Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/xaywv5wxoVmPzFmWx5AykqZGgCM.roa
File: xaywv5wxoVmPzFmWx5AykqZGgCM.roa (raw, json)
Hash identifier: T/eybICC1yS4PoUogy4gDrqfT8VSjktu3+gTRinJTgA=
Subject key identifier: C5:AC:B0:BF:9C:31:A1:59:8F:CC:59:96:C7:90:32:92:A6:46:80:23
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01856F30059C5E4A36C7196B16652F8414F8
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/xaywv5wxoVmPzFmWx5AykqZGgCM.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49063
IP address blocks: 91.107.64.0/21 maxlen: 21
91.107.64.0/24 maxlen: 24
91.107.69.0/24 maxlen: 24
91.107.68.0/24 maxlen: 24
91.107.71.0/24 maxlen: 24
91.107.70.0/24 maxlen: 24
91.107.65.0/24 maxlen: 24
91.107.67.0/24 maxlen: 24
91.107.66.0/24 maxlen: 24
176.107.166.0/24 maxlen: 24
95.181.192.0/22 maxlen: 22
176.107.165.0/24 maxlen: 24
176.107.163.0/24 maxlen: 24
176.107.162.0/24 maxlen: 24
176.107.164.0/24 maxlen: 24
176.107.161.0/24 maxlen: 24
176.107.160.0/24 maxlen: 24
95.181.199.0/24 maxlen: 24
95.181.197.0/24 maxlen: 24
95.181.196.0/24 maxlen: 24
95.181.196.0/23 maxlen: 23
95.181.193.0/24 maxlen: 24
95.181.195.0/24 maxlen: 24
95.181.194.0/24 maxlen: 24
176.107.167.0/24 maxlen: 24
95.181.204.0/24 maxlen: 24
95.181.203.0/24 maxlen: 24
95.181.205.0/24 maxlen: 24
95.181.200.0/24 maxlen: 24
95.181.200.0/21 maxlen: 21
95.181.201.0/24 maxlen: 24
185.242.120.0/24 maxlen: 24
185.127.151.0/24 maxlen: 24
185.127.150.0/24 maxlen: 24
185.127.149.0/24 maxlen: 24
185.127.148.0/24 maxlen: 24
185.127.148.0/22 maxlen: 22
92.242.36.0/24 maxlen: 24
92.242.35.0/24 maxlen: 24
92.242.38.0/24 maxlen: 24
92.242.37.0/24 maxlen: 24
92.242.32.0/21 maxlen: 21
92.242.33.0/24 maxlen: 24
92.242.32.0/24 maxlen: 24
92.242.34.0/24 maxlen: 24
92.242.43.0/24 maxlen: 24
92.242.42.0/24 maxlen: 24
92.242.39.0/24 maxlen: 24
92.242.41.0/24 maxlen: 24
92.242.47.0/24 maxlen: 24
92.242.46.0/24 maxlen: 24
185.247.186.0/24 maxlen: 24
185.99.140.0/23 maxlen: 23
185.99.140.0/24 maxlen: 24
130.193.64.0/24 maxlen: 24
130.193.64.0/21 maxlen: 21
130.193.70.0/24 maxlen: 24
130.193.71.0/24 maxlen: 24
130.193.66.0/24 maxlen: 24
130.193.65.0/24 maxlen: 24
130.193.68.0/24 maxlen: 24
130.193.67.0/24 maxlen: 24
85.193.73.0/24 maxlen: 24
85.193.72.0/24 maxlen: 24
85.193.75.0/24 maxlen: 24
85.193.74.0/24 maxlen: 24
185.99.10.0/24 maxlen: 24
185.99.9.0/24 maxlen: 24
185.99.11.0/24 maxlen: 24
185.99.8.0/24 maxlen: 24
185.99.8.0/21 maxlen: 21
185.232.107.0/24 maxlen: 24
193.23.147.0/24 maxlen: 24
185.232.106.0/24 maxlen: 24
193.23.146.0/24 maxlen: 24
178.57.72.0/21 maxlen: 21
178.57.73.0/24 maxlen: 24
178.57.72.0/24 maxlen: 24
178.57.75.0/24 maxlen: 24
178.57.74.0/24 maxlen: 24
178.57.77.0/24 maxlen: 24
178.57.76.0/24 maxlen: 24
