Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NdN8unQOm8O6w60I-XsaYuI1FoM.roa
File: NdN8unQOm8O6w60I-XsaYuI1FoM.roa (raw, json)
Hash identifier: 3oIy4hXFYuxnWYGURGaGQNLy5gVp+zcim6WbDwk8Jpo=
Subject key identifier: 35:D3:7C:BA:74:0E:9B:C3:BA:C3:AD:08:F9:7B:1A:62:E2:35:16:83
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018AD7E3870E071C1824E397D1D858FCDB6B
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NdN8unQOm8O6w60I-XsaYuI1FoM.roa
Signing time: Wed 27 Sep 2023 18:25:27 +0000
ROA not before: Wed 27 Sep 2023 18:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
188.208.109.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
188.213.252.0/22 maxlen: 22
188.213.248.0/22 maxlen: 22
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
86.104.224.0/23 maxlen: 23
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
86.104.222.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:e3:87:0e:07:1c:18:24:e3:97:d1:d8:58:fc:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Sep 27 18:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d37cba740e9bc3bac3ad08f97b1a62e2351683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:1a:44:1d:7b:c1:ee:ff:2d:2b:53:98:b3:
d4:fc:c0:0c:3f:71:24:f2:77:cb:7a:20:a8:16:26:
c5:e4:b7:af:45:dc:66:47:1a:e2:d9:3d:db:5a:62:
d7:bc:75:9f:12:53:9b:40:e8:2c:a6:ee:f4:2a:39:
66:56:99:24:2f:f2:5a:80:99:78:65:03:27:46:ea:
85:19:6e:4c:6f:9d:ae:2e:9a:2d:d7:d9:9b:79:8b:
8a:bd:43:ce:49:36:cc:0f:d8:3c:de:2a:28:79:48:
db:ee:71:b5:f2:57:a6:41:55:0d:51:3e:04:54:9d:
44:82:f8:07:2d:04:01:af:65:05:b2:e3:27:ce:db:
8d:13:76:40:e0:56:bb:2c:0d:f2:27:c0:21:cc:7a:
92:4c:1a:93:33:a5:ac:49:4d:13:1a:35:92:c9:55:
53:1c:73:8c:cc:cf:48:b5:f7:1f:68:85:a4:7a:2b:
95:79:ae:18:b7:c5:7a:c1:46:f8:58:d3:75:a5:1d:
61:1e:d0:42:34:fa:7e:0e:8d:ea:03:a6:73:72:25:
a9:37:cf:3b:ad:25:fb:05:42:be:f8:05:5c:29:5f:
a6:57:d7:06:d2:39:eb:5c:0b:e4:1d:26:7b:38:cb:
99:42:97:b4:39:86:58:70:6c:54:2b:bd:34:94:5d:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:7C:BA:74:0E:9B:C3:BA:C3:AD:08:F9:7B:1A:62:E2:35:16:83
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NdN8unQOm8O6w60I-XsaYuI1FoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.52.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.109.0/24
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:2f:c9:b3:94:e5:fd:b6:71:bb:49:a3:cd:ea:44:7e:b7:82:
47:d0:3c:f6:8b:17:15:16:6f:f1:6a:b8:8c:3e:9d:1f:e8:b5:
ae:e1:1a:59:74:0c:52:95:55:73:3d:1b:60:f0:3b:3a:01:b8:
63:98:90:e9:b9:dc:87:a6:93:e2:a5:42:7d:ae:36:1b:1f:4b:
79:e4:81:4a:4f:d8:b6:f7:17:c6:58:1b:28:e3:be:ba:60:ac:
8c:f0:8f:59:81:0a:35:ec:24:de:65:1d:2e:b9:a3:40:b5:b7:
