Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/I1kK1gZTdTec9GRk8DsekfpckCU.roa
File: I1kK1gZTdTec9GRk8DsekfpckCU.roa (raw, json)
Hash identifier: tZQoxoSVEaxMYI5lYX2vCR4fVHelzYoeBsUCe6fE6jg=
Subject key identifier: 23:59:0A:D6:06:53:75:37:9C:F4:64:64:F0:3B:1E:91:FA:5C:90:25
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0187BCCECACEC4834B2033CFBE9C3A33341A
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/I1kK1gZTdTec9GRk8DsekfpckCU.roa
Signing time: Wed 26 Apr 2023 09:04:41 +0000
ROA not before: Wed 26 Apr 2023 09:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 86.6.0.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
86.20.0.0/16 maxlen: 16
82.20.0.0/14 maxlen: 14
80.235.192.0/18 maxlen: 18
77.101.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.0.0/16 maxlen: 16
80.235.128.0/18 maxlen: 18
80.235.128.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
80.194.0.0/15 maxlen: 15
92.234.128.0/17 maxlen: 17
82.32.0.0/16 maxlen: 16
82.32.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
81.100.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
82.32.0.0/12 maxlen: 12
86.5.128.0/17 maxlen: 17
193.39.64.0/24 maxlen: 24
82.46.0.0/15 maxlen: 15
82.45.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
193.193.96.0/19 maxlen: 19
193.193.96.0/20 maxlen: 20
193.193.112.0/20 maxlen: 20
82.44.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
81.98.0.0/15 maxlen: 15
77.98.0.0/15 maxlen: 15
80.192.0.0/15 maxlen: 15
80.192.0.0/14 maxlen: 14
86.4.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
82.4.0.0/14 maxlen: 14
92.233.0.0/16 maxlen: 16
86.16.0.0/13 maxlen: 13
82.16.0.0/13 maxlen: 13
217.137.128.0/17 maxlen: 17
82.43.0.0/16 maxlen: 16
86.16.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
77.97.0.0/16 maxlen: 16
92.232.0.0/16 maxlen: 16
92.232.0.0/15 maxlen: 15
194.117.146.0/24 maxlen: 24
62.30.0.0/16 maxlen: 16
62.30.0.0/15 maxlen: 15
77.96.0.0/13 maxlen: 13
86.2.0.0/15 maxlen: 15
77.96.0.0/17 maxlen: 17
77.96.0.0/16 maxlen: 16
81.96.0.0/15 maxlen: 15
81.96.0.0/14 maxlen: 14
81.96.0.0/12 maxlen: 12
77.96.128.0/17 maxlen: 17
217.137.0.0/17 maxlen: 17
81.110.0.0/15 maxlen: 15
217.137.0.0/16 maxlen: 16
82.28.0.0/14 maxlen: 14
86.0.0.0/11 maxlen: 11
82.0.0.0/11 maxlen: 11
86.1.0.0/16 maxlen: 16
82.42.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
80.0.0.0/13 maxlen: 17
86.0.0.0/13 maxlen: 13
82.0.0.0/13 maxlen: 13
81.108.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
86.0.0.0/16 maxlen: 16
86.0.0.0/15 maxlen: 15
86.0.0.0/14 maxlen: 14
82.0.0.0/14 maxlen: 14
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
86.14.0.0/15 maxlen: 15
82.41.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
86.13.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
62.255.64.0/18 maxlen: 18
94.175.0.0/16 maxlen: 16
195.188.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
82.40.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
213.107.128.0/17 maxlen: 17
80.255.192.0/19 maxlen: 19
62.255.192.0/18 maxlen: 18
86.12.0.0/17 maxlen: 17
