Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nkpO72Pp4amhz_eUlLsz_36Gdi0.roa
File: nkpO72Pp4amhz_eUlLsz_36Gdi0.roa (raw, json)
Hash identifier: zj6DqDt5WhuTSgBHrBCO8tgYTOOZV/e5S+UVTuTtHoU=
Subject key identifier: 9E:4A:4E:EF:63:E9:E1:A9:A1:CF:F7:94:94:BB:33:FF:7E:86:76:2D
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7FFEBEA04C324F43D889466023AFDADE
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nkpO72Pp4amhz_eUlLsz_36Gdi0.roa
Signing time: Wed 27 Mar 2024 12:59:45 +0000
ROA not before: Wed 27 Mar 2024 12:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 2.20.224.0/24 maxlen: 24
2.20.225.0/24 maxlen: 24
2.20.226.0/24 maxlen: 24
2.20.227.0/24 maxlen: 24
2.20.228.0/24 maxlen: 24
2.20.229.0/24 maxlen: 24
2.20.230.0/24 maxlen: 24
2.20.231.0/24 maxlen: 24
2.20.232.0/24 maxlen: 24
2.20.233.0/24 maxlen: 24
2.20.234.0/24 maxlen: 24
2.20.235.0/24 maxlen: 24
2.20.236.0/24 maxlen: 24
2.20.237.0/24 maxlen: 24
2.20.238.0/24 maxlen: 24
2.20.239.0/24 maxlen: 24
2.22.20.0/24 maxlen: 24
2.22.21.0/24 maxlen: 24
2.22.216.0/24 maxlen: 24
2.22.217.0/24 maxlen: 24
2.22.218.0/24 maxlen: 24
2.22.219.0/24 maxlen: 24
2.23.16.0/24 maxlen: 24
2.23.17.0/24 maxlen: 24
2.23.18.0/24 maxlen: 24
2.23.19.0/24 maxlen: 24
2.23.20.0/24 maxlen: 24
2.23.21.0/24 maxlen: 24
2.23.22.0/24 maxlen: 24
2.23.23.0/24 maxlen: 24
2.23.24.0/24 maxlen: 24
2.23.25.0/24 maxlen: 24
2.23.26.0/24 maxlen: 24
2.23.27.0/24 maxlen: 24
2.23.28.0/24 maxlen: 24
2.23.29.0/24 maxlen: 24
2.23.30.0/24 maxlen: 24
2.23.31.0/24 maxlen: 24
84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.122.0.0/21 maxlen: 21
92.122.8.0/22 maxlen: 22
92.122.12.0/22 maxlen: 22
92.122.16.0/22 maxlen: 22
92.122.20.0/22 maxlen: 22
92.122.24.0/22 maxlen: 22
92.122.32.0/21 maxlen: 21
92.122.44.0/22 maxlen: 22
92.122.60.0/22 maxlen: 22
92.122.64.0/22 maxlen: 22
92.122.72.0/22 maxlen: 22
92.122.76.0/22 maxlen: 22
92.122.80.0/22 maxlen: 22
92.122.88.0/22 maxlen: 22
92.122.96.0/22 maxlen: 22
92.122.104.0/22 maxlen: 22
92.122.108.0/22 maxlen: 22
92.122.144.0/22 maxlen: 22
92.122.148.0/22 maxlen: 22
92.122.160.0/22 maxlen: 22
92.122.196.0/22 maxlen: 22
92.122.246.0/23 maxlen: 23
92.122.248.0/24 maxlen: 24
92.122.249.0/24 maxlen: 24
92.122.250.0/24 maxlen: 24
92.122.251.0/24 maxlen: 24
92.123.4.0/22 maxlen: 22
92.123.16.0/22 maxlen: 22
92.123.20.0/22 maxlen: 22
92.123.28.0/22 maxlen: 22
92.123.32.0/22 maxlen: 22
92.123.36.0/22 maxlen: 22
92.123.44.0/22 maxlen: 22
92.123.50.0/23 maxlen: 23
92.123.52.0/22 maxlen: 22
92.123.56.0/22 maxlen: 22
92.123.80.0/22 maxlen: 22
92.123.84.0/22 maxlen: 22
92.123.88.0/22 maxlen: 22
92.123.112.0/22 maxlen: 22
92.123.148.0/22 maxlen: 22
92.123.156.0/22 maxlen: 22
92.123.164.0/22 maxlen: 22
92.123.172.0/22 maxlen: 22
92.123.176.0/22 maxlen: 22
92.123.184.0/22 maxlen: 22
92.123.196.0/22 maxlen: 22
92.123.200.0/22 maxlen: 22
92.123.204.0/22 maxlen: 22
92.123.216.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
92.123.252.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
