Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QrUT4MDPgC5l4A148z8NCWnAtiU.roa
File: QrUT4MDPgC5l4A148z8NCWnAtiU.roa (raw, json)
Hash identifier: pJx3kdgJ/wpmBqzRWfAx3txCwTmm/8iP2L2Jqorg3Zg=
Subject key identifier: 42:B5:13:E0:C0:CF:80:2E:65:E0:0D:78:F3:3F:0D:09:69:C0:B6:25
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01934856D3C62C28E8BA5C2A1587CDA821A5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QrUT4MDPgC5l4A148z8NCWnAtiU.roa
Signing time: Wed 20 Nov 2024 06:51:10 +0000
ROA not before: Wed 20 Nov 2024 06:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Nov 2024 07:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:56:d3:c6:2c:28:e8:ba:5c:2a:15:87:cd:a8:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 20 06:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42b513e0c0cf802e65e00d78f33f0d0969c0b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:94:04:54:4e:7d:43:3d:9e:10:32:f6:58:
02:79:7c:9a:5b:8c:ba:08:e1:c4:59:d3:2e:82:87:
ff:32:82:0d:9f:eb:27:76:2b:58:01:0c:b8:6f:01:
c7:ed:78:ed:7b:c0:0c:21:14:9d:4e:c6:68:81:16:
4e:c2:0b:13:fe:34:06:70:67:3a:5f:1c:b9:b8:61:
27:ab:23:e0:b9:b3:87:57:1e:3a:bf:3a:91:a3:0c:
b6:01:16:b9:22:f7:58:47:e9:c3:49:34:fd:ba:d1:
61:b6:ac:93:46:0c:95:15:ed:0b:52:31:81:2b:d5:
31:d6:3d:9b:3d:d9:b7:07:b3:e8:97:ab:e6:66:7a:
9b:90:97:e3:6a:ae:f2:eb:22:2e:8d:3d:63:0e:25:
a2:f0:16:10:56:6a:bc:b7:82:c5:13:0d:34:9a:67:
e3:27:2c:df:94:86:83:46:17:1c:37:f9:ca:13:89:
a1:5f:cb:32:65:be:81:2e:8a:8d:17:d8:7f:88:7d:
33:df:65:34:00:e0:9c:80:d5:86:21:af:f5:a2:bd:
4d:e9:62:61:6f:f0:d1:89:65:e6:9a:d8:1f:45:f9:
0e:9e:70:71:72:19:ca:0b:0d:5a:7f:24:2a:47:17:
8b:3a:0f:76:5f:9f:e4:54:2b:0f:21:51:77:0c:b3:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:13:E0:C0:CF:80:2E:65:E0:0D:78:F3:3F:0D:09:69:C0:B6:25
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QrUT4MDPgC5l4A148z8NCWnAtiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:ae:42:eb:62:5f:33:da:de:e3:1e:ab:24:1c:93:90:3e:00:
5c:13:2f:22:dd:4b:d1:0c:f2:23:5a:63:3b:5e:7e:d7:85:f2:
6e:a2:20:eb:b6:2c:c6:0a:12:3e:dd:8c:49:c4:52:b1:5d:75:
52:62:62:93:7e:3d:a1:a1:c3:21:ca:1f:8a:bc:94:04:a4:75:
a3:c6:b0:d8:78:c4:10:40:9c:ea:c7:d1:7a:b5:48:86:7f:e0:
79:fd:b4:19:b3:7d:94:41:a0:f3:ef:f5:ac:67:4e:51:11:90:
03:47:9a:21:e5:06:27:60:c9:23:b7:82:9a:b4:22:26:56:37:
88:c9:2e:b6:60:f1:b1:5e:d8:57:d5:73:2a:d7:3b:04:42:dd:
de:c2:47:67:00:48:7c:c6:9f:2a:69:3c:8c:1e:68:41:9c:7d:
2e:eb:d6:5a:13:3d:ce:a2:de:78:10:56:82:be:64:2c:f2:5f:
b3:50:5b:87:c2:6d:a7:dd:10:64:26:1c:f4:68:5b:a8:7e:fd:
38:56:65:8e:e3:48:20:d8:75:c9:6e:35:2b:6c:50:29:9d:79:
bf:38:8f:21:3f:8a:4a:2a:a5:2d:53:32:14:9c:80:62:e6:13:
f1:a5:87:fc:9d:6b:29:fb:12:38:59:df:b2:50:dd:f8:69:6f:
84:11:23:7f
-----BEGIN CERTIFICATE-----
MIIIszCCB5ugAwIBAgISAZNIVtPGLCjoulwqFYfNqCGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQxMTIwMDY1MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmI1MTNlMGMwY2Y4MDJlNjVlMDBkNzhmMzNmMGQwOTY5YzBiNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TSUBFROfUM9nhAy9lgCeXyaW4y6
COHEWdMugof/MoINn+snditYAQy4bwHH7Xjte8AMIRSdTsZogRZOwgsT/jQGcGc6
Xxy5uGEnqyPgubOHVx46vzqRowy2ARa5IvdYR+nDSTT9utFhtqyTRgyVFe0LUjGB
K9Ux1j2bPdm3B7Pol6vmZnqbkJfjaq7y6yIujT1jDiWi8BYQVmq8t4LFEw00mmfj
JyzflIaDRhccN/nKE4mhX8syZb6BLoqNF9h/iH0z32U0AOCcgNWGIa/1or1N6WJh
b/DRiWXmmtgfRfkOnnBxchnKCw1afyQqRxeLOg92X5/kVCsPIVF3DLO6yQIDAQAB
o4IFvzCCBbswHQYDVR0OBBYEFEK1E+DAz4AuZeANePM/DQlpwLYlMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUXJVVDRNRFBnQzVsNEExNDh6OE5DV25BdGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIID0wYIKwYBBQUHAQcBAf8EggPCMIIDvjCCA6sEAgABMIID
owMEAVBgDgMEAFBgEQMEAFBgSTAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGBzAwQA
UGCIAwQAUGCqAwQAUGC1AwQAUGC3AwQAUGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQA
UGDcAwQAUGDkAwQBUGDmAwQAUGDuAwQAUGD/AwQAUGEIAwQAUGEPAwQAUGE2AwQA
UGGQAwQAUGGrAwQBUGGwAwQAUbSPAwQAUbTqAwQAUbTvAwQAUbUAAwQAUbVKAwQA
UbVkAwQAUbWUAwQAUbWYMAwDBABRtZsDBABRtZwDBABRtcADBABRtccDBAFRtdQD
BAFVeAwwDAMEA1V4KAMEAFV4KgMEAVV4QgMEAFV4mwMEAFV4qgMEAFV4sgMEA1V4
wAMEAVV5BgMEAFV5JgMEA1V5KDAMAwQCVXk8AwQDVXlAAwQDVXlYAwQBVXmUAwQA
VXmXMAwDBAJVeZwDBAJVeaADBABVebgDBABVecYDBAJVedwDBAJVefwDBAFVelID
BABVemowDAMEBFV6cAMEAFV6cjAMAwQAVXq1AwQDVXqwMAsDBAZVe0ADAwJVeAME
AMCiEAMEAMHiGwMEAMHiIwMEAMHiLQMEAMHiQQMEAcHiUAMEAMHiVAMEAMHiYwME
AMHiZTAMAwQAweJvAwQAweJwAwQAweJ4AwQAweJ7AwQHweYAAwQBweaGAwQAweaN
AwQAweaPAwQBweakAwQBwea4AwQAwebAMAwDBADB5s8DBADB5tAwDAMEAMHm0wME
AMHm1AMEAMHm2wMEAMHm4QMEAMHm9AMEAMHnUQMEAMHncAMEAMHncgMEAcHndAME
AMHndwMEAMHnowMEAMHnqAMEAMHnwAMEAMHnzAMEAMHn8AMEAMHn9AMEAMHn9wME
AMHn+QMEAMHn/gMEAMI+egMEAMJmQQMEAMJmhwMEAMJmjwMEAMJmmgMEAMJmnQME
AMJmowMEAsJmqAMEAMJmsQMEAMJm9wMEAMJpBgMEAMJpCwMEAMJpEAMEAMKZ6gME
AMKZ7gMEAcKZ8gMEAMKZ9QMEAMKwvQMEBdQjgAMEANmcAAMEANmcAgMEAdmcBgME
ANmcDQMEANmcDwMEANmcEwMEANmcIwMEANmcJTAMAwQA2ZwxAwQC2ZwwAwQA2Zw5
AwQA2Zw7AwQA2Zw+AwQA2ZxHAwQA2ZxNAwQA2ZxUAwQA2ZxgAwQA2ZxlMAwDBAHZ
nGoDBADZnGwDBADZnHADBADZnHcwDQQCAAIwBwMFAyoDXoAwDQYJKoZIhvcNAQEL
BQADggEBAKiuQutiXzPa3uMeqyQck5A+AFwTLyLdS9EM8iNaYztefteF8m6iIOu2
LMYKEj7djEnEUrFddVJiYpN+PaGhwyHKH4q8lASkdaPGsNh4xBBAnOrH0Xq1SIZ/
4Hn9tBmzfZRBoPPv9axnTlERkANHmiHlBidgySO3gpq0IiZWN4jJLrZg8bFe2FfV
cyrXOwRC3d7CR2cASHzGnyppPIweaEGcfS7r1loTPc6i3ngQVoK+ZCzyX7NQW4fC
bafdEGQmHPRoW6h+/ThWZY7jSCDYdcluNStsUCmdeb84jyE/ikoqpS1TMhScgGLm
E/Glh/ydayn7EjhZ37JQ3fhpb4QRI38=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:30 2025 by rpki-client