Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Llzp9_ireM9GwwZl1yQvSOFwvnM.roa
File: Llzp9_ireM9GwwZl1yQvSOFwvnM.roa (raw, json)
Hash identifier: zVHJmjnCaBFkkRFm0oaJ5Q24yeXFg6RGNq0w238Mzgg=
Subject key identifier: 2E:5C:E9:F7:F8:AB:78:CF:46:C3:06:65:D7:24:2F:48:E1:70:BE:73
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801A4D1A9BC15334E07CFF1C3430332
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Llzp9_ireM9GwwZl1yQvSOFwvnM.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
213.135.92.0/24 maxlen: 24
84.47.152.0/23 maxlen: 23
84.47.150.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
213.135.64.0/23 maxlen: 23
84.47.172.0/24 maxlen: 24
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
85.91.120.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
84.47.174.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 26 Jan 2024 09:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a4:d1:a9:bc:15:33:4e:07:cf:f1:c3:43:03:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e5ce9f7f8ab78cf46c30665d7242f48e170be73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:6f:b9:8c:27:65:93:b8:76:2c:30:08:9c:
ed:05:dc:ba:c6:39:28:32:af:71:9f:67:c8:07:c8:
68:1a:c9:50:f8:28:2f:95:ff:97:b4:c7:9c:ff:f5:
0b:9b:39:bf:84:a1:f0:73:64:36:63:f7:cf:09:0b:
df:f5:92:8a:c3:3e:b4:a1:12:20:29:42:a3:4e:09:
6c:67:7d:1e:05:b7:d7:59:15:bb:20:ce:64:57:3b:
92:bd:f0:0a:6f:70:9b:2d:be:4a:7a:a7:9b:5f:55:
15:c1:b2:fb:ee:49:0c:70:13:86:ee:d2:41:ca:02:
9f:a9:11:ec:6a:93:d6:fa:10:24:e0:05:26:6f:93:
59:2e:1c:72:56:fc:66:54:3a:00:36:fd:63:15:31:
62:96:dd:82:4a:e1:48:d5:27:29:df:31:02:6b:57:
9d:64:84:27:64:05:b2:12:82:aa:01:31:c4:b3:f6:
7c:41:b6:fe:47:7e:48:57:17:09:39:c0:d9:8d:03:
81:d6:a6:c7:17:96:e6:35:79:a7:5d:b8:71:0e:b5:
d5:1d:af:e9:39:90:86:4f:08:2d:e0:4e:85:e2:8c:
7e:02:7c:72:d6:d9:0c:b5:d1:f7:22:2a:55:79:9a:
0b:38:1c:f6:c8:a9:7f:6e:7e:81:5f:7b:b0:1c:db:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:E9:F7:F8:AB:78:CF:46:C3:06:65:D7:24:2F:48:E1:70:BE:73
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Llzp9_ireM9GwwZl1yQvSOFwvnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.80.255
213.135.82.0-213.135.92.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
2b:8d:b9:44:3e:56:7a:03:9e:10:de:65:be:93:5a:02:79:42:
31:8c:dc:a8:fd:e5:af:0d:83:6a:a7:e9:b5:65:7f:52:61:f5:
67:cc:d8:2e:87:cc:51:b0:27:9d:69:ba:bc:16:21:69:57:79:
