Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/tqPyjtvB6t5dUXv24KmEl4Gzy-g.roa
File: tqPyjtvB6t5dUXv24KmEl4Gzy-g.roa (raw, json)
Hash identifier: FqhqcM6E0pNTjv0USAIUQvwiQ6BgXr9VyYVHbSk1eIo=
Subject key identifier: B6:A3:F2:8E:DB:C1:EA:DE:5D:51:7B:F6:E0:A9:84:97:81:B3:CB:E8
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01884D40AFBA94DFF5866D7C862C6B88CC2F
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/tqPyjtvB6t5dUXv24KmEl4Gzy-g.roa
Signing time: Wed 24 May 2023 10:14:24 +0000
ROA not before: Wed 24 May 2023 10:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200000
IP address blocks: 185.124.8.0/22 maxlen: 22
185.39.224.0/22 maxlen: 22
89.19.128.0/19 maxlen: 19
185.235.168.0/22 maxlen: 22
109.205.96.0/21 maxlen: 21
45.154.218.0/24 maxlen: 24
173.242.48.0/20 maxlen: 20
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.65.244.0/22 maxlen: 22
217.173.208.0/20 maxlen: 20
185.25.116.0/22 maxlen: 22
185.130.120.0/22 maxlen: 22
185.69.152.0/22 maxlen: 22
185.234.176.0/22 maxlen: 22
185.233.120.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
37.139.64.0/21 maxlen: 21
185.233.152.0/22 maxlen: 23
185.149.40.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
91.105.208.0/21 maxlen: 21
46.247.80.0/21 maxlen: 21
185.226.24.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.68.16.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.209.168.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
2a0c:c80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a00:7a60::/32 maxlen: 32
2a0c:880::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:a80::/29 maxlen: 29
2a0c:684::/30 maxlen: 30
2a0c:d80::/29 maxlen: 29
2a04:8000::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a0c:780::/29 maxlen: 29
2a06:6440::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:40:af:ba:94:df:f5:86:6d:7c:86:2c:6b:88:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: May 24 10:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a3f28edbc1eade5d517bf6e0a9849781b3cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:ce:21:2f:c2:72:68:db:e0:e8:b2:33:8a:
83:e4:3c:32:f6:48:d0:b8:f6:17:ce:ff:b5:52:49:
92:1f:81:52:5d:3c:94:a8:bf:d5:17:89:4d:de:ef:
73:57:90:57:3a:06:e6:96:64:86:b5:e0:7b:6e:d2:
cb:62:e2:69:e2:e3:2b:e5:0b:b4:b4:0b:f5:3e:6f:
08:c8:e8:eb:c1:59:af:31:c7:cd:00:69:a5:d5:05:
0b:05:1f:bf:a8:09:71:ef:55:ab:2a:20:f4:71:44:
f2:9f:31:5b:fa:54:f8:c7:6a:00:1b:d4:53:23:7a:
e5:b0:14:f6:d3:19:ed:86:68:59:9e:80:2a:c3:0f:
5f:81:b6:1e:7c:4e:21:33:38:b6:29:f0:fa:43:08:
94:02:66:13:4e:fc:3a:59:87:b2:32:90:eb:03:32:
47:8c:11:b8:d9:c4:5f:ce:f2:d1:73:77:8f:bc:61:
d6:ba:18:64:f2:4d:dd:30:24:03:85:64:ef:41:64:
f9:87:4c:eb:fa:7d:05:c2:1b:9f:b9:0a:9d:45:bc:
7b:f3:94:6e:a2:f9:dc:ee:1b:20:ec:31:6e:07:54:
ec:18:81:ce:6f:c1:19:8d:85:84:c9:d7:d3:8b:35:
cf:67:43:74:68:59:c7:5b:60:60:fb:3a:a4:3c:49:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:F2:8E:DB:C1:EA:DE:5D:51:7B:F6:E0:A9:84:97:81:B3:CB:E8
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/tqPyjtvB6t5dUXv24KmEl4Gzy-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.64.0/21
