Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/_C3viwvVSGqOx1aFukDvPyhcqjY.roa
File: _C3viwvVSGqOx1aFukDvPyhcqjY.roa (raw, json)
Hash identifier: OzpLz+pvTk+SbdL/UJ0xYWKPU8opv6u6PDrQg3llOzU=
Subject key identifier: FC:2D:EF:8B:0B:D5:48:6A:8E:C7:56:85:BA:40:EF:3F:28:5C:AA:36
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 018B936F7108CBBCD31B94F751D866F1D419
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/_C3viwvVSGqOx1aFukDvPyhcqjY.roa
Signing time: Fri 03 Nov 2023 04:27:16 +0000
ROA not before: Fri 03 Nov 2023 04:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48503
IP address blocks: 89.208.123.0/24 maxlen: 24
185.234.26.0/23 maxlen: 23
185.234.60.0/23 maxlen: 23
185.234.60.0/22 maxlen: 22
185.234.62.0/23 maxlen: 23
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
85.193.120.0/21 maxlen: 21
185.234.24.0/23 maxlen: 23
185.234.24.0/22 maxlen: 22
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.244.0/24 maxlen: 24
81.91.180.0/22 maxlen: 22
185.212.247.0/24 maxlen: 24
81.91.184.0/22 maxlen: 22
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
93.157.176.0/23 maxlen: 23
81.211.150.0/24 maxlen: 24
93.157.178.0/23 maxlen: 23
93.157.181.0/24 maxlen: 24
93.157.180.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
79.137.170.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
31.10.3.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
81.211.202.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
81.211.206.0/24 maxlen: 24
79.137.178.0/23 maxlen: 23
81.211.208.0/24 maxlen: 24
81.211.207.0/24 maxlen: 24
217.171.144.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.253.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.69.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.77.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
193.41.130.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
185.250.30.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.0.0/22 maxlen: 22
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
185.229.121.0/24 maxlen: 24
185.229.120.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.51.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Nov 2023 05:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:6f:71:08:cb:bc:d3:1b:94:f7:51:d8:66:f1:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Nov 3 04:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2def8b0bd5486a8ec75685ba40ef3f285caa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:54:e2:3e:31:87:b5:9a:3a:6e:04:f4:ae:
d9:cc:51:ad:d3:9f:40:ad:ee:a2:d1:f6:27:9e:56:
61:72:2c:66:e8:59:1b:46:ba:74:8e:21:8e:ae:b2:
38:1f:d7:1e:ea:2a:cc:3d:a5:a6:87:ab:85:2c:3d:
30:19:9c:a4:e0:d9:6f:65:fc:c5:6d:ce:80:bf:79:
a6:16:db:b1:ea:37:ab:61:5b:6d:b3:7d:99:ce:88:
0e:de:ca:0f:f4:e1:0c:54:31:5c:cc:88:35:0e:16:
38:99:32:58:5f:cd:06:c9:42:ed:8c:90:9d:00:52:
bd:ca:32:96:23:e8:01:af:eb:4a:46:16:cb:25:1b:
84:74:c0:6d:88:c5:69:82:64:fc:96:f9:cf:f3:82:
68:6a:7c:cd:37:d6:a0:0a:87:6e:e6:eb:fb:f1:f6:
18:a4:0c:7f:ce:39:08:79:ff:a4:65:d1:5a:73:5d:
f3:f3:1f:a5:56:e7:a1:31:a8:ae:46:27:b4:1b:4e:
d7:59:d2:24:ab:f5:e8:1d:28:a4:37:e2:48:6b:5c:
e2:73:01:62:8f:25:71:7c:61:c9:2d:38:1d:9a:cb:
be:89:9d:b4:ca:c8:e2:08:5f:01:e5:56:23:d0:fa:
0e:94:42:ac:bf:f7:29:21:d2:5e:39:93:43:3e:8c:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:EF:8B:0B:D5:48:6A:8E:C7:56:85:BA:40:EF:3F:28:5C:AA:36
