Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cgf2wRyeGeXnajva-HhSARUyEfY.roa
File: Cgf2wRyeGeXnajva-HhSARUyEfY.roa (raw, json)
Hash identifier: 9ShR8QYFIXOmhBo/Y3SkijFfV93EmeJqNNc2LfHVntc=
Subject key identifier: 0A:07:F6:C1:1C:9E:19:E5:E7:6A:3B:DA:F8:78:52:01:15:32:11:F6
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018B298136DFAF4AA303C7C8C77C7B666F35
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cgf2wRyeGeXnajva-HhSARUyEfY.roa
Signing time: Fri 13 Oct 2023 14:46:55 +0000
ROA not before: Fri 13 Oct 2023 14:46:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
188.93.104.0/21 maxlen: 21
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
82.179.128.0/17 maxlen: 17
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
82.179.32.0/19 maxlen: 19
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 10:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:81:36:df:af:4a:a3:03:c7:c8:c7:7c:7b:66:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 13 14:46:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a07f6c11c9e19e5e76a3bdaf8785201153211f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:21:ce:13:f9:23:de:9d:33:2c:f2:65:1d:
00:01:95:f8:3f:2f:94:26:66:8e:59:a3:35:2f:40:
92:48:b4:94:49:8a:c0:64:3e:dd:06:15:5d:2c:78:
0b:06:70:f8:6a:95:a6:e1:65:79:a7:96:65:f4:98:
a7:e7:5e:34:22:97:64:cd:1a:e6:28:13:b9:84:73:
3f:ef:cb:8f:66:e8:5f:4f:b4:c0:58:d2:36:86:94:
7f:55:fb:16:d2:29:e4:ed:20:56:14:5c:0b:f4:e0:
ba:43:f9:8f:cd:9c:da:37:63:38:7b:cf:ad:15:e2:
10:4d:43:ed:51:fc:9b:6f:c5:21:40:01:de:ac:62:
6f:7c:7b:ab:a7:b5:48:bd:6f:0c:84:8b:a3:75:d8:
f2:fa:c7:47:18:58:5c:9c:19:f4:06:56:3e:e0:c3:
e9:d6:46:51:4e:bf:e8:f8:1d:a3:90:36:7b:c2:63:
c1:1f:3e:cc:e3:31:45:46:76:cf:30:9c:65:c5:bf:
17:3b:44:15:74:a6:79:60:53:e6:a3:f3:14:95:ed:
7b:95:e1:58:f7:be:21:bb:40:9a:e6:68:cd:39:cc:
43:a4:c2:5b:f7:53:44:22:e2:fd:e3:ee:07:53:d8:
86:df:97:6c:a1:4e:b2:0e:81:b4:bf:d8:7b:66:00:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:F6:C1:1C:9E:19:E5:E7:6A:3B:DA:F8:78:52:01:15:32:11:F6
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cgf2wRyeGeXnajva-HhSARUyEfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.104.0/21
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:05:ac:47:e8:e0:d9:6e:90:88:50:64:ff:27:6c:b7:10:d6:
ca:07:92:6d:d6:8a:16:77:b3:5c:36:6e:77:84:fd:b2:b0:77:
37:8f:34:f5:8c:66:12:cf:b6:31:92:f3:65:b4:f6:26:72:87:
c9:79:13:3b:a8:4b:96:3e:ea:0f:a9:31:4b:d8:db:15:e9:85:
aa:4d:60:a4:26:a3:d9:fc:05:cd:ac:90:c3:3b:2f:97:bf:dc:
00:a2:86:8c:20:9b:c8:fa:5c:83:7d:ac:16:d5:15:60:96:80:
96:39:e5:49:22:07:3e:d3:e7:8b:d3:c8:8f:4b:02:a5:a3:4a:
6c:65:63:df:81:05:45:cc:58:f2:4c:fb:37:4c:2e:90:dc:91:
74:75:ea:87:1e:6c:82:6d:73:97:e0:62:03:a1:c9:22:38:14:
9e:37:fa:b2:18:8a:8f:a5:1f:a0:22:da:7a:6f:95:b6:9e:b6:
9e:95:36:b8:81:dc:61:f9:d0:d6:c4:dd:50:ac:bc:e8:65:de:
b9:20:38:69:52:f8:98:f7:81:3f:f3:2e:bb:1f:43:c3:2a:70:
16:05:de:5c:68:2c:18:02:9b:79:64:38:c5:32:01:91:60:42:
a1:cd:17:70:9a:48:95:aa:2e:28:42:05:3e:93:e6:b3:90:10:
03:05:33:28
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYspgTbfr0qjA8fIx3x7Zm81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjMxMDEzMTQ0NjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTA3ZjZjMTFjOWUxOWU1ZTc2YTNiZGFmODc4NTIwMTE1MzIxMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZghzhP5I96dMyzyZR0AAZX4Py+U
JmaOWaM1L0CSSLSUSYrAZD7dBhVdLHgLBnD4apWm4WV5p5Zl9Jin5140IpdkzRrm
KBO5hHM/78uPZuhfT7TAWNI2hpR/VfsW0ink7SBWFFwL9OC6Q/mPzZzaN2M4e8+t
FeIQTUPtUfybb8UhQAHerGJvfHurp7VIvW8MhIujddjy+sdHGFhcnBn0BlY+4MPp
1kZRTr/o+B2jkDZ7wmPBHz7M4zFFRnbPMJxlxb8XO0QVdKZ5YFPmo/MUle17leFY
974hu0Ca5mjNOcxDpMJb91NEIuL94+4HU9iG35dsoU6yDoG0v9h7ZgD73wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAoH9sEcnhnl52o72vh4UgEVMhH2MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvQ2dmMndSeWVHZVhuYWp2YS1IaFNBUlV5RWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwQFUPqg
AwQAUomJAwQEUomwMAsDBAVSsyADAwJSsAMEBlOVwAMEAFWOQAMEAFWOTgMEA1WP
4AMEBVZuYAMEArlHYAMEA7xdaAMEAcEb1gMEBMJVIDAMAwQFwlWgAwQCwlWoAwQB
wlWuAwQFwr7gMA0EAgACMAcDBQMqB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQBfBaxH
6ODZbpCIUGT/J2y3ENbKB5Jt1ooWd7NcNm53hP2ysHc3jzT1jGYSz7YxkvNltPYm
cofJeRM7qEuWPuoPqTFL2NsV6YWqTWCkJqPZ/AXNrJDDOy+Xv9wAooaMIJvI+lyD
fawW1RVgloCWOeVJIgc+0+eL08iPSwKlo0psZWPfgQVFzFjyTPs3TC6Q3JF0deqH
HmyCbXOX4GIDockiOBSeN/qyGIqPpR+gItp6b5W2nraelTa4gdxh+dDWxN1QrLzo
Zd65IDhpUviY94E/8y67H0PDKnAWBd5caCwYApt5ZDjFMgGRYEKhzRdwmkiVqi4o
QgU+k+azkBADBTMo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org