Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/mDHJTzqdlvFSVVSt47IhPnz9epM.roa
File: mDHJTzqdlvFSVVSt47IhPnz9epM.roa (raw, json)
Hash identifier: 7Y7wDfxxBnY3Jrl8jyXvbD6MI7iGFWB7gGKL2Abo948=
Subject key identifier: 98:31:C9:4F:3A:9D:96:F1:52:55:54:AD:E3:B2:21:3E:7C:FD:7A:93
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 018B9197079F56D4A581FB1AA395682A9814
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/mDHJTzqdlvFSVVSt47IhPnz9epM.roa
Signing time: Thu 02 Nov 2023 19:51:16 +0000
ROA not before: Thu 02 Nov 2023 19:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 81.201.124.0/22 maxlen: 22
81.29.192.0/19 maxlen: 19
81.29.208.0/20 maxlen: 20
81.201.96.0/22 maxlen: 22
89.107.16.0/21 maxlen: 21
81.201.100.0/23 maxlen: 23
81.201.104.0/24 maxlen: 24
81.201.112.0/22 maxlen: 22
81.201.108.0/22 maxlen: 22
81.201.118.0/23 maxlen: 23
88.80.160.0/20 maxlen: 20
88.80.176.0/21 maxlen: 21
85.90.224.0/20 maxlen: 20
217.20.32.0/21 maxlen: 21
217.20.32.0/20 maxlen: 20
217.20.44.0/22 maxlen: 22
217.20.40.0/23 maxlen: 23
217.20.42.0/23 maxlen: 23
85.90.240.0/22 maxlen: 22
212.111.32.0/21 maxlen: 21
217.117.144.0/20 maxlen: 20
80.252.80.0/20 maxlen: 20
87.237.184.0/21 maxlen: 21
213.52.132.0/22 maxlen: 22
213.52.136.0/21 maxlen: 21
213.52.144.0/20 maxlen: 20
213.52.160.0/20 maxlen: 20
213.52.172.0/22 maxlen: 22
213.52.176.0/22 maxlen: 22
213.52.180.0/23 maxlen: 23
213.52.184.0/22 maxlen: 22
213.52.190.0/23 maxlen: 23
213.52.188.0/23 maxlen: 23
213.52.192.0/18 maxlen: 18
188.95.96.0/21 maxlen: 21
80.85.80.0/23 maxlen: 23
80.85.82.0/23 maxlen: 23
80.85.88.0/21 maxlen: 21
212.71.224.0/21 maxlen: 21
212.71.240.0/22 maxlen: 22
80.85.64.0/20 maxlen: 20
109.237.16.0/21 maxlen: 21
62.216.224.0/21 maxlen: 21
109.237.28.0/24 maxlen: 24
85.233.192.0/19 maxlen: 19
62.216.233.0/24 maxlen: 24
62.216.236.0/22 maxlen: 22
85.233.196.0/24 maxlen: 24
62.216.234.0/23 maxlen: 23
85.233.194.0/24 maxlen: 24
62.216.244.0/22 maxlen: 22
85.233.205.0/24 maxlen: 24
62.216.246.0/24 maxlen: 24
62.216.240.0/20 maxlen: 20
213.219.40.0/21 maxlen: 21
213.219.48.0/20 maxlen: 20
62.209.32.0/19 maxlen: 19
212.111.44.0/22 maxlen: 22
85.90.248.0/21 maxlen: 21
212.111.48.0/20 maxlen: 20
85.90.252.0/22 maxlen: 22
213.219.0.0/19 maxlen: 19
217.114.160.0/20 maxlen: 20
87.252.192.0/20 maxlen: 20
213.219.32.0/22 maxlen: 22
87.252.208.0/20 maxlen: 20
217.68.16.0/20 maxlen: 20
217.68.16.0/22 maxlen: 22
217.68.24.0/21 maxlen: 21
217.68.20.0/22 maxlen: 22
89.21.0.0/19 maxlen: 19
213.168.224.0/20 maxlen: 20
