Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/UNznGqErZWPngsXmYzWdbTTmo_Q.roa
File: UNznGqErZWPngsXmYzWdbTTmo_Q.roa (raw, json)
Hash identifier: Xm+flolgKRSdp56iezK41OpnK8LAv4cDpo+rklyE6C4=
Subject key identifier: 50:DC:E7:1A:A1:2B:65:63:E7:82:C5:E6:63:35:9D:6D:34:E6:A3:F4
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 018DE62DF81DD141EFC48FD234738C6237C6
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/UNznGqErZWPngsXmYzWdbTTmo_Q.roa
Signing time: Mon 26 Feb 2024 16:09:48 +0000
ROA not before: Mon 26 Feb 2024 16:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 20
5.52.0.0/16 maxlen: 20
5.106.0.0/16 maxlen: 21
5.106.0.0/17 maxlen: 24
5.106.4.0/24 maxlen: 24
5.106.5.0/24 maxlen: 24
5.106.6.0/23 maxlen: 23
5.106.6.0/24 maxlen: 24
5.106.10.0/24 maxlen: 24
5.106.11.0/24 maxlen: 24
5.106.20.0/24 maxlen: 24
5.106.128.0/17 maxlen: 20
5.201.192.0/18 maxlen: 20
5.208.0.0/16 maxlen: 20
5.209.0.0/16 maxlen: 20
5.210.0.0/16 maxlen: 20
5.211.0.0/16 maxlen: 20
5.212.0.0/16 maxlen: 20
5.213.0.0/16 maxlen: 20
5.214.0.0/16 maxlen: 20
5.215.0.0/16 maxlen: 20
5.216.0.0/16 maxlen: 20
5.217.0.0/16 maxlen: 20
5.218.0.0/16 maxlen: 20
5.250.0.0/17 maxlen: 20
31.2.128.0/17 maxlen: 20
37.63.128.0/17 maxlen: 20
37.63.128.0/18 maxlen: 20
37.63.192.0/18 maxlen: 20
37.98.0.0/18 maxlen: 20
37.129.0.0/16 maxlen: 20
37.129.0.0/17 maxlen: 20
37.129.128.0/17 maxlen: 20
46.51.0.0/17 maxlen: 20
46.51.0.0/19 maxlen: 20
46.51.16.0/22 maxlen: 22
46.51.20.0/22 maxlen: 22
46.51.24.0/22 maxlen: 22
46.51.28.0/22 maxlen: 22
46.51.32.0/22 maxlen: 22
46.51.33.0/24 maxlen: 24
46.51.34.0/24 maxlen: 24
46.51.36.0/22 maxlen: 22
46.51.36.0/24 maxlen: 24
46.51.37.0/24 maxlen: 24
46.51.38.0/24 maxlen: 24
46.51.40.0/22 maxlen: 22
46.51.44.0/22 maxlen: 22
46.51.64.0/18 maxlen: 20
46.51.80.0/22 maxlen: 22
46.51.84.0/22 maxlen: 22
46.51.88.0/22 maxlen: 22
46.51.92.0/22 maxlen: 22
46.51.98.0/24 maxlen: 24
46.51.104.0/24 maxlen: 24
46.51.105.0/24 maxlen: 24
46.51.108.0/23 maxlen: 23
46.51.110.0/23 maxlen: 23
46.51.112.0/22 maxlen: 22
46.51.116.0/22 maxlen: 22
46.51.120.0/22 maxlen: 22
46.51.124.0/22 maxlen: 22
46.164.64.0/18 maxlen: 20
69.194.64.0/18 maxlen: 20
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 20
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 20
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 20
83.122.0.0/16 maxlen: 20
83.123.0.0/16 maxlen: 20
83.123.129.0/24 maxlen: 24
85.239.192.0/19 maxlen: 20
86.55.0.0/16 maxlen: 20
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 20
86.107.209.0/24 maxlen: 24
