Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IXyZb2jyIeY7s2TvzaFquhE_HFQ.roa
File: IXyZb2jyIeY7s2TvzaFquhE_HFQ.roa (raw, json)
Hash identifier: J/7oBtP4jd/6nyxICvo9Lh04w1N192ZiHzt9ChJGiCI=
Subject key identifier: 21:7C:99:6F:68:F2:21:E6:3B:B3:64:EF:CD:A1:6A:BA:11:3F:1C:54
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018B058A7CFFCD49F0355FDA64AF9FE36ADE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IXyZb2jyIeY7s2TvzaFquhE_HFQ.roa
Signing time: Fri 06 Oct 2023 15:10:43 +0000
ROA not before: Fri 06 Oct 2023 15:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:8a:7c:ff:cd:49:f0:35:5f:da:64:af:9f:e3:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 6 15:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=217c996f68f221e63bb364efcda16aba113f1c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:79:86:bc:65:75:d2:b5:f0:c0:49:58:a9:
53:48:48:36:7c:07:a0:34:3c:02:d1:8a:6a:27:89:
bb:61:7a:97:5c:3f:35:12:76:8b:37:d4:ce:77:ff:
de:34:ce:84:3f:4b:a4:c5:bd:a0:b7:2b:79:5b:35:
03:c8:c4:d5:5d:20:bd:37:30:11:b1:cb:55:04:d7:
64:96:11:5f:08:c0:27:be:87:bd:b3:f7:09:5f:72:
17:d1:a9:fd:23:c4:f8:59:6d:6c:8b:5b:5e:9b:75:
d2:f3:55:6c:2d:17:43:9d:63:e7:5d:bb:cf:c8:b1:
2e:10:60:52:60:ab:6c:12:ae:b9:a2:8b:6b:7b:2e:
50:bf:72:fd:30:ec:45:1b:e4:d2:00:d6:e9:78:e7:
86:9c:c3:59:33:65:87:32:0d:e5:98:4f:42:f0:f6:
4c:60:72:06:06:bb:5c:d8:74:b5:72:ab:71:1b:0e:
a4:79:53:8b:fa:3f:66:35:6c:a6:a1:da:39:ad:19:
72:a0:68:27:19:c5:db:82:8e:27:dd:d2:9c:ca:f3:
84:41:b7:55:36:04:54:a7:31:f9:fe:b2:ff:2e:dc:
58:42:ec:12:da:77:63:5f:72:d7:c8:b9:82:5b:19:
c8:c1:50:51:73:c9:f4:7c:c4:5e:d1:39:06:0b:06:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:99:6F:68:F2:21:E6:3B:B3:64:EF:CD:A1:6A:BA:11:3F:1C:54
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/IXyZb2jyIeY7s2TvzaFquhE_HFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
8b:38:61:3a:97:de:6d:b1:e0:2f:0d:9d:e6:2a:6f:59:72:37:
60:01:0d:ff:76:ed:d1:bf:83:27:c2:fa:55:16:7d:9c:b9:bd:
86:0a:b3:e8:c7:4b:30:5c:3c:44:46:05:bf:f1:7b:87:01:f4:
a0:63:de:1d:39:d4:cb:6d:d1:39:79:23:7b:1f:23:6e:11:01:
ce:aa:dd:ce:12:de:f9:56:52:9c:71:67:a1:24:21:a6:8a:bc:
f3:8e:22:b6:0a:c1:66:75:36:e3:23:40:bb:31:b0:0e:20:f6:
1c:7c:69:30:b5:f9:a9:e6:b9:50:4f:ce:ce:6f:a7:e4:07:c7:
5e:dd:56:0f:68:b3:23:14:f6:77:e5:38:08:5e:bb:e4:3b:62:
