Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C1e00GrNNUfHmwcMVUIT_GtbEik.roa
File: C1e00GrNNUfHmwcMVUIT_GtbEik.roa (raw, json)
Hash identifier: 3dgc6bK1rcbNVNcJKgntNGi7bgO3S8gdKLuUiewZIto=
Subject key identifier: 0B:57:B4:D0:6A:CD:35:47:C7:9B:07:0C:55:42:13:FC:6B:5B:12:29
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018D63973132E8EF2E9865EBE1C760BED7E0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C1e00GrNNUfHmwcMVUIT_GtbEik.roa
Signing time: Thu 01 Feb 2024 07:34:29 +0000
ROA not before: Thu 01 Feb 2024 07:34:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
46.10.0.0/16 maxlen: 24
46.10.166.0/23 maxlen: 24
46.10.193.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
62.73.64.0/18 maxlen: 24
62.176.64.0/19 maxlen: 24
62.176.96.0/19 maxlen: 24
62.176.117.0/24 maxlen: 24
62.176.124.54/32 maxlen: 32
77.85.0.0/16 maxlen: 24
77.85.128.0/19 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
78.154.0.0/19 maxlen: 24
79.100.0.0/16 maxlen: 24
82.137.64.0/18 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
83.148.64.0/18 maxlen: 24
83.228.0.0/17 maxlen: 24
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
84.238.128.0/22 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
87.116.64.0/22 maxlen: 24
87.116.66.160/32 maxlen: 32
87.116.72.0/21 maxlen: 24
87.126.0.0/16 maxlen: 24
87.243.80.0/20 maxlen: 24
87.243.96.0/21 maxlen: 24
87.243.104.0/21 maxlen: 24
87.243.112.0/22 maxlen: 22
87.243.116.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
89.25.64.0/21 maxlen: 24
89.25.72.0/22 maxlen: 24
90.154.128.0/17 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
94.236.180.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
95.42.0.0/15 maxlen: 24
95.43.0.0/17 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
95.87.192.0/18 maxlen: 24
151.237.140.0/23 maxlen: 24
185.20.156.0/22 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.16.32.0/19 maxlen: 24
213.91.128.0/17 maxlen: 24
213.91.154.0/24 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8:2:5::/64 maxlen: 64
Validation: Failed, certificate revoked on Fri 02 Feb 2024 14:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:97:31:32:e8:ef:2e:98:65:eb:e1:c7:60:be:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Feb 1 07:34:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b57b4d06acd3547c79b070c554213fc6b5b1229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:fe:02:dd:16:f5:f6:09:e2:4e:4a:18:bc:
aa:6b:55:34:df:77:af:50:ff:d8:d6:6e:34:0d:ec:
2b:8f:84:16:e0:32:32:9c:4c:bd:b7:b0:f0:ba:60:
25:24:6a:3f:7c:8a:6b:1a:f9:82:75:cd:57:f8:01:
0c:ef:b4:74:1f:d9:c5:4f:68:a0:68:47:17:36:8a:
81:84:68:2d:2f:2b:62:0e:2e:f0:6d:b3:1b:62:54:
1e:f7:69:bf:64:fa:6c:ba:d6:1c:db:23:bf:0c:f4:
e2:36:9d:51:70:4b:7c:53:f1:3a:f2:5c:c6:25:15:
c6:fb:46:bc:0d:3e:e0:72:a5:a8:08:62:88:64:ee:
b5:da:9f:3c:86:bd:b7:cb:cc:19:f1:5e:49:b7:45:
3a:4e:71:67:8c:fa:18:a3:ea:72:1c:6a:9f:b3:c5:
6c:0a:6a:2a:12:73:31:93:c2:6e:32:88:94:3a:74:
1f:39:ff:3c:8d:53:20:ce:0d:c5:d2:65:ed:cb:5d:
b9:2f:1d:8c:d2:58:15:43:32:d2:30:36:94:50:a1:
2c:6c:49:f2:da:24:e0:a3:a3:39:fe:61:7c:c8:7f:
b8:f0:d1:c2:b6:ca:e2:7e:9d:3f:05:14:7c:d4:60:
53:a1:15:5d:36:13:c1:00:77:ca:fc:52:1c:b2:2f:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:B4:D0:6A:CD:35:47:C7:9B:07:0C:55:42:13:FC:6B:5B:12:29
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C1e00GrNNUfHmwcMVUIT_GtbEik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.64.0/22
87.116.72.0/21
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.64.0-89.25.75.255
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.112.0-94.155.123.255
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
09:21:4f:56:e1:78:c0:ce:5d:97:18:82:42:6a:f7:97:18:6b:
52:23:0d:48:fc:41:cc:dc:e8:e1:92:8a:ba:87:72:d3:1c:fb:
ac:5a:ab:a7:77:91:75:8b:2c:ae:52:3a:e3:f4:00:fd:36:f4:
01:04:cc:fe:64:9d:cb:c3:b1:d1:65:dc:a8:41:06:1d:21:f8:
9c:96:18:32:04:c9:1e:52:56:9e:4f:5c:30:d6:bb:dd:7b:ca:
4d:90:d6:4f:69:12:b7:f0:f8:67:91:01:56:e8:da:cd:61:87:
2c:c6:bf:b2:03:d2:61:ed:2d:67:e4:92:a1:ce:47:ae:8f:d7:
4f:9c:7d:29:b7:4b:59:99:17:4b:d7:53:79:41:80:a8:80:de:
0c:83:f4:e5:85:05:e7:32:8e:12:6a:ab:b1:b4:8b:ab:37:46:
a8:32:36:18:97:dd:24:90:c9:d4:8c:64:d2:3d:5e:e0:f7:62:
10:e8:8f:75:fc:53:3a:ea:12:1f:f8:57:86:8b:12:0e:43:3f:
9d:22:e1:57:78:56:bf:2d:18:0a:11:2a:38:fd:f9:ab:bf:4d:
bc:88:5b:47:0c:5f:3b:2e:d5:12:ff:21:e6:56:5d:4b:7b:a7:
b7:96:94:96:cc:c4:03:14:75:09:83:13:9c:36:96:9a:8e:a2:
44:ba:82:30
-----BEGIN CERTIFICATE-----
MIIGyDCCBbCgAwIBAgISAY1jlzEy6O8umGXr4cdgvtfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMjAxMDczNDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjU3YjRkMDZhY2QzNTQ3Yzc5YjA3MGM1NTQyMTNmYzZiNWIxMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcf+At0W9fYJ4k5KGLyqa1U033ev
UP/Y1m40Dewrj4QW4DIynEy9t7DwumAlJGo/fIprGvmCdc1X+AEM77R0H9nFT2ig
aEcXNoqBhGgtLytiDi7wbbMbYlQe92m/ZPpsutYc2yO/DPTiNp1RcEt8U/E68lzG
JRXG+0a8DT7gcqWoCGKIZO612p88hr23y8wZ8V5Jt0U6TnFnjPoYo+pyHGqfs8Vs
CmoqEnMxk8JuMoiUOnQfOf88jVMgzg3F0mXty125Lx2M0lgVQzLSMDaUUKEsbEny
2iTgo6M5/mF8yH+48NHCtsrifp0/BRR81GBToRVdNhPBAHfK/FIcsi84ywIDAQAB
o4ID1DCCA9AwHQYDVR0OBBYEFAtXtNBqzTVHx5sHDFVCE/xrWxIpMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvQzFlMDBHck5OVWZIbXdjTVZVSVRfR3RiRWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB6AYIKwYBBQUHAQcBAf8EggHXMIIB0zCCAbkEAgABMIIB
sQMEAyWdiAMEBSWdoAMDAC4KAwQFLvlAAwQGPklAAwQGPrBAAwMATVUDBAVOmgAD
AwBPZAMEBlKJQAMEAlKSAAMEAVKSBgMEAFKSCwMEAVKSGAMEAVKSHAMEAFKSHwME
BlOUQAMEB1PkAAMEBlQoQAMEAlTugDAMAwQBVO6GAwQFVO6AAwQAVO6lMAwDBABU
7qcDBARU7qAwDAMEAVTusgMEA1TusAMEAlTuwAMEAlTuzDAMAwQBVbsWAwQDVbsg
AwQBVbsuAwQGVbtAAwQCV3RAAwQDV3RIAwMAV34wDAMEBFfzUAMEB1fzADAMAwQG
WRlAAwQCWRlIAwQHWpqAMAwDBAZem0ADBAJem1AwDAMEBF6bcAMEAl6beDAMAwQE
XuyQAwQGXuyAAwQBXuzMAwQBXuzkAwQAXuznAwQBXuzqAwQAXuzuAwQEXuzwAwMB
XyoDBAZfV8ADBAGX7YwDBAK5FJwDBAXUBYADBAXUJ0ADBAHUSMYDBAHUSMoDBADU
SNQDBADUSNYDBADUSN0DBAXVECADBAfVW4ADBALVgkADBALVgkwDBAHVglwDBADV
gl8wFAQCAAIwDgMFACoADkADBQAqAQWoMA0GCSqGSIb3DQEBCwUAA4IBAQAJIU9W
4XjAzl2XGIJCaveXGGtSIw1I/EHM3Ojhkoq6h3LTHPusWqund5F1iyyuUjrj9AD9
NvQBBMz+ZJ3Lw7HRZdyoQQYdIficlhgyBMkeUlaeT1ww1rvde8pNkNZPaRK38Phn
kQFW6NrNYYcsxr+yA9Jh7S1n5JKhzkeuj9dPnH0pt0tZmRdL11N5QYCogN4Mg/Tl
hQXnMo4SaquxtIurN0aoMjYYl90kkMnUjGTSPV7g92IQ6I91/FM66hIf+FeGixIO
Qz+dIuFXeFa/LRgKESo4/fmrv028iFtHDF87LtUS/yHmVl1Le6e3lpSWzMQDFHUJ
gxOcNpaajqJEuoIw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org