Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZZnHtZ4iJ21WMJ4Z3lqTUw67pM.roa
File: XZZnHtZ4iJ21WMJ4Z3lqTUw67pM.roa (raw, json)
Hash identifier: LCicvb7IFRAuXpcfU+A9hlk827MNgUwwfLvOJKiZJBg=
Subject key identifier: 5D:96:67:1E:D6:78:88:9D:B5:58:C2:78:67:79:6A:4D:4C:3A:EE:93
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0192CDD3B7778746CB57AE7C0B8363B7EF13
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZZnHtZ4iJ21WMJ4Z3lqTUw67pM.roa
Signing time: Sun 27 Oct 2024 11:54:16 +0000
ROA not before: Sun 27 Oct 2024 11:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 24
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 03 Nov 2024 08:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:d3:b7:77:87:46:cb:57:ae:7c:0b:83:63:b7:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Oct 27 11:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d96671ed678889db558c27867796a4d4c3aee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:c8:cc:be:5e:59:3f:1a:5d:db:7e:ad:75:
7a:d0:57:dd:03:65:5f:d2:27:bb:bf:86:70:db:bf:
5d:d0:c1:1e:ac:95:96:4e:57:37:e5:55:29:07:c1:
e0:31:53:74:f3:64:87:f3:f3:73:6d:54:02:31:28:
4c:62:92:93:8c:59:12:7e:7b:e9:93:37:92:8d:9b:
b0:af:ed:8c:cd:2f:9f:3b:63:36:09:d3:2c:5f:8a:
b8:71:70:f3:89:db:c1:c5:e0:d8:c9:c6:da:f1:3d:
d1:9e:f2:55:31:7c:51:96:d2:93:90:00:86:99:7f:
12:63:20:17:12:41:54:c0:44:6a:59:b3:33:83:b1:
50:ff:06:be:0e:9b:38:f1:e3:78:63:d6:5b:76:72:
57:38:43:be:85:e3:d4:55:8a:f4:5b:6a:a6:75:21:
6c:c7:37:0a:aa:95:29:a8:57:53:ce:ad:cf:07:a5:
e6:a1:72:0e:d8:d5:4d:f7:98:89:2b:ea:75:fd:c0:
d0:46:e1:38:c2:cd:12:c3:4e:60:9a:98:54:96:b1:
47:55:f0:32:c1:ca:2f:5b:02:c9:0e:3d:d5:65:a6:
40:4c:9a:8a:5e:6f:04:bf:ed:d6:98:3b:d9:6a:d7:
2c:73:13:92:d0:c8:91:cb:60:7b:08:11:6c:bc:9f:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:67:1E:D6:78:88:9D:B5:58:C2:78:67:79:6A:4D:4C:3A:EE:93
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZZnHtZ4iJ21WMJ4Z3lqTUw67pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:100::/46
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
4d:0c:58:4e:f1:e1:52:84:c5:6d:2d:39:ca:26:28:67:5d:4e:
79:4b:a7:b1:c7:87:11:f3:20:38:59:34:8d:57:1f:3e:71:80:
c2:73:a6:b3:fd:4c:f9:93:49:1c:8a:b4:36:0c:fd:13:ec:52:
1f:2e:1c:6b:95:78:19:33:08:b3:26:e1:fe:a2:37:9a:4f:8b:
a0:95:6a:e9:8b:e2:c3:92:72:6d:b2:1a:0f:35:2b:35:40:f4:
23:ec:93:31:87:03:9a:cb:ca:01:41:e0:35:85:2a:22:88:aa:
d6:88:04:45:8d:41:2b:49:1f:40:5a:6a:a9:65:09:90:4f:f8:
05:80:bd:61:ff:b6:ae:99:3c:18:02:a9:b8:2b:c9:5d:6f:ae:
4c:ba:ad:62:1e:14:cd:dd:45:f8:31:22:ce:89:89:5a:84:7f:
bc:5f:62:11:b2:4c:e0:44:d6:80:d3:96:fb:19:b5:68:7b:63:
40:04:8e:b6:b9:81:53:7c:c7:93:e4:89:20:20:84:6f:25:9e:
69:c8:42:6a:00:45:03:4c:d7:37:63:30:43:5c:e5:c2:6d:53:
d1:4f:44:81:dd:21:94:86:a3:0c:f6:72:f9:fd:35:be:09:e3:
eb:77:85:9e:eb:6c:fd:50:c3:a0:6c:e3:ff:e7:d3:a7:c6:5e:
95:42:4a:f4
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 3 11:11:19 2024 by rpki-client on console-ams.rpki-client.org