Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/gFc5ZpMA2zW5xA9syL0HlK61Vnk.roa
File: gFc5ZpMA2zW5xA9syL0HlK61Vnk.roa (raw, json)
Hash identifier: M0w2A1p9CNn54o0RwNmBKatPzyeeNZ2vouNmb3OzrY4=
Subject key identifier: 80:57:39:66:93:00:DB:35:B9:C4:0F:6C:C8:BD:07:94:AE:B5:56:79
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018DC4E1FFD85F4C7702C5D2321BB2088379
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/gFc5ZpMA2zW5xA9syL0HlK61Vnk.roa
Signing time: Tue 20 Feb 2024 04:59:21 +0000
ROA not before: Tue 20 Feb 2024 04:59:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.37.0/24 maxlen: 24
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 25
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.250.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 May 2024 04:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:e1:ff:d8:5f:4c:77:02:c5:d2:32:1b:b2:08:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Feb 20 04:59:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805739669300db35b9c40f6cc8bd0794aeb55679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:11:43:b4:b8:05:a3:cd:64:06:3e:90:07:
1c:11:3d:0e:24:4c:62:6c:fd:7f:cd:e3:18:d9:36:
80:0f:01:23:c4:46:21:b7:77:6b:b5:c6:2e:07:2d:
e5:36:94:5a:26:11:e9:fc:46:fa:aa:9b:f5:f0:68:
af:d0:cf:65:16:ff:e0:60:fe:e9:60:eb:d4:29:81:
2e:83:dd:e2:b2:c5:d3:00:b2:4a:33:9f:02:4f:a5:
f8:18:ab:00:19:cb:60:46:b4:26:a2:63:8b:ba:4f:
fe:b7:43:64:11:3d:97:92:53:f9:4e:bd:ed:df:d6:
f8:73:fe:73:41:95:eb:18:9c:b1:13:8f:42:91:32:
53:b7:26:6c:2f:31:b1:a5:b7:91:9b:44:62:78:ba:
66:51:74:c0:01:b5:61:6b:42:5e:0c:f8:85:74:f5:
d6:ad:c1:42:79:25:5d:a2:60:6d:47:6d:37:e4:d7:
a9:d5:1f:a9:52:4e:8d:73:f0:65:a0:bc:7c:f7:74:
61:cf:02:13:fe:09:5d:0b:35:ee:da:45:2b:95:79:
92:b7:72:38:cb:a1:ad:35:78:26:24:81:00:60:88:
8b:7d:83:a7:28:6d:0b:31:14:b6:aa:ed:88:62:51:
c6:09:8a:15:38:38:56:e7:99:62:6d:76:f2:f7:de:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:39:66:93:00:DB:35:B9:C4:0F:6C:C8:BD:07:94:AE:B5:56:79
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/gFc5ZpMA2zW5xA9syL0HlK61Vnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/47
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
9d:e0:4f:94:f1:92:69:0c:9e:63:a3:c8:f5:38:56:15:ba:81:
b9:b0:2b:88:29:4a:f5:95:14:bf:07:37:e3:9b:41:1c:25:a7:
61:3b:e2:5c:e7:48:7c:64:01:8d:a2:36:ab:b2:7f:45:52:5d:
aa:d5:48:4e:a6:db:ba:05:32:b7:5c:70:6e:43:31:64:6c:0d:
d8:73:7d:ff:6c:80:46:48:40:e5:47:56:b7:1d:3e:1a:39:f4:
8d:28:e0:33:60:40:24:c2:24:72:05:e2:dd:47:40:c4:01:39:
3e:ed:62:95:1a:c1:33:96:a3:cd:f1:a9:65:8b:2d:4f:88:84:
32:c1:a7:ef:ff:44:7b:3b:69:b0:ee:f9:7b:50:67:2c:3d:9b:
97:14:59:54:b7:dc:a3:e9:75:e7:b7:fd:64:be:f5:9e:78:c4:
6f:7d:d3:fa:33:e0:2c:8c:2a:ef:5c:08:a2:5c:c6:9b:4d:d1:
8a:c4:98:a7:f6:aa:62:31:9f:9d:1e:3a:da:86:47:fc:f1:a9:
f0:78:73:b8:7b:85:39:43:bd:1f:91:75:cf:e2:7e:04:65:39:
be:c1:67:26:b5:e9:b1:26:ad:c5:85:50:68:76:e2:7c:7b:fc:
4f:0e:2f:bc:12:73:7f:98:ac:79:33:7f:c0:df:ad:1f:b0:b6:
a3:3b:2c:5f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAY3E4f/YX0x3AsXSMhuyCIN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjQwMjIwMDQ1OTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDU3Mzk2NjkzMDBkYjM1YjljNDBmNmNjOGJkMDc5NGFlYjU1Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkMRQ7S4BaPNZAY+kAccET0OJExi
bP1/zeMY2TaADwEjxEYht3drtcYuBy3lNpRaJhHp/Eb6qpv18Giv0M9lFv/gYP7p
YOvUKYEug93issXTALJKM58CT6X4GKsAGctgRrQmomOLuk/+t0NkET2XklP5Tr3t
39b4c/5zQZXrGJyxE49CkTJTtyZsLzGxpbeRm0RieLpmUXTAAbVha0JeDPiFdPXW
rcFCeSVdomBtR2035Nep1R+pUk6Nc/BloLx893RhzwIT/gldCzXu2kUrlXmSt3I4
y6GtNXgmJIEAYIiLfYOnKG0LMRS2qu2IYlHGCYoVODhW55libXby997dyQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFIBXOWaTANs1ucQPbMi9B5SutVZ5MB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvZ0ZjNVpwTUEyelc1eEE5c3lMMEhsSzYxVm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDAdBAIAATAXAwQBLV4OAwQC
W+U0AwQH1BoAAwMA1IowMwQCAAIwLQMHASABFJAAAAMHACABFJABAwMHASABFJAB
BgMHASABFJABEAMHACABFJcAAjANBgkqhkiG9w0BAQsFAAOCAQEAneBPlPGSaQye
Y6PI9ThWFbqBubAriClK9ZUUvwc345tBHCWnYTviXOdIfGQBjaI2q7J/RVJdqtVI
TqbbugUyt1xwbkMxZGwN2HN9/2yARkhA5UdWtx0+Gjn0jSjgM2BAJMIkcgXi3UdA
xAE5Pu1ilRrBM5ajzfGpZYstT4iEMsGn7/9EeztpsO75e1BnLD2blxRZVLfco+l1
57f9ZL71nnjEb33T+jPgLIwq71wIolzGm03RisSYp/aqYjGfnR462oZH/PGp8Hhz
uHuFOUO9H5F1z+J+BGU5vsFnJrXpsSatxYVQaHbifHv8Tw4vvBJzf5iseTN/wN+t
H7C2ozssXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org