Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rueLwSCdyXooJ7bSt8WMeCEXd3Q.roa
File: rueLwSCdyXooJ7bSt8WMeCEXd3Q.roa (raw, json)
Hash identifier: 0fLthO+dp5VPHwScwnb+Ek+4maSCw5j/8GN8prEXhss=
Subject key identifier: AE:E7:8B:C1:20:9D:C9:7A:28:27:B6:D2:B7:C5:8C:78:21:17:77:74
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018BF210612D1CDE2660E401957B31DDC02C
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rueLwSCdyXooJ7bSt8WMeCEXd3Q.roa
Signing time: Tue 21 Nov 2023 13:27:21 +0000
ROA not before: Tue 21 Nov 2023 13:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
213.135.92.0/24 maxlen: 24
84.47.152.0/23 maxlen: 23
84.47.150.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
213.135.64.0/23 maxlen: 23
84.47.172.0/24 maxlen: 24
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
85.91.120.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
84.47.174.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:10:61:2d:1c:de:26:60:e4:01:95:7b:31:dd:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Nov 21 13:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee78bc1209dc97a2827b6d2b7c58c7821177774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:11:62:a2:5e:09:96:9d:91:56:4a:5e:6b:
00:5e:dd:66:34:20:ed:2a:88:41:27:20:fc:53:af:
40:c2:16:e5:1c:e8:90:f7:5f:62:15:c9:70:a6:48:
4d:d1:42:38:44:ea:5f:24:fa:7d:7d:e6:14:d1:8c:
d3:9c:70:52:6e:89:9e:27:dc:5a:24:a1:91:84:72:
07:94:cd:28:24:ab:1f:d1:ef:60:ca:16:34:4b:81:
77:97:b0:10:fe:a2:bf:ea:31:30:3f:18:a9:0a:b7:
97:99:e0:29:e2:bb:92:c7:d2:4b:22:00:c5:5f:d7:
d4:d3:6a:06:72:dc:86:58:ce:e8:24:d9:5a:c7:4a:
c3:d0:20:48:19:c8:f5:87:e9:78:33:4a:cc:3e:11:
b5:81:35:47:4c:ca:59:36:26:43:f0:e0:7d:4b:15:
54:9b:98:1f:ef:00:7e:2f:38:78:f2:21:28:3c:b5:
36:76:aa:08:c3:c1:9d:80:3c:c4:93:8c:7d:bc:f7:
84:6e:bd:cb:fc:12:30:a0:49:8e:e4:bb:26:c4:8f:
74:88:5c:ce:bf:de:78:c7:ba:02:46:fb:f6:e7:1a:
19:75:21:7b:4e:11:40:b7:a0:52:ba:0a:8a:af:ed:
b2:3a:e9:98:fa:ee:28:2f:6e:a8:54:6a:39:7b:51:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:8B:C1:20:9D:C9:7A:28:27:B6:D2:B7:C5:8C:78:21:17:77:74
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rueLwSCdyXooJ7bSt8WMeCEXd3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.80.255
213.135.82.0-213.135.92.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
00:ef:1d:99:f5:18:9f:ba:f2:96:bb:6b:d3:44:15:1d:0e:a9:
f7:82:3a:55:c5:f9:ae:56:86:16:1b:2a:b4:4f:8f:50:0b:63:
41:b3:c6:a7:17:22:f9:a9:3a:e4:9a:f1:66:19:38:b3:3d:6c:
62:88:d8:a1:d8:60:83:10:a3:d9:d7:de:a3:19:b9:66:56:cd:
05:36:16:2d:2d:c8:4f:cf:d6:27:ad:a8:6d:2c:30:fa:be:f2:
e7:39:d6:72:90:45:31:e5:0b:c8:d1:73:39:56:d7:ec:33:d3:
9f:43:97:db:e8:16:83:fc:50:78:fd:f9:f5:d8:bb:51:e6:30:
db:18:e1:cd:e6:b8:d5:e8:d7:66:bc:d4:fb:fa:f5:ef:e9:f7:
20:9e:5a:36:4e:74:4c:79:86:bd:1e:bb:e5:0a:df:19:1e:bc:
c9:92:81:03:d8:e9:81:7f:91:b3:4d:e6:5f:d2:cd:66:61:f6:
b5:26:02:17:f5:48:b3:3c:a2:49:d7:c5:fb:11:0c:e0:e6:1a:
2b:20:8b:bf:a8:96:fa:14:ab:68:47:2d:71:0d:16:6a:a0:08:
60:93:a8:c3:5e:59:58:cd:25:b6:93:7c:41:fc:fe:fe:9c:ae:
08:00:4b:98:c0:49:54:a3:57:e7:c7:ed:96:be:4f:e8:9a:ec:
54:e8:57:e6
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISAYvyEGEtHN4mYOQBlXsx3cAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjMxMTIxMTMyNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU3OGJjMTIwOWRjOTdhMjgyN2I2ZDJiN2M1OGM3ODIxMTc3Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+ERYqJeCZadkVZKXmsAXt1mNCDt
KohBJyD8U69AwhblHOiQ919iFclwpkhN0UI4ROpfJPp9feYU0YzTnHBSbomeJ9xa
JKGRhHIHlM0oJKsf0e9gyhY0S4F3l7AQ/qK/6jEwPxipCreXmeAp4ruSx9JLIgDF
X9fU02oGctyGWM7oJNlax0rD0CBIGcj1h+l4M0rMPhG1gTVHTMpZNiZD8OB9SxVU
m5gf7wB+Lzh48iEoPLU2dqoIw8GdgDzEk4x9vPeEbr3L/BIwoEmO5LsmxI90iFzO
v954x7oCRvv25xoZdSF7ThFAt6BSugqKr+2yOumY+u4oL26oVGo5e1H6XwIDAQAB
o4IDPDCCAzgwHQYDVR0OBBYEFK7ni8Egncl6KCe20rfFjHghF3d0MB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvcnVlTHdTQ2R5WG9vSjdiU3Q4V01lQ0VYZDNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUAYIKwYBBQUHAQcBAf8EggE/MIIBOzCCASgEAgABMIIB
IAMEBU1eoDAMAwQEURqQAwQCURqYAwQBVC+AAwQAVC+DMAwDBAFUL4YDBABUL4gw
DAMEAlQvjAMEAVQvkAMEAFQvkzAMAwQBVC+WAwQBVC+YMAwDBAJUL5wDBAFUL6Qw
DAMEA1QvqAMEAFQvrDAMAwQBVC+uAwQAVC+yMAwDBABUL7UDBANUL7ADBAFUL7oD
BAFUL74DBANVW2ADBAJVW3AwDAMEAVVbdgMEAFVbegMEALlqawMEAdWHQAMEANWH
QzAMAwQA1YdFAwQA1YdGAwQB1YdIAwQA1YdNMAwDBADVh08DBADVh1AwDAMEAdWH
UgMEANWHXDAMAwQF1dCgAwQA1dCqMAwDBALV0KwDBADV0LgwDAMEAdXQugMEBtXQ
gDANBAIAAjAHAwUDKgILyDANBgkqhkiG9w0BAQsFAAOCAQEAAO8dmfUYn7rylrtr
00QVHQ6p94I6VcX5rlaGFhsqtE+PUAtjQbPGpxci+ak65JrxZhk4sz1sYojYodhg
gxCj2dfeoxm5ZlbNBTYWLS3IT8/WJ62obSww+r7y5znWcpBFMeULyNFzOVbX7DPT
n0OX2+gWg/xQeP359di7UeYw2xjhzea41ejXZrzU+/r17+n3IJ5aNk50THmGvR67
5QrfGR68yZKBA9jpgX+Rs03mX9LNZmH2tSYCF/VIszyiSdfF+xEM4OYaKyCLv6iW
+hSraEctcQ0WaqAIYJOow15ZWM0ltpN8Qfz+/pyuCABLmMBJVKNX58ftlr5P6Jrs
VOhX5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org