Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/z3XRsXjoRHnvbyqsk2aC-h3Y2-4.roa
File: z3XRsXjoRHnvbyqsk2aC-h3Y2-4.roa (raw, json)
Hash identifier: 2VKS6KjGM6/6O/dGSGBQS+H+ECcIk+ovsO9fzQ6rzLw=
Subject key identifier: CF:75:D1:B1:78:E8:44:79:EF:6F:2A:AC:93:66:82:FA:1D:D8:DB:EE
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01884D0DA43BD7C12F9EE63C72ECB3AB2391
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/z3XRsXjoRHnvbyqsk2aC-h3Y2-4.roa
Signing time: Wed 24 May 2023 09:18:39 +0000
ROA not before: Wed 24 May 2023 09:18:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 24
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Jul 2023 12:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:0d:a4:3b:d7:c1:2f:9e:e6:3c:72:ec:b3:ab:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 24 09:18:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf75d1b178e84479ef6f2aac936682fa1dd8dbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:9f:46:3c:41:be:4f:b9:08:74:c1:38:6f:
7d:18:67:d9:cc:3f:89:cd:91:e7:62:18:24:69:bc:
4a:e5:33:d5:d4:b7:45:1b:0a:7f:74:e0:4f:49:df:
8f:8c:84:bf:7f:29:28:f0:aa:ab:48:77:02:ce:7b:
02:7e:12:bd:9c:11:07:f1:9f:ca:e4:54:a8:c3:18:
33:fa:f6:33:0a:44:e2:1c:67:1d:c3:50:1e:30:f7:
cb:96:33:2c:13:ee:c8:2e:94:b8:da:2d:d2:91:09:
7b:96:49:64:a6:4a:e2:9d:6b:4c:58:fb:e5:b1:d4:
13:66:72:85:76:6a:75:85:65:e5:31:d5:01:b0:45:
f9:1d:ec:ba:3d:5b:b1:b1:3d:d6:32:25:a4:74:ef:
ab:88:74:2a:20:dc:3b:ee:4c:13:04:8f:94:22:35:
2a:d0:e0:74:11:9e:96:b0:cc:8c:f8:f5:9d:36:8f:
60:23:88:33:c7:9c:8e:2f:6b:cf:16:c6:64:dc:09:
90:18:72:1e:5a:99:b3:f5:68:30:44:7a:ac:0f:16:
fb:96:d3:9f:5b:ce:b5:a2:a3:7c:34:6d:93:7a:3a:
cb:52:ae:17:34:fb:92:55:1a:31:3a:e6:b6:6f:3a:
48:56:93:4e:d6:b6:53:3e:69:38:4d:a1:a2:84:f4:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:D1:B1:78:E8:44:79:EF:6F:2A:AC:93:66:82:FA:1D:D8:DB:EE
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/z3XRsXjoRHnvbyqsk2aC-h3Y2-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
0d:1a:e4:50:40:78:43:a0:03:3e:c8:eb:1f:20:98:bb:4d:4d:
67:80:32:ac:30:3c:e1:a1:7b:99:73:59:1b:1d:e1:e6:df:39:
44:21:d6:d4:25:69:d0:f6:bb:fd:99:c8:6c:a4:85:af:db:1d:
4c:e1:d9:50:3c:08:ef:0e:ea:8d:2e:89:fb:e0:a3:e6:57:e5:
c2:a2:44:e4:8d:40:76:cb:76:aa:06:a9:8a:1f:d2:c4:97:e9:
e4:5a:96:82:11:4f:94:97:1d:cc:81:72:30:37:28:a4:50:16:
a7:13:80:73:52:a3:1f:01:be:46:41:aa:8a:a1:9e:fa:57:e1:
37:f5:c4:37:35:b7:04:4f:bc:c8:ca:a2:06:3f:ff:29:a1:f9:
4c:58:44:dd:fd:cf:e1:de:b0:1d:50:5b:ce:c3:71:b7:a5:a0:
c1:ed:aa:5c:9c:fc:ef:d3:6b:23:c8:4f:f3:8b:71:43:af:4c:
ad:d5:29:ff:59:a6:11:4c:4f:a1:92:97:e5:a2:83:6d:80:95:
0d:00:a0:12:b9:8f:aa:8d:6c:4e:1c:bd:78:d2:98:ea:bd:02:
41:20:cc:15:8a:77:cd:79:64:99:3e:78:e9:db:42:3e:f0:7a:
db:4f:75:b3:67:92:68:ae:7b:69:66:6f:10:43:47:0e:5e:47:
40:48:c5:73
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYhNDaQ718EvnuY8cuyzqyORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNTI0MDkxODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc1ZDFiMTc4ZTg0NDc5ZWY2ZjJhYWM5MzY2ODJmYTFkZDhkYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo6fRjxBvk+5CHTBOG99GGfZzD+J
zZHnYhgkabxK5TPV1LdFGwp/dOBPSd+PjIS/fyko8KqrSHcCznsCfhK9nBEH8Z/K
5FSowxgz+vYzCkTiHGcdw1AeMPfLljMsE+7ILpS42i3SkQl7lklkpkrinWtMWPvl
sdQTZnKFdmp1hWXlMdUBsEX5Hey6PVuxsT3WMiWkdO+riHQqINw77kwTBI+UIjUq
0OB0EZ6WsMyM+PWdNo9gI4gzx5yOL2vPFsZk3AmQGHIeWpmz9WgwRHqsDxb7ltOf
W861oqN8NG2TejrLUq4XNPuSVRoxOua2bzpIVpNO1rZTPmk4TaGihPQDTwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFM910bF46ER5728qrJNmgvod2NvuMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvejNYUnNYam9SSG52Ynlxc2syYUMtaDNZMi00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAlBAIAATAfAwMEArADAwFO
JgMDAFC/AwMAVbkDBAXDkiADAwHZ2jAPBAIAAjAJAwcAIAFBiAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQANGuRQQHhDoAM+yOsfIJi7TU1ngDKsMDzhoXuZc1kbHeHm3zlE
IdbUJWnQ9rv9mchspIWv2x1M4dlQPAjvDuqNLon74KPmV+XCokTkjUB2y3aqBqmK
H9LEl+nkWpaCEU+Ulx3MgXIwNyikUBanE4BzUqMfAb5GQaqKoZ76V+E39cQ3NbcE
T7zIyqIGP/8poflMWETd/c/h3rAdUFvOw3G3paDB7apcnPzv02sjyE/zi3FDr0yt
1Sn/WaYRTE+hkpflooNtgJUNAKASuY+qjWxOHL140pjqvQJBIMwVinfNeWSZPnjp
20I+8HrbT3WzZ5JorntpZm8QQ0cOXkdASMVz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org