Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HB29g4vkclJRxNrktN_8-BU8FMc.roa
File: HB29g4vkclJRxNrktN_8-BU8FMc.roa (raw, json)
Hash identifier: U3rpzOSPMvYjQbND0ooZXM5gtzldIy2JCNUZ1mKatwQ=
Subject key identifier: 1C:1D:BD:83:8B:E4:72:52:51:C4:DA:E4:B4:DF:FC:F8:15:3C:14:C7
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A1780B4E0855CE1EA6190EDF67B904B2D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HB29g4vkclJRxNrktN_8-BU8FMc.roa
Signing time: Mon 21 Aug 2023 09:50:25 +0000
ROA not before: Mon 21 Aug 2023 09:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.135.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
193.107.4.0/22 maxlen: 22
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.204.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
188.255.233.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
188.255.236.0/24 maxlen: 24
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.242.0/24 maxlen: 24
188.255.243.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.149.0/24 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.159.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.193.0/24 maxlen: 24
178.253.200.0/22 maxlen: 22
178.253.204.0/23 maxlen: 23
178.253.206.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.211.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.223.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.233.0/24 maxlen: 24
178.253.239.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.38.0/24 maxlen: 24
77.105.32.0/22 maxlen: 22
77.105.44.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.46.0/23 maxlen: 23
77.105.48.0/20 maxlen: 20
77.105.45.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.0.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
46.16.104.0/22 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/23 maxlen: 23
212.69.28.0/22 maxlen: 22
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.124.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.125.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.64.0/23 maxlen: 24
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
80.74.175.0/24 maxlen: 24
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Aug 2023 21:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:80:b4:e0:85:5c:e1:ea:61:90:ed:f6:7b:90:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 21 09:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c1dbd838be4725251c4dae4b4dffcf8153c14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:ac:32:67:41:32:d5:6f:da:d2:1f:fb:3b:
d8:c6:b6:ef:c4:cc:bb:f3:2f:61:86:8c:c6:15:fd:
f0:ea:3a:ad:ac:dc:e1:08:5b:4e:1b:4a:54:20:aa:
d3:41:70:9f:0c:8d:6f:5a:5a:53:bb:a0:c7:97:4f:
c2:4a:d7:c9:cd:01:a0:af:b7:87:a0:95:6e:26:59:
02:39:a5:56:76:10:db:7f:74:54:4d:bf:29:40:1d:
b8:82:5e:5d:2b:b9:8c:c8:d0:81:48:ba:78:b0:94:
e5:5f:08:fa:9d:bd:02:a1:02:20:71:8f:60:68:30:
35:5a:1f:c8:15:41:e8:8a:c0:34:52:ec:01:dc:43:
90:da:83:37:7e:1a:1c:83:f8:3e:d8:6a:e8:f5:61:
8b:be:ca:d6:7f:df:18:9b:ba:cb:63:c6:00:e1:2e:
43:df:aa:5e:ae:92:73:7e:5c:d0:3e:ca:f1:8a:1a:
3a:1b:ad:29:a0:d2:66:46:d9:82:5e:12:b8:f8:ac:
76:5c:5a:ce:12:77:a9:73:8f:b9:4b:91:80:9e:ee:
87:42:07:cf:52:5f:aa:8b:dd:e8:9e:07:23:fc:8e:
04:21:9d:9f:9d:6b:2c:4f:9e:c4:61:ef:fd:f0:71:
96:5a:86:9f:c0:fb:ad:5a:9f:06:a0:78:e4:2f:a2:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:BD:83:8B:E4:72:52:51:C4:DA:E4:B4:DF:FC:F8:15:3C:14:C7
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HB29g4vkclJRxNrktN_8-BU8FMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0/24
