Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dFhQhzFIVrtLg88BIMp8ipU0Mbs.roa
File: dFhQhzFIVrtLg88BIMp8ipU0Mbs.roa (raw, json)
Hash identifier: qh7gmd88qIE4YNVs5X+HoOy4BCxMeSlEvEeaAPRougo=
Subject key identifier: 74:58:50:87:31:48:56:BB:4B:83:CF:01:20:CA:7C:8A:95:34:31:BB
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01879A18ADB7A7905BB7C6CD9F8C8E00E736
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dFhQhzFIVrtLg88BIMp8ipU0Mbs.roa
Signing time: Wed 19 Apr 2023 15:18:41 +0000
ROA not before: Wed 19 Apr 2023 15:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.162.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.128.0/22 maxlen: 22
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.142.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.140.0/23 maxlen: 23
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
84.47.150.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
77.94.189.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
84.47.168.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
213.135.64.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
85.91.120.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
84.47.174.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Apr 2023 09:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:18:ad:b7:a7:90:5b:b7:c6:cd:9f:8c:8e:00:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 19 15:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74585087314856bb4b83cf0120ca7c8a953431bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:16:e8:62:d6:39:5c:d6:eb:3d:dc:b4:f1:
d5:ef:6f:fc:b2:78:f2:bb:d4:15:a5:6a:d2:2e:8c:
68:97:f6:60:1d:8b:c4:1f:59:e4:4b:f8:54:67:bd:
43:8d:a3:1a:d2:dc:c7:e7:d8:25:84:b0:b7:44:45:
1e:7b:8d:66:80:cc:ad:6f:24:65:df:5b:69:c6:c8:
56:a2:b2:f4:7e:38:3d:aa:c2:92:08:ce:86:7e:da:
b4:c4:76:39:6d:d4:c4:d1:26:92:91:f7:1d:4d:29:
dd:f1:eb:d5:88:20:a2:8c:5f:ce:4d:4e:7c:11:7a:
11:85:03:02:64:76:e7:67:c6:61:8b:fa:7a:7b:c1:
2c:46:22:11:8a:76:f9:94:e3:2e:e3:ac:d3:fd:04:
bb:f6:cb:56:61:91:a5:48:06:76:f2:4c:37:04:d1:
06:f1:e4:3c:ac:ad:77:43:82:f8:0e:12:1f:d9:67:
2c:5e:6e:85:a7:c5:2b:3c:7c:9e:24:5a:e7:99:38:
30:02:ac:5c:21:a8:41:dc:3e:e9:e3:6d:6e:98:f7:
91:ed:b5:f3:71:96:58:8b:2e:60:9f:4d:73:e4:e9:
be:9d:07:46:6c:97:7f:e1:f9:d4:46:96:67:be:13:
9a:54:47:8d:2d:c5:a9:30:b4:7b:91:68:56:5f:8c:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:50:87:31:48:56:BB:4B:83:CF:01:20:CA:7C:8A:95:34:31:BB
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dFhQhzFIVrtLg88BIMp8ipU0Mbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
