Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/gLx8wb2KZis4S5W93c0VIApmAwE.roa
File: gLx8wb2KZis4S5W93c0VIApmAwE.roa (raw, json)
Hash identifier: 8+/WcoNoLZJjEdsIFRKcaINdeJgQO20GpUtjxSeoBLg=
Subject key identifier: 80:BC:7C:C1:BD:8A:66:2B:38:4B:95:BD:DD:CD:15:20:0A:66:03:01
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 018746C9AC67E82BFA08441962B0A9F58152
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/gLx8wb2KZis4S5W93c0VIApmAwE.roa
Signing time: Mon 03 Apr 2023 11:03:54 +0000
ROA not before: Mon 03 Apr 2023 11:03:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44444
IP address blocks: 157.167.200.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.160.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.161.0/24 maxlen: 24
157.167.162.0/24 maxlen: 24
157.167.192.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
86.111.223.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.48.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.57.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.38.0/24 maxlen: 24
85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Apr 2023 11:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:c9:ac:67:e8:2b:fa:08:44:19:62:b0:a9:f5:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Apr 3 11:03:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80bc7cc1bd8a662b384b95bdddcd15200a660301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:71:1a:8b:31:57:8c:b6:14:c2:9c:80:7a:
86:dd:99:63:ca:ca:c6:8b:ef:33:4c:2b:6a:fe:96:
64:f2:a3:83:7e:71:9d:41:20:6b:f6:c4:c0:c3:2e:
eb:a5:53:27:11:02:08:7f:c0:41:88:1f:b0:7c:7a:
36:cb:b4:eb:b4:51:f8:1f:c7:61:cc:95:f6:dd:dd:
e9:d6:45:31:e8:43:6e:f5:fe:e8:d0:fc:e9:79:82:
a1:5f:0d:c2:37:ea:85:58:78:28:90:5d:77:14:98:
ff:ad:c8:02:d7:a5:ff:51:46:7b:17:be:4f:78:53:
a3:5d:eb:7b:05:17:d4:41:24:81:ee:f4:bf:50:7f:
ae:59:94:5e:52:5f:40:2b:2f:d4:9a:3e:ea:83:e8:
98:14:f5:ed:8b:ab:8f:2f:d6:6d:76:8e:1b:a0:e1:
56:de:25:12:c2:fe:26:8f:d4:5f:c7:d5:b7:da:20:
6a:c1:7a:7c:4b:f7:d3:6a:30:e8:97:0b:0d:50:c2:
f6:e8:47:81:25:18:ff:b9:9e:50:99:94:a8:80:3f:
8c:85:c5:d9:23:56:5d:0d:aa:67:b8:41:d0:74:f8:
96:e0:55:47:16:e6:db:48:62:12:33:a5:4d:6a:33:
2e:63:2f:7c:7a:76:38:3e:16:dc:4a:83:81:15:f3:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:7C:C1:BD:8A:66:2B:38:4B:95:BD:DD:CD:15:20:0A:66:03:01
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/gLx8wb2KZis4S5W93c0VIApmAwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0/19
86.111.222.0/23
157.167.4.0/24
157.167.10.0-157.167.128.255
157.167.131.0-157.167.132.255
157.167.157.0-157.167.163.255
157.167.192.0/24
157.167.200.0/24
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
0c:db:2e:ae:53:c4:ae:cf:1e:f4:dd:6c:08:eb:d1:45:a9:f9:
08:b3:87:ee:19:5f:50:e6:52:2a:1a:66:ac:4f:b6:f3:42:3e:
88:ed:85:46:df:0b:3a:67:99:a3:8b:70:54:72:ef:92:c6:a7:
7d:14:7f:10:e0:a9:13:4d:eb:0f:f8:e1:a6:e5:4f:3e:fc:00:
2f:17:ff:d1:d8:b7:2b:b9:17:20:a8:33:c9:2a:ff:c1:6a:99:
9c:e9:bc:88:aa:85:48:85:5b:e8:e5:42:09:fb:51:52:eb:37:
c6:0d:05:cf:c1:47:44:54:28:41:ba:e5:bb:2d:9d:d7:41:75:
e5:d4:e1:f7:c6:10:26:38:3c:69:48:dd:b7:73:99:35:bd:43:
f7:30:47:ab:e5:5a:6e:45:b5:0a:db:52:36:fa:49:04:63:d8:
31:2d:9b:b5:ff:3e:f1:79:c1:40:78:e4:6a:f7:2d:78:42:bf:
bc:41:6b:95:f6:fb:69:4c:df:92:c1:0e:53:e1:57:83:fc:76:
5d:81:78:72:2c:b9:04:df:84:4f:ce:34:36:eb:1d:45:d1:5e:
cb:75:28:97:62:69:29:75:af:74:ad:30:d4:b7:bc:8d:f2:7e:
b5:f4:b8:d6:5b:2b:24:57:f0:34:65:db:18:a9:4e:e2:02:5b:
48:56:2e:53
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYdGyaxn6Cv6CEQZYrCp9YFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjMwNDAzMTEwMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGJjN2NjMWJkOGE2NjJiMzg0Yjk1YmRkZGNkMTUyMDBhNjYwMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwdxGosxV4y2FMKcgHqG3ZljysrG
i+8zTCtq/pZk8qODfnGdQSBr9sTAwy7rpVMnEQIIf8BBiB+wfHo2y7TrtFH4H8dh
zJX23d3p1kUx6ENu9f7o0PzpeYKhXw3CN+qFWHgokF13FJj/rcgC16X/UUZ7F75P
eFOjXet7BRfUQSSB7vS/UH+uWZReUl9AKy/Umj7qg+iYFPXti6uPL9Ztdo4boOFW
3iUSwv4mj9Rfx9W32iBqwXp8S/fTajDolwsNUML26EeBJRj/uZ5QmZSogD+MhcXZ
I1ZdDapnuEHQdPiW4FVHFubbSGISM6VNajMuYy98enY4PhbcSoOBFfMBqwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFIC8fMG9imYrOEuVvd3NFSAKZgMBMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvZ0x4OHdiMktaaXM0UzVXOTNjMFZJQXBtQXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQFVXMgAwQB
Vm/eAwQAnacEMAwDBAGdpwoDBACdp4AwDAMEAJ2ngwMEAJ2nhDAMAwQAnaedAwQC
naegAwQAnafAAwQAnafIMA0EAgACMAcDBQAgAUAQMA0GCSqGSIb3DQEBCwUAA4IB
AQAM2y6uU8Suzx703WwI69FFqfkIs4fuGV9Q5lIqGmasT7bzQj6I7YVG3ws6Z5mj
i3BUcu+Sxqd9FH8Q4KkTTesP+OGm5U8+/AAvF//R2LcruRcgqDPJKv/Bapmc6byI
qoVIhVvo5UIJ+1FS6zfGDQXPwUdEVChBuuW7LZ3XQXXl1OH3xhAmODxpSN23c5k1
vUP3MEer5VpuRbUK21I2+kkEY9gxLZu1/z7xecFAeORq9y14Qr+8QWuV9vtpTN+S
wQ5T4VeD/HZdgXhyLLkE34RPzjQ26x1F0V7LdSiXYmkpda90rTDUt7yN8n619LjW
WyskV/A0ZdsYqU7iAltIVi5T
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org