86.12.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.12.0.0/14 maxlen: 14
193.39.32.0/19 maxlen: 19
193.39.32.0/20 maxlen: 20
213.106.128.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
86.12.128.0/17 maxlen: 17
193.39.48.0/20 maxlen: 20
62.254.192.0/18 maxlen: 18
94.174.0.0/16 maxlen: 16
94.174.0.0/15 maxlen: 15
213.105.128.0/17 maxlen: 17
193.38.64.0/19 maxlen: 19
193.38.64.0/18 maxlen: 18
94.173.0.0/17 maxlen: 17
94.173.0.0/16 maxlen: 16
62.253.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
82.38.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
213.106.0.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
62.254.64.0/18 maxlen: 18
81.106.0.0/15 maxlen: 15
193.38.96.0/19 maxlen: 19
62.254.0.0/18 maxlen: 18
62.254.0.0/17 maxlen: 17
62.253.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
62.252.192.0/18 maxlen: 18
86.24.0.0/13 maxlen: 13
82.24.0.0/13 maxlen: 13
212.24.64.0/20 maxlen: 20
212.24.64.0/19 maxlen: 19
212.24.80.0/20 maxlen: 20
82.24.0.0/14 maxlen: 14
213.105.0.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.0.0/14 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
86.10.0.0/17 maxlen: 17
86.10.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
213.104.0.0/16 maxlen: 16
81.104.0.0/15 maxlen: 15
62.252.64.0/18 maxlen: 18
194.117.144.0/20 maxlen: 20
213.104.0.0/14 maxlen: 14
81.104.0.0/14 maxlen: 14
77.103.0.0/16 maxlen: 16
86.8.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
86.9.0.0/16 maxlen: 16
213.48.64.0/18 maxlen: 18
212.250.128.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.0.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
77.102.0.0/16 maxlen: 16
81.102.0.0/15 maxlen: 15
77.102.0.0/15 maxlen: 15
82.8.0.0/13 maxlen: 13
86.8.0.0/13 maxlen: 13
213.48.192.0/18 maxlen: 18
86.8.0.0/17 maxlen: 17
86.8.0.0/16 maxlen: 16
86.21.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
82.35.0.0/16 maxlen: 16
213.48.128.0/17 maxlen: 17
82.8.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
86.7.0.0/16 maxlen: 16
92.236.0.0/14 maxlen: 14
82.34.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
194.168.128.0/17 maxlen: 17
212.250.0.0/17 maxlen: 17
212.250.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.0.0/16 maxlen: 16
2a02:88fe:8::/46 maxlen: 46
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: Failed, certificate revoked on Fri 24 Nov 2023 12:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:ce:ca:ce:c4:83:4b:20:33:cf:be:9c:3a:33:34:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Apr 26 09:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23590ad6065375379cf46464f03b1e91fa5c9025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:24:c4:ea:5f:70:f2:8d:52:ca:13:84:c1:
d2:a9:49:c2:ca:b6:a8:88:4d:94:a8:81:36:e8:bd:
dc:fa:b8:12:32:3b:3d:7a:0b:36:69:42:f0:6f:7e:
f1:a5:2e:f5:2f:3c:22:39:ee:75:08:86:33:6d:b0:
6d:2c:79:f7:09:a2:63:96:01:d4:ed:de:17:e3:31:
c0:93:95:c0:60:fe:63:78:35:af:86:d5:1d:ca:70:
f4:ca:5d:50:af:34:ef:bd:57:13:25:76:22:75:e5:
09:7a:d3:45:c1:2b:39:73:81:c8:57:31:17:68:a0:
55:86:54:93:17:97:ac:30:77:00:0a:54:7a:31:aa:
ad:44:8a:39:93:a9:59:ad:de:b3:93:81:8a:9d:35:
af:df:88:fb:14:5b:58:09:a2:09:de:d4:bd:de:b3:
79:d4:6b:ec:9a:00:83:2f:79:80:84:b9:cb:db:a0:
f1:33:07:77:49:fb:17:d9:3c:9b:b9:56:48:f4:6b:
94:32:0b:de:28:bb:ce:18:fc:2a:a4:60:7d:c4:b2:
3e:6f:98:be:81:02:66:12:15:31:a2:a4:f7:97:bc:
71:c9:ed:58:46:36:f6:57:76:08:58:b1:34:df:d9:
75:c9:95:21:2a:a9:55:7e:b5:cc:af:1e:17:68:7d:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:0A:D6:06:53:75:37:9C:F4:64:64:F0:3B:1E:91:FA:5C:90:25
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/I1kK1gZTdTec9GRk8DsekfpckCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
80.255.192.0/19
81.96.0.0/12
82.0.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
c0:cd:ca:27:38:5f:bb:62:3c:b4:3c:2c:39:26:b6:cc:ae:99:
3f:d3:a9:9f:98:a8:5a:f6:23:e4:5d:c6:9c:61:38:70:4b:42:
72:a5:d9:28:9c:68:5d:08:e5:ec:e0:1d:34:70:b3:c6:99:25:
4c:a4:4f:58:d4:cc:47:f3:c9:26:fd:f5:a8:a7:64:ce:6d:9e:
b7:ff:83:7b:0b:9c:67:32:97:a5:a5:af:d5:f7:18:9e:d0:08:
eb:dc:35:3b:dd:24:60:e8:a3:8a:19:43:7f:3e:2f:a3:79:35:
e0:f9:ac:69:82:1f:b5:f5:a9:fc:fd:fb:f3:ab:68:44:b1:f3:
ad:e2:b5:25:f0:cf:57:a0:9f:8a:06:78:55:cf:9f:a7:f4:f7:
4b:e6:54:34:24:dd:fc:39:31:50:e4:a5:4b:b5:ec:05:ca:0c:
78:41:68:2d:26:3e:f3:5c:56:ca:df:4c:2e:4f:38:da:3b:31:
c9:22:82:b0:93:45:5a:ac:31:86:cc:62:a3:be:0c:f9:73:3b:
c1:9a:1c:65:63:a8:11:83:95:44:24:b2:49:94:d9:57:a8:f1:
ba:85:0d:cf:a8:44:5d:5d:61:5e:f2:93:8f:20:50:8d:75:27:
f5:1e:d0:08:1d:2a:2c:4f:e7:05:83:4c:6f:70:ad:ef:3b:c2:
89:e3:53:e9
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAYe8zsrOxINLIDPPvpw6MzQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjMwNDI2MDkwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU5MGFkNjA2NTM3NTM3OWNmNDY0NjRmMDNiMWU5MWZhNWM5MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuYkxOpfcPKNUsoThMHSqUnCyrao
iE2UqIE26L3c+rgSMjs9egs2aULwb37xpS71LzwiOe51CIYzbbBtLHn3CaJjlgHU
7d4X4zHAk5XAYP5jeDWvhtUdynD0yl1QrzTvvVcTJXYideUJetNFwSs5c4HIVzEX
aKBVhlSTF5esMHcAClR6MaqtRIo5k6lZrd6zk4GKnTWv34j7FFtYCaIJ3tS93rN5
1GvsmgCDL3mAhLnL26DxMwd3SfsX2TybuVZI9GuUMgveKLvOGPwqpGB9xLI+b5i+
gQJmEhUxoqT3l7xxye1YRjb2V3YIWLE039l1yZUhKqlVfrXMrx4XaH2vNQIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFCNZCtYGU3U3nPRkZPA7HpH6XJAlMB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvSTFrSzFnWlRkVGVjOUdSazhEc2VrZnBja0NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBrgQCAAEwgacDAwE+
HgMDAj78AwMDTWADAwNQAAMDAlDAAwQHUOuAAwQFUP/AAwMEUWAwCQMCAVIDAwRS
IAMDBVYAMAoDAwNc6AMDAFzqAwMCXOwwCgMDAF6tAwMEXqADBAbBJkAwDAMEBcEn
IAMEAMEnQAMEBcHBYAMEBcJ1gAMDAMKoAwMAw7wDBAXUGEADAwDU+gMDANUwAwQH
1VEAAwMC1WgDBAXVlCADAwDZiTAUBAIAAjAOAwUAKgKIAQMFByoCiIAwDQYJKoZI
hvcNAQELBQADggEBAMDNyic4X7tiPLQ8LDkmtsyumT/TqZ+YqFr2I+RdxpxhOHBL
QnKl2SicaF0I5ezgHTRws8aZJUykT1jUzEfzySb99ainZM5tnrf/g3sLnGcyl6Wl
r9X3GJ7QCOvcNTvdJGDoo4oZQ38+L6N5NeD5rGmCH7X1qfz9+/OraESx863itSXw
z1egn4oGeFXPn6f090vmVDQk3fw5MVDkpUu17AXKDHhBaC0mPvNcVsrfTC5PONo7
MckigrCTRVqsMYbMYqO+DPlzO8GaHGVjqBGDlUQkskmU2Veo8bqFDc+oRF1dYV7y
k48gUI11J/Ue0AgdKixP5wWDTG9wre87wonjU+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:28 2024 by rpki-client on console-fra.rpki-client.org