82.199.64.0/19 maxlen: 19
213.168.240.0/21 maxlen: 21
213.168.252.0/22 maxlen: 22
2a02:170::/32 maxlen: 32
2001:4d78:f200::/40 maxlen: 40
2001:4d78::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:97:07:9f:56:d4:a5:81:fb:1a:a3:95:68:2a:98:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Nov 2 19:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9831c94f3a9d96f1525554ade3b2213e7cfd7a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:53:a8:47:1c:b2:11:83:b6:da:d2:b1:ee:
32:c8:a2:13:84:99:8d:cb:43:e6:cf:75:61:01:11:
f0:59:17:8f:79:ca:fe:cb:1d:dd:4e:8e:af:62:6f:
32:63:d5:d1:94:ba:2d:58:b9:96:13:7a:1e:be:a7:
6e:a6:7c:43:5f:fc:09:44:b9:30:4c:94:45:8a:5a:
15:3b:38:5b:ee:44:29:d4:3f:46:d1:08:9a:0d:38:
d9:e1:79:0b:33:3f:63:2a:38:6e:72:84:ef:c2:a7:
68:71:0f:99:3c:8e:eb:30:73:b8:93:30:dd:c4:5a:
1c:4e:84:9c:37:14:33:47:31:3b:de:73:5a:cd:89:
4e:2f:8a:8a:c4:39:ce:72:e0:43:4f:81:16:16:f1:
57:8d:dd:8c:f7:db:57:d6:50:91:0c:61:17:f3:94:
c3:87:8a:77:ef:d3:ae:64:21:5b:31:e8:3f:ae:c5:
a6:b9:27:8f:c0:2c:c8:00:2f:83:e1:94:bb:a2:6a:
be:82:13:d1:df:61:ff:03:0d:31:bb:95:ab:19:f6:
39:b6:7d:0d:02:a4:13:f8:5a:19:58:e3:65:4f:95:
f9:39:1d:21:d5:ae:ab:04:3e:0d:81:64:ab:6a:d8:
2c:d1:30:14:1f:43:91:d4:22:46:4c:7e:6c:ec:cb:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:C9:4F:3A:9D:96:F1:52:55:54:AD:E3:B2:21:3E:7C:FD:7A:93
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/mDHJTzqdlvFSVVSt47IhPnz9epM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.32.0/19
62.216.224.0/21
62.216.233.0-62.216.255.255
80.85.64.0-80.85.83.255
80.85.88.0/21
80.252.80.0/20
81.29.192.0/19
81.201.96.0-81.201.101.255
81.201.104.0/24
81.201.108.0-81.201.115.255
81.201.118.0/23
81.201.124.0/22
82.199.64.0/19
85.90.224.0-85.90.243.255
85.90.248.0/21
85.233.192.0/19
87.237.184.0/21
87.252.192.0/19
88.80.160.0-88.80.183.255
89.21.0.0/19
89.107.16.0/21
109.237.16.0/21
109.237.28.0/24
188.95.96.0/21
212.71.224.0/21
212.71.240.0/22
212.111.32.0/21
212.111.44.0-212.111.63.255
213.52.132.0-213.52.181.255
213.52.184.0-213.52.255.255
213.168.224.0-213.168.247.255
213.168.252.0/22
213.219.0.0-213.219.35.255
213.219.40.0-213.219.63.255
217.20.32.0/20
217.68.16.0/20
217.114.160.0/20
217.117.144.0/20
IPv6:
2001:4d78::/32
2a02:170::/32
Signature Algorithm: sha256WithRSAEncryption
14:94:4e:16:54:60:43:61:46:9a:87:7f:cb:e8:86:eb:06:69:
df:af:c4:46:ed:0e:8c:39:90:58:ad:3d:97:57:85:1d:ba:34:
58:67:b3:e3:95:c2:e6:ea:dc:4b:d5:01:09:f2:78:cb:27:0f:
61:5a:e5:fa:dc:f6:6f:0b:d4:09:33:a9:1b:f3:0f:91:7c:ff:
36:11:6e:d6:38:4d:55:81:f8:bb:dd:49:ca:ac:0c:fc:52:4f:
da:db:c2:e1:95:ee:fa:26:ee:df:16:80:2a:29:6f:cf:8a:ff:
15:8b:60:e8:22:ce:d9:26:6a:b0:78:56:ae:63:b0:38:5e:a7:
9f:fc:be:a5:9f:6e:72:da:09:84:50:e8:ae:74:e1:85:f4:07:
ff:3f:48:b7:da:a0:ca:2b:02:48:4e:1c:e1:8a:cd:97:4b:7e:
07:dc:2a:11:f5:f5:a8:8e:b3:76:07:0b:e9:24:d4:26:37:66:
17:8f:4f:58:6f:24:7c:d1:1d:c6:b0:db:9e:44:e5:a3:b7:d2:
a2:7e:eb:e1:7e:80:f4:d5:63:54:67:93:34:d8:19:7f:f7:58:
c1:1c:17:8d:19:93:20:bd:b6:89:0a:05:69:5a:cc:fb:49:55:
56:e8:b7:3e:a5:62:49:7c:af:da:80:89:74:8b:cc:28:bb:47:
9f:2e:57:3d
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAYuRlwefVtSlgfsao5VoKpgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh
YzY2NTQwHhcNMjMxMTAyMTk1MTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODMxYzk0ZjNhOWQ5NmYxNTI1NTU0YWRlM2IyMjEzZTdjZmQ3YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJtTqEccshGDttrSse4yyKIThJmN
y0Pmz3VhARHwWRePecr+yx3dTo6vYm8yY9XRlLotWLmWE3oevqdupnxDX/wJRLkw
TJRFiloVOzhb7kQp1D9G0QiaDTjZ4XkLMz9jKjhucoTvwqdocQ+ZPI7rMHO4kzDd
xFocToScNxQzRzE73nNazYlOL4qKxDnOcuBDT4EWFvFXjd2M99tX1lCRDGEX85TD
h4p379OuZCFbMeg/rsWmuSePwCzIAC+D4ZS7omq+ghPR32H/Aw0xu5WrGfY5tn0N
AqQT+FoZWONlT5X5OR0h1a6rBD4NgWSratgs0TAUH0OR1CJGTH5s7MumtQIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFJgxyU86nZbxUlVUreOyIT58/XqTMB8GA1UdIwQY
MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt
OGYyZDY2ODRjODE0LzEvbURISlR6cWRsdkZTVlZTdDQ3SWhQbno5ZXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0
LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAUkEAgABMIIB
QQMEBT7RIAMEAz7Y4DALAwQAPtjpAwMAPtgwDAMEBlBVQAMEAlBVUAMEA1BVWAME
BFD8UAMEBVEdwDAMAwQFUclgAwQBUclkAwQAUcloMAwDBAJRyWwDBAJRyXADBAFR
yXYDBAJRyXwDBAVSx0AwDAMEBVVa4AMEAlVa8AMEA1Va+AMEBVXpwAMEA1ftuAME
BVf8wDAMAwQFWFCgAwQDWFCwAwQFWRUAAwQDWWsQAwQDbe0QAwQAbe0cAwQDvF9g
AwQD1EfgAwQC1EfwAwQD1G8gMAwDBALUbywDBAbUbwAwDAMEAtU0hAMEAdU0tDAL
AwQD1TS4AwMA1TQwDAMEBdWo4AMEA9Wo8AMEAtWo/DALAwMA1dsDBALV2yAwDAME
A9XbKAMEBtXbAAMEBNkUIAMEBNlEEAMEBNlyoAMEBNl1kDAUBAIAAjAOAwUAIAFN
eAMFACoCAXAwDQYJKoZIhvcNAQELBQADggEBABSUThZUYENhRpqHf8vohusGad+v
xEbtDow5kFitPZdXhR26NFhns+OVwubq3EvVAQnyeMsnD2Fa5frc9m8L1AkzqRvz
D5F8/zYRbtY4TVWB+LvdScqsDPxST9rbwuGV7vom7t8WgCopb8+K/xWLYOgiztkm
arB4Vq5jsDhep5/8vqWfbnLaCYRQ6K504YX0B/8/SLfaoMorAkhOHOGKzZdLfgfc
KhH19aiOs3YHC+kk1CY3ZhePT1hvJHzRHcaw255E5aO30qJ+6+F+gPTVY1RnkzTY
GX/3WMEcF40ZkyC9tokKBWlazPtJVVbotz6lYkl8r9qAiXSLzCi7R58uVz0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:00 2024 by rpki-client on console-fra.rpki-client.org