Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/k2JZ993_ONe3TvP06Xp06GUx1RQ.roa
File: k2JZ993_ONe3TvP06Xp06GUx1RQ.roa (raw, json)
Hash identifier: mKF16UiSzZGLWjMAdpdjgdwpmoa/tBXuQgxj1hjNUO0=
Subject key identifier: 93:62:59:F7:DD:FF:38:D7:B7:4E:F3:F4:E9:7A:74:E8:65:31:D5:14
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D7DCEB7417046D52C4388F1B54768F3E1
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/k2JZ993_ONe3TvP06Xp06GUx1RQ.roa
Signing time: Tue 06 Feb 2024 09:45:15 +0000
ROA not before: Tue 06 Feb 2024 09:45:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.172.0/22 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.172.0/22 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.64.0/21 maxlen: 24
89.34.112.0/21 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.35.84.0/22 maxlen: 24
89.35.200.0/22 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.116.254.0/24 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.136.0/22 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 10:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:ce:b7:41:70:46:d5:2c:43:88:f1:b5:47:68:f3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 6 09:45:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=936259f7ddff38d7b74ef3f4e97a74e86531d514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:fb:6c:27:4f:d5:be:e4:fe:ff:91:28:f9:
23:7b:85:95:0f:93:ab:87:be:47:b0:9a:f8:d0:f9:
99:e5:d6:36:0c:1a:2c:c3:f4:5a:a9:0d:66:a4:2a:
43:c0:7c:25:dd:f8:c2:26:4c:55:d4:ad:0e:9d:34:
6d:44:16:06:f1:35:c7:f5:f3:32:96:ea:77:22:c0:
d5:9f:30:90:2b:b5:7f:4e:4a:e1:b7:42:0a:57:99:
33:29:b3:5e:8f:5b:76:60:ef:2f:5b:ef:22:ce:30:
88:6f:ab:7a:79:c9:d2:ee:29:5a:ff:91:13:90:3e:
46:5e:62:62:43:45:31:c3:3a:89:ed:0c:6a:2f:f1:
66:dd:2f:0a:b1:5c:c6:43:6e:a3:76:9c:0f:77:ed:
3c:a3:65:46:f4:43:da:f1:c0:3c:1d:1c:a0:aa:20:
55:d9:d2:8a:57:b7:73:47:32:ab:e7:ae:99:7f:0b:
31:00:e6:b2:e5:42:13:77:2b:dd:5f:e6:3d:e7:77:
4f:80:61:97:06:16:0e:ae:e5:cb:68:15:76:d4:bf:
63:b6:59:78:c2:4c:93:b8:c5:c7:23:01:dd:ef:fc:
33:b8:b6:2a:ac:b5:45:43:cd:f0:dc:e8:42:40:94:
e7:16:9f:23:58:6a:d3:5a:81:d5:9a:2f:e1:f5:39:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:59:F7:DD:FF:38:D7:B7:4E:F3:F4:E9:7A:74:E8:65:31:D5:14
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/k2JZ993_ONe3TvP06Xp06GUx1RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.144.0/22
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:9c:e3:3d:5f:e8:0a:eb:9e:6d:06:7c:da:f9:c7:82:14:7d:
ce:a1:a1:32:13:8f:d1:51:22:1d:1e:ae:70:8e:b6:3d:70:3a:
ad:2b:3d:74:9a:9c:3e:22:b2:0f:f8:df:89:0f:85:75:36:94:
ff:d0:d5:b1:45:f1:4a:59:33:85:09:8d:a7:46:63:c7:a8:cf:
3d:be:a7:c2:b8:91:a9:aa:b2:54:29:87:c8:be:d6:d8:c7:be:
