Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/tz4g0P4heB6o1vorknLTjv39u14.roa
File: tz4g0P4heB6o1vorknLTjv39u14.roa (raw, json)
Hash identifier: YoNzGR71mWw5VKBs3S8lFW+hQVpfVox+ywdWmSr2ewI=
Subject key identifier: B7:3E:20:D0:FE:21:78:1E:A8:D6:FA:2B:92:72:D3:8E:FD:FD:BB:5E
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 0186EEEAC2AED41A7B777631DC4131E552E9
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/tz4g0P4heB6o1vorknLTjv39u14.roa
Signing time: Fri 17 Mar 2023 09:33:28 +0000
ROA not before: Fri 17 Mar 2023 09:33:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44444
IP address blocks: 157.167.200.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
86.111.223.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.48.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.57.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.38.0/24 maxlen: 24
85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Mar 2023 11:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:ea:c2:ae:d4:1a:7b:77:76:31:dc:41:31:e5:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Mar 17 09:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b73e20d0fe21781ea8d6fa2b9272d38efdfdbb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:47:19:00:2b:36:66:62:5a:fd:96:76:f9:
68:9b:b8:18:f8:f5:65:d7:bf:b1:5a:63:7c:52:ea:
4e:ce:72:23:17:48:ea:1e:7e:1b:c0:d5:9f:c6:0e:
7d:bc:76:a3:98:ab:fe:1f:32:66:46:19:fc:db:2c:
a5:13:df:78:d4:cd:b4:e1:84:83:24:63:04:f4:94:
c5:9d:c3:3c:e4:aa:cc:b8:d6:e8:85:8c:bc:af:71:
ad:c1:18:13:69:88:93:2f:f7:cc:a7:4f:14:11:a2:
b6:45:0f:35:88:56:00:ef:65:8f:e1:33:03:e7:64:
ed:89:e1:a5:c7:c5:31:55:71:3e:fa:51:9d:65:74:
65:b8:ea:8b:66:ef:8c:f5:f3:0a:0a:4c:89:25:9e:
1a:a6:66:ff:9a:85:78:de:a7:45:01:05:28:4d:e6:
64:d1:b0:b1:fd:45:05:8c:37:bb:50:4e:ce:eb:32:
92:98:a5:1f:8f:04:c8:ca:94:69:51:07:7d:5e:3a:
4e:a4:73:b7:63:fe:40:c0:8b:39:a2:e9:4c:7c:d8:
27:0f:21:c6:0c:00:fe:bb:c1:c7:ef:dd:8c:4d:0d:
05:23:49:4e:dc:06:db:f8:2f:0b:da:7a:a4:df:d8:
0b:c8:01:b6:a2:c5:83:bb:60:e0:64:2a:8b:41:66:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:20:D0:FE:21:78:1E:A8:D6:FA:2B:92:72:D3:8E:FD:FD:BB:5E
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/tz4g0P4heB6o1vorknLTjv39u14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0-85.115.54.255
85.115.56.0/21
86.111.222.0/23
157.167.10.0-157.167.128.255
157.167.157.0/24
157.167.200.0/24
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
4c:17:ba:d4:b5:5a:0a:c5:ff:f9:29:4f:68:26:84:1a:c2:19:
98:12:08:2f:25:3c:44:ba:c8:07:9c:e2:6e:f6:af:2e:c7:b3:
8c:ed:e7:c4:7d:d1:9b:f0:69:b9:a1:ab:c9:ac:3a:9a:ab:83:
22:ed:fc:51:58:23:89:25:a3:1e:da:e2:0b:61:a1:41:1b:80:
e9:01:36:80:51:b1:39:4f:72:d4:00:b1:90:3e:89:7b:3c:f5:
29:c9:2d:11:a3:61:2e:d7:a1:e9:93:d5:8a:b6:5d:43:60:79:
3c:86:b6:5a:5c:84:3b:dc:3c:5e:5c:de:c4:65:ed:f7:49:75:
0b:43:28:9e:60:74:37:86:d4:ae:ac:83:df:c1:cf:e8:e7:5e:
1d:56:c7:8a:ee:f8:fa:2d:7c:fd:58:fd:55:c4:b7:66:d7:6c:
d7:75:05:61:8a:6c:98:c1:9d:8c:b2:cb:3c:8e:63:b6:db:65:
42:b8:f3:9c:36:a0:40:c4:8d:8c:2e:b8:45:22:20:89:93:39:
f9:8d:da:f5:c0:63:40:96:ae:18:22:b2:ae:4d:f9:50:59:d8:
f6:cf:3e:15:a2:2e:97:09:ea:40:13:9c:9f:cb:92:b4:8d:74:
c2:f5:df:80:c8:bd:c4:f5:d7:23:53:5c:37:17:f6:0e:87:c0:
40:e3:20:7c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAYbu6sKu1Bp7d3Yx3EEx5VLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjMwMzE3MDkzMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzNlMjBkMGZlMjE3ODFlYThkNmZhMmI5MjcyZDM4ZWZkZmRiYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhENHGQArNmZiWv2Wdvlom7gY+PVl
17+xWmN8UupOznIjF0jqHn4bwNWfxg59vHajmKv+HzJmRhn82yylE9941M204YSD
JGME9JTFncM85KrMuNbohYy8r3GtwRgTaYiTL/fMp08UEaK2RQ81iFYA72WP4TMD
52TtieGlx8UxVXE++lGdZXRluOqLZu+M9fMKCkyJJZ4apmb/moV43qdFAQUoTeZk
0bCx/UUFjDe7UE7O6zKSmKUfjwTIypRpUQd9XjpOpHO3Y/5AwIs5oulMfNgnDyHG
DAD+u8HH792MTQ0FI0lO3Abb+C8L2nqk39gLyAG2osWDu2DgZCqLQWa+mwIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFLc+IND+IXgeqNb6K5Jy0479/bteMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvdHo0ZzBQNGhlQjZvMXZvcmtuTFRqdjM5dTE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0MAwDBAVVcyAD
BABVczYDBANVczgDBAFWb94wDAMEAZ2nCgMEAJ2ngAMEAJ2nnQMEAJ2nyDANBAIA
AjAHAwUAIAFAEDANBgkqhkiG9w0BAQsFAAOCAQEATBe61LVaCsX/+SlPaCaEGsIZ
mBIILyU8RLrIB5zibvavLsezjO3nxH3Rm/BpuaGryaw6mquDIu38UVgjiSWjHtri
C2GhQRuA6QE2gFGxOU9y1ACxkD6Jezz1KcktEaNhLteh6ZPVirZdQ2B5PIa2WlyE
O9w8XlzexGXt90l1C0MonmB0N4bUrqyD38HP6OdeHVbHiu74+i18/Vj9VcS3Ztds
13UFYYpsmMGdjLLLPI5jtttlQrjznDagQMSNjC64RSIgiZM5+Y3a9cBjQJauGCKy
rk35UFnY9s8+FaIulwnqQBOcn8uStI10wvXfgMi9xPXXI1NcNxf2DofAQOMgfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org