Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SCiZBzNao6W69TZsjydAsHPMccs.roa
File: SCiZBzNao6W69TZsjydAsHPMccs.roa (raw, json)
Hash identifier: XaZJ2qqHzYd5zYCkrzKL36YY3/TIu78h1Y2fDaLtSS4=
Subject key identifier: 48:28:99:07:33:5A:A3:A5:BA:F5:36:6C:8F:27:40:B0:73:CC:71:CB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0185A5B8B722CDF102C8186376C89A007854
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SCiZBzNao6W69TZsjydAsHPMccs.roa
Signing time: Thu 12 Jan 2023 11:23:44 +0000
ROA not before: Thu 12 Jan 2023 11:23:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 81.161.12.0/22 maxlen: 22
91.228.119.0/24 maxlen: 24
176.107.64.0/20 maxlen: 24
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
89.46.112.0/23 maxlen: 24
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
195.80.142.0/23 maxlen: 24
188.213.233.0/24 maxlen: 24
31.133.24.0/22 maxlen: 22
93.120.64.0/21 maxlen: 21
31.133.192.0/24 maxlen: 24
193.221.82.0/23 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
31.133.196.0/23 maxlen: 23
93.120.72.0/23 maxlen: 23
93.120.84.0/24 maxlen: 24
93.120.85.0/24 maxlen: 24
93.120.80.0/22 maxlen: 22
91.234.222.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.88.0/23 maxlen: 23
93.120.86.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.92.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
93.120.28.0/23 maxlen: 23
93.120.27.0/24 maxlen: 24
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.46.0/24 maxlen: 24
171.25.223.0/24 maxlen: 24
176.112.84.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
91.246.201.0/24 maxlen: 24
89.45.92.0/23 maxlen: 24
178.159.152.0/21 maxlen: 21
178.159.148.0/22 maxlen: 22
91.233.202.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
77.232.192.0/23 maxlen: 24
77.232.196.0/22 maxlen: 22
77.232.194.0/23 maxlen: 23
185.104.196.0/22 maxlen: 24
77.232.204.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
91.218.252.0/23 maxlen: 23
176.124.176.0/22 maxlen: 22
91.218.254.0/23 maxlen: 23
86.104.132.0/23 maxlen: 24
176.124.180.0/22 maxlen: 22
91.246.184.0/22 maxlen: 22
176.118.88.0/22 maxlen: 22
77.232.220.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
91.232.254.0/24 maxlen: 24
91.233.2.0/23 maxlen: 23
89.44.100.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.223.0/24 maxlen: 24
64.43.64.0/24 maxlen: 24
91.245.91.0/24 maxlen: 24
91.231.226.0/24 maxlen: 24
64.43.68.0/22 maxlen: 22
64.43.66.0/23 maxlen: 23
64.43.72.0/24 maxlen: 24
64.43.76.0/24 maxlen: 24
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
176.110.106.0/24 maxlen: 24
176.110.107.0/24 maxlen: 24
77.36.80.0/21 maxlen: 21
77.36.90.0/23 maxlen: 23
85.204.196.0/23 maxlen: 24
77.36.89.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
77.36.96.0/20 maxlen: 20
77.36.92.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
37.97.122.0/23 maxlen: 23
185.9.240.0/22 maxlen: 22
185.9.236.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.111.0.0/22 maxlen: 22
