Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zBvfvPPHXmH2s9-Avy9En8H9ScA.roa
File: zBvfvPPHXmH2s9-Avy9En8H9ScA.roa (raw, json)
Hash identifier: 6nGsugO6m2tIgg6ogqzqVCx7h3Oej92Z9tDLRx1v//0=
Subject key identifier: CC:1B:DF:BC:F3:C7:5E:61:F6:B3:DF:80:BF:2F:44:9F:C1:FD:49:C0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01912D78EB16E3E211FBF16528943272941F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zBvfvPPHXmH2s9-Avy9En8H9ScA.roa
Signing time: Wed 07 Aug 2024 15:33:04 +0000
ROA not before: Wed 07 Aug 2024 15:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.158.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.56.0/23 maxlen: 23
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:78:eb:16:e3:e2:11:fb:f1:65:28:94:32:72:94:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 7 15:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc1bdfbcf3c75e61f6b3df80bf2f449fc1fd49c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:cd:c8:b8:42:e2:01:79:67:d0:f9:86:f8:
c2:aa:e0:34:2b:ce:25:47:5a:38:ac:f1:ee:b9:80:
96:ab:4d:12:d4:71:0f:61:55:08:84:e8:e2:80:6e:
32:05:6e:7c:14:a9:1c:56:0e:f9:73:49:1b:09:30:
ad:bf:26:c6:59:98:1b:25:36:5a:8d:32:99:41:b7:
7b:cb:e2:55:b2:9e:03:a2:1f:bd:3c:31:32:3f:59:
8b:f0:f1:a5:08:ce:24:34:61:a0:ae:cb:e1:fb:59:
f9:b1:fd:66:ca:5b:3a:bc:c0:3b:f9:4d:68:0b:1d:
af:89:e3:eb:f2:a6:7b:22:6e:b0:f8:0c:e6:15:6d:
37:db:0e:a9:35:d0:a2:ff:20:ea:2c:e4:da:d7:8b:
ab:74:e0:4e:1d:4a:22:56:47:d3:e0:d2:b1:50:4c:
d1:8e:d0:b7:2c:85:94:44:d4:6c:51:d0:57:7c:ac:
a3:00:36:0b:14:96:47:a3:b0:2c:c5:f0:ea:49:1e:
22:a6:3d:51:15:29:d6:ab:8b:29:6c:43:04:f7:20:
53:53:52:e2:67:72:8c:43:6f:86:fe:03:96:e0:e9:
b6:bd:36:43:f2:9d:e8:66:71:ac:ef:0b:74:53:8a:
c7:15:84:c6:69:d1:6a:7f:74:94:0b:74:69:a2:00:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1B:DF:BC:F3:C7:5E:61:F6:B3:DF:80:BF:2F:44:9F:C1:FD:49:C0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zBvfvPPHXmH2s9-Avy9En8H9ScA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.158.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.56.0/23
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.177.0/24
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
56:87:4a:79:38:ed:b4:df:15:66:45:db:c2:c4:ef:62:1d:23:
ae:c9:79:0c:7d:c2:8f:36:17:f8:67:aa:65:a6:4b:c1:22:3d:
32:19:05:c1:8d:8f:dd:9f:9d:16:d6:af:ac:ec:9e:e5:ca:cf:
1f:ad:cc:f1:3d:b9:a8:a1:25:9d:18:90:90:8f:10:55:e9:36:
0e:4b:b5:df:54:3a:1a:b1:22:80:a9:ce:b4:b8:aa:17:32:4d:
d3:67:ee:61:58:68:66:45:c4:38:ec:75:4e:d4:f8:7a:a2:b2:
3d:db:8e:20:88:54:26:17:1b:b6:8c:4d:37:92:3f:1e:e3:57:
73:6a:a7:e2:49:4b:52:cd:e2:3f:3f:29:41:18:ed:4b:93:69:
c9:64:bc:f2:64:50:ac:5c:e4:34:42:a8:27:06:89:37:c4:f6:
53:10:7e:67:ba:b7:cc:bb:95:82:0e:f8:f1:c8:dc:e2:f2:f7:
a7:8c:45:2f:56:1e:96:16:e4:09:bc:c5:07:98:5d:09:8d:a1:
