Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/BUAZH33Hu83yZgrQz0IfrDgFUyE.roa
File: BUAZH33Hu83yZgrQz0IfrDgFUyE.roa (raw, json)
Hash identifier: izO0gwSZhQlyhh6Y6AYgkMzPH/OlkOSupG+XM10MlzU=
Subject key identifier: 05:40:19:1F:7D:C7:BB:CD:F2:66:0A:D0:CF:42:1F:AC:38:05:53:21
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018B60F3AA5CA780AB55F07F1BFCCB50650B
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/BUAZH33Hu83yZgrQz0IfrDgFUyE.roa
Signing time: Tue 24 Oct 2023 09:11:03 +0000
ROA not before: Tue 24 Oct 2023 09:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.192.0/18 maxlen: 18
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
31.214.146.0/23 maxlen: 23
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.225.0/24 maxlen: 24
82.99.224.0/19 maxlen: 19
82.99.232.0/24 maxlen: 24
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.230.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.224.0/24 maxlen: 24
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.82.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
109.230.242.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
109.230.247.0/24 maxlen: 24
95.156.233.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:f3:aa:5c:a7:80:ab:55:f0:7f:1b:fc:cb:50:65:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Oct 24 09:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0540191f7dc7bbcdf2660ad0cf421fac38055321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:ac:ca:e4:42:83:ca:4b:33:41:06:c5:25:
95:60:47:19:9f:f3:9e:c3:56:47:7e:08:1a:bf:2d:
8b:23:15:56:f1:ec:f8:88:3c:bd:d8:a2:b4:2d:37:
27:14:d8:c2:30:e8:6e:dc:ea:24:d7:e3:0d:c9:f4:
f0:3b:86:7b:58:a7:ea:c6:3e:c0:0a:c2:fd:2a:ec:
c3:8f:2e:5f:f2:80:c7:b0:41:98:ed:58:cf:6c:c5:
84:ca:88:ef:be:5f:5c:80:49:3c:71:c2:58:14:17:
69:14:6f:52:66:dd:46:68:b3:32:fd:98:f6:e5:89:
66:d0:1a:12:95:af:41:98:29:d6:34:f0:3c:87:be:
89:d3:68:ff:49:24:d9:1f:ef:42:06:a7:e4:9d:f0:
6f:df:cd:7c:df:0a:74:19:83:7a:f3:ae:4b:e5:9b:
5c:55:2c:1c:1a:b0:75:18:14:01:2f:b9:af:d6:b1:
bf:9f:46:d3:5b:b6:ff:0c:d2:0a:c0:25:f5:77:ee:
ff:40:3c:aa:37:c5:a5:5e:6d:f7:b0:b0:bc:7b:d3:
35:d6:2c:ac:fd:b7:ba:f0:10:63:ec:46:8f:d0:44:
e9:4d:66:47:52:32:1a:d0:92:e8:89:79:8f:85:22:
9e:4b:be:52:8c:bf:3c:fd:19:34:11:c9:56:f3:a4:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:19:1F:7D:C7:BB:CD:F2:66:0A:D0:CF:42:1F:AC:38:05:53:21
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/BUAZH33Hu83yZgrQz0IfrDgFUyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/16