91.239.0.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
188.191.248.0/22 maxlen: 22
91.232.16.0/23 maxlen: 23
91.232.20.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
31.131.12.0/22 maxlen: 22
193.36.200.0/23 maxlen: 23
193.36.200.0/24 maxlen: 24
193.36.201.0/24 maxlen: 24
193.36.202.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
91.237.194.0/23 maxlen: 23
77.36.8.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
77.36.30.0/24 maxlen: 24
77.36.28.0/23 maxlen: 23
77.36.36.0/23 maxlen: 23
77.36.32.0/22 maxlen: 22
89.42.232.0/23 maxlen: 24
77.36.40.0/21 maxlen: 21
77.36.38.0/23 maxlen: 23
77.36.48.0/22 maxlen: 22
91.236.237.0/24 maxlen: 24
176.116.40.0/21 maxlen: 21
91.223.158.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
31.135.4.0/23 maxlen: 23
31.135.1.0/24 maxlen: 24
31.135.2.0/24 maxlen: 24
31.135.3.0/24 maxlen: 24
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
176.121.96.0/21 maxlen: 21
193.0.190.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
89.34.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:b8:b7:22:cd:f1:02:c8:18:63:76:c8:9a:00:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 12 11:23:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48289907335aa3a5baf5366c8f2740b073cc71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:d1:f0:b5:ac:5e:da:e5:e5:df:f1:98:cd:
13:d0:e5:b9:1d:1e:5e:2c:17:3b:2f:81:0d:1d:b6:
9b:2f:9f:f9:d7:c3:12:38:1c:9e:37:36:24:f3:96:
1c:a6:db:2a:f2:19:7a:30:4d:05:d7:44:09:d4:57:
a5:2c:63:65:bd:6b:4f:38:b7:ec:8c:d3:12:14:b6:
47:68:cf:3a:56:0b:ce:88:15:64:44:28:c1:47:63:
b0:a2:45:13:95:63:f6:ae:06:35:d0:f4:e5:c3:76:
18:63:44:3e:55:7c:9b:2f:c6:41:ea:8f:63:c8:65:
f6:fc:b8:b1:ed:21:5a:6b:c7:cc:3c:bf:dc:53:97:
94:ad:ce:c4:19:be:fa:c8:fb:d9:8e:65:90:cb:2d:
52:f8:f9:23:a5:d3:cf:6a:50:ea:9e:e7:68:fa:41:
61:43:e3:78:3b:4c:f6:e6:26:85:c2:cf:7e:60:1b:
30:7b:b5:6c:0b:36:ee:27:61:9c:05:28:36:9d:4d:
5d:1c:ff:fe:7c:ba:42:0b:d5:d9:c0:32:f9:49:1e:
89:63:ab:09:ea:65:4d:0a:ef:4f:bd:e3:ed:ae:d0:
0b:70:e1:80:24:4a:98:a2:6d:af:cf:29:b6:8c:aa:
ff:aa:d0:fe:49:f5:de:5d:0f:cc:8f:b1:97:4b:b5:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:99:07:33:5A:A3:A5:BA:F5:36:6C:8F:27:40:B0:73:CC:71:CB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SCiZBzNao6W69TZsjydAsHPMccs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.24.0/22
31.133.192.0/21
31.135.1.0-31.135.5.255
31.135.7.0/24
37.97.122.0/23
64.43.64.0/24
64.43.66.0-64.43.72.255
64.43.76.0/24
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.218.252.0/22
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.20.0/24
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.91.0/24
91.245.176.0/21
91.246.184.0/21
91.246.196.0/22
91.246.201.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.37.0/24
93.120.46.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/23
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0-193.36.202.255
193.221.82.0/23
195.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