77.105.10.0-77.105.38.255
77.105.40.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.72.0/23
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.190.0/23
178.219.0.0/22
178.219.10.0/24
178.219.12.0/23
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.213.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.231.255
178.253.233.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.135.0-188.255.139.255
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.186.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0/24
188.255.203.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
54:48:47:70:c3:91:7d:7f:79:41:3c:ef:17:de:52:1a:33:ea:
f3:32:3e:e5:15:22:43:26:43:2c:5e:19:47:04:07:21:c2:6a:
a1:0c:38:4c:32:df:7c:d7:17:03:67:b1:d6:92:b9:4a:f9:1a:
c0:a8:a5:10:17:33:0b:6b:d5:9d:a3:24:c9:d4:ed:b0:c2:a3:
87:8c:7f:2d:8f:1b:7b:74:f2:43:3c:a9:ea:80:df:dc:19:3f:
b3:e2:e6:43:cc:0a:1b:22:bd:b7:df:04:f3:09:fc:a3:f5:d1:
a9:74:46:4e:15:09:2f:d4:72:9f:67:f0:64:dc:4a:77:b0:92:
26:51:fb:83:c7:e4:2c:14:a0:a4:c4:3c:68:f0:68:35:6d:46:
4f:f2:6d:47:03:0f:6d:9b:2e:ad:0b:50:73:49:e4:b1:a5:e6:
a1:b6:62:df:c6:20:1e:4f:a3:35:da:c0:8d:72:08:e4:3e:88:
c2:e3:b4:7e:b2:74:21:94:49:af:d0:8c:1f:d2:7d:72:0f:77:
2f:0d:85:f3:51:a8:8f:6c:40:2f:b0:13:ec:b1:08:e7:73:af:
9d:25:24:52:1d:0f:b7:73:c5:e7:ea:61:80:b0:38:72:bf:5d:
36:91:2f:11:ce:88:e8:5a:20:35:49:1f:e1:1c:b2:25:ac:36:
06:0b:67:a8
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgISAYoXgLTghVzh6mGQ7fZ7kEstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwODIxMDk1MDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzFkYmQ4MzhiZTQ3MjUyNTFjNGRhZTRiNGRmZmNmODE1M2MxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CGsMmdBMtVv2tIf+zvYxrbvxMy7
8y9hhozGFf3w6jqtrNzhCFtOG0pUIKrTQXCfDI1vWlpTu6DHl0/CStfJzQGgr7eH
oJVuJlkCOaVWdhDbf3RUTb8pQB24gl5dK7mMyNCBSLp4sJTlXwj6nb0CoQIgcY9g
aDA1Wh/IFUHoisA0UuwB3EOQ2oM3fhocg/g+2Gro9WGLvsrWf98Ym7rLY8YA4S5D
36perpJzflzQPsrxiho6G60poNJmRtmCXhK4+Kx2XFrOEnepc4+5S5GAnu6HQgfP
Ul+qi93ongcj/I4EIZ2fnWssT57EYe/98HGWWoafwPutWp8GoHjkL6ITqQIDAQAB
o4IEUDCCBEwwHQYDVR0OBBYEFBwdvYOL5HJSUcTa5LTf/PgVPBTHMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvSEIyOWc0dmtjbEpSeE5ya3ROXzgtQlU4Rk1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICZAYIKwYBBQUHAQcBAf8EggJTMIICTzCCAjUEAgABMIIC
LQMEAy4QaAMEAk1pAAMEAE1pBQMEAE1pBzAMAwQBTWkKAwQATWkmMAwDBANNaSgD
BAZNaQADBAZPr0ADBARQSqADBABREjIDBABREjYwDAMEAVESOgMEAFESPAMEAVES
PgMEAF26QgMEAF26RgMEAV26SAMEAF26TwMEBm15ADAMAwQBbem6AwQAbem8AwQB
bem+AwQCstsAAwQAstsKAwQBstsMMAwDBAay/cADBACy/c4DBAGy/dADBACy/dMD
BACy/dUDBACy/dkwDAMEALL92wMEAbL93DAMAwQAsv3fAwQDsv3gMAwDBACy/ekD
BACy/eoDBACy/e8wDAMEALL98QMEALL98jAMAwQBsv32AwQBsv34MAsDBACy/fsD
AwGy/AMEALzX5AMEALz/hTAMAwQAvP+HAwQCvP+IMAwDBAG8/44DBAC8/6gwDAME
Abz/qgMEALz/rDAMAwQBvP+uAwQAvP+yAwQCvP+0MAwDBAG8/7oDBAG8/7wDBAC8
/78DBAC8/8IDBAK8/8QDBAC8/8kwDAMEALz/ywMEALz/zAMEALz/0QMEALz/0wME
ALz/1gMEALz/2AMEALz/3AMEAbz/3jAMAwQAvP/hAwQAvP/kMAwDBAG8/+YDBAC8
/+wwDAMEALz/7wMEArz/8AMEALz/+QMEALz//wMEAsFrBAMEAMIcgQMEAMIcgwME
AdRFCDAMAwQA1EUPAwQB1EUQAwQA1EUUAwQC1EUcMBQEAgACMA4DBQAqAIEAAwUA
KgIGYDANBgkqhkiG9w0BAQsFAAOCAQEAVEhHcMORfX95QTzvF95SGjPq8zI+5RUi
QyZDLF4ZRwQHIcJqoQw4TDLffNcXA2ex1pK5SvkawKilEBczC2vVnaMkydTtsMKj
h4x/LY8be3TyQzyp6oDf3Bk/s+LmQ8wKGyK9t98E8wn8o/XRqXRGThUJL9Ryn2fw
ZNxKd7CSJlH7g8fkLBSgpMQ8aPBoNW1GT/JtRwMPbZsurQtQc0nksaXmobZi38Yg
Hk+jNdrAjXII5D6IwuO0frJ0IZRJr9CMH9J9cg93Lw2F81Goj2xAL7AT7LEI53Ov
nSUkUh0Pt3PF5+phgLA4cr9dNpEvEc6I6FogNUkf4RyyJaw2BgtnqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org