Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmnopLHoOkNUkIEg2bTgvpIMykQ.roa
File: dmnopLHoOkNUkIEg2bTgvpIMykQ.roa (raw, json)
Hash identifier: qTTEBoGoWXLbi1H6GWtihEeCmOYgxRdmcXDYuHL4rSg=
Subject key identifier: 76:69:E8:A4:B1:E8:3A:43:54:90:81:20:D9:B4:E0:BE:92:0C:CA:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B914BF453FC99DEA11EABED70060F6C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmnopLHoOkNUkIEg2bTgvpIMykQ.roa
Signing time: Wed 23 Oct 2024 11:13:17 +0000
ROA not before: Wed 23 Oct 2024 11:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.253.56.0/22 maxlen: 24
31.13.247.0/24 maxlen: 24
31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.216.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
94.125.100.0/22 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.184.0/22 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
193.168.196.0/22 maxlen: 24
212.87.220.0/22 maxlen: 24
212.87.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 11:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:14:bf:45:3f:c9:9d:ea:11:ea:be:d7:00:60:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 11:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7669e8a4b1e83a4354908120d9b4e0be920cca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:67:92:09:50:56:6a:90:5d:30:bd:8e:e8:
5d:3b:d6:a9:2a:2e:5d:21:03:4e:6e:55:4e:49:b5:
ce:5a:95:ef:3a:0f:e7:b8:7d:c3:f3:88:c6:35:7c:
8c:9b:f1:1d:47:b9:92:6b:17:a9:63:f1:fd:30:5e:
77:53:05:0c:d3:8c:e2:76:a0:9a:f6:cf:68:95:97:
1a:48:c2:77:b1:ab:85:74:f2:88:b9:65:5a:b1:37:
c8:34:15:eb:80:b5:c4:4d:bb:79:91:9e:67:32:d3:
c9:d6:43:67:d8:e6:75:b5:f4:5b:ec:e9:94:37:09:
a7:ff:24:d2:a4:2e:27:c6:e0:5e:4d:89:2d:08:2d:
d1:72:bb:7d:f0:e5:f7:73:67:dd:6f:03:b7:bd:08:
df:57:5d:72:98:11:ab:71:c2:6b:9a:39:2d:8d:9b:
a1:51:ec:61:7b:2d:49:0c:c4:d6:4a:44:23:7f:41:
c3:1d:00:e1:45:05:4c:e9:b4:08:bc:cc:fd:c3:58:
51:4a:25:81:ab:01:e2:4e:27:21:21:68:f0:a0:6d:
cc:ae:47:ec:9c:89:a8:6c:f9:a3:04:37:e3:84:e0:
71:38:4c:54:45:c6:1a:74:8a:ca:e9:15:ac:a9:be:
d6:cc:d5:7e:92:3a:ea:1d:71:a2:57:31:f6:6d:04:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:E8:A4:B1:E8:3A:43:54:90:81:20:D9:B4:E0:BE:92:0C:CA:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmnopLHoOkNUkIEg2bTgvpIMykQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.247.0/24
31.169.124.0/22
37.139.128.0/24
45.84.88.0/24
45.88.66.0/24
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.98.0/24
87.121.216.0/22
91.92.21.0/24
93.123.30.0/23
94.125.100.0/22
94.156.236.0/24
109.206.236.0/24
109.206.240.0/24
109.206.242.0/23
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.137.0-185.218.138.255
185.246.220.0-185.246.222.255
