C2:68
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/IXxFiWsv4d2yzgba5KWzCfs5wmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0/20
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:100::/46
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
17:d5:46:69:4e:80:b8:ca:7e:50:e8:4f:ec:73:54:70:13:f9:
d5:69:c3:6d:9b:7e:65:3b:19:f4:df:de:90:fd:1c:8d:bb:16:
1a:32:e1:41:cf:69:d8:cf:cb:74:dd:09:5a:fb:0b:34:cf:f2:
a6:e8:44:39:20:da:c9:94:07:bb:5a:d6:b5:3d:d8:34:35:22:
bc:b4:74:68:43:a6:4b:00:47:73:ae:3a:62:e6:88:19:5b:ca:
f7:91:ba:2e:59:76:9c:03:a9:88:90:96:7b:16:28:dc:74:3b:
49:41:39:5c:ec:4a:e0:29:18:69:53:6f:04:4f:2c:31:bd:32:
a7:5e:14:95:d6:b8:a3:2a:16:8c:8d:f0:ea:7c:67:1e:44:b5:
5f:e1:87:af:c0:1d:45:7c:6a:b9:98:9c:0f:2f:c1:f2:fb:46:
09:42:0b:2b:74:ad:e5:ef:66:0f:6b:b4:a0:2a:8c:4a:06:00:
98:39:a4:e0:13:6a:3b:21:ee:68:00:ae:d5:ae:c3:48:9b:4a:
06:ab:43:de:35:f0:0e:dc:7e:46:a7:dc:41:f4:ea:bf:94:41:
b9:94:90:0a:c5:23:06:de:05:cb:f4:e7:2e:c9:b2:bd:e0:2c:
35:60:9e:a3:18:29:99:b1:a0:9a:b7:be:7c:83:57:14:78:bc:
6e:98:33:50
-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgISAZLNqoMDmqfgc4epioQr+22YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjQxMDI3MTEwOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTdjNDU4OTZiMmZlMWRkYjJjZTA2ZGFlNGE1YjMwOWZiMzljMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrtPixsbo+pK3CLmoLt3GGzKWT2X
3hrEh/k6RfO/mvw6XkpB6nMf9W+Hur1miFSueHbU3mPmQAS1RnFliUZ1n54PQTer
6ibl5GtrsHTEovZ0lpVGNKSynVbWScTKEiVO7Osd21ElawOVRpRlkIiCtE3MNYQw
UFjy83qK2ev9Dc8Ri9T4Ut8syn6FMiLhUVKv9CGZMBSZ25dWsB5BqTPvTCeKAAip
qk7P37/GDVApV32Z7sbJ7DC7AJVpnguSCKyzyFE1VVjpuAWA0t4R+ri58UT+aGl+
xKDOeBIUFS1ZuT7/TAtZr32VZJtrI6554zijeWvdvL4gpPBg6cyoLTDh8QIDAQAB
o4ID0DCCA8wwHQYDVR0OBBYEFCF8RYlrL+Hdss4G2uSlswn7OcJoMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvSVh4RmlXc3Y0ZDJ5emdiYTVLV3pDZnM1d21nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5AYIKwYBBQUHAQcBAf8EggHTMIIBzzCCASkEAgABMIIB
IQMEBwUWAAMDAAU0AwMABWoDBAYFycAwCgMDBAXQAwMABdoDBAcF+gADBAcfAoAD
BAclP4ADBAYlYgADAwAlgQMEBy4zAAMEBi6kQAMEBD5mgAMEBkXCQAMEBFDyAAME
BlK0wAMDAlN4AwQFVe/AAwMAVjcDBARWawADBARWa9ADBARZLTADAwBZxAMDAVnG
AwQHW4WAAwMAW/sDAwBdbgMEBF5l8AMEB19AAAMEBW1soAMEBW3LgAMEBm3hgAME
B3HLAAMEBoL/wAMEB546AAMEBqSKgAMEB6xQgAMEBbBBwAMEBrKDwAMEArkFnAME
AbkWHAMEBbx6YAMEBLzRwAMEBLzSQAMEBLzSwAMEBLzUMAMEB7zlAAMDAMAPAwMA
zBIwgZ8EAgACMIGYMBADBQYqAkVAAwcFKgJFQADAAwcCKgJFQAEAMBEDBgQqAkVA
UAMHBSoCRUBQgAMJACoCRUBvwAAAMBEDBgQqAkVAcAMHBioCRUBwgAMGACoCRUCQ
AwcHKgJFQMAAMBEDBgUqAkVA4AMHACoCRUDggAMJACoCRUQAEAIAMBIDBwUqAkVE
AOADBwIqAkVEAOgDBwIqAkVFAOAwDQYJKoZIhvcNAQELBQADggEBABfVRmlOgLjK
flDoT+xzVHAT+dVpw22bfmU7GfTf3pD9HI27Fhoy4UHPadjPy3TdCVr7CzTP8qbo
RDkg2smUB7ta1rU92DQ1Iry0dGhDpksAR3OuOmLmiBlbyveRui5ZdpwDqYiQlnsW
KNx0O0lBOVzsSuApGGlTbwRPLDG9MqdeFJXWuKMqFoyN8Op8Zx5EtV/hh6/AHUV8
armYnA8vwfL7RglCCyt0reXvZg9rtKAqjEoGAJg5pOATajsh7mgArtWuw0ibSgar
Q9418A7cfkan3EH06r+UQbmUkArFIwbeBcv05y7Jsr3gLDVgnqMYKZmxoJq3vnyD
VxR4vG6YM1A=
-----END CERTIFICATE-----
Generated at Sun Oct 27 14:48:06 2024 by rpki-client on console-ams.rpki-client.org