80:16:59:8c:dd:59:9a:a7:e4:60:62:d0:01:df:a9:bc:1b:b3:
74:52:40:97:87:74:5c:02:db:79:4f:d0:39:50:a3:4b:c9:7b:
60:04:b6:77:f1:a5:6b:2c:f4:50:fa:0c:3c:1d:ef:1a:1d:e7:
03:30:c5:de
-----BEGIN CERTIFICATE-----
MIIIjDCCB3SgAwIBAgISAZEteOsW4+IR+/FlKJQycpQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwODA3MTUzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzFiZGZiY2YzYzc1ZTYxZjZiM2RmODBiZjJmNDQ5ZmMxZmQ0OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2bNyLhC4gF5Z9D5hvjCquA0K84l
R1o4rPHuuYCWq00S1HEPYVUIhOjigG4yBW58FKkcVg75c0kbCTCtvybGWZgbJTZa
jTKZQbd7y+JVsp4Doh+9PDEyP1mL8PGlCM4kNGGgrsvh+1n5sf1myls6vMA7+U1o
Cx2viePr8qZ7Im6w+AzmFW032w6pNdCi/yDqLOTa14urdOBOHUoiVkfT4NKxUEzR
jtC3LIWURNRsUdBXfKyjADYLFJZHo7AsxfDqSR4ipj1RFSnWq4spbEME9yBTU1Li
Z3KMQ2+G/gOW4Om2vTZD8p3oZnGs7wt0U4rHFYTGadFqf3SUC3RpogByZwIDAQAB
o4IFmDCCBZQwHQYDVR0OBBYEFMwb37zzx15h9rPfgL8vRJ/B/UnAMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvekJ2ZnZQUEhYbUgyczktQXZ5OUVuOEg5U2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDrAYIKwYBBQUHAQcBAf8EggObMIIDlzCCA4QEAgABMIID
fAMEAVBgDgMEAFBgEQMEAFBgSTAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQA
UGCqAwQAUGC1AwQAUGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQB
UGDmAwQAUGDuAwQAUGD/AwQAUGEIAwQAUGEPAwQAUGE2AwQAUGGQAwQAUGGrAwQB
UGGwAwQAUbSPAwQAUbTqAwQAUbTvAwQAUbUAAwQAUbVKAwQAUbVkAwQAUbWUAwQA
UbWYMAwDBABRtZsDBABRtZwDBABRtcADBABRtccDBAFRtdQDBABRtfQDBAFVeAww
DAMEA1V4KAMEAFV4KgMEAVV4QgMEAFV4mwMEAFV4ngMEAFV4qgMEAFV4sgMEA1V4
wAMEAVV5BgMEAFV5JgMEA1V5KAMEAlV5PAMEA1V5WAMEAVV5lAMEAFV5lzAMAwQC
VXmcAwQCVXmgAwQAVXm4AwQAVXnGAwQCVXncAwQCVXn8AwQBVXo4AwQBVXpSAwQA
VXpqMAwDBARVenADBABVenIwDAMEAFV6tQMEA1V6sAMEAMCiEAMEAMHiGwMEAMHi
IwMEAMHiLQMEAMHiQQMEAcHiUAMEAMHiVAMEAMHiYwMEAMHiZTAMAwQAweJvAwQA
weJwAwQAweJ4AwQAweJ7AwQHweYAAwQBweaGAwQAweaNAwQAweaPAwQBweakAwQB
wea4AwQAwebAMAwDBADB5s8DBADB5tAwDAMEAMHm0wMEAMHm1AMEAMHm2wMEAMHm
4QMEAMHm9AMEAMHnUQMEAMHncAMEAMHncgMEAcHndAMEAMHndwMEAMHnowMEAMHn
qAMEAMHnwAMEAMHnzAMEAMHn8AMEAMHn9AMEAMHn9wMEAMHn+QMEAMHn/gMEAMI+
egMEAMJmQQMEAMJmhwMEAMJmjwMEAMJmmgMEAMJmnQMEAMJmowMEAMJmsQMEAMJm
2gMEAMJm9wMEAMJpBgMEAMKZ6gMEAMKZ7gMEAcKZ8gMEAMKZ9QMEANmcAAMEANmc
AgMEAdmcBgMEANmcDQMEANmcDwMEANmcEwMEANmcIwMEANmcJTAMAwQA2ZwxAwQC
2ZwwAwQA2Zw5AwQA2Zw7AwQA2Zw+AwQA2ZxHAwQA2ZxNAwQA2ZxUAwQA2ZxgAwQA
2ZxlMAwDBAHZnGoDBADZnGwDBADZnHADBADZnHcwDQQCAAIwBwMFAyoDXoAwDQYJ
KoZIhvcNAQELBQADggEBAFaHSnk47bTfFWZF28LE72IdI67JeQx9wo82F/hnqmWm
S8EiPTIZBcGNj92fnRbWr6zsnuXKzx+tzPE9uaihJZ0YkJCPEFXpNg5Ltd9UOhqx
IoCpzrS4qhcyTdNn7mFYaGZFxDjsdU7U+Hqisj3bjiCIVCYXG7aMTTeSPx7jV3Nq
p+JJS1LN4j8/KUEY7UuTaclkvPJkUKxc5DRCqCcGiTfE9lMQfme6t8y7lYIO+PHI
3OLy96eMRS9WHpYW5Am8xQeYXQmNoYAWWYzdWZqn5GBi0AHfqbwbs3RSQJeHdFwC
23lP0DlQo0vJe2AEtnfxpWss9FD6DDwd7xod5wMwxd4=
-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:23 2024 by rpki-client on console-fra.rpki-client.org