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/_C3viwvVSGqOx1aFukDvPyhcqjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.3.0/24
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.187.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.206.0-81.211.208.255
81.211.250.0/23
81.211.253.0/24
85.193.96.0/19
89.208.123.0/24
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.229.120.0/23
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
217.171.144.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b3:05:f6:bb:c6:23:5a:f3:01:9a:29:fa:35:bd:5e:62:ac:
a3:6d:39:4e:a6:1c:bb:0f:cd:ea:ff:06:9b:cb:89:c3:83:c6:
34:52:1e:88:7e:fe:88:0c:06:fc:14:76:5b:ef:7e:53:b0:c6:
90:5f:a3:d7:b5:01:9d:41:e0:3e:e2:0d:25:d4:ce:24:59:29:
10:8f:8c:88:21:09:33:90:b4:a8:5b:5e:66:2d:cd:e5:15:18:
60:05:2b:c2:a4:6b:7a:ef:42:05:e5:a8:24:19:c7:5d:53:1c:
d9:e7:52:35:0c:15:5f:8e:45:e0:35:de:40:5d:73:a2:6c:77:
fb:c1:3e:24:cd:c1:df:5b:83:0a:da:1b:90:e7:fc:ef:44:b3:
88:dd:33:b4:ed:37:0e:54:f7:0b:d1:a6:6c:b8:bc:b2:f9:2c:
de:e1:4c:18:22:1f:84:0e:44:86:b2:76:bf:9b:e3:01:96:9c:
97:84:27:02:4e:eb:bc:1c:11:f5:cb:65:5f:5f:6f:1d:8a:44:
16:44:65:10:ba:da:70:49:80:54:f1:01:93:a1:1e:fe:07:06:
fe:59:e5:a9:55:e1:d2:ea:07:2a:cc:63:47:b9:2f:9b:67:18:
e1:cb:55:fc:78:30:ee:90:f9:73:99:8d:34:8e:c9:d9:af:a0:
e5:f2:30:21
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgISAYuTb3EIy7zTG5T3Udhm8dQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0
Zjk2MjQwHhcNMjMxMTAzMDQyNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzJkZWY4YjBiZDU0ODZhOGVjNzU2ODViYTQwZWYzZjI4NWNhYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhpU4j4xh7WaOm4E9K7ZzFGt059A
re6i0fYnnlZhcixm6FkbRrp0jiGOrrI4H9ce6irMPaWmh6uFLD0wGZyk4NlvZfzF
bc6Av3mmFtux6jerYVtts32ZzogO3soP9OEMVDFczIg1DhY4mTJYX80GyULtjJCd
AFK9yjKWI+gBr+tKRhbLJRuEdMBtiMVpgmT8lvnP84JoanzNN9agCodu5uv78fYY
pAx/zjkIef+kZdFac13z8x+lVuehMaiuRie0G07XWdIkq/XoHSikN+JIa1zicwFi
jyVxfGHJLTgdmsu+iZ20ysjiCF8B5VYj0PoOlEKsv/cpIdJeOZNDPoyphQIDAQAB
o4IDQjCCAz4wHQYDVR0OBBYEFPwt74sL1UhqjsdWhbpA7z8oXKo2MB8GA1UdIwQY
MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt
OWMxNWZiZDVlZTVlLzEvX0Mzdml3dlZTR3FPeDFhRnVrRHZQeWhjcWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl
LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVgYIKwYBBQUHAQcBAf8EggFFMIIBQTCCAT0EAgABMIIB
NQMEAB8KAwMEAz56ADAMAwQDPnpoAwQBPnpsAwQDT4W4AwQBT4mqAwQCT4mwMAwD
BAJRW7QDBAJRW7gDBABR04IDBABR04UDBABR05YDBABR06wwDAMEAFHTwQMEA1HT
wDAMAwQAUdPJAwQAUdPMMAwDBAFR084DBABR09ADBAFR0/oDBABR0/0DBAVVwWAD
BABZ0HsDBANZ33ADBAFbZ2gDBAFb6tADBANdnbADBABfo5EwCwMDBrBAAwQCsEAg
AwQCuSxUAwQCudT0AwQCud+8AwQCueVUAwQBueV4AwQCueoYAwQCueo8AwQCufoc
AwQDvHzoAwQCvHz0AwQBwSmCAwQBwgC8AwQBwgD0AwQCw70wMAwDBAbUYEADBADU
YFgwDAMEAdRgWgMEBdRgQAMEANmrkDANBgkqhkiG9w0BAQsFAAOCAQEAQLMF9rvG
I1rzAZop+jW9XmKso205TqYcuw/N6v8Gm8uJw4PGNFIeiH7+iAwG/BR2W+9+U7DG
kF+j17UBnUHgPuINJdTOJFkpEI+MiCEJM5C0qFteZi3N5RUYYAUrwqRreu9CBeWo
JBnHXVMc2edSNQwVX45F4DXeQF1zomx3+8E+JM3B31uDCtobkOf870SziN0ztO03
DlT3C9GmbLi8svks3uFMGCIfhA5EhrJ2v5vjAZacl4QnAk7rvBwR9ctlX19vHYpE
FkRlELracEmAVPEBk6Ee/gcG/lnlqVXh0uoHKsxjR7kvm2cY4ctV/Hgw7pD5c5mN
NI7J2a+g5fIwIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:08 2024 by rpki-client on console-ams.rpki-client.org