Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/pVxf1oTH_1Jx7RliJgQw2hnnzRo.roa
File: pVxf1oTH_1Jx7RliJgQw2hnnzRo.roa (raw, json)
Hash identifier: LmE7IvJbGTBQkKQxikkVyOLi/k3Ll41v/GiWE0GYECk=
Subject key identifier: A5:5C:5F:D6:84:C7:FF:52:71:ED:19:62:26:04:30:DA:19:E7:CD:1A
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018F61DEB69CDA988D447569CBC6F49C3064
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/pVxf1oTH_1Jx7RliJgQw2hnnzRo.roa
Signing time: Fri 10 May 2024 09:38:56 +0000
ROA not before: Fri 10 May 2024 09:38:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 36.255.188.0/24 maxlen: 32
36.255.189.0/24 maxlen: 24
36.255.190.0/24 maxlen: 24
36.255.191.0/24 maxlen: 24
45.143.68.0/24 maxlen: 24
45.143.69.0/24 maxlen: 24
45.143.70.0/24 maxlen: 24
45.143.71.0/24 maxlen: 24
83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
87.239.254.0/24 maxlen: 24
95.181.216.0/24 maxlen: 24
95.181.217.0/24 maxlen: 24
95.181.218.0/24 maxlen: 24
95.181.219.0/24 maxlen: 24
171.22.252.0/24 maxlen: 24
185.46.116.0/24 maxlen: 24
185.46.117.0/24 maxlen: 24
185.46.240.0/24 maxlen: 24
185.46.241.0/24 maxlen: 24
185.46.242.0/24 maxlen: 24
185.46.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
185.201.190.0/24 maxlen: 24
185.253.68.0/24 maxlen: 24
185.253.69.0/24 maxlen: 24
185.253.70.0/24 maxlen: 24
185.253.71.0/24 maxlen: 24
193.108.242.0/24 maxlen: 24
193.108.243.0/24 maxlen: 24
193.201.248.0/24 maxlen: 24
193.201.249.0/24 maxlen: 24
193.201.250.0/24 maxlen: 24
193.201.251.0/24 maxlen: 24
194.36.96.0/24 maxlen: 24
194.36.97.0/24 maxlen: 24
194.36.98.0/24 maxlen: 24
194.36.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 11:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:de:b6:9c:da:98:8d:44:75:69:cb:c6:f4:9c:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 10 09:38:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55c5fd684c7ff5271ed1962260430da19e7cd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:16:9c:78:82:54:70:08:9a:ff:d0:e1:a2:
ec:57:c7:eb:ae:90:b2:53:6a:7e:09:c3:8c:4e:87:
ed:98:b4:64:78:e8:bf:d7:69:10:90:8c:e4:47:08:
7d:16:25:83:8b:a6:01:ab:7c:7e:69:03:a5:60:72:
94:c6:a7:e9:eb:3b:88:cc:a7:e6:00:bb:71:39:5c:
ee:b0:53:fb:55:70:90:5b:e7:e8:a0:a1:8e:cd:a4:
dd:00:44:d6:ee:89:de:d2:bf:69:76:b6:d5:58:ad:
93:74:a7:da:b8:5d:bc:8e:3e:55:3f:8d:dc:22:f9:
41:23:68:84:72:f6:7c:c0:40:fb:d7:e9:ea:e7:90:
e9:58:d0:08:b3:fb:53:7b:f4:23:51:95:3b:f4:e0:
60:94:05:22:c5:ee:90:91:13:15:29:3c:66:d0:ad:
fa:4c:5e:28:e7:6e:67:ff:31:b6:6e:b2:9d:7b:b2:
6d:4e:55:7d:0d:eb:3c:9f:2b:b2:75:d9:4c:65:d0:
ad:1a:42:c8:a4:55:d7:c8:45:f2:45:44:41:17:f4:
b4:1f:07:af:fa:af:9f:e7:54:91:fa:36:e1:36:ef:
2e:81:d8:e3:5b:2d:4b:12:93:8e:9d:c0:84:0d:48:
d9:b3:c7:5c:0d:73:2d:fa:bf:01:60:6c:89:41:e4:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:5F:D6:84:C7:FF:52:71:ED:19:62:26:04:30:DA:19:E7:CD:1A
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/pVxf1oTH_1Jx7RliJgQw2hnnzRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.188.0/22
45.143.68.0/22
83.150.240.0/22
87.239.254.0/24
95.181.216.0/22
171.22.252.0/24
185.46.116.0/23
185.46.240.0/22
185.75.208.0/22
185.201.190.0/24
185.253.68.0/22
193.108.242.0/23
193.201.248.0/22
194.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9f:70:c7:ca:22:7b:c2:72:e6:80:03:36:7e:44:47:a9:69:
c7:40:f4:eb:1a:51:8f:9b:d5:02:35:55:7f:4e:ee:7f:c2:fe:
da:53:0b:54:f6:3b:30:97:3e:45:03:15:3a:ce:c5:55:89:2c:
cc:93:ac:ba:91:5b:68:4d:0a:73:63:f3:f9:17:88:bf:c4:7f:
ea:47:33:8a:1a:a0:80:c2:92:49:2f:71:f0:24:8b:28:ee:69:
a2:ad:0e:98:a6:1a:f4:02:90:0c:4e:86:28:d0:5a:f3:1a:92:
18:58:71:a3:17:de:30:b4:d9:53:14:dc:f0:88:c1:b0:bf:d5:
60:d2:69:17:c3:bb:ba:93:7e:b2:a0:67:ca:5b:a4:e9:b4:86:
24:34:b6:d8:60:d8:dc:93:45:ce:39:e4:20:f2:f9:5f:ed:fc:
18:82:af:82:b5:55:0a:78:1f:32:0e:c9:ed:49:31:8d:9b:b0:
9b:b1:ba:e6:93:c3:f8:cc:41:be:c8:61:8b:48:d5:d1:0e:ff:
55:be:40:0f:ea:22:0a:fe:80:34:d1:55:b5:8f:e4:b9:6e:00:
0d:7c:24:75:7e:f8:2e:cd:07:c1:5e:00:f0:2d:f8:a4:91:ac:
ad:11:f8:5b:8c:1b:f6:04:e0:ac:d6:76:1b:4a:76:08:21:15:
d1:d4:a6:c5
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY9h3rac2piNRHVpy8b0nDBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjQwNTEwMDkzODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTVjNWZkNjg0YzdmZjUyNzFlZDE5NjIyNjA0MzBkYTE5ZTdjZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA000WnHiCVHAImv/Q4aLsV8frrpCy
U2p+CcOMToftmLRkeOi/12kQkIzkRwh9FiWDi6YBq3x+aQOlYHKUxqfp6zuIzKfm
ALtxOVzusFP7VXCQW+fooKGOzaTdAETW7one0r9pdrbVWK2TdKfauF28jj5VP43c
IvlBI2iEcvZ8wED71+nq55DpWNAIs/tTe/QjUZU79OBglAUixe6QkRMVKTxm0K36
TF4o525n/zG2brKde7JtTlV9Des8nyuyddlMZdCtGkLIpFXXyEXyRURBF/S0Hwev
+q+f51SR+jbhNu8ugdjjWy1LEpOOncCEDUjZs8dcDXMt+r8BYGyJQeROBwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFKVcX9aEx/9Sce0ZYiYEMNoZ580aMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvcFZ4ZjFvVEhfMUp4N1JsaUpnUXcyaG5uelJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCJP+8AwQC
LY9EAwQCU5bwAwQAV+/+AwQCX7XYAwQAqxb8AwQBuS50AwQCuS7wAwQCuUvQAwQA
ucm+AwQCuf1EAwQBwWzyAwQCwcn4AwQCwiRgMA0GCSqGSIb3DQEBCwUAA4IBAQCK
n3DHyiJ7wnLmgAM2fkRHqWnHQPTrGlGPm9UCNVV/Tu5/wv7aUwtU9jswlz5FAxU6
zsVViSzMk6y6kVtoTQpzY/P5F4i/xH/qRzOKGqCAwpJJL3HwJIso7mmirQ6Yphr0
ApAMToYo0FrzGpIYWHGjF94wtNlTFNzwiMGwv9Vg0mkXw7u6k36yoGfKW6TptIYk
NLbYYNjck0XOOeQg8vlf7fwYgq+CtVUKeB8yDsntSTGNm7Cbsbrmk8P4zEG+yGGL
SNXRDv9VvkAP6iIK/oA00VW1j+S5bgANfCR1fvguzQfBXgDwLfikkaytEfhbjBv2
BOCs1nYbSnYIIRXR1KbF
-----END CERTIFICATE-----
Generated at Fri May 24 17:11:25 2024 by rpki-client on console-ams.rpki-client.org