Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EL0qAWaG2NpbEiyPLHW2SP4xH4s.roa
File: EL0qAWaG2NpbEiyPLHW2SP4xH4s.roa (raw, json)
Hash identifier: tNJcaKmDsLDexZ7kPKCFDu3KPUmlBvCrlgitM+V3qmo=
Subject key identifier: 10:BD:2A:01:66:86:D8:DA:5B:12:2C:8F:2C:75:B6:48:FE:31:1F:8B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185B9F99D409759D906B1B509C08459F332
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EL0qAWaG2NpbEiyPLHW2SP4xH4s.roa
Signing time: Mon 16 Jan 2023 09:47:01 +0000
ROA not before: Mon 16 Jan 2023 09:47:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
188.208.109.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.51.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
188.213.252.0/22 maxlen: 22
188.213.248.0/22 maxlen: 22
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
188.214.94.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
86.104.212.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
86.104.224.0/23 maxlen: 23
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
86.104.222.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
86.104.0.0/23 maxlen: 23
86.104.2.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.177.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.27.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 17:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:f9:9d:40:97:59:d9:06:b1:b5:09:c0:84:59:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 16 09:47:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10bd2a016686d8da5b122c8f2c75b648fe311f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:7e:05:07:af:11:96:63:4c:c5:87:6b:04:
47:16:2f:47:6c:f4:36:06:ca:23:ca:cb:1d:bb:26:
f0:aa:c8:b5:9f:0f:34:b1:9c:9f:6f:1f:d8:6f:f8:
7d:22:96:2c:66:82:62:3d:99:c4:d4:8c:75:fc:60:
c9:fb:f1:06:d6:8a:52:5a:9d:8d:e9:a3:f2:9e:79:
b0:ba:92:11:72:6d:b7:cf:1f:cc:3e:7b:aa:79:fd:
e4:4b:bf:7d:e4:1b:5a:8c:4e:b7:33:82:72:f6:c1:
44:cd:10:44:6a:11:5a:58:16:f0:b2:c7:e0:a1:4c:
1d:0e:ac:84:39:d5:89:45:f7:95:b0:1a:db:d3:a4:
15:b9:f5:aa:09:6f:68:a7:83:d9:b0:da:29:61:1f:
c8:77:7a:88:3b:be:20:72:c2:16:29:83:d8:bd:e3:
90:a8:9b:ec:81:b6:87:46:eb:65:dc:ab:30:e4:85:
2d:cd:44:a0:23:cc:25:95:3d:89:c2:a7:34:46:e4:
f5:1b:18:14:1e:6e:ab:61:eb:f2:89:10:7e:bb:cb:
bf:ae:26:cf:82:62:76:a6:b1:87:f6:33:83:82:a5:
d0:41:50:ac:7a:80:8f:32:27:aa:40:c3:8f:2c:41:
13:94:66:16:4b:7b:80:b5:88:f9:04:f1:77:f9:d3:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:2A:01:66:86:D8:DA:5B:12:2C:8F:2C:75:B6:48:FE:31:1F:8B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/EL0qAWaG2NpbEiyPLHW2SP4xH4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.177.0-46.102.179.255
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0-77.81.91.255
86.104.0.0-86.104.2.255
86.104.212.0/23
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0-86.106.118.255
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.27.0-89.41.29.255
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0-89.42.154.255
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/23
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.160.0/23
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.109.0/24
188.208.220.0/22
