Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iomx44bgvKl729LcyfxWCxF6NM0.roa
File: iomx44bgvKl729LcyfxWCxF6NM0.roa (raw, json)
Hash identifier: 28W8zDZS8PNJXnUReU02iGRtvnRmzX+BRJW2hS2w/8E=
Subject key identifier: 8A:89:B1:E3:86:E0:BC:A9:7B:DB:D2:DC:C9:FC:56:0B:11:7A:34:CD
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 0191FF69CA3B28E462BC2FDF2821673AA521
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iomx44bgvKl729LcyfxWCxF6NM0.roa
Signing time: Tue 17 Sep 2024 09:56:48 +0000
ROA not before: Tue 17 Sep 2024 09:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 24
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 24
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.68.0/24 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 24
92.204.160.0/19 maxlen: 24
92.204.192.0/23 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.196.0/22 maxlen: 24
92.204.200.0/21 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
92.205.152.0/24 maxlen: 24
92.205.153.0/24 maxlen: 24
92.205.154.0/24 maxlen: 24
134.119.176.0/20 maxlen: 24
134.119.192.0/19 maxlen: 24
146.0.224.0/19 maxlen: 24
151.106.0.0/19 maxlen: 24
151.106.48.0/20 maxlen: 24
185.19.216.0/22 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.164.0/22 maxlen: 24
185.136.168.0/22 maxlen: 24
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 24
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 48
2a01:7a0::/32 maxlen: 48
2a01:7a7::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Sep 2024 08:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:69:ca:3b:28:e4:62:bc:2f:df:28:21:67:3a:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 17 09:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a89b1e386e0bca97bdbd2dcc9fc560b117a34cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:8a:89:c2:7d:00:ec:a6:59:92:03:9b:87:
f8:cb:95:2d:c7:27:4f:5a:a3:37:da:f5:14:37:5c:
40:fd:31:a2:ce:6e:dd:f0:cb:84:55:b4:a1:c8:b8:
16:1c:44:2a:a3:f3:68:ca:77:d6:67:05:bb:39:8d:
37:31:f9:e0:49:0e:e6:17:6b:1d:e2:9e:e0:9b:3d:
0d:e4:9f:79:b5:1f:1e:69:c0:cb:99:ba:0d:21:75:
07:6c:56:da:4a:bb:c1:34:a5:79:51:ab:c6:49:b9:
d6:2e:52:63:3e:09:a0:11:32:05:ab:c0:a7:78:4f:
50:41:b2:66:e9:33:47:fc:6e:28:9d:40:62:70:39:
37:7a:d5:80:13:6e:6e:e1:44:df:5e:22:ab:d2:ad:
bc:b3:56:28:77:d5:18:1b:4f:5a:a6:bd:f4:e7:09:
be:19:26:6c:de:29:56:ba:22:ff:c6:a0:d1:53:28:
c8:94:11:81:7e:7b:6a:e3:30:bd:d6:ab:4a:44:c6:
52:16:7c:31:75:20:cd:76:e3:52:de:db:33:bd:a4:
ad:e6:d6:42:5c:74:21:18:a7:2c:50:5c:49:60:69:
3b:79:af:3c:69:37:e4:be:84:25:dc:33:f5:02:34:
45:a3:78:e1:71:49:a2:a8:65:62:77:2b:18:2a:07:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:B1:E3:86:E0:BC:A9:7B:DB:D2:DC:C9:FC:56:0B:11:7A:34:CD
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/iomx44bgvKl729LcyfxWCxF6NM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/21
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:60:f3:45:1d:f6:53:ac:01:b2:9e:28:a2:7f:a9:8b:9f:5d:
23:34:de:4f:9f:c1:e7:26:6f:5e:73:83:20:45:45:ad:57:a5:
fb:e9:98:ed:7f:c4:ce:47:94:e6:70:10:2b:df:06:08:82:93:
8f:d5:7e:d5:a5:1d:01:17:a8:b8:17:33:bf:26:cf:bb:d0:c8:
16:26:ed:12:cb:4c:81:6d:37:c3:36:26:51:fa:97:ac:a1:4f:
8e:19:f4:bb:e1:ec:2c:f1:d3:9c:11:76:8d:03:b5:4c:9e:59:
96:51:23:6c:73:c4:a0:f3:49:a0:7b:d2:4b:4c:93:b1:6d:bb:
2f:d2:40:db:0b:be:07:7c:b4:e3:59:89:f3:53:71:31:9d:2d:
ab:e9:e0:73:98:0d:e7:75:6a:5b:97:e8:65:4f:ce:56:89:05:
b5:cc:67:7c:72:66:ad:58:f0:d1:39:6d:49:77:e8:ad:ba:31:
b9:7c:13:40:4c:c9:4b:97:6b:a6:96:c0:73:90:8a:91:8f:7a:
3d:c0:fa:17:ce:75:10:1d:90:54:44:95:3c:f2:62:58:d8:e5:
f2:be:69:20:62:11:41:a7:93:76:25:1d:56:6a:0b:ff:8f:09:
9a:7f:fc:7f:77:47:46:80:ee:e4:46:4b:b3:ec:be:da:3b:66:
0f:96:bb:63
-----BEGIN CERTIFICATE-----
MIIIHTCCBwWgAwIBAgISAZH/aco7KORivC/fKCFnOqUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj
ZjgzZjYwHhcNMjQwOTE3MDk1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTg5YjFlMzg2ZTBiY2E5N2JkYmQyZGNjOWZjNTYwYjExN2EzNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6mKicJ9AOymWZIDm4f4y5UtxydP
WqM32vUUN1xA/TGizm7d8MuEVbShyLgWHEQqo/NoynfWZwW7OY03MfngSQ7mF2sd
4p7gmz0N5J95tR8eacDLmboNIXUHbFbaSrvBNKV5UavGSbnWLlJjPgmgETIFq8Cn
eE9QQbJm6TNH/G4onUBicDk3etWAE25u4UTfXiKr0q28s1Yod9UYG09apr305wm+
GSZs3ilWuiL/xqDRUyjIlBGBfntq4zC91qtKRMZSFnwxdSDNduNS3tszvaSt5tZC
XHQhGKcsUFxJYGk7ea88aTfkvoQl3DP1AjRFo3jhcUmiqGVidysYKger6wIDAQAB
o4IFKTCCBSUwHQYDVR0OBBYEFIqJseOG4Lype9vS3Mn8VgsRejTNMB8GA1UdIwQY
MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt
MDE1ZWE1MDE5NTIwLzEvaW9teDQ0Ymd2S2w3MjlMY3lmeFdDeEY2Tk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw
LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDPQYIKwYBBQUHAQcBAf8EggMsMIIDKDCCAxUEAgABMIID
DQMEBCU90AMEAD5LggMEAD5LiAMEAD5LpwMEAD5LszAMAwQAPku1AwQDPkuwMAwD
BAE+S8IDBAA+S8YwDAMEAD5LyQMEAD5LzAMEAD5LzzAMAwQAPkvVAwQAPkvgMAwD
BAI+S+QDBAA+S+YwDAMEAz5L6AMEAD5L7gMEAj5L/AMEAj6KADAMAwQAPooFAwQA
PooIMAwDBAE+igoDBAA+igwDBAA+ig4DBAA+ihADBAE+ihIDBAA+ihgDBAA+ihow
DAMEBU6KYAMEAk6KaAMEAE6KdgMEAU6KfjAMAwQAUFZRAwQDUFZQMAwDBAFQVloD
BAVQVkADBABVGQEDBANVGQgDBABVGRQDBABVGRswDAMEA1UZKAMEAFUZQDAMAwQB
VRlCAwQAVRlEMAwDBABVGUcDBARVGUADBAJVGVwwDAMEAVUZYgMEAFUZZDAMAwQB
VRlmAwQAVRluMAwDBAJVGXQDBABVGXgwDAMEAVUZegMEAVUZnDAMAwQAVRmfAwQA
VRmgMAwDBAJVGawDBABVGa4wDAMEBFUZsAMEAlUZyDAMAwQBVRnOAwQCVRnQMAwD
BABVGdUDBABVGdwDBAFVGd4DBAFVGeIDBAFVGegwDAMEAFUZ6wMEBFUZ4DAMAwQB
VRnyAwQAVRn0AwQAVRn2AwQDVRn4MAwDBANVXVgDBAFVXVwDBAZVw0ADBABXd8MD
BAJXd9wDBANcKmgDBAFczCgwDAMEAFzMNQMEAFzMNgMEA1zMYDAMAwQFXMygAwQE
XMzAAwQEXMzwAwQDXM0gAwQEXM1wAwQCXM2YMAwDBASGd7ADBAWGd8ADBAWSAOAD
BAWXagADBASXajADBAK5E9gwDAMEArmInAMEArmIqDALAwMBvIoDBAK8iggDBAK8
ihAwDAMEA7yKGAMEBLyKIAMEA7yKODAMAwQCvIpEAwQEvIpAMAwDBAC8ilEDBAe8
igADBALDRfADBADZdhMwDAMEANl2FwMEANl2GAMEAdl2GjAMAwQB2ayqAwQA2ays
MAwDBATZrLADBADZrL4wDQQCAAIwBwMFAyoBB6AwDQYJKoZIhvcNAQELBQADggEB
AI5g80Ud9lOsAbKeKKJ/qYufXSM03k+fwecmb15zgyBFRa1XpfvpmO1/xM5HlOZw
ECvfBgiCk4/VftWlHQEXqLgXM78mz7vQyBYm7RLLTIFtN8M2JlH6l6yhT44Z9Lvh
7Czx05wRdo0DtUyeWZZRI2xzxKDzSaB70ktMk7Ftuy/SQNsLvgd8tONZifNTcTGd
Lavp4HOYDed1aluX6GVPzlaJBbXMZ3xyZq1Y8NE5bUl36K26Mbl8E0BMyUuXa6aW
wHOQipGPej3A+hfOdRAdkFRElTzyYljY5fK+aSBiEUGnk3YlHVZqC/+PCZp//H93
R0aA7uRGS7Psvto7Zg+Wu2M=
-----END CERTIFICATE-----
Generated at Mon Sep 23 09:33:21 2024 by rpki-client on console-fra.rpki-client.org