Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0rHf4CTYaZ8luPtjt3hPACfXp54.roa
File: 0rHf4CTYaZ8luPtjt3hPACfXp54.roa (raw, json)
Hash identifier: ROYziccg017iJLhvwZd5ObNLO2QM+uDeBYanjISsRxY=
Subject key identifier: D2:B1:DF:E0:24:D8:69:9F:25:B8:FB:63:B7:78:4F:00:27:D7:A7:9E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018BCE5B65FFA6B313DAC0A4B17493D31C86
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0rHf4CTYaZ8luPtjt3hPACfXp54.roa
Signing time: Tue 14 Nov 2023 15:02:58 +0000
ROA not before: Tue 14 Nov 2023 15:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.82.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Nov 2023 07:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:5b:65:ff:a6:b3:13:da:c0:a4:b1:74:93:d3:1c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 14 15:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b1dfe024d8699f25b8fb63b7784f0027d7a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:b3:71:ee:4e:9f:63:e0:3a:46:12:5b:0d:
43:b6:2a:4e:c9:34:5d:e2:46:87:db:32:46:1d:ef:
93:2c:9e:d8:22:33:15:c1:04:93:e9:f3:79:fa:95:
10:8e:93:df:6c:6c:d2:d2:df:7a:56:1d:50:81:2a:
17:a6:86:06:3b:cd:32:b6:d8:3f:d5:da:f9:60:65:
6e:17:db:44:b1:05:5b:c6:74:f5:10:31:fb:1e:d2:
af:46:cf:a0:dd:31:c2:e4:10:21:f4:ba:7f:0c:6f:
b3:e1:e2:48:af:6c:b2:30:73:ae:b2:96:21:02:a7:
bb:0a:34:ba:5e:4d:f9:ac:7b:15:78:e3:4e:5e:27:
1d:53:67:6e:0a:83:7b:5e:bf:75:d5:92:6b:8f:44:
9a:b0:30:b4:52:92:ea:bd:ab:4a:9e:25:c2:0b:3a:
e6:4e:c6:e4:12:7c:13:96:6d:b4:47:e3:8c:4f:75:
55:41:ba:69:29:50:07:55:f6:9f:82:e5:d2:c5:b1:
8a:0a:85:92:e3:0c:b8:c9:21:1e:19:1d:61:39:27:
bc:fc:8a:bf:b5:fb:60:0e:5f:a5:cf:49:f6:8e:5c:
b2:d4:85:06:62:fa:34:12:a2:3e:48:95:76:1c:fa:
68:19:4b:b9:24:45:0a:0f:ea:9b:35:33:42:cc:69:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:DF:E0:24:D8:69:9F:25:B8:FB:63:B7:78:4F:00:27:D7:A7:9E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0rHf4CTYaZ8luPtjt3hPACfXp54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
1a:84:59:97:19:1e:78:15:21:c8:d6:41:94:51:0c:b4:b6:5a:
87:1e:27:b2:62:25:fa:90:a4:9a:dc:95:14:89:31:67:29:b2:
de:ce:60:7d:44:07:ae:b3:cf:36:74:0a:f0:16:9c:3c:70:58:
63:b8:92:44:a0:2c:9c:b1:d9:e1:8d:3c:e1:4e:95:fa:d3:6f:
4d:5e:30:fa:61:40:32:cf:91:3a:66:46:2d:38:8d:31:a2:cf:
5f:bb:d0:94:70:6d:fa:4e:20:9e:60:e9:04:ec:cf:86:af:1f:
68:3e:1b:13:ac:c4:13:73:59:8b:ae:a7:47:49:3f:96:27:82:
3a:0c:2c:a6:98:ef:e7:7e:5e:b8:e9:09:10:29:81:41:df:ff:
ca:14:c5:df:d1:a7:4f:eb:b6:19:dc:42:09:68:89:57:22:a8:
75:27:d9:e5:6d:a3:37:69:f0:07:84:50:18:24:2b:87:06:85:
51:71:82:4e:4b:11:14:a1:c3:91:d4:f1:51:f6:83:1d:8b:68:
1d:fc:ab:41:af:91:29:b3:ea:a8:05:dc:f7:36:36:ed:dc:d3:
