Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/m70gd0TLSHD2b8wtLijXFsKgZMw.roa
File: m70gd0TLSHD2b8wtLijXFsKgZMw.roa (raw, json)
Hash identifier: qscu8FR2Ycn2PtdD/e5iSnZ+lpSM3ZZQIIUnVUBw+w0=
Subject key identifier: 9B:BD:20:77:44:CB:48:70:F6:6F:CC:2D:2E:28:D7:16:C2:A0:64:CC
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018CC64998EA479F96806C9504F09497FFD0
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/m70gd0TLSHD2b8wtLijXFsKgZMw.roa
Signing time: Mon 01 Jan 2024 18:29:20 +0000
ROA not before: Mon 01 Jan 2024 18:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.40.0/24 maxlen: 24
109.107.0.0/21 maxlen: 21
109.107.0.0/19 maxlen: 19
95.160.228.0/22 maxlen: 22
178.235.0.0/17 maxlen: 17
95.160.233.0/24 maxlen: 24
109.241.192.0/18 maxlen: 18
95.160.236.0/22 maxlen: 22
109.107.9.0/24 maxlen: 24
195.26.72.0/22 maxlen: 22
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.150.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.138.0/23 maxlen: 23
178.235.136.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
31.11.202.0/24 maxlen: 24
95.160.0.0/17 maxlen: 24
31.11.208.0/22 maxlen: 22
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
88.156.80.176/28 maxlen: 28
31.11.228.0/24 maxlen: 24
109.241.0.0/18 maxlen: 18
95.160.166.0/24 maxlen: 24
193.201.18.0/23 maxlen: 23
95.160.170.0/24 maxlen: 24
109.241.128.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
185.51.180.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
82.139.0.0/18 maxlen: 18
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
78.31.209.0/24 maxlen: 24
31.11.172.0/24 maxlen: 24
93.105.178.0/23 maxlen: 23
93.105.176.0/23 maxlen: 23
78.31.152.0/21 maxlen: 21
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.128.0/17 maxlen: 17
31.11.131.0/24 maxlen: 24
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
192.166.120.0/23 maxlen: 23
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.0.0/17 maxlen: 17
89.151.0.0/18 maxlen: 18
89.151.40.0/21 maxlen: 21
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
91.238.232.0/22 maxlen: 22
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
37.8.192.0/18 maxlen: 18
83.143.136.0/21 maxlen: 21
88.156.255.0/24 maxlen: 24
37.8.208.0/24 maxlen: 24
88.156.164.0/22 maxlen: 22
83.143.40.0/21 maxlen: 21
195.28.170.0/23 maxlen: 23
88.156.192.0/18 maxlen: 18
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
91.231.116.0/23 maxlen: 23
37.8.214.0/24 maxlen: 24
94.231.48.0/20 maxlen: 20
31.22.96.0/21 maxlen: 21
37.8.231.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
31.22.100.0/23 maxlen: 23
88.156.0.0/18 maxlen: 18
78.88.188.0/22 maxlen: 22
62.122.112.0/21 maxlen: 21
194.54.188.0/22 maxlen: 22
83.243.104.0/21 maxlen: 21
78.88.123.0/24 maxlen: 24
31.135.168.0/21 maxlen: 21
78.88.128.0/17 maxlen: 17
31.135.175.0/24 maxlen: 24
88.156.128.0/23 maxlen: 23
88.156.128.0/21 maxlen: 21
88.156.132.0/23 maxlen: 23
91.230.159.0/24 maxlen: 24
88.156.128.0/18 maxlen: 18
88.156.130.0/23 maxlen: 23
91.230.162.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.134.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
88.156.64.0/24 maxlen: 24
88.156.64.0/18 maxlen: 18
88.156.78.0/24 maxlen: 24
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.88.0.0/17 maxlen: 17
195.242.252.0/22 maxlen: 22
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.28.0/22 maxlen: 22
77.222.224.0/21 maxlen: 21
78.88.43.0/24 maxlen: 24
77.222.232.0/21 maxlen: 21
2a00:9f00:c::/48 maxlen: 48
2a00:9f00::/48 maxlen: 48
2a00:9f00::/36 maxlen: 36
2a00:9f00::/32 maxlen: 32