38:14:f2:bd:83:79:43:30:90:b6:8d:2b:b9:bc:29:31:ef:01:
37:a8:f0:81:00:a2:ac:ac:b0:b5:8b:e9:c0:76:6d:87:ab:ec:
dd:4f:a9:56:66:fc:44:92:43:14:df:f3:31:b7:0b:13:34:e4:
2a:b7:e5:49:83:a1:bc:07:87:c6:c4:53:c2:73:ff:ce:8d:a3:
83:5b:e6:37:90:b5:15:9b:87:d5:39:6d:ec:fa:9d:5e:aa:a8:
25:2d:ef:f2:8b:47:e2:65:0a:a4:4b:7c:04:5b:f6:06:0c:0f:
0b:f5:c4:ca:ee:ae:0a:85:46:cc:2b:9e:19:cc:01:b9:ac:61:
a7:9c:68:85:53:30:87:89:7e:de:08:61:b5:a3:20:2a:2e:33:
c4:a1:30:37:08:df:7d:6f:dc:4a:f0:ed:c1:8f:61:ea:36:48:
26:5f:00:82:77:79:47:f5:93:bf:40:a4:7a:cb:ce:20:3d:d7:
ff:70:58:7f:9e:50:57:5d:30:b2:22:70:6f:24:94:b6:20:0d:
33:0f:db:fa:16:e9:26:be:8b:7a:fe:f1:1f:6d:66:fe:cd:72:
31:8d:75:d1:7c:6e:cd:7f:8b:ca:b0:f0:fd:11:30:a1:76:40:
7a:20:63:e0:5a:ac:6a:1f:4f:dd:b0:05:fe:70:f7:f5:24:1c:
ff:fb:ff:d6
-----BEGIN CERTIFICATE-----
MIIHdTCCBl2gAwIBAgISAYWluLcizfECyBhjdsiaAHhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwMTEyMTEyMzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODI4OTkwNzMzNWFhM2E1YmFmNTM2NmM4ZjI3NDBiMDczY2M3MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3bR8LWsXtrl5d/xmM0T0OW5HR5e
LBc7L4ENHbabL5/518MSOByeNzYk85Ycptsq8hl6ME0F10QJ1FelLGNlvWtPOLfs
jNMSFLZHaM86VgvOiBVkRCjBR2OwokUTlWP2rgY10PTlw3YYY0Q+VXybL8ZB6o9j
yGX2/Lix7SFaa8fMPL/cU5eUrc7EGb76yPvZjmWQyy1S+PkjpdPPalDqnudo+kFh
Q+N4O0z25iaFws9+YBswe7VsCzbuJ2GcBSg2nU1dHP/+fLpCC9XZwDL5SR6JY6sJ
6mVNCu9PvePtrtALcOGAJEqYom2vzym2jKr/qtD+SfXeXQ/Mj7GXS7XFYwIDAQAB
o4IEgTCCBH0wHQYDVR0OBBYEFEgomQczWqOluvU2bI8nQLBzzHHLMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvU0NpWkJ6TmFvNlc2OVRac2p5ZEFzSFBNY2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIClQYIKwYBBQUHAQcBAf8EggKEMIICgDCCAnwEAgABMIIC
dAMEAh+DDAMEAh+FGAMEAx+FwDAMAwQAH4cBAwQBH4cEAwQAH4cHAwQBJWF6AwQA
QCtAMAwDBAFAK0IDBABAK0gDBABAK0wwDAMEBEArUAMEAkArWAMEA00kCDAMAwQC
TSQcAwQATSQeMAwDBAVNJCADBAFNJDQDBANNJFAwDAMEAE0kWQMEBE0kYDAMAwQG
TejAAwQDTejQAwQCTejcAwQCUaEMAwQBVczEAwQBVmiEAwQBWSJKAwQBWSroAwQB
WSxkAwQBWS1cAwQBWS5wAwQCW9r8AwQAW9+eAwQBW+EiAwQAW+R3AwQAW+UGAwQB
W+UQAwQAW+UfAwQCW+WcMAwDBABb598DBABb5+IDBAFb6BADBABb6BQDBABb6P4D
BAFb6QIDBAFb6coDBAFb6pYDBAJb6twDBAFb66YDBABb7E0DBABb7O0DBABb7TAD
BAFb7cIDBAJb7wADBABb77IDBAJb8JwDBABb9VsDBANb9bADBANb9rgDBAJb9sQD
BABb9skwDAMEAF14GwMEAF14HgMEAF14IQMEAF14JQMEAF14LjAMAwQEXXgwAwQB
XXhIMAwDBABdeEsDBABdeFoDBAJdeFwDBANdeHADBAJdeHwDBACrGd8DBAOwYDgD
BAOwYLADBAOwYZADBAOwYjgDBASwa0ADBAGwbmoDBAGwbnIDBAOwbwADBAKwcFQD
BAOwdCgDBAOwdlgDBAOweWADBAOwfLAwDAMEArKflAMEBbKfgDAMAwQCuQnsAwQC
uQnwAwQCuWjEAwQCvL/4AwQAvNXpAwQAwQC+MAwDBAbBJMADBADBJMoDBAHB3VID
BAHDUI4wDQYJKoZIhvcNAQELBQADggEBADgU8r2DeUMwkLaNK7m8KTHvATeo8IEA
oqyssLWL6cB2bYer7N1PqVZm/ESSQxTf8zG3CxM05Cq35UmDobwHh8bEU8Jz/86N
o4Nb5jeQtRWbh9U5bez6nV6qqCUt7/KLR+JlCqRLfARb9gYMDwv1xMrurgqFRswr
nhnMAbmsYaecaIVTMIeJft4IYbWjICouM8ShMDcI331v3Erw7cGPYeo2SCZfAIJ3
eUf1k79ApHrLziA91/9wWH+eUFddMLIicG8klLYgDTMP2/oW6Sa+i3r+8R9tZv7N
cjGNddF8bs1/i8qw8P0RMKF2QHogY+BarGofT92wBf5w9/UkHP/7/9Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org