185.252.179.0/24
193.8.184.0/22
193.47.60.0/23
193.148.56.0/22
193.168.196.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:18:7d:6c:e2:4f:f5:7f:6d:83:b8:5b:fa:e8:79:1a:6b:dd:
df:22:d4:11:bd:6e:84:8e:12:05:42:0e:64:5d:ab:7f:d4:25:
6d:54:0b:25:36:73:81:8a:e0:0c:1a:3b:60:e0:3d:72:c9:39:
b8:cc:be:d7:ff:bb:09:04:29:33:c4:c3:5f:3e:35:3b:6a:47:
2a:5f:94:8b:1a:29:51:6c:18:3c:15:95:45:9c:45:08:1d:96:
7d:ab:71:3a:34:bb:22:0e:d3:22:fb:54:60:93:b4:b1:ce:15:
a6:cb:4b:b7:9b:6e:42:1b:81:89:7e:f4:18:79:8c:15:87:ce:
0a:8b:52:bb:34:f3:90:64:ca:4f:0c:52:46:6c:43:79:3d:5e:
ee:ce:90:cc:2c:92:ab:33:0c:78:2a:16:a2:9f:8d:e4:02:2f:
37:5e:3d:f3:c3:ec:a7:d4:11:20:ef:43:f5:86:b7:6a:b4:10:
62:69:cf:db:a2:82:f2:1a:f4:e1:a8:57:fc:88:cf:f9:2b:5f:
16:89:32:b8:63:5a:b9:12:80:87:1f:8c:93:33:3e:f3:55:36:
c6:31:2e:71:45:84:31:a4:a8:de:aa:30:31:1f:d1:a9:36:fb:
db:37:e9:1a:f8:5d:ca:36:ae:5d:39:fb:9d:0f:ea:bf:06:2d:
cc:0c:66:20
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAZK5FL9FP8md6hHqvtcAYPbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDIzMTExMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjY5ZThhNGIxZTgzYTQzNTQ5MDgxMjBkOWI0ZTBiZTkyMGNjYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3odnkglQVmqQXTC9juhdO9apKi5d
IQNOblVOSbXOWpXvOg/nuH3D84jGNXyMm/EdR7mSaxepY/H9MF53UwUM04zidqCa
9s9olZcaSMJ3sauFdPKIuWVasTfINBXrgLXETbt5kZ5nMtPJ1kNn2OZ1tfRb7OmU
Nwmn/yTSpC4nxuBeTYktCC3Rcrt98OX3c2fdbwO3vQjfV11ymBGrccJrmjktjZuh
Uexhey1JDMTWSkQjf0HDHQDhRQVM6bQIvMz9w1hRSiWBqwHiTichIWjwoG3Mrkfs
nImobPmjBDfjhOBxOExURcYadIrK6RWsqb7WzNV+kjrqHXGiVzH2bQRZBwIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFHZp6KSx6DpDVJCBINm04L6SDMpEMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZG1ub3BMSG9Pa05Va0lFZzJiVGd2cElNeWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAgX9OAMEAB8N9wMEAh+pfAMEACWLgAMEAC1UWAMEAC1YQgMEAC1Z9AMEAC1b
wQMEAi1fAAMEAC2AYQMEAC2AYwMEAS2A6gMEAC2V6wMEAE9uPwMEAFOPcQMEAFUf
LAMEAFUfLgMEAFXQiAMEAFXQiwMEAFd4JAMEAFd4WAMEAFd4XAMEAFd4bAMEAFd4
xAMEAFd4zQMEAFd42AMEAFd42wMEAFd43gMEAFd5LwMEAFd5YgMEAld52AMEAFtc
FQMEAV17HgMEAl59ZAMEAF6c7AMEAG3O7AMEAG3O8AMEAW3O8gMEAKsWEAMEAKsW
EwMEAKsWHgMEAbnPDjAMAwQAudqJAwQAudqKMAwDBAK59twDBAC59t4DBAC5/LMD
BALBCLgDBAHBLzwDBALBlDgDBALBqMQDBALUV9wwDQYJKoZIhvcNAQELBQADggEB
AD8YfWziT/V/bYO4W/roeRpr3d8i1BG9boSOEgVCDmRdq3/UJW1UCyU2c4GK4Awa
O2DgPXLJObjMvtf/uwkEKTPEw18+NTtqRypflIsaKVFsGDwVlUWcRQgdln2rcTo0
uyIO0yL7VGCTtLHOFabLS7ebbkIbgYl+9Bh5jBWHzgqLUrs085Bkyk8MUkZsQ3k9
Xu7OkMwskqszDHgqFqKfjeQCLzdePfPD7KfUESDvQ/WGt2q0EGJpz9uigvIa9OGo
V/yIz/krXxaJMrhjWrkSgIcfjJMzPvNVNsYxLnFFhDGkqN6qMDEf0ak2+9s36Rr4
Xco2rl05+50P6r8GLcwMZiA=
-----END CERTIFICATE-----
Generated at Tue May 13 17:11:46 2025 by rpki-client