Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/oifUc7zhzU7NY60OmopXyjViKwk.roa
File: oifUc7zhzU7NY60OmopXyjViKwk.roa (raw, json)
Hash identifier: a7PNHJm4u3gbIhdwPdb07GOt08qw/9J3yccM+O8/b+k=
Subject key identifier: A2:27:D4:73:BC:E1:CD:4E:CD:63:AD:0E:9A:8A:57:CA:35:62:2B:09
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01904A2E5523505A9EBB284449F9DAC0E966
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/oifUc7zhzU7NY60OmopXyjViKwk.roa
Signing time: Mon 24 Jun 2024 12:17:48 +0000
ROA not before: Mon 24 Jun 2024 12:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.76.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 25
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.207.0/24 maxlen: 24
212.138.250.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Aug 2024 11:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:2e:55:23:50:5a:9e:bb:28:44:49:f9:da:c0:e9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jun 24 12:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a227d473bce1cd4ecd63ad0e9a8a57ca35622b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:e6:ab:7b:58:c5:0a:1a:ee:f5:e6:b4:d2:
37:10:54:a9:19:f9:4f:6e:fe:c1:ec:44:15:89:f6:
a4:1a:7b:f2:d2:a3:57:23:91:22:4a:ea:9e:88:32:
06:94:99:3b:a5:79:f1:38:4b:9a:ac:02:a6:0e:d0:
0d:eb:24:c3:83:a3:c1:ce:50:3a:c3:a1:98:6a:81:
e1:6b:32:4a:b1:1c:e8:da:5c:3d:a6:40:c4:6d:8f:
e5:6e:3b:02:dd:68:c4:28:0f:cb:68:19:0f:22:89:
10:bb:12:1c:33:03:dc:c8:f2:ac:b3:58:6b:57:98:
07:1a:ff:46:55:c6:12:cf:a4:98:81:0f:ec:be:09:
58:af:8e:e4:98:34:9f:93:22:58:3a:d6:6f:81:97:
3c:c4:6c:a9:71:d7:d8:6c:29:17:8a:de:5d:4a:1d:
1a:8b:91:b2:4d:6e:92:c5:9b:68:2a:0e:c6:44:4f:
04:aa:77:00:7a:3b:86:86:53:eb:9e:5e:fb:e1:b8:
c0:77:8e:4f:77:18:15:91:8f:20:4d:bd:98:cd:76:
e3:85:b5:b9:1b:5f:84:b6:67:0f:54:f4:8e:18:89:
a2:fd:7d:5c:67:11:d7:d2:90:d2:f2:d6:59:1a:97:
5e:c5:50:51:74:e9:57:8c:bf:99:9c:e8:69:3d:02:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:D4:73:BC:E1:CD:4E:CD:63:AD:0E:9A:8A:57:CA:35:62:2B:09
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/oifUc7zhzU7NY60OmopXyjViKwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/47
2001:1490:113::/48
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:f0:e3:d4:f5:40:ef:cd:f0:7d:60:22:12:b2:d6:f9:76:7a:
40:45:4b:ad:fc:37:0f:44:c6:dc:38:2b:3c:58:34:b7:33:35:
a4:06:ec:bd:67:44:bf:10:d6:74:50:19:86:e2:37:2b:f5:c1:
9c:d5:b8:cc:ad:7e:1d:95:b5:ef:e5:62:73:f9:14:dc:6f:de:
29:3a:df:f9:c5:0a:d1:6c:21:8f:d0:ce:c7:01:2c:44:a5:74:
fb:d0:c6:67:57:7f:8e:84:05:34:b3:ff:c0:85:51:4b:b1:35:
e0:c1:df:fc:bb:68:51:36:77:40:a5:84:1d:ea:4a:36:55:39:
f6:11:c3:1d:d3:fa:10:2e:7c:aa:93:05:c5:ae:c1:db:f3:b0:
c2:17:8c:1b:48:9b:85:17:e8:0a:6e:00:7e:74:aa:42:12:1e:
2a:cf:13:96:03:fb:c8:0a:39:55:3a:4a:a9:e0:a5:8d:be:38:
ab:e5:4d:36:fd:96:06:c4:1e:20:f1:f4:70:b8:a7:2b:74:3b:
c7:ce:af:da:2f:fb:ae:23:59:0b:a4:0e:9b:4b:56:2f:83:f1:
e7:4d:7d:99:eb:d7:4f:9a:91:7b:d0:1d:01:5e:f3:24:3f:10:
d8:de:6a:97:dd:98:5e:9f:51:59:ac:2c:50:2c:72:5a:c4:c0:
bb:7e:39:14
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZBKLlUjUFqeuyhESfnawOlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjQwNjI0MTIxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjI3ZDQ3M2JjZTFjZDRlY2Q2M2FkMGU5YThhNTdjYTM1NjIyYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt3mq3tYxQoa7vXmtNI3EFSpGflP
bv7B7EQVifakGnvy0qNXI5EiSuqeiDIGlJk7pXnxOEuarAKmDtAN6yTDg6PBzlA6
w6GYaoHhazJKsRzo2lw9pkDEbY/lbjsC3WjEKA/LaBkPIokQuxIcMwPcyPKss1hr
V5gHGv9GVcYSz6SYgQ/svglYr47kmDSfkyJYOtZvgZc8xGypcdfYbCkXit5dSh0a
i5GyTW6SxZtoKg7GRE8EqncAejuGhlPrnl774bjAd45PdxgVkY8gTb2YzXbjhbW5
G1+EtmcPVPSOGImi/X1cZxHX0pDS8tZZGpdexVBRdOlXjL+ZnOhpPQLIswIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFKIn1HO84c1OzWOtDpqKV8o1YisJMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvb2lmVWM3emh6VTdOWTYwT21vcFh5alZpS3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAdBAIAATAXAwQBLV4OAwQC
W+U0AwQH1BoAAwMA1IowPAQCAAIwNgMHASABFJAAAAMHACABFJABAwMHASABFJAB
BgMHASABFJABEAMHACABFJABEwMHACABFJcAAjANBgkqhkiG9w0BAQsFAAOCAQEA
CvDj1PVA783wfWAiErLW+XZ6QEVLrfw3D0TG3DgrPFg0tzM1pAbsvWdEvxDWdFAZ
huI3K/XBnNW4zK1+HZW17+Vic/kU3G/eKTrf+cUK0Wwhj9DOxwEsRKV0+9DGZ1d/
joQFNLP/wIVRS7E14MHf/LtoUTZ3QKWEHepKNlU59hHDHdP6EC58qpMFxa7B2/Ow
wheMG0ibhRfoCm4AfnSqQhIeKs8TlgP7yAo5VTpKqeCljb44q+VNNv2WBsQeIPH0
cLinK3Q7x86v2i/7riNZC6QOm0tWL4Px5019mevXT5qRe9AdAV7zJD8Q2N5ql92Y
Xp9RWawsUCxyWsTAu345FA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 14:36:54 2024 by rpki-client on console-fra.rpki-client.org