Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hWWiXOkumLzX8mAKDiGmlQuVkO0.roa
File: hWWiXOkumLzX8mAKDiGmlQuVkO0.roa (raw, json)
Hash identifier: 2oPAxMzZG+SrqHA4Ghy8q1n7372jCcB6pBf5Tr4SBNw=
Subject key identifier: 85:65:A2:5C:E9:2E:98:BC:D7:F2:60:0A:0E:21:A6:95:0B:95:90:ED
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018BC7D834ED9E1899E4FDBBD07C19BF19E1
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hWWiXOkumLzX8mAKDiGmlQuVkO0.roa
Signing time: Mon 13 Nov 2023 08:41:57 +0000
ROA not before: Mon 13 Nov 2023 08:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8717
IP address blocks: 89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
95.140.208.0/20 maxlen: 20
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
84.242.128.0/18 maxlen: 18
89.215.40.0/22 maxlen: 22
5.53.128.0/17 maxlen: 17
89.215.48.0/22 maxlen: 22
176.12.0.0/18 maxlen: 18
92.247.168.0/24 maxlen: 24
87.227.128.0/17 maxlen: 17
217.18.240.0/20 maxlen: 20
92.247.0.0/16 maxlen: 16
217.10.240.0/20 maxlen: 20
89.253.128.0/18 maxlen: 18
89.186.200.0/21 maxlen: 21
213.240.192.0/18 maxlen: 18
217.79.32.0/20 maxlen: 20
213.226.0.0/18 maxlen: 18
213.226.9.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.5.0/24 maxlen: 24
85.118.64.0/19 maxlen: 19
212.91.160.0/19 maxlen: 19
212.91.186.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
195.24.32.0/19 maxlen: 19
85.91.128.0/19 maxlen: 19
78.83.146.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
84.252.0.0/18 maxlen: 18
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
83.97.24.0/21 maxlen: 21
78.83.160.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
151.251.237.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
87.97.128.0/17 maxlen: 17
95.111.0.0/17 maxlen: 17
212.104.96.0/19 maxlen: 19
87.97.160.0/22 maxlen: 22
78.83.210.0/24 maxlen: 24
213.191.160.0/19 maxlen: 19
78.83.226.0/23 maxlen: 23
78.83.225.0/24 maxlen: 24
217.9.224.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
85.130.0.0/17 maxlen: 17
88.203.204.0/24 maxlen: 24
151.251.0.0/16 maxlen: 16
195.149.248.0/21 maxlen: 21
88.203.237.0/24 maxlen: 24
151.251.38.0/24 maxlen: 24
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
85.130.95.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
37.63.0.0/17 maxlen: 17
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
78.90.0.0/16 maxlen: 16
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
85.130.120.0/23 maxlen: 23
89.190.192.0/19 maxlen: 19
78.83.0.0/16 maxlen: 16
82.103.64.0/18 maxlen: 18
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
82.103.91.0/24 maxlen: 24
85.196.128.0/18 maxlen: 18
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
212.95.161.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
88.203.128.0/17 maxlen: 17
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.128.0/23 maxlen: 23
195.34.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
2a01:288::/32 maxlen: 32
2a00:4800::/29 maxlen: 29
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:d8:34:ed:9e:18:99:e4:fd:bb:d0:7c:19:bf:19:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Nov 13 08:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8565a25ce92e98bcd7f2600a0e21a6950b9590ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:63:26:ec:4a:3a:d7:0c:4b:39:b1:6b:cb:
3c:eb:2a:93:42:0a:b4:93:0d:23:76:3d:3b:31:76:
98:98:df:97:0b:14:c9:5b:70:86:d0:b3:72:0b:80:
76:da:e2:5a:5e:ed:f1:65:61:df:45:19:93:aa:0a:
f2:26:c2:aa:11:10:50:1d:5a:27:93:3f:ab:c1:f9:
72:4c:ed:f9:ee:fc:d3:cb:97:b9:99:67:08:59:80:
40:69:f4:c8:b2:b3:ce:a2:2b:82:66:ae:bb:42:b4:
f7:bb:21:1c:6d:85:98:c0:1a:30:fe:c6:38:e8:63:
9f:09:9c:d4:3d:e0:3f:2c:a0:5f:a4:a2:fe:e4:af:
60:0e:21:1f:3e:d6:b9:7d:1d:3b:98:f7:8b:d1:6c:
9c:e1:ee:ec:3f:97:58:77:a7:e3:aa:f0:2c:21:7b:
1f:b6:63:32:f5:f4:ec:ef:9e:e1:73:8c:29:b1:72:
c0:46:5c:30:25:14:32:6a:1b:15:89:78:38:f1:1e:
e3:e6:b8:fb:eb:48:e6:a8:27:c7:8d:c6:63:cd:5a:
78:a5:e0:ca:83:99:f7:77:d1:e1:56:b3:a4:ca:44:
79:3a:d5:de:26:0a:1b:ee:6a:ea:84:d0:cf:f4:d9:
08:08:26:97:7a:0d:35:7c:61:a1:8f:bc:2c:f9:75:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:A2:5C:E9:2E:98:BC:D7:F2:60:0A:0E:21:A6:95:0B:95:90:ED
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hWWiXOkumLzX8mAKDiGmlQuVkO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
13:41:23:d5:cc:a3:fe:f9:dc:81:8d:45:e6:22:88:75:07:25:
86:0f:62:90:2b:ce:df:1b:ef:81:73:43:28:24:72:95:71:bd:
fd:fe:1f:db:e8:e8:1d:10:67:73:53:f8:88:c7:96:de:0c:c7:
66:ec:85:8a:de:19:81:c2:24:a8:b9:e1:a4:0a:d3:23:7d:52:
28:6b:97:8d:c3:e5:e3:8e:49:d0:3c:d5:87:7c:64:aa:6e:86:
19:ba:c2:88:0f:f4:d9:c8:d0:c7:c7:7b:90:4e:ca:68:56:05:
77:96:0d:f4:52:10:da:45:a8:6e:1c:cb:84:83:0d:94:90:0b:
55:c5:5b:6b:06:15:95:5f:e8:40:a0:72:99:4e:b9:15:ba:ac:
9c:33:5b:6b:e4:41:40:29:ba:2e:8f:97:23:a1:ee:55:b8:dd:
70:96:cc:c0:fd:73:de:4c:97:0e:64:e9:5b:df:1d:3e:d9:92:
2e:c8:f8:63:f0:c8:30:c9:7b:84:8b:32:4c:60:2d:69:dc:39:
69:87:9f:52:51:66:6b:86:91:16:22:70:1f:a9:e3:32:67:d4:
29:51:f3:f1:66:95:a5:1d:4b:ae:b1:cd:71:87:83:75:ae:ec:
84:ad:6d:9f:03:1b:c0:9b:26:a9:96:b3:1f:02:57:cd:58:55:
9b:71:8e:fe
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAYvH2DTtnhiZ5P270HwZvxnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMxMTEzMDg0MTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTY1YTI1Y2U5MmU5OGJjZDdmMjYwMGEwZTIxYTY5NTBiOTU5MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7JjJuxKOtcMSzmxa8s86yqTQgq0
kw0jdj07MXaYmN+XCxTJW3CG0LNyC4B22uJaXu3xZWHfRRmTqgryJsKqERBQHVon
kz+rwflyTO357vzTy5e5mWcIWYBAafTIsrPOoiuCZq67QrT3uyEcbYWYwBow/sY4
6GOfCZzUPeA/LKBfpKL+5K9gDiEfPta5fR07mPeL0Wyc4e7sP5dYd6fjqvAsIXsf
tmMy9fTs757hc4wpsXLARlwwJRQyahsViXg48R7j5rj760jmqCfHjcZjzVp4peDK
g5n3d9HhVrOkykR5OtXeJgob7mrqhNDP9NkICCaXeg01fGGhj7ws+XUesQIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFIVlolzpLpi81/JgCg4hppULlZDtMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvaFdXaVhPa3VtTHpYOG1BS0RpR21sUXVWa08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASgEAgABMIIB
IAMEBwU1gAMEByU/AAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMDAE5T
AwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4AD
BAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsAD
AwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBcMY
IAMEBcMiYAMEA8OV+AMEBdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWp
IAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlP
IDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZIhvcNAQELBQADggEBABNBI9XM
o/753IGNReYiiHUHJYYPYpArzt8b74FzQygkcpVxvf3+H9vo6B0QZ3NT+IjHlt4M
x2bshYreGYHCJKi54aQK0yN9Uihrl43D5eOOSdA81Yd8ZKpuhhm6wogP9NnI0MfH
e5BOymhWBXeWDfRSENpFqG4cy4SDDZSQC1XFW2sGFZVf6ECgcplOuRW6rJwzW2vk
QUApui6PlyOh7lW43XCWzMD9c95Mlw5k6VvfHT7Zki7I+GPwyDDJe4SLMkxgLWnc
OWmHn1JRZmuGkRYicB+p4zJn1ClR8/FmlaUdS66xzXGHg3Wu7IStbZ8DG8CbJqmW
sx8CV81YVZtxjv4=
Generated at Sat Dec 16 07:28:11 2023 by rpki-client on console-ams.rpki-client.org