Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/64c1BlTUoY3pCZiTgWItDhjnm6w.roa
File: 64c1BlTUoY3pCZiTgWItDhjnm6w.roa (raw, json)
Hash identifier: S4soLeKOFul1EnA348d6IL88MGM9F0MMBiUGeQNrPUo=
Subject key identifier: EB:87:35:06:54:D4:A1:8D:E9:09:98:93:81:62:2D:0E:18:E7:9B:AC
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018EDBFD30A81192F5D8D9F4C612DEC2A787
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/64c1BlTUoY3pCZiTgWItDhjnm6w.roa
Signing time: Sun 14 Apr 2024 09:43:07 +0000
ROA not before: Sun 14 Apr 2024 09:43:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.137.176.0/20 maxlen: 22
82.179.32.0/20 maxlen: 24
82.179.63.0/24 maxlen: 24
82.179.64.0/19 maxlen: 24
82.179.140.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.16.0/20 maxlen: 24
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/24 maxlen: 24
86.110.101.0/24 maxlen: 24
86.110.102.0/23 maxlen: 24
185.71.96.0/22 maxlen: 22
185.141.124.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
194.226.192.0/20 maxlen: 20
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Apr 2024 10:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:fd:30:a8:11:92:f5:d8:d9:f4:c6:12:de:c2:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 14 09:43:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb87350654d4a18de909989381622d0e18e79bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:66:9c:59:13:82:02:df:ab:87:e5:5f:5f:
20:3f:a1:5e:a0:36:fb:1f:7f:35:26:75:9a:1c:87:
61:68:b0:4e:77:c7:f4:d8:99:00:f5:bc:1a:f5:22:
22:c7:9c:51:be:d0:4d:23:57:70:e5:3a:b1:20:93:
75:29:c9:70:dd:fa:df:a8:d5:85:a4:03:77:d3:d0:
58:87:7b:da:44:28:20:ce:0e:59:97:98:3c:0c:17:
c6:da:eb:37:14:be:a9:6c:2f:6a:b4:d2:15:22:27:
8b:e4:ac:b3:bb:7d:6c:2a:c6:2e:88:37:a5:8e:33:
82:23:0a:27:a4:de:82:98:3c:ed:ba:3c:28:5d:e3:
a6:01:74:74:3b:73:7c:6f:49:0c:73:50:35:d0:e2:
9c:30:65:87:61:c2:77:ec:b7:c7:f0:da:76:67:3a:
e8:8b:90:16:8e:05:1b:80:99:ec:62:2f:18:5c:d1:
fe:36:4a:44:07:d9:7b:db:78:26:94:8f:6c:cf:91:
4e:2d:b1:9b:fa:11:ee:d9:2a:fc:42:0b:7e:60:0a:
b8:43:e1:11:6c:5e:77:d2:39:da:87:fe:bc:bd:68:
98:23:9a:6b:f5:32:2e:ec:bb:f4:de:fd:75:f8:fa:
4e:67:76:6b:27:7f:a2:1e:b4:2b:ef:70:7d:da:74:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:35:06:54:D4:A1:8D:E9:09:98:93:81:62:2D:0E:18:E7:9B:AC
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/64c1BlTUoY3pCZiTgWItDhjnm6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0/20
82.179.63.0-82.179.95.255
82.179.140.0/23
83.149.192.0/18
85.142.8.0-85.142.39.255
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/24
86.110.101.0-86.110.103.255
185.71.96.0/22
