Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa
File: AGzVq0GT4quEhMG-_cqarB3P3LI.roa (raw, json)
Hash identifier: QGZF/KkBbicT5dhIqkWx1lwdlCqgvjj17q0ReUhECOE=
Subject key identifier: 00:6C:D5:AB:41:93:E2:AB:84:84:C1:BE:FD:CA:9A:AC:1D:CF:DC:B2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CA194477C8F029E26B966638184F76914
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa
Signing time: Mon 25 Dec 2023 15:24:58 +0000
ROA not before: Mon 25 Dec 2023 15:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:94:47:7c:8f:02:9e:26:b9:66:63:81:84:f7:69:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 25 15:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006cd5ab4193e2ab8484c1befdca9aac1dcfdcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:bc:f5:b1:05:5f:95:d3:6d:ff:7c:40:a0:
54:8f:3f:49:36:78:19:e3:0e:78:d5:a0:0a:21:11:
3f:6a:1d:1a:9a:ad:2c:c5:68:4b:db:9a:3f:d2:2d:
c8:30:55:0d:de:3d:c6:db:a3:13:e3:ed:52:c0:d7:
e8:6d:89:87:a8:63:c9:81:73:7d:b9:b2:6f:51:1d:
16:18:4e:ef:9d:c8:d2:3a:e4:5e:e6:84:7d:42:4f:
4f:58:07:7d:a9:87:93:81:7e:6f:c2:ee:d0:02:90:
e0:a3:e8:8d:c8:a7:22:2c:77:54:fc:f4:8b:9c:9d:
c8:0f:6e:3e:1f:64:94:d2:2b:3c:8c:76:7d:64:b2:
b2:9a:ec:47:8d:49:3c:cf:44:a2:eb:64:1c:1c:32:
3f:a0:d4:3b:18:18:2b:1c:3a:c7:99:22:20:b1:06:
53:9a:d7:ba:88:6a:c6:73:68:80:fa:06:86:dd:d1:
21:b6:f6:4a:5d:19:8e:f5:da:72:a0:ab:8e:fb:84:
99:15:35:68:f0:d7:87:23:a1:a6:a3:67:b7:f9:19:
c0:67:5b:40:95:1a:20:55:81:70:c4:9b:28:34:6f:
e2:50:ba:d1:0f:d2:0a:fd:14:9f:9d:aa:19:c8:b1:
b3:73:d4:a8:dd:8b:96:cc:e5:e9:2a:e8:c1:d9:f7:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:D5:AB:41:93:E2:AB:84:84:C1:BE:FD:CA:9A:AC:1D:CF:DC:B2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
1d:87:aa:df:6b:76:13:0c:e0:b2:64:10:5e:df:fd:bf:29:08:
64:c8:d6:5f:a1:d1:07:a4:6b:86:16:e2:cf:d8:ff:43:a1:f0:
83:88:b3:63:4f:18:ed:87:5d:d6:7d:1e:df:0c:14:22:bd:5d:
6b:1c:38:66:23:ac:e3:92:71:2f:d8:c0:78:bf:b0:df:da:6f:
d5:47:0f:09:af:23:26:b4:ef:0f:d8:8c:b8:5d:cf:4b:6c:95:
da:5f:85:93:d5:40:45:be:6e:ca:28:ba:ff:33:51:c1:a5:14:
8a:e6:a0:20:5c:62:2a:af:26:87:e8:44:91:5f:80:b8:d4:30:
78:9d:1b:ce:72:ed:d6:36:1f:b6:4d:d5:3b:e8:97:af:c6:26:
d7:05:80:29:f9:07:34:c4:16:1b:50:63:cc:88:b4:5b:85:9e:
49:50:a6:10:51:7c:43:c8:e3:bb:e1:20:90:d5:38:29:1b:38:
0a:2a:77:44:26:b7:2a:05:50:34:8c:2f:86:22:f6:05:c4:0d:
76:4a:23:86:4e:df:b7:9c:71:29:38:e5:7a:34:c5:f1:f7:58:
65:e0:92:e6:cd:29:5a:da:82:c1:74:6d:af:01:0b:bd:b4:d2:
f3:a2:ca:24:25:4a:ef:ee:3d:f8:c7:54:57:0b:f9:03:33:1b:
30:9e:1c:53
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgISAYyhlEd8jwKeJrlmY4GE92kUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMxMjI1MTUyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDZjZDVhYjQxOTNlMmFiODQ4NGMxYmVmZGNhOWFhYzFkY2ZkY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TG89bEFX5XTbf98QKBUjz9JNngZ
4w541aAKIRE/ah0amq0sxWhL25o/0i3IMFUN3j3G26MT4+1SwNfobYmHqGPJgXN9
ubJvUR0WGE7vncjSOuRe5oR9Qk9PWAd9qYeTgX5vwu7QApDgo+iNyKciLHdU/PSL
nJ3ID24+H2SU0is8jHZ9ZLKymuxHjUk8z0Si62QcHDI/oNQ7GBgrHDrHmSIgsQZT
mte6iGrGc2iA+gaG3dEhtvZKXRmO9dpyoKuO+4SZFTVo8NeHI6Gmo2e3+RnAZ1tA
lRogVYFwxJsoNG/iULrRD9IK/RSfnaoZyLGzc9So3YuWzOXpKujB2fdHEQIDAQAB
o4IDODCCAzQwHQYDVR0OBBYEFABs1atBk+KrhITBvv3Kmqwdz9yyMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvQUd6VnEwR1Q0cXVFaE1HLV9jcWFyQjNQM0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTAYIKwYBBQUHAQcBAf8EggE7MIIBNzCCASAEAgABMIIB
GAMEAwUICAMEAwUIMAMEAQUIPAMEAAUIQQMEAwVlAAMEAgVlIAMEAgVlQAMEAwVl
UAMEAQVlWgMEAgW8LAMEAAW8MQMEAAW8PgMEAAW8pjAMAwQABbzPAwQCBbzQAwQA
BbzfMAwDBAAFvOkDBAIFvOgDBAAfLLgDBAIfLLwDBAMfuMADBAEfuOQDBAAfuOcD
BAEfuO4DBAAfuPMDBAAlCTAwDAMEACWLNQMEAiWLOAMEAS6hAgMEAC6hCAMEAC6h
CgMEAS6hDgMEAS6hGAMEAi6hIDAMAwQCLqEsAwQCLqEwAwQCW/MwAwQBW/M8AwQB
W/NaAwQAW/NdAwQCX9cAMAwDBACSud8DBAOSueADBAK8j+gDBAHDAvAwEQQCAAIw
CwMJBioAHXgBAAHAMA0GCSqGSIb3DQEBCwUAA4IBAQAdh6rfa3YTDOCyZBBe3/2/
KQhkyNZfodEHpGuGFuLP2P9DofCDiLNjTxjth13WfR7fDBQivV1rHDhmI6zjknEv
2MB4v7Df2m/VRw8JryMmtO8P2Iy4Xc9LbJXaX4WT1UBFvm7KKLr/M1HBpRSK5qAg
XGIqryaH6ESRX4C41DB4nRvOcu3WNh+2TdU76JevxibXBYAp+Qc0xBYbUGPMiLRb
hZ5JUKYQUXxDyOO74SCQ1TgpGzgKKndEJrcqBVA0jC+GIvYFxA12SiOGTt+3nHEp
OOV6NMXx91hl4JLmzSla2oLBdG2vAQu9tNLzosokJUrv7j34x1RXC/kDMxswnhxT
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org