d8:df:de:29:12:db:b2:92:10:ab:e8:c3:6e:a4:62:44:86:4a:
43:27:5f:da:94:35:b6:1a:96:2f:57:9a:36:a6:4b:92:ce:da:
fb:5f:c6:3f
-----BEGIN CERTIFICATE-----
MIIIgDCCB2igAwIBAgISAYvOW2X/prMT2sCksXST0xyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMxMTE0MTUwMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmIxZGZlMDI0ZDg2OTlmMjViOGZiNjNiNzc4NGYwMDI3ZDdhNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga6zce5On2PgOkYSWw1DtipOyTRd
4kaH2zJGHe+TLJ7YIjMVwQST6fN5+pUQjpPfbGzS0t96Vh1QgSoXpoYGO80yttg/
1dr5YGVuF9tEsQVbxnT1EDH7HtKvRs+g3THC5BAh9Lp/DG+z4eJIr2yyMHOuspYh
Aqe7CjS6Xk35rHsVeONOXicdU2duCoN7Xr911ZJrj0SasDC0UpLqvatKniXCCzrm
TsbkEnwTlm20R+OMT3VVQbppKVAHVfafguXSxbGKCoWS4wy4ySEeGR1hOSe8/Iq/
tftgDl+lz0n2jlyy1IUGYvo0EqI+SJV2HPpoGUu5JEUKD+qbNTNCzGle2QIDAQAB
o4IFjDCCBYgwHQYDVR0OBBYEFNKx3+Ak2GmfJbj7Y7d4TwAn16eeMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMHJIZjRDVFlhWjhsdVB0anQzaFBBQ2ZYcDU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDoAYIKwYBBQUHAQcBAf8EggOPMIIDizCCA3gEAgABMIID
cAMEAFBgEQMEAFBgSTAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQAUGCqAwQA
UGC1AwQAUGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQAUGDuAwQA
UGD/AwQAUGE2AwQAUGGQAwQAUGGrAwQBUGGwAwQCUbRgAwQAUbSPAwQAUbTqAwQA
UbTvAwQAUbUAAwQAUbVKAwQAUbVWAwQAUbVkAwQAUbWUAwQAUbWYMAwDBABRtZsD
BABRtZwDBABRtaYDBABRtcADBABRtccDBAFRtdQDBABRtfQDBAFVeAwwDAMEA1V4
KAMEAFV4KgMEAVV4QgMEAFV4mwMEAFV4qgMEAFV4sgMEA1V4wAMEAVV5BgMEAFV5
JgMEA1V5KAMEAlV5PAMEA1V5WAMEAFV5lzAMAwQCVXmcAwQCVXmgAwQAVXm4AwQA
VXnGAwQCVXncAwQCVXn8AwQBVXpSAwQAVXpqMAwDBARVenADBABVenIwDAMEAFV6
tQMEA1V6sAMEAMCiEAMEAMHiGwMEAMHiIwMEAMHiLQMEAMHiQQMEAcHiUAMEAMHi
VAMEAMHiYwMEAMHiZTAMAwQAweJvAwQAweJwAwQAweJ4AwQAweJ7AwQHweYAAwQB
weaGAwQAweaNAwQAweaPAwQBweakAwQBwea4AwQAwebAMAwDBADB5s8DBADB5tAw
DAMEAMHm0wMEAMHm1AMEAMHm2wMEAMHm4QMEAMHm9AMEAMHnUQMEAMHncAMEAMHn
cgMEAcHndAMEAMHndwMEAMHnowMEAMHnqAMEAMHnwAMEAMHnzAMEAMHn8AMEAMHn
9AMEAMHn9wMEAMHn+QMEAMHn/gMEAMI+egMEAMJmQQMEAMJmhwMEAMJmjwMEAMJm
mgMEAMJmnQMEAMJmowMEAcJmsAMEAMJm2gMEAMJm9wMEAMJpBgMEAMKZ6gMEAMKZ
7gMEAcKZ8gMEAMKZ9QMEAMKZ9wMEANmcAAMEANmcAgMEAdmcBgMEANmcCwMEANmc
DQMEANmcDwMEANmcEwMEANmcIwMEANmcJTAMAwQA2ZwxAwQC2ZwwAwQA2Zw5AwQA
2Zw7AwQA2Zw+AwQB2ZxCAwQA2ZxHAwQA2ZxNAwQA2ZxUAwQA2ZxdAwQA2ZxlMAwD
BAHZnGoDBADZnGwDBADZnHcwDQQCAAIwBwMFAyoDXoAwDQYJKoZIhvcNAQELBQAD
ggEBABqEWZcZHngVIcjWQZRRDLS2WoceJ7JiJfqQpJrclRSJMWcpst7OYH1EB66z
zzZ0CvAWnDxwWGO4kkSgLJyx2eGNPOFOlfrTb01eMPphQDLPkTpmRi04jTGiz1+7
0JRwbfpOIJ5g6QTsz4avH2g+GxOsxBNzWYuup0dJP5YngjoMLKaY7+d+XrjpCRAp
gUHf/8oUxd/Rp0/rthncQgloiVciqHUn2eVtozdp8AeEUBgkK4cGhVFxgk5LERSh
w5HU8VH2gx2LaB38q0GvkSmz6qgF3Pc2Nu3c09jf3ikS27KSEKvow26kYkSGSkMn
X9qUNbYali9XmjamS5LO2vtfxj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org