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.94.0/23
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
10:68:30:c8:3f:39:e4:bd:f3:9f:30:5e:74:c6:d9:ff:8a:2d:
88:4f:c6:03:0d:e6:43:5f:d7:4a:c8:e4:07:c7:a4:08:0b:95:
1a:2e:f5:da:f1:17:25:0d:52:57:32:9e:69:ce:52:43:2f:b8:
7a:13:c4:f6:b5:53:c4:66:da:bf:1b:02:cd:ab:3e:d5:c0:49:
52:97:18:66:e6:27:bd:c3:cd:f4:d6:af:30:c2:f3:25:4e:cf:
07:86:90:2d:d2:cb:cb:28:87:d7:cb:d1:ce:3e:6a:b2:33:26:
35:8e:69:49:66:54:85:21:60:95:2b:72:57:86:35:80:cf:05:
b2:42:b6:e0:4b:48:87:ad:ec:5e:39:cf:1a:dc:ad:ab:4c:8c:
81:44:60:ad:f6:ce:0c:01:3b:58:d2:b8:b4:c9:1f:d5:aa:c4:
67:1c:d2:27:85:f2:08:24:71:68:2c:b7:3e:c3:64:eb:67:c7:
b3:ac:5a:09:4f:75:67:f5:bc:29:ea:9a:50:d5:48:ee:d9:4c:
6b:e4:6f:93:83:b0:d5:49:c5:e5:48:61:7a:7b:cb:77:1c:44:
44:fb:f8:80:f9:e2:ad:b9:d7:a3:a5:f0:98:71:9c:18:15:31:
a6:33:5f:7c:5a:59:43:ec:35:bc:50:e0:67:7b:82:53:93:24:
10:13:5d:d7
-----BEGIN CERTIFICATE-----
MIIH1DCCBrygAwIBAgISAYW5+Z1Al1nZBrG1CcCEWfMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjMwMTE2MDk0NzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGJkMmEwMTY2ODZkOGRhNWIxMjJjOGYyYzc1YjY0OGZlMzExZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGp+BQevEZZjTMWHawRHFi9HbPQ2
Bsojyssduybwqsi1nw80sZyfbx/Yb/h9IpYsZoJiPZnE1Ix1/GDJ+/EG1opSWp2N
6aPynnmwupIRcm23zx/MPnuqef3kS7995BtajE63M4Jy9sFEzRBEahFaWBbwssfg
oUwdDqyEOdWJRfeVsBrb06QVufWqCW9op4PZsNopYR/Id3qIO74gcsIWKYPYveOQ
qJvsgbaHRutl3Ksw5IUtzUSgI8wllT2Jwqc0RuT1GxgUHm6rYevyiRB+u8u/ribP
gmJ2prGH9jODgqXQQVCseoCPMieqQMOPLEETlGYWS3uAtYj5BPF3+dNCoQIDAQAB
o4IE4DCCBNwwHQYDVR0OBBYEFBC9KgFmhtjaWxIsjyx1tkj+MR+LMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvRUwwcUFXYUcyTnBiRWl5UExIVzJTUDR4SDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC9AYIKwYBBQUHAQcBAf8EggLjMIIC3zCCAtsEAgABMIIC
0wMEAR8OQgMEASWcQAMEACWcrTAMAwQALmaxAwQCLmawAwQBLma2MAwDBAJNUVQD
BABNUVYwDAMEAE1RWQMEAk1RWDALAwMDVmgDBABWaAIDBAFWaNQwDAMEAVZo3gME
AVZo4AMEAFZpAgMEAFZpBgMEAFZpsAMEAFZpsgMEAVZpuDAMAwQAVmnlAwQAVmnm
AwQBVmnyAwQAVmoKMAwDBABWag0DBARWagADBAFWal4wDAMEAFZqaQMEAlZqaAME
AVZqbjAMAwQBVmpyAwQAVmp2MAwDBAFWaooDBAFWaowDBAFWaq4DBABWa0gwDAME
AFZrwQMEAlZrwAMEAFkgKwMEAFkgqgMEAVkhLgMEAFkhdAMEAFkhhjAMAwQBWSHG
AwQBWSHIAwQAWSHOAwQBWSH6AwQBWSH+AwQAWSJmAwQBWSJoAwQAWSM2MAwDBABZ
I1kDBABZI1oDBAFZJCYDBABZJIgDBAFZJIoDBABZJI0wDAMEAlklXAMEAFklXgME
AFklYDAMAwQAWSWBAwQAWSWGAwQAWSbwAwQAWSdFAwQAWSfUAwQAWSfXAwQAWSfx
AwQBWSiMAwQAWSjPAwQAWSjRMAwDBABZKRsDBAFZKRwwDAMEAFkpMQMEAlkpMDAM
AwQAWSm9AwQGWSmAAwQAWSoKMAwDBANZKpgDBABZKpoDBABZLVIDBABZLi8DBAJb
2uwDBAFb64IwDAMEAF1yMwMEAF1yNgMEAV1yOgMEAF1zOzAMAwQBXXd2AwQBXXd4
AwQBXXd8AwQAXrF+MAwDBAawfsADBACwfsIwDAMEArDfdAMEALDfdgMEAbDfoAME
ArlQcAMEBLyssAMEA7zQMAMEALzQbQMEArzQ3AMEA7zReAMEALzTpwMEALzU/gME
AbzVzgMEAbzV1gMEA7zV+AMEAbzWXgMEALzx0wMEAcEe/gMEAcEgQgMEBMH+MAME
AcIpPDANBgkqhkiG9w0BAQsFAAOCAQEAEGgwyD855L3znzBedMbZ/4otiE/GAw3m
Q1/XSsjkB8ekCAuVGi712vEXJQ1SVzKeac5SQy+4ehPE9rVTxGbavxsCzas+1cBJ
UpcYZuYnvcPN9NavMMLzJU7PB4aQLdLLyyiH18vRzj5qsjMmNY5pSWZUhSFglSty
V4Y1gM8FskK24EtIh63sXjnPGtytq0yMgURgrfbODAE7WNK4tMkf1arEZxzSJ4Xy
CCRxaCy3PsNk62fHs6xaCU91Z/W8KeqaUNVI7tlMa+Rvk4Ow1UnF5UhhenvLdxxE
RPv4gPnirbnXo6XwmHGcGBUxpjNffFpZQ+w1vFDgZ3uCU5MkEBNd1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org