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:98:ea:47:9f:96:80:6c:95:04:f0:94:97:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 18:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bbd207744cb4870f66fcc2d2e28d716c2a064cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:ad:50:10:b6:3d:38:93:3b:e4:f8:38:1b:
3d:1c:d9:8f:fd:77:3b:d3:00:4f:58:2d:9b:dc:36:
75:2d:ef:0f:5f:07:c4:11:e1:8c:7a:16:2c:35:18:
df:f9:a4:49:5a:71:d2:10:03:5a:84:6a:bb:a0:e7:
7e:7f:61:fa:ca:18:79:9f:ba:05:86:a4:43:6a:a8:
00:c9:51:bd:b0:d2:c9:98:a7:b9:d4:00:9a:49:0b:
cb:03:0c:6a:df:98:ac:d2:ce:4a:63:19:17:f5:79:
69:a7:e2:67:b1:d4:1f:17:45:1c:08:dd:7e:63:3a:
38:08:57:58:f0:8b:eb:2c:fa:3a:45:7b:eb:91:57:
49:ec:0f:36:27:a0:5a:00:c7:4d:10:2f:c1:65:11:
39:46:bc:4c:78:5a:78:ed:28:32:80:23:fa:38:a7:
1d:c0:16:28:ba:69:49:10:1a:f5:23:64:10:36:94:
85:e0:b5:2a:c7:38:56:4b:89:64:02:af:4d:92:a5:
a0:ab:8c:83:89:4f:ba:07:c5:c4:6f:df:4a:17:79:
3c:a4:3d:cc:02:a6:74:99:bc:96:78:98:a6:46:b2:
f6:2d:40:7b:25:62:c0:03:ff:2d:79:04:f2:88:0d:
56:6f:54:04:14:47:37:35:a5:9d:b3:fd:b0:0d:ed:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:20:77:44:CB:48:70:F6:6F:CC:2D:2E:28:D7:16:C2:A0:64:CC
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/m70gd0TLSHD2b8wtLijXFsKgZMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
2c:04:22:cd:fb:a0:ac:29:a8:9d:19:c8:93:2d:f0:68:93:9a:
9f:92:e9:b3:19:d8:66:d0:b2:db:ff:07:6f:e0:d7:d3:86:77:
47:01:bd:77:b3:db:48:85:e6:26:ff:d1:18:1c:e6:c9:cf:39:
ee:f6:fc:89:ec:e8:53:55:2c:5f:8f:6b:9a:a8:da:62:9f:81:
fb:49:60:b2:be:48:c9:42:ce:99:98:74:10:4b:47:7c:b3:df:
c9:79:7c:6c:39:f5:aa:67:f4:64:b2:70:09:47:e5:4c:21:98:
52:de:db:25:74:c8:85:34:5e:3f:e4:70:59:c2:3f:4a:b3:8a:
c0:80:7d:da:65:0a:5c:9b:dc:0d:ef:6c:09:57:76:71:ed:62:
68:b2:b4:da:0b:5d:01:0d:7a:7c:67:93:1b:98:90:fd:f1:d1:
57:ad:3e:5d:83:23:73:80:6c:b9:e8:96:a9:38:e4:2f:4c:76:
ec:70:ae:89:98:b7:9c:48:d3:dc:08:c4:d1:16:20:d9:58:91:
da:aa:66:07:ea:63:99:8d:84:44:7f:83:24:8f:fb:fc:c1:e3:
4f:fa:68:25:73:ed:b0:0c:fa:a3:4e:c2:68:41:79:57:8c:38:
d8:53:2a:2f:59:11:7b:b7:56:05:b3:81:ba:4e:2d:3e:73:9b:
7f:be:86:e0
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISAYzGSZjqR5+WgGyVBPCUl//QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjQwMTAxMTgyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmJkMjA3NzQ0Y2I0ODcwZjY2ZmNjMmQyZTI4ZDcxNmMyYTA2NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJWtUBC2PTiTO+T4OBs9HNmP/Xc7
0wBPWC2b3DZ1Le8PXwfEEeGMehYsNRjf+aRJWnHSEANahGq7oOd+f2H6yhh5n7oF
hqRDaqgAyVG9sNLJmKe51ACaSQvLAwxq35is0s5KYxkX9Xlpp+JnsdQfF0UcCN1+
Yzo4CFdY8IvrLPo6RXvrkVdJ7A82J6BaAMdNEC/BZRE5RrxMeFp47SgygCP6OKcd
wBYoumlJEBr1I2QQNpSF4LUqxzhWS4lkAq9NkqWgq4yDiU+6B8XEb99KF3k8pD3M
AqZ0mbyWeJimRrL2LUB7JWLAA/8teQTyiA1Wb1QEFEc3NaWds/2wDe0b9QIDAQAB
o4IDAjCCAv4wHQYDVR0OBBYEFJu9IHdEy0hw9m/MLS4o1xbCoGTMMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvbTcwZ2QwVExTSEQyYjh3dExpalhGc0tnWk13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFgYIKwYBBQUHAQcBAf8EggEFMIIBATCB7wQCAAEwgegD
BAcfC4ADBAMfFmADBAMfh6gDBAYlCMADBAMlTZgDBAM+enADBAVN3uADBANOH5gD
BABOH9EDAwBOWAMEBlKLAAMEA1OPKAMEA1OPiAMEA1PzaAMDAFicAwQGWZcAAwQC
W8BMAwQAW+afMAwDBAFb5qIDBANb5qADBAFb53QDBAJb7ugDAwBdaQMEBF7nMAMD
AF+gAwQFbWsAMAwDBANtxTgDBANtxUADAwBt8QMDALLrAwQCuTO0AwQBwKZ4AwQB
wckSAwQCwja8AwQCwxpIAwQBwxyqAwQBw7+iAwQCw+FcAwQCw/L8MA0EAgACMAcD
BQAqAJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQAsBCLN+6CsKaidGciTLfBok5qfkumz
Gdhm0LLb/wdv4NfThndHAb13s9tIheYm/9EYHObJzznu9vyJ7OhTVSxfj2uaqNpi
n4H7SWCyvkjJQs6ZmHQQS0d8s9/JeXxsOfWqZ/RksnAJR+VMIZhS3tsldMiFNF4/
5HBZwj9Ks4rAgH3aZQpcm9wN72wJV3Zx7WJosrTaC10BDXp8Z5MbmJD98dFXrT5d
gyNzgGy56JapOOQvTHbscK6JmLecSNPcCMTRFiDZWJHaqmYH6mOZjYREf4Mkj/v8
weNP+mglc+2wDPqjTsJoQXlXjDjYUyovWRF7t1YFs4G6Ti0+c5t/vobg
-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:06 2024 by rpki-client on console-fra.rpki-client.org