Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/geLyxRF_mWPWyQfAoE_ZxX7wibs.roa
File: geLyxRF_mWPWyQfAoE_ZxX7wibs.roa (raw, json)
Hash identifier: TLPBy7hykIeyq1sHSJZhzJAY33vRWGv4OwLeLl6Abqs=
Subject key identifier: 81:E2:F2:C5:11:7F:99:63:D6:C9:07:C0:A0:4F:D9:C5:7E:F0:89:BB
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D43EEADDD597436C68C1BC4D1701E4CB3
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/geLyxRF_mWPWyQfAoE_ZxX7wibs.roa
Signing time: Fri 26 Jan 2024 04:02:11 +0000
ROA not before: Fri 26 Jan 2024 04:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.66.0/24 maxlen: 24
217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:1000::/48 maxlen: 48
2a03:32c0:1001::/48 maxlen: 48
2a03:32c0:1002::/48 maxlen: 48
2a03:32c0:1003::/48 maxlen: 48
2a03:32c0:1004::/48 maxlen: 48
2a03:32c0:1005::/48 maxlen: 48
2a03:32c0:1006::/48 maxlen: 48
2a03:32c0:1007::/48 maxlen: 48
2a03:32c0:1008::/48 maxlen: 48
2a03:32c0:1009::/48 maxlen: 48
2a03:32c0:2000::/48 maxlen: 48
2a03:32c0:2001::/48 maxlen: 48
2a03:32c0:2002::/48 maxlen: 48
2a03:32c0:2003::/48 maxlen: 48
2a03:32c0:2004::/48 maxlen: 48
2a03:32c0:2005::/48 maxlen: 48
2a03:32c0:2006::/48 maxlen: 48
2a03:32c0:2007::/48 maxlen: 48
2a03:32c0:2008::/48 maxlen: 48
2a03:32c0:2009::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:3008::/48 maxlen: 48
2a03:32c0:3009::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:a000::/48 maxlen: 48
2a03:32c0:a001::/48 maxlen: 48
2a03:32c0:a002::/48 maxlen: 48
2a03:32c0:a003::/48 maxlen: 48
2a03:32c0:a004::/48 maxlen: 48
2a03:32c0:a005::/48 maxlen: 48
2a03:32c0:a006::/48 maxlen: 48
2a03:32c0:a007::/48 maxlen: 48
2a03:32c0:a008::/48 maxlen: 48
2a03:32c0:a009::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:c008::/48 maxlen: 48
2a03:32c0:d008::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
2a03:32c0:f008::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 06:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:43:ee:ad:dd:59:74:36:c6:8c:1b:c4:d1:70:1e:4c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 26 04:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e2f2c5117f9963d6c907c0a04fd9c57ef089bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:13:3b:ef:55:6d:ac:e7:eb:f3:64:df:d7:
74:6a:d8:15:06:05:b8:df:63:96:2c:dd:67:9e:84:
28:0c:75:42:9b:0c:99:ba:5b:af:5d:c7:5a:5e:f0:
ab:34:b8:be:86:b5:9a:4a:7e:fb:ab:62:77:e6:c2:
0e:32:22:a7:aa:7c:b2:31:80:73:ed:6a:71:1e:51:
0a:d7:9c:70:6f:55:c4:79:14:5b:7c:df:33:b3:ee:
e4:96:67:f2:39:b5:88:0d:df:bb:94:06:3c:63:34:
8b:bb:98:15:e2:c8:ef:3c:9b:5e:88:12:f9:e3:f9:
07:4b:f7:fe:5b:41:aa:1c:02:bd:f6:7f:30:15:46:
b1:cb:8a:de:9d:f5:6f:e0:6a:df:33:4c:a6:1d:04:
1f:a2:cf:0a:a5:44:c5:5a:6a:0e:7a:4c:ab:e5:c9:
62:e1:48:72:e6:eb:f2:70:ec:4a:a1:f5:55:f3:51:
e2:a3:ee:eb:87:1b:f7:66:9a:df:4b:70:47:b2:e0:
ba:47:e8:ca:2c:57:e3:07:53:b6:df:b5:70:5e:24:
1a:5b:b3:d4:2d:14:d7:22:ed:88:2e:14:75:d9:2c:
ca:bb:d5:b9:c2:a8:76:ee:ef:6d:28:2d:7c:55:fb:
08:31:c7:01:ab:55:f3:44:71:46:a5:11:53:39:27:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:F2:C5:11:7F:99:63:D6:C9:07:C0:A0:4F:D9:C5:7E:F0:89:BB
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/geLyxRF_mWPWyQfAoE_ZxX7wibs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.66.0/24
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
2a03:32c0:8000::/45
2a03:32c0:9000::/45
2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c008::/48
2a03:32c0:d008::/48
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:f008::/48
Signature Algorithm: sha256WithRSAEncryption
58:75:dc:32:05:91:5a:b8:12:31:bd:94:9a:b8:37:88:c5:82:
47:e6:3a:e1:50:64:bb:16:1f:af:fb:dc:0e:9f:0e:94:10:9e:
4f:ff:6f:07:13:dd:a9:66:dc:6f:f2:76:7f:a8:7b:f9:f8:e8:
9d:c6:8a:aa:79:c8:42:3a:38:79:49:7a:8b:d7:45:6c:e7:4f:
7c:9f:c4:58:59:5a:08:fc:d6:61:bd:0a:6e:1c:f7:60:de:9c:
4f:00:22:ca:f0:7f:50:a5:f7:1d:de:76:04:be:9c:9c:73:ed:
e7:6d:72:5a:8f:ca:77:24:98:81:e6:f9:10:64:37:0f:69:72:
df:15:e8:43:54:26:a8:4b:5b:30:3b:b2:a7:97:61:b1:e0:d9:
65:43:ce:c8:03:0d:21:00:b4:6c:33:05:4a:28:ab:d3:f2:1f:
21:e7:87:64:92:93:5b:fc:57:69:3a:7e:25:68:0e:72:66:b7:
24:d8:a9:f7:e0:be:8f:bb:67:ea:28:f7:d3:df:ef:b5:2c:61:
f7:f2:4f:d8:85:1c:8d:6b:2c:a7:40:4a:b4:60:85:48:fd:35:
51:3a:79:a2:34:c9:18:84:bd:61:35:57:c3:e9:fe:3c:1b:74:
55:cc:81:79:58:5d:d0:69:b0:c4:44:4d:aa:7a:7b:95:1e:33:
72:a7:7f:cd
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAY1D7q3dWXQ2xowbxNFwHkyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjQwMTI2MDQwMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWUyZjJjNTExN2Y5OTYzZDZjOTA3YzBhMDRmZDljNTdlZjA4OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWYTO+9Vbazn6/Nk39d0atgVBgW4
32OWLN1nnoQoDHVCmwyZuluvXcdaXvCrNLi+hrWaSn77q2J35sIOMiKnqnyyMYBz
7WpxHlEK15xwb1XEeRRbfN8zs+7klmfyObWIDd+7lAY8YzSLu5gV4sjvPJteiBL5
4/kHS/f+W0GqHAK99n8wFUaxy4renfVv4GrfM0ymHQQfos8KpUTFWmoOekyr5cli
4Uhy5uvycOxKofVV81Hio+7rhxv3ZprfS3BHsuC6R+jKLFfjB1O237VwXiQaW7PU
LRTXIu2ILhR12SzKu9W5wqh27u9tKC18VfsIMccBq1XzRHFGpRFTOSd/XwIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFIHi8sURf5lj1skHwKBP2cV+8Im7MB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvZ2VMeXhSRl9tV1BXeVFmQW9FX1p4WDd3aWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MBIEAgABMAwDBADZ
TEIDBADZTEYwgecEAgACMIHgAwcDKgMywAAAMBEDBgQqAzLAEAMHASoDMsAQCDAR
AwYFKgMywCADBwEqAzLAIAgwEQMGBCoDMsAwAwcBKgMywDAIMBEDBgYqAzLAQAMH
ACoDMsBAAjARAwYEKgMywFADBwAqAzLAUAIDBwEqAzLAYAADBwEqAzLAcAADBwMq
AzLAgAADBwMqAzLAkAAwEQMGBSoDMsCgAwcBKgMywKAIMBEDBgQqAzLAsAMHASoD
MsCwCAMHACoDMsDACAMHACoDMsDQCDARAwYFKgMywOADBwEqAzLA4AgDBwAqAzLA
8AgwDQYJKoZIhvcNAQELBQADggEBAFh13DIFkVq4EjG9lJq4N4jFgkfmOuFQZLsW
H6/73A6fDpQQnk//bwcT3alm3G/ydn+oe/n46J3Giqp5yEI6OHlJeovXRWznT3yf
xFhZWgj81mG9Cm4c92DenE8AIsrwf1Cl9x3edgS+nJxz7edtclqPynckmIHm+RBk
Nw9pct8V6ENUJqhLWzA7sqeXYbHg2WVDzsgDDSEAtGwzBUooq9PyHyHnh2SSk1v8
V2k6fiVoDnJmtyTYqffgvo+7Z+oo99Pf77UsYffyT9iFHI1rLKdASrRghUj9NVE6
eaI0yRiEvWE1V8Pp/jwbdFXMgXlYXdBpsMRETap6e5UeM3Knf80=
Generated at Mon Jan 29 11:11:28 2024 by rpki-client on console-ams.rpki-client.org