185.141.124.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
194.226.192.0/20
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:85:bf:0e:de:74:20:a0:bc:3d:20:83:65:a6:4d:6a:3f:bb:
0d:5f:2b:cd:7c:fc:87:94:40:6b:3a:75:4c:db:cd:ae:06:13:
61:e4:8c:ba:a6:48:d6:ef:a1:ce:f1:e3:7d:e6:c9:a8:3d:db:
58:3b:6b:d0:fa:29:ab:fa:f3:d9:0a:5d:bd:b0:82:89:f4:e3:
a6:e0:ba:04:ee:f0:3b:f6:5c:17:15:b0:1d:93:23:69:1a:52:
a1:28:5f:ad:c9:5b:db:2d:a4:34:cf:98:0f:72:d0:6b:24:85:
ca:c2:4c:28:34:7f:a2:cd:ce:cd:2b:ce:d0:0b:48:19:84:5a:
aa:89:7b:3e:70:74:0a:97:f3:00:26:20:c8:d4:6c:17:43:7c:
d3:2d:e0:f2:cf:1f:d9:d4:9b:e2:da:2f:22:8a:92:c4:6a:c9:
ad:e3:0f:3c:bb:fb:18:2e:1c:9e:d3:68:a0:ed:c6:1f:4d:c8:
16:f7:65:eb:77:7d:01:98:c4:69:21:86:55:9a:78:7d:05:de:
4a:c1:e0:32:28:ae:97:95:51:bc:78:aa:f6:47:ce:7d:3b:08:
28:5e:63:67:6d:f6:3e:3b:12:67:cb:4d:e7:3f:ba:92:24:b1:
1e:d8:61:dc:86:e8:3e:dd:b1:6a:e4:76:e7:55:b7:6e:bb:7d:
36:bb:4c:14
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAY7b/TCoEZL12Nn0xhLewqeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwNDE0MDk0MzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjg3MzUwNjU0ZDRhMThkZTkwOTk4OTM4MTYyMmQwZTE4ZTc5YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZlmnFkTggLfq4flX18gP6FeoDb7
H381JnWaHIdhaLBOd8f02JkA9bwa9SIix5xRvtBNI1dw5TqxIJN1Kclw3frfqNWF
pAN309BYh3vaRCggzg5Zl5g8DBfG2us3FL6pbC9qtNIVIieL5Kyzu31sKsYuiDel
jjOCIwonpN6CmDztujwoXeOmAXR0O3N8b0kMc1A10OKcMGWHYcJ37LfH8Np2Zzro
i5AWjgUbgJnsYi8YXNH+NkpEB9l723gmlI9sz5FOLbGb+hHu2Sr8Qgt+YAq4Q+ER
bF530jnah/68vWiYI5pr9TIu7Lv03v11+PpOZ3ZrJ3+iHrQr73B92nS3FQIDAQAB
o4IDMjCCAy4wHQYDVR0OBBYEFOuHNQZU1KGN6QmYk4FiLQ4Y55usMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvNjRjMUJsVFVvWTNwQ1ppVGdXSXREaGpubTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTCCAQUEAgABMIH+
AwQFUPqgAwQGUomAAwQEUrMgMAwDBABSsz8DBAVSs0ADBAFSs4wDBAZTlcAwDAME
A1WOCAMEA1WOIDAMAwQCVY40AwQCVY44MAwDBAFVjmYDBARVjmAwDAMEAlWOdAME
B1WOAAMEAVWOlAMEAFWOmQMEAVWOogMEBFWPAAMEAVWPEgMEAFWPGgMEAlWPYAME
AlWPcAMEAlWPfAMEA1WP4AMEAFWP7wMEAFZuYDAMAwQAVm5lAwQDVm5gAwQCuUdg
AwQCuY18AwQAvF1rAwQBwRvWAwQEwlUgMAwDBAXCVaADBALCVagDBAHCVa4DBADC
lUADBAXCvuADBATC4sAwJgQCAAIwIAMHACABCwgAIgMHACABCwgAJgMFACoADbgD
BQMqB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQBlhb8O3nQgoLw9IINlpk1qP7sNXyvN
fPyHlEBrOnVM282uBhNh5Iy6pkjW76HO8eN95smoPdtYO2vQ+imr+vPZCl29sIKJ
9OOm4LoE7vA79lwXFbAdkyNpGlKhKF+tyVvbLaQ0z5gPctBrJIXKwkwoNH+izc7N
K87QC0gZhFqqiXs+cHQKl/MAJiDI1GwXQ3zTLeDyzx/Z1Jvi2i8iipLEasmt4w88
u/sYLhye02ig7cYfTcgW92Xrd30BmMRpIYZVmnh9Bd5KweAyKK6XlVG8eKr2R859
OwgoXmNnbfY+OxJny03nP7qSJLEe2GHchug+3bFq5HbnVbduu302u0wU
-----END CERTIFICATE-----
Generated at Sat May 10 22:50:34 2025 by rpki-client