Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o8K6R3ODXRfThT-kw40HjAXGEJI.roa
File: o8K6R3ODXRfThT-kw40HjAXGEJI.roa (raw, json)
Hash identifier: JWK8Tc57ZliDRZdRUYIbHiRSFiewzR7ljFUCukuYaEg=
Subject key identifier: A3:C2:BA:47:73:83:5D:17:D3:85:3F:A4:C3:8D:07:8C:05:C6:10:92
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7AA08B6279E7700F3B936F6F64CCD025
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o8K6R3ODXRfThT-kw40HjAXGEJI.roa
Signing time: Tue 26 Mar 2024 11:58:45 +0000
ROA not before: Tue 26 Mar 2024 11:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.122.0.0/21 maxlen: 21
92.122.8.0/22 maxlen: 22
92.122.12.0/22 maxlen: 22
92.122.16.0/22 maxlen: 22
92.122.20.0/22 maxlen: 22
92.122.24.0/22 maxlen: 22
92.122.32.0/21 maxlen: 21
92.122.44.0/22 maxlen: 22
92.122.60.0/22 maxlen: 22
92.122.64.0/22 maxlen: 22
92.122.72.0/22 maxlen: 22
92.122.76.0/22 maxlen: 22
92.122.80.0/22 maxlen: 22
92.122.88.0/22 maxlen: 22
92.122.96.0/22 maxlen: 22
92.122.104.0/22 maxlen: 22
92.122.108.0/22 maxlen: 22
92.122.144.0/22 maxlen: 22
92.122.148.0/22 maxlen: 22
92.122.160.0/22 maxlen: 22
92.122.196.0/22 maxlen: 22
92.122.246.0/23 maxlen: 23
92.122.248.0/24 maxlen: 24
92.122.249.0/24 maxlen: 24
92.122.250.0/24 maxlen: 24
92.122.251.0/24 maxlen: 24
92.123.4.0/22 maxlen: 22
92.123.16.0/22 maxlen: 22
92.123.20.0/22 maxlen: 22
92.123.28.0/22 maxlen: 22
92.123.32.0/22 maxlen: 22
92.123.36.0/22 maxlen: 22
92.123.44.0/22 maxlen: 22
92.123.50.0/23 maxlen: 23
92.123.52.0/22 maxlen: 22
92.123.56.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
95.101.80.0/22 maxlen: 22
95.101.84.0/22 maxlen: 22
95.101.88.0/22 maxlen: 22
95.101.92.0/22 maxlen: 22
95.101.96.0/22 maxlen: 22
95.101.100.0/22 maxlen: 22
95.101.104.0/22 maxlen: 22
95.101.124.0/22 maxlen: 22
95.101.144.0/22 maxlen: 22
95.101.148.0/22 maxlen: 22
95.101.152.0/22 maxlen: 22
95.101.160.0/22 maxlen: 22
95.101.164.0/22 maxlen: 22
95.101.172.0/22 maxlen: 22
95.101.176.0/22 maxlen: 22
95.101.184.0/22 maxlen: 22
95.101.188.0/22 maxlen: 22
95.101.192.0/22 maxlen: 22
95.101.196.0/22 maxlen: 22
95.101.200.0/22 maxlen: 22
95.101.208.0/20 maxlen: 20
95.101.224.0/22 maxlen: 22
95.101.240.0/20 maxlen: 20