63:c2:a2:2a:bd:53:24:4b:92:1c:46:0a:16:ee:15:c7:08:67:
9e:31:34:32:ff:07:b8:16:f9:7e:4c:89:f4:b4:4f:a2:cf:4a:
80:47:b8:a3:5e:12:ed:ce:b4:7c:b6:83:f2:57:4a:8a:36:34:
98:c5:dd:4b:69:d7:b3:69:ff:9d:04:4f:fe:48:ca:5f:e5:dc:
bc:1d:1c:48:d9:fc:04:eb:1b:7a:44:ce:e3:4f:b7:f1:2d:b6:
06:6c:71:03:27:dc:0b:62:db:51:1f:c8:2e:cb:8d:54:0b:2c:
38:4d:8c:e3:46:ff:f3:72:f8:71:3b:3d:54:a8:90:b0:3f:5d:
07:72:8b:c2:a8:19:69:d1:5e:eb:2d:f5:85:6f:7d:25:83:9f:
03:8c:6d:c6
-----BEGIN CERTIFICATE-----
MIIHdzCCBl+gAwIBAgISAYrX44cOBxwYJOOX0dhY/NtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjMwOTI3MTgyNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWQzN2NiYTc0MGU5YmMzYmFjM2FkMDhmOTdiMWE2MmUyMzUxNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZUaRB17we7/LStTmLPU/MAMP3Ek
8nfLeiCoFibF5LevRdxmRxri2T3bWmLXvHWfElObQOgspu70KjlmVpkkL/JagJl4
ZQMnRuqFGW5Mb52uLpot19mbeYuKvUPOSTbMD9g83iooeUjb7nG18lemQVUNUT4E
VJ1EgvgHLQQBr2UFsuMnztuNE3ZA4Fa7LA3yJ8AhzHqSTBqTM6WsSU0TGjWSyVVT
HHOMzM9ItfcfaIWkeiuVea4Yt8V6wUb4WNN1pR1hHtBCNPp+Do3qA6ZzciWpN887
rSX7BUK++AVcKV+mV9cG0jnrXAvkHSZ7OMuZQpe0OYZYcGxUK700lF2nkQIDAQAB
o4IEgzCCBH8wHQYDVR0OBBYEFDXTfLp0DpvDusOtCPl7GmLiNRaDMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvTmROOHVuUU9tOE82dzYwSS1Yc2FZdUkxRm9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIClwYIKwYBBQUHAQcBAf8EggKGMIICgjCCAn4EAgABMIIC
dgMEASWcQAMEACWcrQMEAS5mtjAMAwQCTVFUAwQATVFWAwQATVFZMAwDBAFWaN4D
BAFWaOADBABWaQIDBABWaQYDBABWabADBABWabIDBAFWabgwDAMEAFZp5QMEAFZp
5gMEAVZp8gMEAFZqCjAMAwQAVmoNAwQEVmoAAwQBVmpeMAwDBABWamkDBAJWamgD
BAFWam4DBAFWanIDBABWanYwDAMEAVZqigMEAVZqjAMEAVZqrgMEAFZrSDAMAwQA
VmvBAwQCVmvAAwQAWSArAwQAWSCqAwQBWSEuAwQAWSF0AwQAWSGGMAwDBAFZIcYD
BAFZIcgDBABZIc4DBAFZIfoDBAFZIf4DBABZImYDBAFZImgDBABZIzYDBABZI1kD
BAFZJCYDBABZJIgDBAFZJIoDBABZJI0DBABZJVwDBABZJWAwDAMEAFklgQMEAFkl
hgMEAFkm8AMEAFkn1AMEAFkn1wMEAFkn8QMEAVkojAMEAFko0QMEAVkpHDAMAwQA
WSkxAwQCWSkwMAwDBABZKb0DBAZZKYADBABZKgoDBAFZKpgDBABZLVIDBABZLi8D
BAJb2uwDBAFb64IwDAMEAl1yNAMEAF1yNgMEAV1yOgMEAF1zOzAMAwQBXXd2AwQB
XXd4AwQAXXd8AwQAXrF+MAwDBAawfsADBACwfsIwDAMEArDfdAMEALDfdgMEALDf
oQMEArlQcAMEBLyssAMEA7zQMAMEALzQbQMEAbzQ3gMEA7zReAMEALzTpwMEALzU
/gMEAbzVzgMEAbzV1gMEA7zV+AMEALzWXwMEALzx0wMEAMEe/gMEAcEgQgMEBMH+
MAMEAcIpPDANBgkqhkiG9w0BAQsFAAOCAQEATy/Js5Tl/bZxu0mjzepEfreCR9A8
9osXFRZv8Wq4jD6dH+i1ruEaWXQMUpVVcz0bYPA7OgG4Y5iQ6bnch6aT4qVCfa42
Gx9LeeSBSk/YtvcXxlgbKOO+umCsjPCPWYEKNewk3mUdLrmjQLW3Y8KiKr1TJEuS
HEYKFu4VxwhnnjE0Mv8HuBb5fkyJ9LRPos9KgEe4o14S7c60fLaD8ldKijY0mMXd
S2nXs2n/nQRP/kjKX+XcvB0cSNn8BOsbekTO40+38S22BmxxAyfcC2LbUR/ILsuN
VAssOE2M40b/83L4cTs9VKiQsD9dB3KLwqgZadFe6y31hW99JYOfA4xtxg==
Generated at Wed Oct 11 15:15:38 2023 by rpki-client on console-fra.rpki-client.org