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 20
89.198.0.0/15 maxlen: 20
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 20
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 20
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 22
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 20
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 20
113.203.0.0/17 maxlen: 20
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 20
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 20
164.138.128.0/18 maxlen: 20
164.138.128.0/19 maxlen: 20
172.80.128.0/18 maxlen: 20
172.80.128.0/19 maxlen: 20
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 20
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 22
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 20
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 20
188.210.192.0/20 maxlen: 20
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 20
204.18.0.0/16 maxlen: 20
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 Feb 2024 14:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:2d:f8:1d:d1:41:ef:c4:8f:d2:34:73:8c:62:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 26 16:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50dce71aa12b6563e782c5e663359d6d34e6a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e6:c6:7b:31:62:d0:6d:c8:5e:cb:c8:ce:21:
d6:28:24:bd:b5:41:07:b0:2f:e3:4c:e9:19:e5:2e:
26:ea:1f:b2:77:24:b9:05:4f:be:ad:b8:f4:5a:b5:
a9:a8:45:25:2e:1b:83:68:0d:81:ee:77:65:4f:c9:
54:f5:3a:cd:da:a1:e2:af:e6:49:66:17:5f:fe:e5:
1b:83:d9:14:01:da:7b:ad:e2:40:78:a5:b2:23:78:
a9:94:fc:b9:22:8a:f4:3e:09:dd:8d:03:50:a0:f9:
c3:e1:ce:ed:f3:93:79:0f:e0:5c:be:48:d1:8c:2d:
cc:aa:77:6b:e8:ee:1b:f2:ef:92:73:4c:bd:63:ed:
7d:b1:dc:c0:06:8e:c3:1c:fc:6e:f4:15:03:04:03:
f7:2d:74:14:aa:a7:f3:bc:c2:f8:10:08:f7:6f:e5:
e8:44:7c:f7:d1:42:0f:a7:e7:8a:ae:2b:d9:de:98:
7f:9a:07:8d:11:87:0b:f0:9d:11:98:9a:4e:8a:14:
d1:8a:7b:45:2f:f6:67:70:ad:68:79:f2:4d:c7:69:
1c:9c:22:70:65:82:2a:a0:96:be:2c:8c:92:01:a3:
1e:89:14:c3:99:48:fa:bb:11:a3:98:79:14:0c:a0:
e6:38:07:69:a0:91:a7:d6:9d:12:90:75:5c:0d:ee:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:E7:1A:A1:2B:65:63:E7:82:C5:E6:63:35:9D:6D:34:E6:A3:F4
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/UNznGqErZWPngsXmYzWdbTTmo_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:100::/46
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
14:e5:cf:75:0d:e8:42:2d:3d:bd:5e:9b:c3:3b:9e:b2:da:4b:
82:bc:c3:12:1d:38:fc:72:82:88:70:21:0c:83:f5:63:27:ba:
80:79:b4:8b:3f:c7:6e:38:03:3a:8e:0e:c6:51:7a:2b:f4:1c:
36:01:0b:67:f8:1b:17:37:6c:f0:15:a5:d1:11:69:59:9c:b5:
be:69:4d:de:6c:1e:8a:05:1b:93:39:c2:c0:64:db:72:44:7c:
1e:2a:da:54:3d:54:85:f5:2a:74:d5:b3:63:82:8c:cb:5b:f3:
7a:f3:66:b0:14:3c:23:af:53:99:9b:7f:f4:e5:95:a8:e9:9c:
28:97:b9:47:40:f0:55:0d:22:0a:b5:71:1f:66:85:e2:db:5d:
dd:2e:05:9f:d8:ac:bf:09:c2:13:4f:61:35:1e:d6:fd:2e:9a:
50:9c:88:8c:7e:bf:ea:bd:d9:0a:85:7b:e8:8c:a1:f3:9f:09:
8f:0d:d3:cc:f3:d5:5a:86:cf:0d:7d:a5:61:64:3c:d6:65:2b:
ae:27:d1:aa:a5:23:17:14:b6:4b:ae:26:25:1a:eb:fc:39:b6:
42:aa:7a:72:35:1a:08:91:64:c3:45:32:cc:f9:b9:5a:98:e1:
9f:2f:bb:bc:16:8c:2b:51:73:fd:d0:08:d6:74:96:58:1b:38:
44:92:04:72
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISAY3mLfgd0UHvxI/SNHOMYjfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjQwMjI2MTYwOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGRjZTcxYWExMmI2NTYzZTc4MmM1ZTY2MzM1OWQ2ZDM0ZTZhM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgObGezFi0G3IXsvIziHWKCS9tUEH
sC/jTOkZ5S4m6h+ydyS5BU++rbj0WrWpqEUlLhuDaA2B7ndlT8lU9TrN2qHir+ZJ
Zhdf/uUbg9kUAdp7reJAeKWyI3iplPy5Ior0PgndjQNQoPnD4c7t85N5D+BcvkjR
jC3Mqndr6O4b8u+Sc0y9Y+19sdzABo7DHPxu9BUDBAP3LXQUqqfzvML4EAj3b+Xo
RHz30UIPp+eKrivZ3ph/mgeNEYcL8J0RmJpOihTRintFL/ZncK1oefJNx2kcnCJw
ZYIqoJa+LIySAaMeiRTDmUj6uxGjmHkUDKDmOAdpoJGn1p0SkHVcDe6VcQIDAQAB
o4IDyjCCA8YwHQYDVR0OBBYEFFDc5xqhK2Vj54LF5mM1nW005qP0MB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvVU56bkdxRXJaV1BuZ3NYbVl6V2RiVFRtb19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3gYIKwYBBQUHAQcBAf8EggHNMIIByTCCASMEAgABMIIB
GwMEBwUWAAMDAAU0AwMABWoDBAYFycAwCgMDBAXQAwMABdoDBAcF+gADBAcfAoAD
BAclP4ADBAYlYgADAwAlgQMEBy4zAAMEBi6kQAMEBkXCQAMEBFDyAAMEBlK0wAMD
AlN4AwQFVe/AAwMAVjcDBARWawADBARWa9ADBARZLTADAwBZxAMDAVnGAwQHW4WA
AwMAW/sDAwBdbgMEBF5l8AMEB19AAAMEBW1soAMEBW3LgAMEBm3hgAMEB3HLAAME
BoL/wAMEB546AAMEBqSKgAMEB6xQgAMEBbBBwAMEBrKDwAMEArkFnAMEAbkWHAME
Bbx6YAMEBLzRwAMEBLzSQAMEBLzSwAMEBLzUMAMEB7zlAAMDAMAPAwMAzBIwgZ8E
AgACMIGYMBADBQYqAkVAAwcFKgJFQADAAwcCKgJFQAEAMBEDBgQqAkVAUAMHBSoC
RUBQgAMJACoCRUBvwAAAMBEDBgQqAkVAcAMHBioCRUBwgAMGACoCRUCQAwcHKgJF
QMAAMBEDBgUqAkVA4AMHACoCRUDggAMJACoCRUQAEAIAMBIDBwUqAkVEAOADBwIq
AkVEAOgDBwIqAkVFAOAwDQYJKoZIhvcNAQELBQADggEBABTlz3UN6EItPb1em8M7
nrLaS4K8wxIdOPxygohwIQyD9WMnuoB5tIs/x244AzqODsZReiv0HDYBC2f4Gxc3
bPAVpdERaVmctb5pTd5sHooFG5M5wsBk23JEfB4q2lQ9VIX1KnTVs2OCjMtb83rz
ZrAUPCOvU5mbf/TllajpnCiXuUdA8FUNIgq1cR9mheLbXd0uBZ/YrL8JwhNPYTUe
1v0umlCciIx+v+q92QqFe+iMofOfCY8N08zz1VqGzw19pWFkPNZlK64n0aqlIxcU
tkuuJiUa6/w5tkKqenI1GgiRZMNFMsz5uVqY4Z8vu7wWjCtRc/3QCNZ0llgbOESS
BHI=
-----END CERTIFICATE-----
Generated at Wed Feb 28 17:20:17 2024 by rpki-client on console-ams.rpki-client.org