Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/erpOGhfs269I-Pl5-q6qMpleyPY.roa
File: erpOGhfs269I-Pl5-q6qMpleyPY.roa (raw, json)
Hash identifier: AkaUVCWPfctIuth7SzYGEzXe/61Wjrtugk4FX7eWSIA=
Subject key identifier: 7A:BA:4E:1A:17:EC:DB:AF:48:F8:F9:79:FA:AE:AA:32:99:5E:C8:F6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185EDEF550A836521ECEFD44A9BFAD3B33D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/erpOGhfs269I-Pl5-q6qMpleyPY.roa
Signing time: Thu 26 Jan 2023 11:56:03 +0000
ROA not before: Thu 26 Jan 2023 11:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
85.122.192.0/18 maxlen: 18
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Jan 2023 07:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:ef:55:0a:83:65:21:ec:ef:d4:4a:9b:fa:d3:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 26 11:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aba4e1a17ecdbaf48f8f979faaeaa32995ec8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:01:6a:e0:41:a2:e5:68:2b:34:75:f2:53:
e7:51:94:8c:66:f4:4e:a3:aa:da:c6:d0:63:84:25:
2a:7c:43:41:30:ee:d9:2c:75:97:23:be:09:9d:8c:
f6:b5:33:6e:44:ed:9b:42:a8:f2:fe:55:69:12:92:
dc:05:b6:fb:5c:38:35:8e:96:f1:5a:a1:b8:86:d5:
ad:da:11:4d:2a:f5:50:af:7e:94:94:d5:48:b9:a6:
af:67:e6:e8:d7:66:62:48:8f:b6:d0:21:19:30:84:
92:3c:cd:1e:66:03:e9:8f:c9:eb:51:20:84:75:62:
b8:17:00:0c:b8:ec:16:7c:67:69:01:6a:57:92:77:
d7:3d:28:d6:6e:aa:98:fc:cf:62:08:d0:cf:37:a6:
ce:20:ac:f2:92:65:ad:03:06:0f:2b:e4:03:e2:00:
c9:09:f5:0b:9b:65:a0:02:b8:9e:19:94:b7:da:64:
d1:89:ff:1f:9b:94:69:aa:3f:7e:e0:98:4d:af:63:
7f:69:c1:d8:13:d8:01:0a:1c:3a:1b:8c:d3:28:cb:
57:10:a8:a0:07:c9:5c:52:0e:dc:6e:bd:18:63:43:
49:f0:fb:dc:a8:3d:9d:3d:73:88:67:4f:23:48:be:
ef:89:80:9e:27:d3:cf:de:18:11:80:a3:a2:be:93:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:4E:1A:17:EC:DB:AF:48:F8:F9:79:FA:AE:AA:32:99:5E:C8:F6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/erpOGhfs269I-Pl5-q6qMpleyPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
85.122.192.0/18
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
34:d2:da:9a:fe:fe:04:9e:c1:53:f1:55:db:c1:6b:94:c3:cf:
6d:64:e3:28:b2:e8:aa:30:59:89:31:4b:7f:3d:26:2e:d8:47:
43:ce:dd:12:e5:36:fa:5f:52:35:7d:03:c4:cd:c0:f8:65:ac:
95:f7:95:5d:4c:16:7c:c1:fa:04:bb:11:7c:55:28:f5:c0:cc:
de:70:a4:92:55:58:03:0d:88:63:36:93:1f:3f:d5:78:3f:cc:
a1:04:0a:53:fd:67:63:a6:a9:d9:28:65:ce:98:95:72:2b:23:
70:60:ee:29:61:29:4a:c2:fb:19:8e:da:cd:ff:1c:b6:8b:38:
e2:69:01:0a:fa:1c:84:96:54:03:5c:e0:fc:b5:dc:c7:16:78:
0f:ca:e5:7a:38:b1:8c:46:f4:c1:3c:f2:24:5a:21:a8:0c:6f:
64:b3:34:fd:7e:8e:47:50:c9:1e:b6:e4:ca:b1:bb:ad:5e:81:
d8:f8:46:2d:5d:dc:b0:e5:92:d4:78:70:68:d4:84:a5:20:2a:
