Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vk_igOiXFlrsQAbuxR3T4JSd6tE.roa
File: vk_igOiXFlrsQAbuxR3T4JSd6tE.roa (raw, json)
Hash identifier: 8DqhDMbS8f/hIu2RU8waTHPv/T484p7eLFTcq0b011I=
Subject key identifier: BE:4F:E2:80:E8:97:16:5A:EC:40:06:EE:C5:1D:D3:E0:94:9D:EA:D1
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278965094835580B833E8CE93BA4F1
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vk_igOiXFlrsQAbuxR3T4JSd6tE.roa
Signing time: Thu 02 Jan 2025 17:54:27 +0000
ROA not before: Thu 02 Jan 2025 17:54:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 46.248.128.0/19 maxlen: 19
57.133.0.0/16 maxlen: 16
58.0.0.0/16 maxlen: 16
58.1.128.0/17 maxlen: 17
62.23.0.0/16 maxlen: 16
62.23.14.0/24 maxlen: 24
62.23.23.0/24 maxlen: 24
62.23.43.0/24 maxlen: 24
62.23.61.0/24 maxlen: 24
62.23.70.0/24 maxlen: 24
62.23.254.0/24 maxlen: 24
62.23.255.0/24 maxlen: 24
62.72.96.0/19 maxlen: 19
62.84.192.0/19 maxlen: 19
62.96.0.0/16 maxlen: 16
62.97.64.0/18 maxlen: 18
62.152.96.0/19 maxlen: 19
62.192.0.0/19 maxlen: 19
78.143.0.0/18 maxlen: 18
78.156.64.0/19 maxlen: 19
78.156.64.0/20 maxlen: 20
78.156.80.0/21 maxlen: 21
80.80.0.0/19 maxlen: 19
80.169.0.0/16 maxlen: 16
80.251.160.0/19 maxlen: 19
82.112.192.0/19 maxlen: 19
84.14.0.0/16 maxlen: 16
84.14.63.0/24 maxlen: 24
84.14.217.0/24 maxlen: 24
84.16.160.0/19 maxlen: 19
85.88.128.0/19 maxlen: 19
87.241.0.0/18 maxlen: 18
116.83.0.0/17 maxlen: 17
118.67.224.0/19 maxlen: 19
136.225.0.0/16 maxlen: 16
157.120.224.0/21 maxlen: 21
157.120.236.0/22 maxlen: 22
157.120.240.0/20 maxlen: 20
193.82.32.0/19 maxlen: 19
193.93.80.0/22 maxlen: 22
193.114.160.0/19 maxlen: 19
193.118.160.0/19 maxlen: 19
193.118.224.0/19 maxlen: 19
193.188.132.0/23 maxlen: 23
194.223.128.0/21 maxlen: 21
194.223.136.0/22 maxlen: 22
195.68.0.0/17 maxlen: 17
195.68.74.0/24 maxlen: 24
195.110.64.0/19 maxlen: 19
212.0.96.0/19 maxlen: 19
212.23.224.0/19 maxlen: 19
212.31.224.0/19 maxlen: 19
212.35.96.0/19 maxlen: 19
212.36.128.0/18 maxlen: 18
212.36.144.0/20 maxlen: 20
212.36.160.0/20 maxlen: 20
212.36.184.0/21 maxlen: 21
212.74.64.0/19 maxlen: 19
212.74.64.0/24 maxlen: 24
212.74.77.0/24 maxlen: 24
212.74.78.0/24 maxlen: 24
212.74.79.0/24 maxlen: 24
212.78.160.0/19 maxlen: 19
212.121.128.0/19 maxlen: 19
212.123.192.0/18 maxlen: 18
212.161.0.0/17 maxlen: 17
212.203.64.0/18 maxlen: 18
213.27.128.0/17 maxlen: 17
213.41.0.0/17 maxlen: 17
213.61.0.0/16 maxlen: 16
213.86.0.0/16 maxlen: 16
213.164.0.0/19 maxlen: 19
213.173.160.0/19 maxlen: 19
213.185.160.0/19 maxlen: 19
213.208.192.0/18 maxlen: 18
213.215.128.0/17 maxlen: 17
