Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/uMoWrLJdzkmWB2bV1gQx24_ZsvQ.roa
File: uMoWrLJdzkmWB2bV1gQx24_ZsvQ.roa (raw, json)
Hash identifier: OrcDquC6RmuO35FFwuPvnCMKtplVlAqLXMaCgPoKeQ0=
Subject key identifier: B8:CA:16:AC:B2:5D:CE:49:96:07:66:D5:D6:04:31:DB:8F:D9:B2:F4
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018D8D60EAFCE02F86E0884325910517CDA6
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/uMoWrLJdzkmWB2bV1gQx24_ZsvQ.roa
Signing time: Fri 09 Feb 2024 10:19:15 +0000
ROA not before: Fri 09 Feb 2024 10:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.175.0/24 maxlen: 24
80.250.176.0/20 maxlen: 20
82.137.137.0/24 maxlen: 24
82.137.176.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
82.179.64.0/18 maxlen: 18
82.179.128.0/17 maxlen: 17
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
185.71.96.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
194.226.192.0/20 maxlen: 20
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Feb 2024 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:60:ea:fc:e0:2f:86:e0:88:43:25:91:05:17:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 9 10:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8ca16acb25dce49960766d5d60431db8fd9b2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:91:53:dc:76:64:80:60:8e:64:4c:28:47:
53:d8:71:de:99:ff:25:9d:62:ba:56:1f:63:47:e3:
d1:6c:a0:e8:13:1f:2c:4e:82:ef:e2:48:1d:f1:f9:
0c:35:48:6f:1e:9d:c3:33:e8:a6:0e:dc:6e:9e:2c:
c4:bd:98:c1:fb:72:ed:96:0c:7b:8a:a7:55:d6:0f:
c8:83:e4:e3:06:e8:43:c4:35:c7:91:19:bb:b7:03:
58:61:42:18:c7:20:c8:34:b7:7f:8e:b2:5f:e4:1d:
c1:be:41:5f:b7:0a:0b:f8:a7:95:8a:4a:2d:d8:ec:
ae:82:e8:9e:f0:dc:33:07:b2:7f:08:b1:17:17:b2:
b3:69:58:ee:aa:6a:6a:f8:b1:ab:47:de:cb:87:10:
b4:a2:25:d0:00:a4:04:60:1b:bb:39:14:72:7e:7a:
a9:38:c0:db:fe:b6:f9:c7:35:d8:46:06:75:d5:09:
02:03:0d:96:cd:a0:fa:39:07:c6:77:6c:10:9a:e7:
0b:9d:46:2f:6d:7f:c4:05:a3:ac:bb:9c:51:5b:84:
d7:0e:49:d6:46:ce:26:dc:95:13:28:eb:ec:9a:4d:
35:48:c8:52:2f:6b:69:ce:83:88:4a:92:12:ff:15:
7a:b9:ae:95:f4:ad:9a:23:2d:2d:8d:27:cf:2a:4f:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:16:AC:B2:5D:CE:49:96:07:66:D5:D6:04:31:DB:8F:D9:B2:F4
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/uMoWrLJdzkmWB2bV1gQx24_ZsvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.32.0/21
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
194.226.192.0/20
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:18:a8:19:ca:15:60:c0:67:8c:4a:f2:aa:02:8f:a3:e7:14:
21:dd:52:e3:c9:22:7d:1d:79:80:b4:14:5f:72:1d:2c:0c:58:
21:db:c8:5a:5d:fc:86:21:8f:43:52:59:70:fb:55:68:52:95:
4f:4f:e5:b1:36:84:d0:cc:b8:f5:84:73:b0:96:e6:19:51:31:
48:06:7f:99:08:8e:1d:bb:65:cf:e6:bc:42:2e:fe:fd:25:73:
66:c7:f0:78:ac:13:56:be:79:35:00:cf:1b:59:a2:8e:24:47:
3a:bf:c2:64:22:f6:af:b3:a4:28:a2:21:0e:30:35:f5:fc:a3:
bd:f1:bd:1a:42:ab:97:93:a3:fa:68:2e:0c:bf:37:e8:7a:4f:
44:3e:2a:f2:36:d7:7f:ef:4e:5d:52:9a:92:c9:ba:a8:6a:e6:
d4:4c:85:ff:ca:48:d8:f1:70:ea:f8:4d:ef:b1:08:b7:13:96:
10:55:65:7e:57:e5:e5:47:26:bd:a3:12:55:94:bb:54:f4:d9:
65:8d:38:ed:c5:9c:22:ef:02:cc:ce:d2:be:b2:68:93:03:c6:
80:0c:72:55:2b:58:84:4a:ac:c7:b9:49:71:c8:27:f0:a4:3a:
2b:a2:87:6f:35:c9:1c:28:4a:92:a5:83:ca:02:26:2d:2b:55:
92:50:fc:42
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISAY2NYOr84C+G4IhDJZEFF82mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwMjA5MTAxOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGNhMTZhY2IyNWRjZTQ5OTYwNzY2ZDVkNjA0MzFkYjhmZDliMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodmRU9x2ZIBgjmRMKEdT2HHemf8l
nWK6Vh9jR+PRbKDoEx8sToLv4kgd8fkMNUhvHp3DM+imDtxunizEvZjB+3Ltlgx7
iqdV1g/Ig+TjBuhDxDXHkRm7twNYYUIYxyDINLd/jrJf5B3BvkFftwoL+KeVikot
2Oyuguie8NwzB7J/CLEXF7KzaVjuqmpq+LGrR97LhxC0oiXQAKQEYBu7ORRyfnqp
OMDb/rb5xzXYRgZ11QkCAw2WzaD6OQfGd2wQmucLnUYvbX/EBaOsu5xRW4TXDknW
Rs4m3JUTKOvsmk01SMhSL2tpzoOISpIS/xV6ua6V9K2aIy0tjSfPKk8LLwIDAQAB
o4IDFDCCAxAwHQYDVR0OBBYEFLjKFqyyXc5Jlgdm1dYEMduP2bL0MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvdU1vV3JMSmR6a21XQjJiVjFnUXgyNF9ac3ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKAYIKwYBBQUHAQcBAf8EggEXMIIBEzCB6AQCAAEwgeED
BAVQ+qADBABSiYkDBARSibAwCwMEBVKzIAMDAlKwAwQGU5XAAwQDVY4IAwQDVY4g
MAwDBAJVjjQDBAJVjjgwDAMEAVWOZgMEBFWOYDAMAwQCVY50AwQHVY4AAwQBVY6U
AwQAVY6ZAwQBVY6iAwQEVY8AAwQBVY8SAwQAVY8aAwQCVY9gAwQCVY9wAwQCVY98
AwQDVY/gAwQAVY/vAwQFVm5gAwQCuUdgAwQAvF1rAwQBwRvWAwQEwlUgMAwDBAXC
VaADBALCVagDBAHCVa4DBADClUADBAXCvuADBATC4sAwJgQCAAIwIAMHACABCwgA
IgMHACABCwgAJgMFACoADbgDBQMqB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQCWGKgZ
yhVgwGeMSvKqAo+j5xQh3VLjySJ9HXmAtBRfch0sDFgh28haXfyGIY9DUllw+1Vo
UpVPT+WxNoTQzLj1hHOwluYZUTFIBn+ZCI4du2XP5rxCLv79JXNmx/B4rBNWvnk1
AM8bWaKOJEc6v8JkIvavs6QooiEOMDX1/KO98b0aQquXk6P6aC4Mvzfoek9EPiry
Ntd/705dUpqSybqoaubUTIX/ykjY8XDq+E3vsQi3E5YQVWV+V+XlRya9oxJVlLtU
9NlljTjtxZwi7wLMztK+smiTA8aADHJVK1iESqzHuUlxyCfwpDoroodvNckcKEqS
pYPKAiYtK1WSUPxC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org