Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/jYhaOZ2y87j6E5kcwKZAHRU9RRo.roa
File: jYhaOZ2y87j6E5kcwKZAHRU9RRo.roa (raw, json)
Hash identifier: t5qxPYcQVc4v3RfjU82B4QdfZCTShnuK3lWDCCWmX8M=
Subject key identifier: 8D:88:5A:39:9D:B2:F3:B8:FA:13:99:1C:C0:A6:40:1D:15:3D:45:1A
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0192D2D4889A27F16C7C58DD89E47551A858
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/jYhaOZ2y87j6E5kcwKZAHRU9RRo.roa
Signing time: Mon 28 Oct 2024 11:13:16 +0000
ROA not before: Mon 28 Oct 2024 11:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41897
IP address blocks: 45.158.16.0/22 maxlen: 22
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.4.0/24 maxlen: 24
46.40.6.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.8.0/24 maxlen: 24
46.40.9.0/24 maxlen: 24
46.40.10.0/24 maxlen: 24
46.40.11.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
46.40.14.0/24 maxlen: 24
46.40.15.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
46.40.16.0/24 maxlen: 24
46.40.17.0/24 maxlen: 24
46.40.18.0/24 maxlen: 24
46.40.19.0/24 maxlen: 24
46.40.20.0/24 maxlen: 24
46.40.21.0/24 maxlen: 24
46.40.22.0/24 maxlen: 24
46.40.23.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.29.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.30.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.40.0/21 maxlen: 21
46.40.40.0/24 maxlen: 24
46.40.41.0/24 maxlen: 24
46.40.42.0/24 maxlen: 24
46.40.43.0/24 maxlen: 24
46.40.44.0/23 maxlen: 23
46.40.46.0/23 maxlen: 23
46.40.48.0/21 maxlen: 21
46.40.48.0/24 maxlen: 24
46.40.49.0/24 maxlen: 24
46.40.50.0/24 maxlen: 24
46.40.51.0/24 maxlen: 24
46.40.52.0/24 maxlen: 24
46.40.53.0/24 maxlen: 24
46.40.54.0/24 maxlen: 24
46.40.55.0/24 maxlen: 24
46.40.56.0/22 maxlen: 22
46.40.56.0/24 maxlen: 24
46.40.57.0/24 maxlen: 24
46.40.58.0/24 maxlen: 24
46.40.59.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.63.0/24 maxlen: 24
46.251.8.0/22 maxlen: 22
80.245.96.0/22 maxlen: 22
81.24.240.0/21 maxlen: 21
81.24.247.0/24 maxlen: 24
85.222.176.0/20 maxlen: 20
85.222.176.0/21 maxlen: 21
85.222.176.0/24 maxlen: 24
85.222.177.0/24 maxlen: 24
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
89.147.80.0/20 maxlen: 20
89.147.80.0/22 maxlen: 22
89.147.80.0/24 maxlen: 24
89.147.81.0/24 maxlen: 24
89.147.82.0/24 maxlen: 24
89.147.83.0/24 maxlen: 24
89.147.84.0/22 maxlen: 22
89.147.88.0/24 maxlen: 24
89.147.89.0/24 maxlen: 24
89.147.92.0/24 maxlen: 24
89.147.93.0/24 maxlen: 24
89.147.94.0/24 maxlen: 24
89.147.95.0/24 maxlen: 24
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
91.147.240.0/21 maxlen: 21
91.147.244.0/22 maxlen: 22
94.248.184.0/21 maxlen: 21
94.248.232.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
94.248.232.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
95.85.128.0/18 maxlen: 18
95.85.128.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.136.0/22 maxlen: 22
95.85.144.0/21 maxlen: 21
95.85.152.0/23 maxlen: 23
95.85.152.0/24 maxlen: 24
95.85.153.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.154.0/24 maxlen: 24
95.85.155.0/24 maxlen: 24
95.85.156.0/22 maxlen: 22
95.85.172.0/24 maxlen: 24
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
178.20.200.0/24 maxlen: 24
178.20.201.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
185.6.188.0/22 maxlen: 22
185.6.188.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
185.37.169.0/24 maxlen: 24
185.37.170.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.156.152.0/22 maxlen: 22
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
185.169.249.0/24 maxlen: 24
185.169.250.0/23 maxlen: 23
185.231.128.0/22 maxlen: 22
195.192.244.0/22 maxlen: 22
217.17.96.0/20 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.98.0/24 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.107.0/24 maxlen: 24
217.17.108.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
2a00:ad00::/29 maxlen: 29
2a00:ad00:2010::/44 maxlen: 44
2a00:ad03::/32 maxlen: 32
2a00:ad07:3000::/36 maxlen: 36