18:90:a9:1f:4b:54:1b:f0:c9:80:e0:e3:5d:b1:9f:6f:6c:67:
d9:dc:88:98:87:68:02:73:ed:4a:87:47:03:3e:c5:d6:88:cb:
ff:c1:e2:3a:d1:72:cd:b1:c8:ed:fa:96:7e:e3:af:78:f3:36:
c3:c7:41:68:aa:45:a8:1a:0f:ac:db:53:f5:77:fe:93:4f:d8:
87:04:2e:cb:31:b1:c1:ad:58:3d:fd:46:ae:90:69:eb:25:31:
c6:32:56:74:bd:f4:65:04:5d:56:fa:0b:97:5d:5e:8e:b5:ab:
be:61:64:0c:e1:a1:94:02:d0:13:4e:5f:bc:5f:19:f5:f4:1d:
82:91:84:ed:bd:31:29:ec:9f:b6:bb:36:20:68:81:2e:f8:df:
67:d3:70:6d:28:b7:66:78:6b:51:63:4f:f1:be:69:9c:5a:2a:
49:62:51:2d:6f:d0:6a:ed:f7:6d:b1:f1:54:85:2d:07:fa:5c:
3d:bf:fb:0e:7e:55:59:54:69:90:60:2f:b8:5f:e7:ef:74:8d:
71:dc:b5:66:9c:1c:35:74:cb:9f:9a:cd:bd:96:1a:1b:93:f7:
82:db:63:29:e3:8d:7b:76:47:33:22:e6:b7:ea:87:d7:6c:a4:
d7:9d:6c:e2:fb:c5:2d:0b:de:68:c1:43:5c:f3:4a:0e:b3:4b:
f9:2a:fb:41
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgISAYeaGK23p5Bbt8bNn4yOAOc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjMwNDE5MTUxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDU4NTA4NzMxNDg1NmJiNGI4M2NmMDEyMGNhN2M4YTk1MzQzMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqAW6GLWOVzW6z3ctPHV72/8snjy
u9QVpWrSLoxol/ZgHYvEH1nkS/hUZ71DjaMa0tzH59glhLC3REUee41mgMytbyRl
31tpxshWorL0fjg9qsKSCM6Gftq0xHY5bdTE0SaSkfcdTSnd8evViCCijF/OTU58
EXoRhQMCZHbnZ8Zhi/p6e8EsRiIRinb5lOMu46zT/QS79stWYZGlSAZ28kw3BNEG
8eQ8rK13Q4L4DhIf2WcsXm6Fp8UrPHyeJFrnmTgwAqxcIahB3D7p421umPeR7bXz
cZZYiy5gn01z5Om+nQdGbJd/4fnURpZnvhOaVEeNLcWpMLR7kWhWX4wxYwIDAQAB
o4IDDDCCAwgwHQYDVR0OBBYEFHRYUIcxSFa7S4PPASDKfIqVNDG7MB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvZEZoUWh6RklWcnRMZzg4QklNcDhpcFUwTWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIAYIKwYBBQUHAQcBAf8EggEPMIIBCzCB+QQCAAEwgfID
BAVNXqAwDAMEBFEakAMEAlEamAMEAlQvgDAMAwQBVC+GAwQAVC+IMAwDBAJUL4wD
BAFUL5AwDAMEAFQvkwMEAVQvmDAMAwQCVC+cAwQBVC+kMAwDBANUL6gDBABUL7Iw
DAMEAFQvtQMEA1QvsAMEAVQvugMEAVQvvgMEA1VbYAMEAlVbcDAMAwQBVVt2AwQA
VVt6AwQAuWprAwQC1YdAMAwDBADVh0UDBADVh0YDBAHVh0gDBADVh00wDAMEANWH
TwMEAtWHWDAMAwQF1dCgAwQA1dCqMAwDBALV0KwDBADV0LgwDAMEAdXQugMEBtXQ
gDANBAIAAjAHAwUDKgILyDANBgkqhkiG9w0BAQsFAAOCAQEAGJCpH0tUG/DJgODj
XbGfb2xn2dyImIdoAnPtSodHAz7F1ojL/8HiOtFyzbHI7fqWfuOvePM2w8dBaKpF
qBoPrNtT9Xf+k0/YhwQuyzGxwa1YPf1GrpBp6yUxxjJWdL30ZQRdVvoLl11ejrWr
vmFkDOGhlALQE05fvF8Z9fQdgpGE7b0xKeyftrs2IGiBLvjfZ9NwbSi3ZnhrUWNP
8b5pnFoqSWJRLW/Qau33bbHxVIUtB/pcPb/7Dn5VWVRpkGAvuF/n73SNcdy1Zpwc
NXTLn5rNvZYaG5P3gttjKeONe3ZHMyLmt+qH12yk151s4vvFLQveaMFDXPNKDrNL
+Sr7QQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org