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
185.10.71.0/24
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
57:bb:a9:63:d0:62:92:d1:65:1a:f7:98:f3:80:36:29:c9:46:
59:eb:38:89:7b:f1:7b:e1:4f:96:a9:7e:80:af:13:0f:6a:0e:
b3:54:f6:f2:63:4e:65:98:df:87:92:b0:02:d8:a1:27:3a:4e:
af:31:76:55:82:e5:1e:6a:17:d3:c3:f8:85:69:40:1d:b2:c4:
19:28:7e:d8:99:63:81:32:38:45:66:87:b4:e4:29:48:78:4b:
86:c3:d0:9f:5c:df:94:b5:23:ae:2c:02:1c:11:3f:8a:c5:b8:
5a:97:8d:e0:ee:e2:b1:4f:10:5e:23:3e:c3:de:ac:74:40:94:
88:9a:a1:0b:23:6b:ce:83:c9:20:f3:fe:6b:b3:cb:b9:fe:30:
58:4d:64:f4:95:f7:bc:9e:ce:50:3b:9a:8b:d5:c6:bc:5a:65:
ac:21:33:b2:9a:ec:14:f8:30:5d:4d:d2:d5:a1:44:61:bd:79:
6c:c0:4b:6c:63:69:f5:e0:ab:a5:81:d9:95:dc:f8:b8:a3:4d:
42:e1:8c:38:2e:52:27:67:e4:81:2b:6b:cf:08:93:a1:2f:70:
e6:4c:8a:be:e0:14:74:9b:3a:b2:a6:ad:78:46:ca:cb:10:ea:
b2:f0:ad:24:7a:fa:36:d3:18:b3:89:2c:0c:2e:ba:cd:10:28:
31:ce:32:02
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgISAYtg86pcp4CrVfB/G/zLUGULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjMxMDI0MDkxMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQwMTkxZjdkYzdiYmNkZjI2NjBhZDBjZjQyMWZhYzM4MDU1MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3isyuRCg8pLM0EGxSWVYEcZn/Oe
w1ZHfggavy2LIxVW8ez4iDy92KK0LTcnFNjCMOhu3Ook1+MNyfTwO4Z7WKfqxj7A
CsL9KuzDjy5f8oDHsEGY7VjPbMWEyojvvl9cgEk8ccJYFBdpFG9SZt1GaLMy/Zj2
5Ylm0BoSla9BmCnWNPA8h76J02j/SSTZH+9CBqfknfBv38183wp0GYN6865L5Ztc
VSwcGrB1GBQBL7mv1rG/n0bTW7b/DNIKwCX1d+7/QDyqN8WlXm33sLC8e9M11iys
/be68BBj7EaP0ETpTWZHUjIa0JLoiXmPhSKeS75SjL88/Rk0EclW86R7swIDAQAB
o4IC+DCCAvQwHQYDVR0OBBYEFAVAGR99x7vN8mYK0M9CH6w4BVMhMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvQlVBWkgzM0h1ODN5WmdyUXowSWZyRGdGVXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgfYEAgABMIHvAwQB
H9aEAwQBH9aSAwQAH9aaAwQDH9aoAwQBH9bIAwQCH9bkAwQDH9b4AwQCJQpAAwQA
JQptAwQAJQp1AwQAJeSDAwQAJeSFMAwDBAAl5IcDBAIl5IgDBAYuKcADBAAu++AD
BAAu++IDBAAu++0DBAZSY8ADAwBbYgMEAV+c3jAMAwQAX5zpAwQBX5zsAwQBX5z4
AwQBbebAAwQAbebIAwQCbebMAwQAbebdAwQAbebfAwQAbebyAwQBbeb2AwQAbeb7
AwQBhv/EAwQDhv/IMAwDBACG//UDBACG//YDBACG//kDBAC5CkcDBAK5DeQwDQYJ
KoZIhvcNAQELBQADggEBAFe7qWPQYpLRZRr3mPOANinJRlnrOIl78XvhT5apfoCv
Ew9qDrNU9vJjTmWY34eSsALYoSc6Tq8xdlWC5R5qF9PD+IVpQB2yxBkoftiZY4Ey
OEVmh7TkKUh4S4bD0J9c35S1I64sAhwRP4rFuFqXjeDu4rFPEF4jPsPerHRAlIia
oQsja86DySDz/muzy7n+MFhNZPSV97yezlA7movVxrxaZawhM7Ka7BT4MF1N0tWh
RGG9eWzAS2xjafXgq6WB2ZXc+LijTULhjDguUidn5IEra88Ik6EvcOZMir7gFHSb
OrKmrXhGyssQ6rLwrSR6+jbTGLOJLAwuus0QKDHOMgI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org