213.229.128.0/18 maxlen: 18
213.246.192.0/18 maxlen: 18
217.110.0.0/15 maxlen: 15
217.173.96.0/20 maxlen: 20
2001:920::/29 maxlen: 29
2001:920::/32 maxlen: 32
2001:921::/32 maxlen: 32
2001:924::/32 maxlen: 32
2001:925::/32 maxlen: 32
2001:926::/32 maxlen: 32
2001:926:40::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 08:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:89:65:09:48:35:58:0b:83:3e:8c:e9:3b:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4fe280e897165aec4006eec51dd3e0949dead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:63:ef:1c:3e:d8:5c:b5:bc:89:9c:10:a7:
6f:06:b0:65:10:ff:5b:bf:0e:82:cf:cd:69:39:a3:
9f:4c:e4:da:05:2a:15:9a:37:94:6b:1c:c1:d0:fe:
28:58:dd:5b:25:ac:90:df:bd:ad:0a:33:e2:2b:fc:
b6:fe:d5:97:c3:25:4d:d9:56:45:e4:37:a0:f5:34:
6b:67:d5:31:03:3b:57:5d:a3:1d:54:ad:05:cf:a5:
f9:06:12:85:22:36:b3:26:18:3c:fe:13:97:a8:db:
d7:7d:05:96:77:30:ee:0e:13:92:33:24:25:4e:2c:
6f:6d:dc:80:b6:e5:08:b4:8d:1d:40:1b:c0:36:f9:
c7:69:2a:32:1a:71:12:1a:d0:20:b9:c3:27:e4:89:
b2:e9:dd:10:cf:58:3a:77:86:92:c3:17:cf:11:2b:
f0:4b:cc:72:96:c0:4d:bc:10:e1:45:8b:1c:e6:b5:
a4:81:03:ee:9a:0f:31:a4:46:53:13:a9:fa:6b:55:
72:30:f2:d4:4a:26:b4:98:a9:d3:8d:b1:ce:b6:5d:
b6:4b:f9:4f:f5:1a:5b:75:1e:3c:80:f0:46:2f:0e:
29:75:d0:d2:1d:6f:f4:0c:f5:f6:11:f8:e7:96:d6:
1f:20:5d:34:1b:b8:50:ab:00:39:25:90:94:f2:14:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:E2:80:E8:97:16:5A:EC:40:06:EE:C5:1D:D3:E0:94:9D:EA:D1
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vk_igOiXFlrsQAbuxR3T4JSd6tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.128.0/19
57.133.0.0/16
58.0.0.0/16
58.1.128.0/17
62.23.0.0/16
62.72.96.0/19
62.84.192.0/19
62.96.0.0/16
62.97.64.0/18
62.152.96.0/19
62.192.0.0/19
78.143.0.0/18
78.156.64.0/19
80.80.0.0/19
80.169.0.0/16
80.251.160.0/19
82.112.192.0/19
84.14.0.0/16
84.16.160.0/19
85.88.128.0/19
87.241.0.0/18
116.83.0.0/17
118.67.224.0/19
136.225.0.0/16
157.120.224.0/21
157.120.236.0-157.120.255.255
193.82.32.0/19
193.93.80.0/22
193.114.160.0/19
193.118.160.0/19
193.118.224.0/19
193.188.132.0/23
194.223.128.0-194.223.139.255
195.68.0.0/17
195.110.64.0/19
212.0.96.0/19
212.23.224.0/19
212.31.224.0/19
212.35.96.0/19
212.36.128.0/18
212.74.64.0/19
212.78.160.0/19
212.121.128.0/19
212.123.192.0/18
212.161.0.0/17
212.203.64.0/18
213.27.128.0/17
213.41.0.0/17
213.61.0.0/16
213.86.0.0/16
213.164.0.0/19
213.173.160.0/19
213.185.160.0/19
213.208.192.0/18
213.215.128.0/17
213.229.128.0/18
213.246.192.0/18
217.110.0.0/15
217.173.96.0/20
IPv6:
2001:920::/29
Signature Algorithm: sha256WithRSAEncryption