da:a0:50:f7:d3:76:0f:7c:e1:3d:6c:98:86:1a:25:5c:cc:58:
e6:0d:7c:de:9d:ed:32:d1:79:1b:43:aa:6c:83:b3:9a:29:3c:
13:5c:2e:9d:18:d7:17:a5:f4:2d:d4:32:f8:f5:b1:fe:44:58:
36:5d:bd:a6:b2:82:ab:ac:fb:a1:95:4f:63:bc:18:31:33:d1:
59:73:ce:05:65:94:aa:61:b1:44:24:bd:29:97:4c:52:0c:0a:
c3:52:2d:6a:72:b7:a5:70:1c:07:3f:50:a6:68:00:c9:81:38:
d5:47:ce:8f
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgISAYsFinz/zUnwNV/aZK+f42reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjMxMDA2MTUxMDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTdjOTk2ZjY4ZjIyMWU2M2JiMzY0ZWZjZGExNmFiYTExM2YxYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrN5hrxlddK18MBJWKlTSEg2fAeg
NDwC0YpqJ4m7YXqXXD81EnaLN9TOd//eNM6EP0ukxb2gtyt5WzUDyMTVXSC9NzAR
sctVBNdklhFfCMAnvoe9s/cJX3IX0an9I8T4WW1si1tem3XS81VsLRdDnWPnXbvP
yLEuEGBSYKtsEq65ootrey5Qv3L9MOxFG+TSANbpeOeGnMNZM2WHMg3lmE9C8PZM
YHIGBrtc2HS1cqtxGw6keVOL+j9mNWymodo5rRlyoGgnGcXbgo4n3dKcyvOEQbdV
NgRUpzH5/rL/LtxYQuwS2ndjX3LXyLmCWxnIwVBRc8n0fMRe0TkGCwY14wIDAQAB
o4IDyTCCA8UwHQYDVR0OBBYEFCF8mW9o8iHmO7Nk782haroRPxxUMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvSVh5WmIyanlJZVk3czJUdnphRnF1aEVfSEZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDCCAYsEAgABMIIB
gwMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+PoADBAc+aoADBAU+gaADBAY+8UAw
CgMDB02AAwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwVNgAMDBE3AAwMETnAD
BAVOm4ADAwRPUAMEBk+uwAMEBFBGIAMDAVB2AwMBUHwDBAdQ7AADBAZRAQADAwJR
QAMDAFG5AwMAUdwDAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFV
RAMDAlWoAwMEVkADAwBX5wMDA1iIAwMBWQIDAwJZnAMDAltEAwQEW5dwAwMDXFgD
AwVdAAMDBW0AAwQDjarYAwQCuZPMAwQFwgaAAwQFwrfAAwQEwvKwAwQGwwMAAwQF
wwdgAwQFw2JgAwMAw3MDAwDDhAMEBcOSwAMEBdQeYAMEBdQngAMEBdReoAMDANTG
AwQF1YAgAwQF1ZDAAwQF1amgAwQG1ctAAwMA1d8DAwDV9QMEBNkTwAMEBNlGUAME
BNlw4DA3BAIAAjAxAwUDKgBiAAMFACoAcYADBQAqAIOAAwUAKgCNgAMFACoAk4AD
BQAqAOyAAwUHKgKEADANBgkqhkiG9w0BAQsFAAOCAQEAizhhOpfebbHgLw2d5ipv
WXI3YAEN/3bt0b+DJ8L6VRZ9nLm9hgqz6MdLMFw8REYFv/F7hwH0oGPeHTnUy23R
OXkjex8jbhEBzqrdzhLe+VZSnHFnoSQhpoq8844itgrBZnU24yNAuzGwDiD2HHxp
MLX5qea5UE/Ozm+n5AfHXt1WD2izIxT2d+U4CF675Dti2qBQ99N2D3zhPWyYhhol
XMxY5g183p3tMtF5G0OqbIOzmik8E1wunRjXF6X0LdQy+PWx/kRYNl29prKCq6z7
oZVPY7wYMTPRWXPOBWWUqmGxRCS9KZdMUgwKw1ItanK3pXAcBz9QpmgAyYE41UfO
jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org