Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tZ_PBk81rav5wpa_k_z1uQ_JWJc.roa
File: tZ_PBk81rav5wpa_k_z1uQ_JWJc.roa (raw, json)
Hash identifier: OTIzPpU+cgdjsbMqym+S/QQnGbsFtb5IkbqZNT8EWHs=
Subject key identifier: B5:9F:CF:06:4F:35:AD:AB:F9:C2:96:BF:93:FC:F5:B9:0F:C9:58:97
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE16228581A047631D59B93143684
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tZ_PBk81rav5wpa_k_z1uQ_JWJc.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
109.188.112.0/23 maxlen: 23
193.201.228.0/22 maxlen: 22
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
109.188.64.0/19 maxlen: 19
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
31.173.24.0/21 maxlen: 21
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
178.178.192.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 28 Feb 2024 11:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e1:62:28:58:1a:04:76:31:d5:9b:93:14:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b59fcf064f35adabf9c296bf93fcf5b90fc95897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:f0:74:9f:b7:04:7a:82:31:21:6f:32:8e:
d9:64:7d:f8:f4:c0:eb:40:59:51:30:71:42:a8:57:
d5:ca:e0:1b:ea:b3:cb:c9:b5:fd:c8:8b:6b:b7:d8:
6d:36:76:99:3e:27:80:18:37:4a:b2:69:84:fe:f7:
5c:14:06:4c:21:e6:6b:04:a1:da:59:a4:df:49:80:
a9:f5:01:19:fd:06:53:01:93:12:46:97:95:e9:75:
a4:fc:a8:c4:5f:ac:d4:5f:66:09:a2:85:8c:56:82:
f2:bb:09:25:fb:92:dc:5e:df:7d:79:7e:4c:e3:15:
ed:30:c9:ae:b5:d2:da:eb:03:2b:d0:23:0b:4b:95:
ab:34:4d:fb:56:1f:c9:3f:6d:55:96:8d:e4:0d:2c:
7b:c3:7c:14:24:e6:2d:6c:78:cd:86:f8:67:22:36:
cd:79:67:63:b7:9b:0f:7c:4a:b7:ea:c3:bb:eb:cb:
9c:3f:e1:27:0d:fc:fe:49:21:6c:29:12:8b:d5:06:
71:17:5b:9b:37:dd:11:2b:07:a1:8b:1e:43:c7:f3:
39:f2:d2:78:63:90:8d:f8:c7:a3:d7:87:79:ea:32:
df:93:9b:5b:60:be:db:0a:b5:84:54:56:83:31:c9:
ac:74:c6:17:0f:5a:34:fd:78:05:fa:33:b6:3d:99:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9F:CF:06:4F:35:AD:AB:F9:C2:96:BF:93:FC:F5:B9:0F:C9:58:97
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tZ_PBk81rav5wpa_k_z1uQ_JWJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
a1:f7:7a:03:e7:78:f8:ee:91:3f:4f:95:3b:01:c8:08:6c:b4:
36:fd:f1:82:1e:7a:ce:2c:ba:80:c5:6a:0a:f4:13:16:ea:50:
19:e4:8d:b7:f8:b2:74:ff:23:49:3a:ee:f6:3d:92:95:be:fe:
3d:0a:fc:f2:75:41:ec:6a:7c:cc:e5:c9:79:6f:9e:3a:28:49:
8e:fd:ef:37:77:ba:1d:ae:83:e9:2a:a7:1c:13:79:56:76:e9:
a8:69:df:bd:08:2d:b5:39:ea:df:ed:b9:a8:04:1a:ea:bf:8b:
ae:d6:64:ef:7e:3d:29:5f:f4:18:5a:7a:04:d6:82:69:1d:87:
be:55:0b:3c:bf:9f:ee:c5:30:ef:ab:df:b1:2a:9f:75:d2:7c:
18:7b:4f:a9:bf:1e:37:9a:0a:cf:8a:0c:9e:0a:58:5a:d9:e0:
bc:15:94:13:b4:28:d9:02:f1:10:71:0b:87:3f:6b:d2:bc:2d:
ca:6e:8b:7f:1f:7e:1d:37:87:b1:b5:13:2c:90:16:69:2e:80:
e4:44:75:ca:c6:dc:9e:97:e7:cc:47:95:d8:73:b4:4c:9c:6c:
17:d0:06:a3:91:db:82:a4:c5:45:88:93:7b:7f:ec:11:b4:30:
48:e1:26:47:7c:47:9c:16:af:12:97:10:44:74:0e:1f:4e:87:
df:c7:a8:90
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISAYzFbeFiKFgaBHYx1ZuTFDaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTlmY2YwNjRmMzVhZGFiZjljMjk2YmY5M2ZjZjViOTBmYzk1ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub7wdJ+3BHqCMSFvMo7ZZH349MDr
QFlRMHFCqFfVyuAb6rPLybX9yItrt9htNnaZPieAGDdKsmmE/vdcFAZMIeZrBKHa
WaTfSYCp9QEZ/QZTAZMSRpeV6XWk/KjEX6zUX2YJooWMVoLyuwkl+5LcXt99eX5M
4xXtMMmutdLa6wMr0CMLS5WrNE37Vh/JP21Vlo3kDSx7w3wUJOYtbHjNhvhnIjbN
eWdjt5sPfEq36sO768ucP+EnDfz+SSFsKRKL1QZxF1ubN90RKwehix5Dx/M58tJ4
Y5CN+Mej14d56jLfk5tbYL7bCrWEVFaDMcmsdMYXD1o0/XgF+jO2PZk4LwIDAQAB
o4IDPjCCAzowHQYDVR0OBBYEFLWfzwZPNa2r+cKWv5P89bkPyViXMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvdFpfUEJrODFyYXY1d3BhX2tfejF1UV9KV0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCASEEAgABMIIB
GTALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAIu5YADBAU+QAADBANOGXAwDAME
AlPe1AMEBVPewAMEAFPl0wMEAFPl/gMEBFUakAMEAlvNqAMEAF4ZgzAMAwQEXhmQ
AwQAXhmgAwQAXhmkMAwDBANeGagDBAZeGYAwDAMEBm28QAMEA228YDAMAwQEbbxw
AwQAbbxyAwQCgMxMMAsDAwSysAMEBLKwIAMEArKwNAMEA7KwSAMEArKwXAMEBrKx
AAMEArKywDALAwMBvKoDBAS8qiADBALByeQDBAXDEGADBAHD5kYwDAMEAMPmWwME
AMPmXAMEANRFajAMAwQA1EVxAwQA1EVyAwQA1EV9AwQA1fNtAwQA1fN0MBYEAgAC
MBADBgQqA9AAQAMGACoD0AQAMA0GCSqGSIb3DQEBCwUAA4IBAQCh93oD53j47pE/
T5U7AcgIbLQ2/fGCHnrOLLqAxWoK9BMW6lAZ5I23+LJ0/yNJOu72PZKVvv49Cvzy
dUHsanzM5cl5b546KEmO/e83d7odroPpKqccE3lWdumoad+9CC21Oerf7bmoBBrq
v4uu1mTvfj0pX/QYWnoE1oJpHYe+VQs8v5/uxTDvq9+xKp910nwYe0+pvx43mgrP
igyeClha2eC8FZQTtCjZAvEQcQuHP2vSvC3Kbot/H34dN4extRMskBZpLoDkRHXK
xtyel+fMR5XYc7RMnGwX0AajkduCpMVFiJN7f+wRtDBI4SZHfEecFq8SlxBEdA4f
Toffx6iQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org