bc:fd:dd:52:da:e5:e1:3e:c0:45:1b:0b:77:66:c6:2f:8f:5e:
43:27:33:f6:4e:d9:44:6f:de:19:cc:f3:67:0b:d3:a6:07:d2:
df:af:8a:8b:d6:cc:c8:0d:57:50:13:dc:1f:db:d6:83:ba:31:
ad:ea:f9:b8:4c:96:d2:a3:08:cb:15:fc:f0:1d:d9:ef:d1:e9:
b6:65:6a:50:1f:ed:9c:94:41:68:1c:7b:aa:7c:8d:a1:a3:85:
11:85:0e:e4:c1:7b:b9:3b:40:8e:bc:cb:2d:26:29:04:80:9c:
4f:7f:d2:95:35:02:67:d9:07:80:1f:d5:3e:55:6e:b2:51:dc:
9a:f2:33:17:f2:6a:b9:bb:d7:5b:a9:ea:c2:0d:12:78:f4:cc:
fa:57:23:2b:3e:72:1e:62:52:3b:6c:a0:02:ec:37:e4:4f:88:
98:17:f6:3a:52:b6:5f:78:dd:98:fd:3c:a9:7f:b1:13:1b:0f:
3e:e0:61:b0:8e:52:27:13:73:46:f9:09:e6:a5:f9:b5:88:75:
9d:17:ea:a9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISAYzIAaTRqbwVM04Hz/HDQwMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjQwMTAyMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTVjZTlmN2Y4YWI3OGNmNDZjMzA2NjVkNzI0MmY0OGUxNzBiZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM5vuYwnZZO4diwwCJztBdy6xjko
Mq9xn2fIB8hoGslQ+Cgvlf+XtMec//ULmzm/hKHwc2Q2Y/fPCQvf9ZKKwz60oRIg
KUKjTglsZ30eBbfXWRW7IM5kVzuSvfAKb3CbLb5KeqebX1UVwbL77kkMcBOG7tJB
ygKfqRHsapPW+hAk4AUmb5NZLhxyVvxmVDoANv1jFTFilt2CSuFI1Scp3zECa1ed
ZIQnZAWyEoKqATHEs/Z8Qbb+R35IVxcJOcDZjQOB1qbHF5bmNXmnXbhxDrXVHa/p
OZCGTwgt4E6F4ox+Anxy1tkMtdH3IipVeZoLOBz2yKl/bn6BX3uwHNtbHQIDAQAB
o4IDPDCCAzgwHQYDVR0OBBYEFC5c6ff4q3jPRsMGZdckL0jhcL5zMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvTGx6cDlfaXJlTTlHd3dabDF5UXZTT0Z3dm5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUAYIKwYBBQUHAQcBAf8EggE/MIIBOzCCASgEAgABMIIB
IAMEBU1eoDAMAwQEURqQAwQCURqYAwQBVC+AAwQAVC+DMAwDBAFUL4YDBABUL4gw
DAMEAlQvjAMEAVQvkAMEAFQvkzAMAwQBVC+WAwQBVC+YMAwDBAJUL5wDBAFUL6Qw
DAMEA1QvqAMEAFQvrDAMAwQBVC+uAwQAVC+yMAwDBABUL7UDBANUL7ADBAFUL7oD
BAFUL74DBANVW2ADBAJVW3AwDAMEAVVbdgMEAFVbegMEALlqawMEAdWHQAMEANWH
QzAMAwQA1YdFAwQA1YdGAwQB1YdIAwQA1YdNMAwDBADVh08DBADVh1AwDAMEAdWH
UgMEANWHXDAMAwQF1dCgAwQA1dCqMAwDBALV0KwDBADV0LgwDAMEAdXQugMEBtXQ
gDANBAIAAjAHAwUDKgILyDANBgkqhkiG9w0BAQsFAAOCAQEAK425RD5WegOeEN5l
vpNaAnlCMYzcqP3lrw2DaqfptWV/UmH1Z8zYLofMUbAnnWm6vBYhaVd5vP3dUtrl
4T7ARRsLd2bGL49eQycz9k7ZRG/eGczzZwvTpgfS36+Ki9bMyA1XUBPcH9vWg7ox
rer5uEyW0qMIyxX88B3Z79HptmVqUB/tnJRBaBx7qnyNoaOFEYUO5MF7uTtAjrzL
LSYpBICcT3/SlTUCZ9kHgB/VPlVuslHcmvIzF/JqubvXW6nqwg0SePTM+lcjKz5y
HmJSO2ygAuw35E+ImBf2OlK2X3jdmP08qX+xExsPPuBhsI5SJxNzRvkJ5qX5tYh1
nRfqqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org