e9:d6:2d:7b:7e:38:24:cd:40:e1:a0:fa:0c:f1:ce:c9:82:43:
80:b6:5a:d1:cd:8d:74:07:61:65:ca:a3:f2:94:00:4a:41:ae:
e3:be:77:a2:6b:12:39:d7:f9:7c:78:ee:c4:e1:2a:7f:dc:64:
96:f8:14:f2
-----BEGIN CERTIFICATE-----
MIIIRDCCByygAwIBAgISAYXt71UKg2Uh7O/USpv607M9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTI2MTE1NjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWJhNGUxYTE3ZWNkYmFmNDhmOGY5NzlmYWFlYWEzMjk5NWVjOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkgBauBBouVoKzR18lPnUZSMZvRO
o6raxtBjhCUqfENBMO7ZLHWXI74JnYz2tTNuRO2bQqjy/lVpEpLcBbb7XDg1jpbx
WqG4htWt2hFNKvVQr36UlNVIuaavZ+bo12ZiSI+20CEZMISSPM0eZgPpj8nrUSCE
dWK4FwAMuOwWfGdpAWpXknfXPSjWbqqY/M9iCNDPN6bOIKzykmWtAwYPK+QD4gDJ
CfULm2WgArieGZS32mTRif8fm5Rpqj9+4JhNr2N/acHYE9gBChw6G4zTKMtXEKig
B8lcUg7cbr0YY0NJ8PvcqD2dPXOIZ08jSL7viYCeJ9PP3hgRgKOivpOKlwIDAQAB
o4IFUDCCBUwwHQYDVR0OBBYEFHq6ThoX7NuvSPj5efquqjKZXsj2MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZXJwT0doZnMyNjlJLVBsNS1xNnFNcGxleVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDZAYIKwYBBQUHAQcBAf8EggNTMIIDTzCCAzwEAgABMIID
NAMEAFBgETAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQAUGCqAwQAUGC1AwQA
UGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQAUGDuAwQAUGD/AwQA
UGE2AwQAUGGQAwQAUGGrAwQBUGGwAwQCUbRgAwQAUbSPAwQAUbTqAwQAUbTvAwQA
UbUAAwQAUbVKAwQAUbVWAwQAUbVkAwQAUbWUAwQAUbWYMAwDBABRtZsDBABRtZwD
BABRtcADBABRtccDBAFRtdQDBABRtfQDBABVeCoDBAFVeEIDBABVeJsDBABVeKoD
BABVeLIDBANVeMADBAFVeQYDBABVeSYDBANVeSgDBAJVeTwDBANVeVgDBAJVeZwD
BABVecYDBAJVedwDBAJVefwDBABVelMDBABVemoDBABVenIwDAMEAFV6tQMEA1V6
sAMEBlV6wAMEAMCiEAMEAMHiGwMEAMHiIwMEAMHiQQMEAcHiUAMEAMHiVAMEAMHi
YwMEAMHiZTAMAwQAweJvAwQAweJwAwQAweJ4AwQAweJ7AwQHweYAAwQBweaGAwQA
weaNAwQAweaPAwQBweakAwQBwea4AwQAwebQMAwDBADB5tMDBADB5tQDBADB5tsD
BADB5uEDBADB5vQDBADB51EwDAMEAMHnbwMEAMHncAMEAMHncgMEAcHndAMEAMHn
dwMEAMHnowMEAMHnqAMEAMHnwAMEAMHnzAMEAMHn8AMEAMHn9AMEAMHn9wMEAMHn
+QMEAMHn/gMEAMI+egMEAMJmQQMEAMJmagMEAMJmhwMEAMJmjwMEAMJmmgMEAMJm
nQMEAMJmowMEAcJmsAMEAMJmtwMEAMJm9wMEAMJpBgMEAMKZ6gMEAMKZ7gMEAcKZ
8gMEAMKZ9QMEAMKZ9wMEANmcAAMEANmcAgMEAdmcBgMEANmcCwMEANmcDQMEANmc
DwMEANmcEwMEANmcIwMEANmcJTAMAwQA2ZwxAwQC2ZwwAwQA2Zw5AwQA2Zw7AwQA
2Zw+AwQB2ZxCAwQA2ZxHAwQA2ZxNAwQA2ZxdAwQA2ZxlMAwDBAHZnGoDBADZnGwD
BADZnHcwDQQCAAIwBwMFAyoDXoAwDQYJKoZIhvcNAQELBQADggEBADTS2pr+/gSe
wVPxVdvBa5TDz21k4yiy6KowWYkxS389Ji7YR0PO3RLlNvpfUjV9A8TNwPhlrJX3
lV1MFnzB+gS7EXxVKPXAzN5wpJJVWAMNiGM2kx8/1Xg/zKEEClP9Z2OmqdkoZc6Y
lXIrI3Bg7ilhKUrC+xmO2s3/HLaLOOJpAQr6HISWVANc4Py13McWeA/K5Xo4sYxG
9ME88iRaIagMb2SzNP1+jkdQyR625Mqxu61egdj4Ri1d3LDlktR4cGjUhKUgKunW
LXt+OCTNQOGg+gzxzsmCQ4C2WtHNjXQHYWXKo/KUAEpBruO+d6JrEjnX+Xx47sTh
Kn/cZJb4FPI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org