178.57.78.0/24 maxlen: 24
178.57.79.0/24 maxlen: 24
185.3.142.0/24 maxlen: 24
185.3.141.0/24 maxlen: 24
185.3.143.0/24 maxlen: 24
185.3.140.0/22 maxlen: 22
185.3.140.0/24 maxlen: 24
185.98.85.0/24 maxlen: 24
185.98.84.0/23 maxlen: 23
185.98.84.0/24 maxlen: 24
185.98.81.0/24 maxlen: 24
185.98.83.0/24 maxlen: 24
185.98.82.0/24 maxlen: 24
185.98.80.0/24 maxlen: 24
185.98.80.0/22 maxlen: 22
193.23.144.0/24 maxlen: 24
185.232.105.0/24 maxlen: 24
193.23.145.0/24 maxlen: 24
193.23.144.0/22 maxlen: 22
185.232.104.0/22 maxlen: 22
185.232.104.0/24 maxlen: 24
95.131.24.0/24 maxlen: 24
95.131.24.0/21 maxlen: 21
95.131.31.0/24 maxlen: 24
95.131.30.0/24 maxlen: 24
95.131.26.0/24 maxlen: 24
95.131.29.0/24 maxlen: 24
95.131.25.0/24 maxlen: 24
87.251.90.0/23 maxlen: 23
87.251.91.0/24 maxlen: 24
195.14.101.0/24 maxlen: 24
195.14.100.0/24 maxlen: 24
185.195.169.0/24 maxlen: 24
185.148.83.0/24 maxlen: 24
185.148.81.0/24 maxlen: 24
185.148.80.0/24 maxlen: 24
185.148.82.0/24 maxlen: 24
178.20.233.0/24 maxlen: 24
178.20.232.0/24 maxlen: 24
178.20.232.0/21 maxlen: 21
178.20.237.0/24 maxlen: 24
178.20.236.0/24 maxlen: 24
178.20.239.0/24 maxlen: 24
178.20.238.0/24 maxlen: 24
178.20.234.0/24 maxlen: 24
178.20.235.0/24 maxlen: 24
2a01:ba80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:05:9c:5e:4a:36:c7:19:6b:16:65:2f:84:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5acb0bf9c31a1598fcc5996c7903292a6468023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:e3:d6:f2:56:30:2b:5b:af:b3:4e:57:fc:
e1:81:a2:c9:82:c4:55:57:b1:af:be:b8:87:50:96:
2d:2e:eb:c8:d5:92:32:2c:9e:1a:23:1d:00:73:33:
2c:fa:85:74:0b:a7:f5:4f:fd:25:85:a7:28:39:c9:
f0:90:53:f7:64:5f:a5:57:19:19:04:4d:a5:50:22:
57:2f:f5:75:be:d2:ed:d2:f7:6c:d6:72:82:39:d5:
d7:b7:ee:cd:fe:46:1b:64:ab:c2:88:09:e6:f8:ae:
2b:9f:a0:f5:73:1c:2f:76:19:6e:31:5f:85:35:75:
6c:df:50:c6:3d:e1:71:17:91:9a:8a:84:b4:dd:07:
ba:36:6c:67:db:c6:65:c1:0f:a1:dd:f2:3e:e5:2d:
7e:d9:89:7b:c6:c4:a9:50:d6:13:12:89:2e:0e:88:
6c:05:3f:a1:e4:01:cb:85:ab:53:e3:f8:64:ce:72:
95:8f:63:51:66:a4:f8:39:40:7b:09:03:c4:7f:3c:
55:06:ec:e0:43:2f:ad:56:a4:76:74:bf:c0:9a:37:
e2:2e:d4:7a:38:bf:8f:3f:e6:2d:30:c6:22:10:3c:
a9:29:20:c4:f6:87:e8:65:88:68:65:ad:95:9f:55:
ef:08:12:92:b5:64:9f:11:ea:cd:0c:1e:3a:47:ee:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:B0:BF:9C:31:A1:59:8F:CC:59:96:C7:90:32:92:A6:46:80:23
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/xaywv5wxoVmPzFmWx5AykqZGgCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.72.0/22
87.251.90.0/23
91.107.64.0/21
92.242.32.0/21
92.242.41.0-92.242.43.255
92.242.46.0/23
95.131.24.0/21
95.181.192.0-95.181.197.255
95.181.199.0-95.181.207.255
130.193.64.0/21
176.107.160.0/21
178.20.232.0/21
178.57.72.0/21
