Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YqLUJrs6w3aQ0z-lXe8j-9coLi0.roa
File: YqLUJrs6w3aQ0z-lXe8j-9coLi0.roa (raw, json)
Hash identifier: G6YYAcFaV7OShh9pya7iBzbs2ESnn6ucMseuc7ckE0o=
Subject key identifier: 62:A2:D4:26:BB:3A:C3:76:90:D3:3F:A5:5D:EF:23:FB:D7:28:2E:2D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018DAD411C49BDCAD8359519774AFF20065E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YqLUJrs6w3aQ0z-lXe8j-9coLi0.roa
Signing time: Thu 15 Feb 2024 14:52:21 +0000
ROA not before: Thu 15 Feb 2024 14:52:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
46.10.0.0/16 maxlen: 24
46.10.166.0/23 maxlen: 24
46.10.193.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
62.73.64.0/18 maxlen: 24
62.176.64.0/19 maxlen: 24
62.176.96.0/19 maxlen: 24
62.176.117.0/24 maxlen: 24
62.176.124.54/32 maxlen: 32
77.85.0.0/16 maxlen: 24
77.85.128.0/19 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
78.154.0.0/19 maxlen: 24
79.100.0.0/16 maxlen: 24
82.137.64.0/18 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
83.148.64.0/18 maxlen: 24
83.228.0.0/17 maxlen: 24
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
84.238.128.0/22 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
87.116.66.160/32 maxlen: 32
87.116.82.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
87.243.80.0/20 maxlen: 24
87.243.96.0/21 maxlen: 24
87.243.104.0/21 maxlen: 24
87.243.112.0/22 maxlen: 22
87.243.116.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.163.0/24 maxlen: 24
90.154.128.0/17 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
94.236.180.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
95.42.0.0/15 maxlen: 24
95.43.0.0/17 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
95.87.192.0/18 maxlen: 24
151.237.140.0/23 maxlen: 24
185.20.156.0/22 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.16.32.0/19 maxlen: 24
213.91.128.0/17 maxlen: 24
213.91.154.0/24 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8:2:5::/64 maxlen: 64
Validation: Failed, certificate revoked on Fri 16 Feb 2024 09:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:41:1c:49:bd:ca:d8:35:95:19:77:4a:ff:20:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Feb 15 14:52:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62a2d426bb3ac37690d33fa55def23fbd7282e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:b5:d1:df:00:03:27:73:7c:f4:1e:02:e9:
24:0c:3a:d5:4f:49:06:0d:29:04:11:6d:e5:56:02:
29:43:7d:e1:90:f8:f8:b8:ab:d7:1e:b6:ee:0f:0a:
95:75:e2:33:17:82:22:0c:3e:d4:2e:f2:c7:7e:c1:
98:2f:41:7b:59:6c:1e:fa:25:a2:05:9e:57:8a:3e:
a9:b0:e7:7c:fe:00:77:f9:4c:87:74:88:47:5a:fe:
fa:97:d1:c8:fd:c8:33:3d:5e:c7:29:84:d9:d5:bd:
a0:fa:ae:f7:4d:4d:2f:6a:78:58:da:5e:bd:70:6b:
67:3b:22:61:71:f2:57:cb:28:7a:fe:44:42:0f:45:
58:12:b6:26:8b:92:f6:84:36:ba:9e:f0:b6:15:69:
c8:8d:0b:9d:d6:e5:5f:2c:d7:36:55:5c:68:59:f1:
70:11:b9:7b:9a:f8:cb:c2:bf:6f:f9:20:c6:a2:09:
5b:13:9f:f2:10:34:26:5d:66:5a:29:db:14:c4:7d:
bb:8d:44:e6:69:05:19:4c:86:13:67:2a:ee:1e:5f:
ba:d1:3d:7b:c0:6c:87:91:35:d2:2b:7e:f0:2c:12:
8a:39:65:e1:ed:d6:a8:b4:ec:9f:e3:bc:ed:73:7a:
01:8e:e4:77:b7:1f:70:79:a5:db:2d:b0:ac:c1:d2:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:D4:26:BB:3A:C3:76:90:D3:3F:A5:5D:EF:23:FB:D7:28:2E:2D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YqLUJrs6w3aQ0z-lXe8j-9coLi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.66.160/32
87.116.82.0/24
87.126.0.0/16
87.243.80.0-87.243.127.255
87.254.160.0/19
90.154.128.0/17
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:52:f1:01:54:68:5d:af:c1:fe:d8:3a:7c:b7:1a:e8:a3:21:
79:55:ac:8d:4c:95:e6:55:37:ea:e5:4b:22:44:1b:ed:07:7c:
13:b8:56:2d:be:61:fb:46:22:82:a5:1e:c9:a7:89:24:84:8a:
6c:bf:78:3a:9c:f1:0b:52:ea:59:f3:fa:b1:c2:98:bc:12:c7:
f4:52:48:88:a2:d1:de:39:56:24:0d:83:67:fe:4c:bd:5d:01:
f4:b6:d7:38:bc:9b:ca:d5:6c:11:39:22:ee:39:47:a9:ab:de:
2f:90:87:85:01:84:e4:9d:85:13:5a:dc:c8:71:5c:a0:85:cf:
e9:96:2a:60:14:61:a2:30:01:ef:0f:9b:ad:96:d5:2d:7b:00:
af:f8:e4:2c:c3:46:1f:d3:7e:11:97:11:be:1b:5e:84:cb:94:
97:13:5a:83:a9:de:59:6b:1c:18:a6:d7:34:c6:d5:24:a1:c5:
f7:d4:52:f4:03:80:36:80:61:13:9b:85:a5:d3:1e:36:2e:05:
cf:d0:0c:38:7a:09:5f:e9:06:47:09:45:10:c1:19:f5:f0:7d:
da:dc:ac:df:78:de:27:ad:ba:ee:52:5b:66:48:f7:15:12:e6:
d1:b4:40:2f:0a:d3:ee:f8:88:f2:57:ff:3c:66:25:84:7d:70:
97:73:7b:15
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgISAY2tQRxJvcrYNZUZd0r/IAZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMjE1MTQ1MjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmEyZDQyNmJiM2FjMzc2OTBkMzNmYTU1ZGVmMjNmYmQ3MjgyZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/W10d8AAydzfPQeAukkDDrVT0kG
DSkEEW3lVgIpQ33hkPj4uKvXHrbuDwqVdeIzF4IiDD7ULvLHfsGYL0F7WWwe+iWi
BZ5Xij6psOd8/gB3+UyHdIhHWv76l9HI/cgzPV7HKYTZ1b2g+q73TU0vanhY2l69
cGtnOyJhcfJXyyh6/kRCD0VYErYmi5L2hDa6nvC2FWnIjQud1uVfLNc2VVxoWfFw
Ebl7mvjLwr9v+SDGoglbE5/yEDQmXWZaKdsUxH27jUTmaQUZTIYTZyruHl+60T17
wGyHkTXSK37wLBKKOWXh7daotOyf47ztc3oBjuR3tx9weaXbLbCswdLEYwIDAQAB
o4IDtzCCA7MwHQYDVR0OBBYEFGKi1Ca7OsN2kNM/pV3vI/vXKC4tMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvWXFMVUpyczZ3M2FRMHotbFhlOGotOWNvTGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBywYIKwYBBQUHAQcBAf8EggG6MIIBtjCCAZwEAgABMIIB
lAMEAyWdiAMEBSWdoAMDAC4KAwQFLvlAAwQGPklAAwQGPrBAAwMATVUDBAVOmgAD
AwBPZAMEBlKJQAMEAlKSAAMEAVKSBgMEAFKSCwMEAVKSGAMEAVKSHAMEAFKSHwME
BlOUQAMEB1PkAAMEBlQoQAMEAlTugDAMAwQBVO6GAwQFVO6AAwQAVO6lMAwDBABU
7qcDBARU7qAwDAMEAVTusgMEA1TusAMEAlTuwAMEAlTuzDAMAwQBVbsWAwQDVbsg
AwQBVbsuAwQGVbtAAwUAV3RCoAMEAFd0UgMDAFd+MAwDBARX81ADBAdX8wADBAVX
/qADBAdamoAwDAMEBF7skAMEBl7sgAMEAV7szAMEAV7s5AMEAF7s5wMEAV7s6gME
AF7s7gMEBF7s8AMDAV8qAwQGX1fAAwQBl+2MAwQCuRScAwQF1AWAAwQF1CdAAwQB
1EjGAwQB1EjKAwQA1EjUAwQA1EjWAwQA1EjdAwQF1RAgAwQH1VuAAwQC1YJAAwQC
1YJMAwQB1YJcAwQA1YJfAwQA2UuLMBQEAgACMA4DBQAqAA5AAwUAKgEFqDANBgkq
hkiG9w0BAQsFAAOCAQEATlLxAVRoXa/B/tg6fLca6KMheVWsjUyV5lU36uVLIkQb
7Qd8E7hWLb5h+0YigqUeyaeJJISKbL94OpzxC1LqWfP6scKYvBLH9FJIiKLR3jlW
JA2DZ/5MvV0B9LbXOLybytVsETki7jlHqaveL5CHhQGE5J2FE1rcyHFcoIXP6ZYq
YBRhojAB7w+brZbVLXsAr/jkLMNGH9N+EZcRvhtehMuUlxNag6neWWscGKbXNMbV
JKHF99RS9AOANoBhE5uFpdMeNi4Fz9AMOHoJX+kGRwlFEMEZ9fB92tys33jeJ626
7lJbZkj3FRLm0bRALwrT7viI8lf/PGYlhH1wl3N7FQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org