2a04:f040::/29 maxlen: 29
2a0c:6300::/30 maxlen: 30
2a0f:7bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:d4:88:9a:27:f1:6c:7c:58:dd:89:e4:75:51:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Oct 28 11:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d885a399db2f3b8fa13991cc0a6401d153d451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:a1:16:20:0f:e9:4f:6f:a3:30:2b:4a:eb:
95:e2:a1:b1:61:e2:1e:37:39:14:ce:f9:5c:31:b1:
57:06:f2:c3:d0:76:7f:85:cb:16:6e:f0:07:32:11:
df:9b:12:4d:53:0b:cd:91:78:b4:32:a8:b9:1f:8f:
e2:d1:26:89:d2:ac:3f:a9:87:91:65:7b:1b:12:b1:
a8:39:0e:a0:9b:96:57:90:b3:41:91:a3:2d:49:8a:
f6:58:9a:dc:a4:7f:1b:8d:7a:f2:b4:a2:39:46:d1:
d4:5a:1d:30:b3:c3:1a:52:18:4b:c2:56:66:3e:8c:
ba:79:67:f8:af:ea:be:6f:0e:4a:a1:83:d9:a7:fc:
7d:2d:00:91:dc:2f:e1:32:38:54:52:34:9e:76:a5:
84:44:52:af:77:d6:44:14:7a:3b:4a:5b:8c:63:ed:
1a:19:a2:05:2e:3e:b4:13:6b:2e:50:98:7c:73:fc:
db:1a:fd:81:48:41:df:c3:e9:40:09:02:bc:99:91:
95:db:d2:e9:18:b0:ec:80:09:51:34:19:66:2f:ed:
91:88:66:cb:40:53:bc:74:31:18:b4:bb:34:87:76:
bc:36:74:d6:a2:e6:bd:70:e7:9c:7c:9b:70:01:dd:
e0:fc:ec:7b:fa:7b:e5:c0:73:da:77:92:ac:a5:5b:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:5A:39:9D:B2:F3:B8:FA:13:99:1C:C0:A6:40:1D:15:3D:45:1A
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/jYhaOZ2y87j6E5kcwKZAHRU9RRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
89.147.80.0/20
91.102.224.0/21
91.147.240.0/21
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.156.152.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
2a04:f040::/29
2a0c:6300::/30
2a0f:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:aa:6d:81:ac:db:37:58:e9:a9:df:90:54:fb:8f:75:6f:41:
6e:1b:00:b3:8c:d9:37:e7:7b:7b:ac:b6:cf:75:f6:aa:a9:8d:
cf:7b:ac:4a:04:b0:08:4c:f7:f0:b6:63:13:0a:bf:38:e5:32:
8d:44:f2:5d:81:46:43:41:bd:90:9d:fc:d7:98:3c:37:78:a8:
bc:7a:97:7c:53:b1:2b:1f:3e:cc:42:fb:fe:b6:85:1d:b5:ef:
e9:c9:e5:46:37:7e:48:6d:ee:9b:03:d1:c9:06:10:db:ea:c1:
13:aa:70:d4:26:77:e3:aa:33:8e:3b:33:e2:2a:92:a4:d3:b4:
e2:b5:b2:4c:b7:f9:cb:51:64:a7:bd:5b:98:b5:39:10:07:2c:
ce:b1:6a:fb:bc:49:eb:0e:e4:69:60:f4:48:50:c6:e8:52:89:
4e:00:11:96:30:d4:19:b4:7b:01:b4:a5:20:36:46:2c:82:b0:
26:0c:db:14:f8:9b:5b:99:ed:f3:54:0c:71:01:91:5c:f1:bb:
f1:22:e3:ce:2a:59:e8:cd:e7:8d:06:4b:f9:1b:f1:a1:50:b6:
da:6f:8c:6c:7b:be:3f:a3:52:a7:fe:08:04:cf:b1:e4:0a:f4:
2d:84:3b:8a:3c:ef:ed:fb:53:11:0c:6b:12:9a:63:e9:10:87:
a9:03:b4:19
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZLS1IiaJ/FsfFjdieR1UahYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjQxMDI4MTExMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDg4NWEzOTlkYjJmM2I4ZmExMzk5MWNjMGE2NDAxZDE1M2Q0NTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWWhFiAP6U9vozArSuuV4qGxYeIe
NzkUzvlcMbFXBvLD0HZ/hcsWbvAHMhHfmxJNUwvNkXi0Mqi5H4/i0SaJ0qw/qYeR
ZXsbErGoOQ6gm5ZXkLNBkaMtSYr2WJrcpH8bjXrytKI5RtHUWh0ws8MaUhhLwlZm
Poy6eWf4r+q+bw5KoYPZp/x9LQCR3C/hMjhUUjSedqWERFKvd9ZEFHo7SluMY+0a
GaIFLj60E2suUJh8c/zbGv2BSEHfw+lACQK8mZGV29LpGLDsgAlRNBlmL+2RiGbL
QFO8dDEYtLs0h3a8NnTWoua9cOecfJtwAd3g/Ox7+nvlwHPad5KspVuf0QIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFI2IWjmdsvO4+hOZHMCmQB0VPUUaMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvalloYU9aMnk4N2o2RTVrY3dLWkFIUlU5UlJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBiwQCAAEwgYQDBAIt
nhADBAYuKAADBAIu+wgDBAJQ9WADBANRGPADBARV3rADBARZk1ADBANbZuADBANb
k/ADBANe+LgDBANe+OgDBAZfVYADBAKyFMgDBAK5BrwDBAK5CswDBAK5JagDBAK5
jcQDBAK5nJgDBAK5qfgDBAK554ADBALDwPQDBATZEWAwIgQCAAIwHAMFAyoArQAD
BQMqBPBAAwUCKgxjAAMFAyoPe8AwDQYJKoZIhvcNAQELBQADggEBAMaqbYGs2zdY
6anfkFT7j3VvQW4bALOM2Tfne3usts919qqpjc97rEoEsAhM9/C2YxMKvzjlMo1E
8l2BRkNBvZCd/NeYPDd4qLx6l3xTsSsfPsxC+/62hR217+nJ5UY3fkht7psD0ckG
ENvqwROqcNQmd+OqM447M+IqkqTTtOK1sky3+ctRZKe9W5i1ORAHLM6xavu8SesO
5Glg9EhQxuhSiU4AEZYw1Bm0ewG0pSA2RiyCsCYM2xT4m1uZ7fNUDHEBkVzxu/Ei
484qWejN540GS/kb8aFQttpvjGx7vj+jUqf+CATPseQK9C2EO4o87+37UxEMaxKa
Y+kQh6kDtBk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:27 2025 by rpki-client