4e:0a:a2:ec:83:0c:50:33:79:c3:fe:8b:0a:4e:b6:1c:1d:ca:
c4:fe:c6:a7:97:f0:05:ba:a9:18:0d:c7:31:72:32:08:d3:9e:
71:fd:72:73:c2:76:01:af:d5:4a:e2:0d:83:c8:ee:8b:8b:16:
3b:af:14:4a:09:1e:b7:96:52:34:e9:ea:fc:d6:b2:4e:85:ea:
0a:5c:2a:02:93:72:a4:b5:41:13:46:0b:c3:96:88:57:c2:af:
3e:c0:4e:71:22:c6:f3:fd:3b:4d:65:d1:63:5f:54:80:18:2d:
f8:6a:33:cd:81:3d:25:25:28:8f:4d:64:65:75:75:36:b8:af:
e0:18:84:31:a4:69:80:60:e8:d5:e2:2f:01:f2:1a:d2:09:88:
8d:cb:05:60:50:1e:34:da:e3:b3:76:22:af:34:d7:9c:c7:76:
2b:1f:f2:6c
-----BEGIN CERTIFICATE-----
MIIHnDCCBoSgAwIBAgISAY19zrdBcEbVLEOI8bVHaPPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjQwMjA2MDk0NTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzYyNTlmN2RkZmYzOGQ3Yjc0ZWYzZjRlOTdhNzRlODY1MzFkNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt77bCdP1b7k/v+RKPkje4WVD5Or
h75HsJr40PmZ5dY2DBosw/RaqQ1mpCpDwHwl3fjCJkxV1K0OnTRtRBYG8TXH9fMy
lup3IsDVnzCQK7V/Tkrht0IKV5kzKbNej1t2YO8vW+8izjCIb6t6ecnS7ila/5ET
kD5GXmJiQ0UxwzqJ7QxqL/Fm3S8KsVzGQ26jdpwPd+08o2VG9EPa8cA8HRygqiBV
2dKKV7dzRzKr566ZfwsxAOay5UITdyvdX+Y953dPgGGXBhYOruXLaBV21L9jtll4
wkyTuMXHIwHd7/wzuLYqrLVFQ83w3OhCQJTnFp8jWGrTWoHVmi/h9Tk7xQIDAQAB
o4IEqDCCBKQwHQYDVR0OBBYEFJNiWffd/zjXt07z9Ol6dOhlMdUUMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvazJKWjk5M19PTmUzVHZQMDZYcDA2R1V4MVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICvAYIKwYBBQUHAQcBAf8EggKrMIICpzCCAqMEAgABMIIC
mwMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkAMEBFZq0AMEAlZrQAMEA1ZroAMEA1kgOAMEA1kg
iAMEAlkgrAMEAlkg/AMEA1kiQAMEA1kicAMEA1kiwAMEAlkizAMEAlki6AMEA1kj
CAMEA1kjKAMEAlkjVAMEAlkjyAMEAlkknAMEAlklLAMEAFklaAMEAlkmIAMEAlkm
QAMEAlkmTAMEAlknTAMEAlknVAMEA1knYAMEA1kncAMEAlko5AMEBlkpQAMEAlkq
QAMEA1kqSAMEAlkqaAMEAlkqgAMEAlkqtAMEAlkq4AMEAlkrgAMEAlkrqAMEAlks
mAMEAlktKAMEAlkupAMEB1xygAMEA11xQAMEA11xUAMEAl1xXAMEAl1x9AMEA11z
iAMDAF10AwQEXXUwMAwDBAJddUQDBARddUADBANddYAwDAMEAl11jAMEA111kDAM
AwQCXXWcAwQCXXWoAwQCXXawAwQCXXa8AwQDXXdgAwQCXXdsAwQDXXeAMAwDBAJd
d4wDBANdd5ADBANdd6AwDAMEAl13xAMEBF13wDAMAwQCXXfkAwQEXXfgAwQEXrBA
AwMAbbkwDAMEBLKEcAMEBbKEgAMEArkcaAMEArzQYAMEArzQaAMEArzQcAMEA7zQ
eAMEArzQwAMEArzQzAMEA7zR2DAMAwQEvNLwAwQCvNL4AwQCvNQAAwQDvNQIAwQD
vNQYAwQDvNQoAwQCvNUkAwQCvNU0AwQCvNXcAwQCvNXsAwQCvNX0AwQCvNY8AwQC
vNaIAwQCvNaQAwQDvNbIAwQCvNbkAwQCvNfsAwQCvNf8AwMAvO0DBAXUAMAwDQYJ
KoZIhvcNAQELBQADggEBAI+c4z1f6Arrnm0GfNr5x4IUfc6hoTITj9FRIh0ernCO
tj1wOq0rPXSanD4isg/434kPhXU2lP/Q1bFF8UpZM4UJjadGY8eozz2+p8K4kamq
slQph8i+1tjHvk4KouyDDFAzecP+iwpOthwdysT+xqeX8AW6qRgNxzFyMgjTnnH9
cnPCdgGv1UriDYPI7ouLFjuvFEoJHreWUjTp6vzWsk6F6gpcKgKTcqS1QRNGC8OW
iFfCrz7ATnEixvP9O01l0WNfVIAYLfhqM82BPSUlKI9NZGV1dTa4r+AYhDGkaYBg
6NXiLwHyGtIJiI3LBWBQHjTa47N2Iq8015zHdisf8mw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:14 2025 by rpki-client