95.101.80.0/22 maxlen: 22
95.101.84.0/22 maxlen: 22
95.101.88.0/22 maxlen: 22
95.101.92.0/22 maxlen: 22
95.101.96.0/22 maxlen: 22
95.101.100.0/22 maxlen: 22
95.101.104.0/22 maxlen: 22
95.101.124.0/22 maxlen: 22
95.101.144.0/22 maxlen: 22
95.101.148.0/22 maxlen: 22
95.101.152.0/22 maxlen: 22
95.101.160.0/22 maxlen: 22
95.101.164.0/22 maxlen: 22
95.101.172.0/22 maxlen: 22
95.101.176.0/22 maxlen: 22
95.101.184.0/22 maxlen: 22
95.101.188.0/22 maxlen: 22
95.101.192.0/22 maxlen: 22
95.101.196.0/22 maxlen: 22
95.101.200.0/22 maxlen: 22
95.101.208.0/20 maxlen: 20
95.101.224.0/22 maxlen: 22
95.101.240.0/20 maxlen: 20
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Mar 2024 14:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:fe:be:a0:4c:32:4f:43:d8:89:46:60:23:af:da:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 27 12:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e4a4eef63e9e1a9a1cff79494bb33ff7e86762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:4b:b0:37:dd:f8:f0:cc:5d:15:96:0f:2b:
43:9a:a6:1b:27:34:57:63:06:61:4f:2f:9b:57:d2:
20:e3:d9:27:06:9a:2b:66:b5:3d:dd:3d:85:98:b8:
bb:70:20:3f:14:d1:85:4e:7c:03:cf:cb:00:de:fe:
c3:ff:8c:d1:b5:63:cf:ac:38:52:61:da:23:bc:14:
d3:c4:42:ea:6a:2e:07:b3:65:48:ad:17:7d:6c:1f:
4c:16:08:46:b0:8a:0d:7f:b8:42:cf:7e:80:d2:f2:
07:a2:21:7d:2a:0e:8d:fd:9e:1a:7c:55:ec:0a:8e:
f9:ec:39:dc:9e:1f:04:a9:dc:56:15:62:dc:f9:0b:
3c:95:40:a8:7c:85:ef:77:92:d6:9d:74:07:07:ff:
67:72:05:9d:a1:c2:42:ae:2a:cb:d4:02:12:41:55:
3b:dc:a3:ec:74:e6:e8:9d:3b:85:57:6e:ce:7e:f8:
6c:83:fe:bd:84:23:33:5f:98:e1:d7:2f:86:37:0b:
90:2d:69:84:b2:1f:1a:b2:a5:3c:ae:9f:a8:bf:ff:
f2:cb:6d:42:94:b4:4c:20:35:80:22:10:61:c7:81:
d2:30:d2:1d:64:6a:2d:77:b8:2b:1f:dd:1a:88:9a:
46:d0:f5:11:91:f9:09:8b:cc:56:1c:68:8a:b7:ef:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:4E:EF:63:E9:E1:A9:A1:CF:F7:94:94:BB:33:FF:7E:86:76:2D
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nkpO72Pp4amhz_eUlLsz_36Gdi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.20.224.0/20
2.22.20.0/23
2.22.216.0/22
2.23.16.0/20
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.122.0.0-92.122.27.255
92.122.32.0/21
92.122.44.0/22
92.122.60.0-92.122.67.255
92.122.72.0-92.122.83.255
92.122.88.0/22
92.122.96.0/22
92.122.104.0/21
92.122.144.0/21
92.122.160.0/22
92.122.196.0/22
92.122.246.0-92.122.251.255
92.123.4.0/22
92.123.16.0/21
92.123.28.0-92.123.39.255
92.123.44.0/22
92.123.50.0-92.123.59.255
92.123.80.0-92.123.91.255
92.123.112.0/22
92.123.148.0/22
92.123.156.0/22
92.123.164.0/22
92.123.172.0-92.123.179.255
92.123.184.0/22
92.123.196.0-92.123.207.255
92.123.216.0/22
92.123.240.0/22
92.123.252.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
95.101.80.0-95.101.107.255
95.101.124.0/22
95.101.144.0-95.101.155.255
95.101.160.0/21
95.101.172.0-95.101.179.255
95.101.184.0-95.101.203.255
95.101.208.0-95.101.227.255
95.101.240.0/20
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:c2:a4:c8:7d:c3:6a:f0:34:04:1b:22:91:a4:f0:a0:7c:1a:
31:fa:ef:aa:55:42:52:45:f3:d0:78:cc:f2:db:13:04:59:65:
04:a8:01:f1:51:3e:2e:db:7f:6c:86:5a:9f:fc:22:7d:f8:55:
3c:3c:74:11:ad:4c:0f:14:06:95:f6:34:d6:49:08:81:b6:93:
2a:eb:f3:b3:04:9e:4b:27:2c:34:0a:7a:c5:7c:13:20:3b:6b:
81:d8:3d:a8:94:a7:ad:08:1c:8b:bf:cd:ab:c5:9a:e5:25:55:
0e:91:bd:ea:4c:90:93:a2:d6:87:7c:f5:63:1d:12:a7:49:a1:
d4:dc:15:0e:ae:eb:dd:a7:47:b6:07:20:bc:5a:3a:1e:20:0f:
72:e8:99:58:9d:ce:7c:03:db:47:a5:fb:95:b5:c6:54:9c:48:
7b:6c:40:34:df:48:96:15:cb:9b:51:d9:8c:9c:14:e7:77:24:
d1:ac:de:5e:8a:e0:aa:82:f5:a6:5b:e7:83:32:c0:a7:71:77:
91:2a:0b:00:bc:21:b4:33:4b:c0:62:6a:e0:77:58:7b:db:dc:
c9:0b:eb:93:5f:97:ec:83:c9:27:b8:7f:7b:c0:aa:dd:ff:76:
8e:ab:03:39:aa:31:61:63:3a:f5:ac:70:29:f1:7b:f5:94:ef:
e3:7f:f4:53
-----BEGIN CERTIFICATE-----
MIIHgDCCBmigAwIBAgISAY5//r6gTDJPQ9iJRmAjr9reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzI3MTI1OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTRhNGVlZjYzZTllMWE5YTFjZmY3OTQ5NGJiMzNmZjdlODY3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBLsDfd+PDMXRWWDytDmqYbJzRX
YwZhTy+bV9Ig49knBporZrU93T2FmLi7cCA/FNGFTnwDz8sA3v7D/4zRtWPPrDhS
YdojvBTTxELqai4Hs2VIrRd9bB9MFghGsIoNf7hCz36A0vIHoiF9Kg6N/Z4afFXs
Co757Dncnh8EqdxWFWLc+Qs8lUCofIXvd5LWnXQHB/9ncgWdocJCrirL1AISQVU7
3KPsdObonTuFV27Ofvhsg/69hCMzX5jh1y+GNwuQLWmEsh8asqU8rp+ov//yy21C
lLRMIDWAIhBhx4HSMNIdZGotd7grH90aiJpG0PURkfkJi8xWHGiKt+/N7QIDAQAB
o4IEjDCCBIgwHQYDVR0OBBYEFJ5KTu9j6eGpoc/3lJS7M/9+hnYtMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvbmtwTzcyUHA0YW1oel9lVWxMc3pfMzZHZGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICoAYIKwYBBQUHAQcBAf8EggKPMIICizCCAocEAgABMIIC
fwMEBAIU4AMEAQIWFAMEAgIW2AMEBAIXEAMEAlQ1nAMEAlQ1pAMEAlQ1vDAMAwQC
WN0EAwQCWN0IAwQCWN0QAwQEWN0gMAwDBAFY3ToDBAZY3QADBAJY3UQDBAJY3UwD
BAJY3WADBAJY3XwDBAFY3YIDBANY3YgwDAMEAljdlAMEBVjdgDAMAwQCWN2kAwQC
WN2oAwQDWN2wAwQDWN3gMAwDBAJY3ewDBAJY3fgwCwMDAVx6AwQCXHoYAwQDXHog
AwQCXHosMAwDBAJcejwDBAJcekAwDAMEA1x6SAMEAlx6UAMEAlx6WAMEAlx6YAME
A1x6aAMEA1x6kAMEAlx6oAMEAlx6xDAMAwQBXHr2AwQCXHr4AwQCXHsEAwQDXHsQ
MAwDBAJcexwDBANceyADBAJceywwDAMEAVx7MgMEAlx7ODAMAwQEXHtQAwQCXHtY
AwQCXHtwAwQCXHuUAwQCXHucAwQCXHukMAwDBAJce6wDBAJce7ADBAJce7gwDAME
Alx7xAMEBFx7wAMEAlx72AMEAlx78AMEAlx7/AMEBF9kEDAMAwQBX2QuAwQCX2RQ
AwQEX2RwAwQDX2SIAwQCX2SgAwQCX2SwMAwDBAFfZLYDBAZfZIADBAJfZNADBAJf
ZNgDBARfZOADBAJfZPQDBAFfZPoDBANfZQAwDAMEAV9lDgMEAl9lEDAMAwQDX2Uo
AwQCX2UwAwQCX2U4AwQDX2VAMAwDBARfZVADBAJfZWgDBAJfZXwwDAMEBF9lkAME
Al9lmAMEA19loDAMAwQCX2WsAwQCX2WwMAwDBANfZbgDBAJfZcgwDAMEBF9l0AME
Al9l4AMEBF9l8AMEAsNfwDANBgkqhkiG9w0BAQsFAAOCAQEApMKkyH3DavA0BBsi
kaTwoHwaMfrvqlVCUkXz0HjM8tsTBFllBKgB8VE+Ltt/bIZan/wiffhVPDx0Ea1M
DxQGlfY01kkIgbaTKuvzswSeSycsNAp6xXwTIDtrgdg9qJSnrQgci7/Nq8Wa5SVV
DpG96kyQk6LWh3z1Yx0Sp0mh1NwVDq7r3adHtgcgvFo6HiAPcuiZWJ3OfAPbR6X7
lbXGVJxIe2xANN9IlhXLm1HZjJwU53ck0azeXorgqoL1plvngzLAp3F3kSoLALwh
tDNLwGJq4HdYe9vcyQvrk1+X7IPJJ7h/e8Cq3f92jqsDOaoxYWM69axwKfF79ZTv
43/0Uw==
-----END CERTIFICATE-----
Generated at Wed Mar 27 20:11:34 2024 by rpki-client on console.sobornost.net