8a:43:28:e4:9c:eb:d6:0e:ae:34:dc:04:cf:d8:08:be:73:a3:
e9:cf:e4:52:23:fd:94:67:79:ed:c8:9d:2d:6b:01:2c:3f:39:
d4:8d:c3:d7:f9:e4:5b:db:5e:fd:70:ba:87:99:b1:19:c2:e4:
39:99:7c:6a:a2:8b:69:d4:b8:b4:46:f2:bc:87:6b:d5:74:e8:
3c:82:cb:fe:1e:14:9e:9e:1b:62:55:3a:a6:2d:b0:39:dd:5d:
52:61:bc:6f:5f:bf:d6:d8:ac:ee:de:39:cf:91:53:69:27:0e:
b5:f5:29:04:52:d6:f5:fd:76:eb:ee:03:17:b8:ed:34:32:05:
51:18:ee:99:9a:6f:d0:59:13:e8:39:e0:47:dd:7b:e7:da:ab:
ce:93:d3:a5:6d:e6:d6:64:b5:5e:22:03:2f:6b:6d:35:26:9e:
02:2c:6a:79:5c:0c:f2:c6:65:35:fe:81:08:60:c5:83:c3:92:
59:35:bf:bd:48:cc:0a:ce:9c:d2:2c:48:ea:5d:5f:61:2a:a9:
92:0c:c2:bb:ee:ce:24:ed:dc:1b:ad:52:76:ac:f3:0e:16:77:
f8:38:2c:47:dc:07:92:03:ad:63:3b:99:26:f2:fd:10:5c:0b:
19:ec:f0:a9:eb:47:7a:ea:78:f7:9b:65:29:62:5c:c7:21:0f:
25:d5:bc:b3
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISAZQoJ4llCUg1WAuDPozpO6TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTRmZTI4MGU4OTcxNjVhZWM0MDA2ZWVjNTFkZDNlMDk0OWRlYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4hj7xw+2Fy1vImcEKdvBrBlEP9b
vw6Cz81pOaOfTOTaBSoVmjeUaxzB0P4oWN1bJayQ372tCjPiK/y2/tWXwyVN2VZF
5Deg9TRrZ9UxAztXXaMdVK0Fz6X5BhKFIjazJhg8/hOXqNvXfQWWdzDuDhOSMyQl
TixvbdyAtuUItI0dQBvANvnHaSoyGnESGtAgucMn5Imy6d0Qz1g6d4aSwxfPESvw
S8xylsBNvBDhRYsc5rWkgQPumg8xpEZTE6n6a1VyMPLUSia0mKnTjbHOtl22S/lP
9RpbdR48gPBGLw4pddDSHW/0DPX2EfjnltYfIF00G7hQqwA5JZCU8hSa6QIDAQAB
o4IDgzCCA38wHQYDVR0OBBYEFL5P4oDolxZa7EAG7sUd0+CUnerRMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvdmtfaWdPaVhGbHJzUUFidXhSM1Q0SlNkNnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlwYIKwYBBQUHAQcBAf8EggGGMIIBgjCCAW8EAgABMIIB
ZwMEBS74gAMDADmFAwMAOgADBAc6AYADAwA+FwMEBT5IYAMEBT5UwAMDAD5gAwQG
PmFAAwQFPphgAwQFPsAAAwQGTo8AAwQFTpxAAwQFUFAAAwMAUKkDBAVQ+6ADBAVS
cMADAwBUDgMEBVQQoAMEBVVYgAMEBlfxAAMEB3RTAAMEBXZD4AMDAIjhAwQDnXjg
MAsDBAKdeOwDAwCdeAMEBcFSIAMEAsFdUAMEBcFyoAMEBcF2oAMEBcF24AMEAcG8
hDAMAwQHwt+AAwQCwt+IAwQHw0QAAwQFw25AAwQF1ABgAwQF1BfgAwQF1B/gAwQF
1CNgAwQG1CSAAwQF1EpAAwQF1E6gAwQF1HmAAwQG1HvAAwQH1KEAAwQG1MtAAwQH
1RuAAwQH1SkAAwMA1T0DAwDVVgMEBdWkAAMEBdWtoAMEBdW5oAMEBtXQwAMEB9XX
gAMEBtXlgAMEBtX2wAMDAdluAwQE2a1gMA0EAgACMAcDBQMgAQkgMA0GCSqGSIb3
DQEBCwUAA4IBAQCKQyjknOvWDq403ATP2Ai+c6Ppz+RSI/2UZ3ntyJ0tawEsPznU
jcPX+eRb2179cLqHmbEZwuQ5mXxqootp1Li0RvK8h2vVdOg8gsv+HhSenhtiVTqm
LbA53V1SYbxvX7/W2Kzu3jnPkVNpJw619SkEUtb1/Xbr7gMXuO00MgVRGO6Zmm/Q
WRPoOeBH3Xvn2qvOk9OlbebWZLVeIgMva201Jp4CLGp5XAzyxmU1/oEIYMWDw5JZ
Nb+9SMwKzpzSLEjqXV9hKqmSDMK77s4k7dwbrVJ2rPMOFnf4OCxH3AeSA61jO5km
8v0QXAsZ7PCp60d66nj3m2UpYlzHIQ8l1byz
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:05:51 2025 by rpki-client