185.3.140.0/22
185.98.80.0-185.98.85.255
185.99.8.0/21
185.99.140.0/23
185.127.148.0/22
185.148.80.0/22
185.195.169.0/24
185.232.104.0/22
185.242.120.0/24
185.247.186.0/24
193.23.144.0/22
195.14.100.0/23
IPv6:
2a01:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
08:52:83:da:d2:77:29:62:e2:f3:d8:31:f4:f6:a9:ae:39:92:
24:71:7d:ca:4a:99:d5:07:44:82:c0:0e:a3:a3:ec:bc:9b:b3:
6d:fb:f2:73:c2:71:ea:35:d3:3c:ef:fe:9b:9f:2b:db:b2:4c:
d9:31:32:a4:b3:ba:d4:d6:df:97:fa:c6:fe:b9:8a:24:7b:6f:
52:da:a5:36:3a:45:a8:f1:25:4b:ff:68:1a:9c:8e:62:9e:6d:
e8:ff:01:36:fc:8a:6e:48:d2:2f:a9:6c:ed:17:e4:3e:e7:68:
09:85:82:ad:e3:b0:b7:9c:9f:cf:bb:c2:fd:2c:d3:67:52:15:
40:4d:57:75:f2:00:8b:ca:71:40:ae:74:e9:19:d5:e0:a4:23:
80:14:e5:fc:cf:a8:9c:25:9c:5b:e8:cb:3c:4b:73:83:e6:a2:
cb:fb:0d:d6:c7:43:ba:0d:70:60:fc:0b:2e:4b:83:24:f1:00:
24:83:f1:c2:31:16:51:13:19:c8:a7:80:63:96:7a:b7:8e:e6:
f0:e7:7b:2c:c3:d2:48:10:12:41:15:7d:db:b2:b5:ff:5d:ff:
29:1b:a2:4f:62:1e:7f:6a:32:6b:0f:19:0b:09:88:66:df:65:
bc:e5:f1:0c:18:ca:10:6a:be:ce:bf:07:67:c1:b6:c3:97:1a:
dc:0a:5f:80
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYVvMAWcXko2xxlrFmUvhBT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjMwMTAxMjExNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWFjYjBiZjljMzFhMTU5OGZjYzU5OTZjNzkwMzI5MmE2NDY4MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQLj1vJWMCtbr7NOV/zhgaLJgsRV
V7GvvriHUJYtLuvI1ZIyLJ4aIx0AczMs+oV0C6f1T/0lhacoOcnwkFP3ZF+lVxkZ
BE2lUCJXL/V1vtLt0vds1nKCOdXXt+7N/kYbZKvCiAnm+K4rn6D1cxwvdhluMV+F
NXVs31DGPeFxF5GaioS03Qe6Nmxn28ZlwQ+h3fI+5S1+2Yl7xsSpUNYTEokuDohs
BT+h5AHLhatT4/hkznKVj2NRZqT4OUB7CQPEfzxVBuzgQy+tVqR2dL/AmjfiLtR6
OL+PP+YtMMYiEDypKSDE9ofoZYhoZa2Vn1XvCBKStWSfEerNDB46R+7FzQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFMWssL+cMaFZj8xZlseQMpKmRoAjMB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEveGF5d3Y1d3hvVm1QekZtV3g1QXlrcVpHZ0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHiBggrBgEFBQcBBwEB/wSB0jCBzzCBvQQCAAEwgbYDBAJV
wUgDBAFX+1oDBANba0ADBANc8iAwDAMEAFzyKQMEAlzyKAMEAVzyLgMEA1+DGDAM
AwQGX7XAAwQBX7XEMAwDBABftccDBARftcADBAOCwUADBAOwa6ADBAOyFOgDBAOy
OUgDBAK5A4wwDAMEBLliUAMEAbliVAMEA7ljCAMEAbljjAMEArl/lAMEArmUUAME
ALnDqQMEArnoaAMEALnyeAMEALn3ugMEAsEXkAMEAcMOZDANBAIAAjAHAwUAKgG6
gDANBgkqhkiG9w0BAQsFAAOCAQEACFKD2tJ3KWLi89gx9PaprjmSJHF9ykqZ1QdE
gsAOo6PsvJuzbfvyc8Jx6jXTPO/+m58r27JM2TEypLO61Nbfl/rG/rmKJHtvUtql
NjpFqPElS/9oGpyOYp5t6P8BNvyKbkjSL6ls7RfkPudoCYWCreOwt5yfz7vC/SzT
Z1IVQE1XdfIAi8pxQK506RnV4KQjgBTl/M+onCWcW+jLPEtzg+aiy/sN1sdDug1w
YPwLLkuDJPEAJIPxwjEWURMZyKeAY5Z6t47m8Od7LMPSSBASQRV927K1/13/KRui
T2Ief2oyaw8ZCwmIZt9lvOXxDBjKEGq+zr8HZ8G2w5ca3ApfgA==
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:36 2024 by rpki-client on console-fra.rpki-client.org