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:a0:8b:62:79:e7:70:0f:3b:93:6f:6f:64:cc:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 26 11:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3c2ba4773835d17d3853fa4c38d078c05c61092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:22:93:aa:1c:18:98:a5:33:0b:a9:af:fa:
ff:44:fd:1a:2c:9a:70:7f:65:70:cb:aa:ad:a7:71:
fa:1f:94:81:f7:b1:ce:1f:dc:10:da:bb:aa:39:40:
3f:e6:c6:82:d5:38:61:03:6f:63:76:1b:73:6c:21:
e3:c6:35:02:5d:bf:1b:0a:2d:3e:bc:2e:91:02:e8:
14:32:1d:20:f4:b0:30:8a:d1:c5:42:27:6d:59:49:
cc:07:d2:30:c1:65:42:69:89:3a:9d:7c:54:86:58:
ff:3d:c5:b1:80:7a:35:ad:b1:91:3a:2a:94:ae:3f:
ec:34:1b:02:62:cb:60:93:ec:ca:f6:99:69:cf:d5:
ac:08:a3:24:ef:8f:d5:31:60:79:0e:0b:90:ce:76:
1c:52:00:e9:cb:ba:94:55:46:8a:e9:9c:9d:fc:64:
97:4c:5c:45:60:80:8d:d2:cb:a5:33:d9:4c:01:7b:
4e:16:99:c3:b9:ef:f7:cc:3c:18:8f:13:da:8c:2d:
00:97:46:e2:75:ed:4d:29:c5:65:10:64:e4:dd:22:
b2:0c:ea:44:1d:18:d9:91:31:5a:28:ca:d6:62:5e:
b6:74:53:92:33:ce:78:1f:7d:e0:5f:80:0b:8b:19:
23:6b:27:bb:f9:54:51:d5:96:af:25:80:e5:9d:83:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:BA:47:73:83:5D:17:D3:85:3F:A4:C3:8D:07:8C:05:C6:10:92
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o8K6R3ODXRfThT-kw40HjAXGEJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.122.0.0-92.122.27.255
92.122.32.0/21
92.122.44.0/22
92.122.60.0-92.122.67.255
92.122.72.0-92.122.83.255
92.122.88.0/22
92.122.96.0/22
92.122.104.0/21
92.122.144.0/21
92.122.160.0/22
92.122.196.0/22
92.122.246.0-92.122.251.255
92.123.4.0/22
92.123.16.0/21
92.123.28.0-92.123.39.255
92.123.44.0/22
92.123.50.0-92.123.59.255
92.123.240.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
95.101.80.0-95.101.107.255
95.101.124.0/22
95.101.144.0-95.101.155.255
95.101.160.0/21
95.101.172.0-95.101.179.255
95.101.184.0-95.101.203.255
95.101.208.0-95.101.227.255
95.101.240.0/20
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
16:7e:71:a8:23:8c:41:69:32:71:04:d1:24:cc:33:72:38:22:
af:8e:51:fd:e4:f7:da:7f:21:c7:a8:76:dd:65:8e:04:ff:b7:
49:29:c8:72:6c:af:c7:5d:7d:c6:c8:e9:66:3e:00:5d:8a:55:
02:99:20:bd:b8:73:70:0d:7a:b5:ba:10:43:6a:34:17:ee:1a:
9f:64:18:6b:7c:6f:2f:16:e9:a9:66:27:00:dd:38:bf:38:7e:
5a:6f:8a:12:66:ef:1a:b2:cc:46:55:e6:df:87:fb:31:d2:7a:
d6:b4:16:cc:ed:aa:c9:b3:94:3c:66:06:c0:2e:f3:f1:e0:d0:
79:db:e8:b4:3c:c0:0e:57:22:94:70:a5:43:68:8f:7c:14:e5:
b1:e9:1f:b9:85:6e:03:0b:75:00:6d:61:26:7f:45:16:f5:4a:
29:92:cf:9c:a7:2d:15:06:00:fd:0c:3f:ae:18:96:bc:63:4c:
a9:93:e4:44:d4:a8:8d:ac:ef:9e:d5:10:55:8a:41:a9:34:cd:
60:d4:0e:3d:f0:cd:4f:e9:00:a7:40:bc:c8:4c:1c:89:3f:90:
bb:90:4e:10:8a:08:77:22:56:a0:0a:1b:01:0d:f0:02:c8:d5:
c8:48:e5:d9:3d:56:68:44:ea:ec:9f:4f:73:b7:ef:75:f9:0d:
26:cf:07:09
-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgISAY56oItieedwDzuTb29kzNAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzI2MTE1ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2MyYmE0NzczODM1ZDE3ZDM4NTNmYTRjMzhkMDc4YzA1YzYxMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwYik6ocGJilMwupr/r/RP0aLJpw
f2Vwy6qtp3H6H5SB97HOH9wQ2ruqOUA/5saC1ThhA29jdhtzbCHjxjUCXb8bCi0+
vC6RAugUMh0g9LAwitHFQidtWUnMB9IwwWVCaYk6nXxUhlj/PcWxgHo1rbGROiqU
rj/sNBsCYstgk+zK9plpz9WsCKMk74/VMWB5DguQznYcUgDpy7qUVUaK6Zyd/GSX
TFxFYICN0sulM9lMAXtOFpnDue/3zDwYjxPajC0Al0bide1NKcVlEGTk3SKyDOpE
HRjZkTFaKMrWYl62dFOSM854H33gX4ALixkjaye7+VRR1ZavJYDlnYO9vwIDAQAB
o4IEIDCCBBwwHQYDVR0OBBYEFKPCukdzg10X04U/pMONB4wFxhCSMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvbzhLNlIzT0RYUmZUaFQta3c0MEhqQVhHRUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICNAYIKwYBBQUHAQcBAf8EggIjMIICHzCCAhsEAgABMIIC
EwMEAlQ1nAMEAlQ1pAMEAlQ1vDAMAwQCWN0EAwQCWN0IAwQCWN0QAwQEWN0gMAwD
BAFY3ToDBAZY3QADBAJY3UQDBAJY3UwDBAJY3WADBAJY3XwDBAFY3YIDBANY3Ygw
DAMEAljdlAMEBVjdgDAMAwQCWN2kAwQCWN2oAwQDWN2wAwQDWN3gMAwDBAJY3ewD
BAJY3fgwCwMDAVx6AwQCXHoYAwQDXHogAwQCXHosMAwDBAJcejwDBAJcekAwDAME
A1x6SAMEAlx6UAMEAlx6WAMEAlx6YAMEA1x6aAMEA1x6kAMEAlx6oAMEAlx6xDAM
AwQBXHr2AwQCXHr4AwQCXHsEAwQDXHsQMAwDBAJcexwDBANceyADBAJceywwDAME
AVx7MgMEAlx7OAMEAlx78AMEBF9kEDAMAwQBX2QuAwQCX2RQAwQEX2RwAwQDX2SI
AwQCX2SgAwQCX2SwMAwDBAFfZLYDBAZfZIADBAJfZNADBAJfZNgDBARfZOADBAJf
ZPQDBAFfZPoDBANfZQAwDAMEAV9lDgMEAl9lEDAMAwQDX2UoAwQCX2UwAwQCX2U4
AwQDX2VAMAwDBARfZVADBAJfZWgDBAJfZXwwDAMEBF9lkAMEAl9lmAMEA19loDAM
AwQCX2WsAwQCX2WwMAwDBANfZbgDBAJfZcgwDAMEBF9l0AMEAl9l4AMEBF9l8AME
AsNfwDANBgkqhkiG9w0BAQsFAAOCAQEAFn5xqCOMQWkycQTRJMwzcjgir45R/eT3
2n8hx6h23WWOBP+3SSnIcmyvx119xsjpZj4AXYpVApkgvbhzcA16tboQQ2o0F+4a
n2QYa3xvLxbpqWYnAN04vzh+Wm+KEmbvGrLMRlXm34f7MdJ61rQWzO2qybOUPGYG
wC7z8eDQedvotDzADlcilHClQ2iPfBTlsekfuYVuAwt1AG1hJn9FFvVKKZLPnKct
FQYA/Qw/rhiWvGNMqZPkRNSojazvntUQVYpBqTTNYNQOPfDNT+kAp0C8yEwciT+Q
u5BOEIoIdyJWoAobAQ3wAsjVyEjl2T1WaETq7J9Pc7fvdfkNJs8HCQ==
-----END CERTIFICATE-----
Generated at Tue Mar 26 17:17:06 2024 by rpki-client on console-ams.rpki-client.org