45.154.218.0/24
46.247.80.0/21
89.19.128.0/19
91.105.208.0/21
109.205.96.0/21
173.242.48.0/20
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.130.120.0/22
185.149.40.0/22
185.209.168.0/22
185.225.212.0/22
185.226.24.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
217.173.208.0/20
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:880::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
80:7c:b4:5c:50:19:6c:b1:60:a1:f3:d4:74:5c:f7:d9:03:f2:
52:9f:d6:b7:45:f5:3e:fb:c0:ca:33:df:ea:7d:87:80:83:ea:
6b:ae:96:70:82:75:4c:18:ff:13:f0:25:83:cc:2b:7e:29:28:
05:20:ca:04:e7:cf:97:ba:15:36:52:f8:1a:45:3c:dc:70:82:
95:f8:ca:7c:6e:48:33:bf:3e:d2:4a:82:5f:b1:d1:b2:5c:8d:
ed:31:43:d3:3d:ee:0f:68:53:7e:71:09:93:5a:ce:f6:63:5b:
97:dd:0d:71:75:84:f1:5a:96:9d:b3:90:df:cc:64:73:76:95:
78:3c:f6:1f:9e:d3:2d:13:6e:61:90:91:20:ec:78:ef:da:4c:
50:b1:00:85:83:b3:7f:53:b7:55:18:6f:c2:a1:8e:bd:19:11:
f7:13:b9:e1:22:b6:4c:a6:4e:b6:9e:b6:66:71:68:f6:76:eb:
84:f8:d7:52:0e:00:19:9b:91:4f:9e:1e:65:ba:db:8d:e9:c2:
ff:2b:d0:1e:8e:84:da:cc:ba:4d:8f:4f:9b:cc:aa:ec:a4:84:
df:af:c0:a1:4b:be:30:e3:a4:3d:09:29:44:e7:e2:88:6c:23:
43:10:9f:50:9e:86:34:3a:66:4a:de:b1:32:e6:76:52:ea:b1:
26:23:1d:fe
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISAYhNQK+6lN/1hm18hixriMwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4
Y2YyYjUwHhcNMjMwNTI0MTAxNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmEzZjI4ZWRiYzFlYWRlNWQ1MTdiZjZlMGE5ODQ5NzgxYjNjYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ3OIS/Ccmjb4OiyM4qD5Dwy9kjQ
uPYXzv+1UkmSH4FSXTyUqL/VF4lN3u9zV5BXOgbmlmSGteB7btLLYuJp4uMr5Qu0
tAv1Pm8IyOjrwVmvMcfNAGml1QULBR+/qAlx71WrKiD0cUTynzFb+lT4x2oAG9RT
I3rlsBT20xnthmhZnoAqww9fgbYefE4hMzi2KfD6QwiUAmYTTvw6WYeyMpDrAzJH
jBG42cRfzvLRc3ePvGHWuhhk8k3dMCQDhWTvQWT5h0zr+n0FwhufuQqdRbx785Ru
ovnc7hsg7DFuB1TsGIHOb8EZjYWEydfTizXPZ0N0aFnHW2Bg+zqkPEmpkwIDAQAB
o4IDJzCCAyMwHQYDVR0OBBYEFLaj8o7bwereXVF79uCphJeBs8voMB8GA1UdIwQY
MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt
ZGI4ZWZmMWIxMWEwLzEvdHFQeWp0dkI2dDVkVVh2MjRLbUVsNEd6eS1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw
LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCBuQQCAAEwgbID
BAMli0ADBAAtmtoDBAMu91ADBAVZE4ADBANbadADBANtzWADBASt8jADBAK5GXQD
BAK5J+ADBAK5QfQDBAK5RBADBAK5RZgDBAK5aCwDBAK5fAgDBAK5gngDBAK5lSgD
BAK50agDBAK54dQDBAK54hgwDAMEArnpJAMEBLnpIDAMAwQCuel0AwQCuel4AwQC
uemIAwQCuemYAwQCueqwAwQCueuoAwQCue+0AwQE2a3QMGgEAgACMGIDBQAqAHpg
AwUDKgSAAAMFAyoFBIADBQMqBmRAAwUDKgwGgAMFAyoMB4ADBQMqDAiAAwUDKgwK
gAMFAyoMDIADBQMqDA2AAwUDKgwOgAMFAyoMYIADBQMqDREAAwUDKg1lADANBgkq
hkiG9w0BAQsFAAOCAQEAgHy0XFAZbLFgofPUdFz32QPyUp/Wt0X1PvvAyjPf6n2H
gIPqa66WcIJ1TBj/E/Alg8wrfikoBSDKBOfPl7oVNlL4GkU83HCClfjKfG5IM78+
0kqCX7HRslyN7TFD0z3uD2hTfnEJk1rO9mNbl90NcXWE8VqWnbOQ38xkc3aVeDz2
H57TLRNuYZCRIOx479pMULEAhYOzf1O3VRhvwqGOvRkR9xO54SK2TKZOtp62ZnFo
9nbrhPjXUg4AGZuRT54eZbrbjenC/yvQHo6E2sy6TY9Pm8yq7KSE36/AoUu+MOOk
PQkpROfiiGwjQxCfUJ6GNDpmSt6xMuZ2UuqxJiMd/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org