Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JtbCpGgA348oEBI7RH_JK6zOs9M.roa
File: JtbCpGgA348oEBI7RH_JK6zOs9M.roa (raw, json)
Hash identifier: meDcDlTBv0JFWgkKcdtR2abGvTUmUlwLyu5PToPgWc4=
Subject key identifier: 26:D6:C2:A4:68:00:DF:8F:28:10:12:3B:44:7F:C9:2B:AC:CE:B3:D3
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7A766CED3289288F873ABC92C99DB041
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JtbCpGgA348oEBI7RH_JK6zOs9M.roa
Signing time: Tue 26 Mar 2024 11:12:45 +0000
ROA not before: Tue 26 Mar 2024 11:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.122.8.0/22 maxlen: 22
92.122.12.0/22 maxlen: 22
92.122.16.0/22 maxlen: 22
92.122.20.0/22 maxlen: 22
92.122.24.0/22 maxlen: 22
92.122.32.0/21 maxlen: 21
92.122.44.0/22 maxlen: 22
92.122.60.0/22 maxlen: 22
92.122.64.0/22 maxlen: 22
92.122.72.0/22 maxlen: 22
92.122.76.0/22 maxlen: 22
92.122.80.0/22 maxlen: 22
92.122.88.0/22 maxlen: 22
92.122.96.0/22 maxlen: 22
92.122.104.0/22 maxlen: 22
92.122.108.0/22 maxlen: 22
92.122.144.0/22 maxlen: 22
92.122.148.0/22 maxlen: 22
92.122.160.0/22 maxlen: 22
92.122.196.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
95.101.80.0/22 maxlen: 22
95.101.84.0/22 maxlen: 22
95.101.88.0/22 maxlen: 22
95.101.92.0/22 maxlen: 22
95.101.96.0/22 maxlen: 22
95.101.100.0/22 maxlen: 22
95.101.104.0/22 maxlen: 22
95.101.124.0/22 maxlen: 22
95.101.144.0/22 maxlen: 22
95.101.148.0/22 maxlen: 22
95.101.152.0/22 maxlen: 22
95.101.160.0/22 maxlen: 22
95.101.164.0/22 maxlen: 22
95.101.172.0/22 maxlen: 22
95.101.176.0/22 maxlen: 22
95.101.184.0/22 maxlen: 22
95.101.188.0/22 maxlen: 22
95.101.192.0/22 maxlen: 22
95.101.196.0/22 maxlen: 22
95.101.200.0/22 maxlen: 22
95.101.208.0/20 maxlen: 20
95.101.224.0/22 maxlen: 22
95.101.240.0/20 maxlen: 20
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Mar 2024 11:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:76:6c:ed:32:89:28:8f:87:3a:bc:92:c9:9d:b0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 26 11:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26d6c2a46800df8f2810123b447fc92bacceb3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:21:ec:68:3b:53:e3:e7:68:1e:68:c4:3a:
ef:be:57:6e:1b:5f:e0:85:da:30:7d:f7:e8:0e:03:
e4:a2:94:30:ea:09:92:07:61:51:f8:e9:1b:a3:9c:
65:b3:e6:48:83:d2:c2:39:b7:54:33:fe:1f:2e:83:
c0:00:ef:c9:17:69:e3:6f:28:36:d5:17:6e:be:4d:
08:6e:54:6c:09:bf:d5:13:d4:9f:fe:7c:97:d8:78:
b9:8f:9c:28:6d:1a:59:1d:3c:5a:de:70:09:24:a5:
56:25:4a:64:4a:d2:7f:f9:e9:1d:16:97:95:27:88:
59:89:67:ba:3e:96:64:14:8d:9f:4d:1b:f2:50:45:
23:20:17:f9:48:15:3f:26:13:85:06:c8:b1:a0:de:
84:6b:bb:54:d8:33:bc:de:de:d9:4b:cc:2c:02:cc:
03:8d:fc:d9:ae:34:a7:2c:aa:10:3e:c4:69:e8:71:
2b:82:ee:6e:bd:22:f2:9c:01:b9:52:05:7d:99:7e:
8e:97:f6:57:6e:aa:d2:68:f9:d6:2b:c6:b7:7a:0a:
50:f8:55:e4:56:cc:e6:20:0f:a3:0f:b4:83:94:cc:
3e:d5:21:fe:28:a0:d0:ea:0e:b8:ed:53:f7:e4:96:
a8:98:8b:bb:c1:df:85:d3:90:8c:d2:c3:ef:cf:86:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:C2:A4:68:00:DF:8F:28:10:12:3B:44:7F:C9:2B:AC:CE:B3:D3
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JtbCpGgA348oEBI7RH_JK6zOs9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.122.8.0-92.122.27.255
92.122.32.0/21
92.122.44.0/22
92.122.60.0-92.122.67.255
92.122.72.0-92.122.83.255
92.122.88.0/22
92.122.96.0/22
92.122.104.0/21
92.122.144.0/21
92.122.160.0/22
92.122.196.0/22
92.123.240.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
95.101.80.0-95.101.107.255
95.101.124.0/22
95.101.144.0-95.101.155.255
95.101.160.0/21
95.101.172.0-95.101.179.255
95.101.184.0-95.101.203.255
95.101.208.0-95.101.227.255
95.101.240.0/20
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:ba:33:d1:c7:0b:90:33:5a:5a:65:c8:41:64:1b:96:3b:b1:
f9:14:9b:3c:70:04:16:41:2b:de:9d:43:ef:49:c3:87:a0:1b:
2c:e0:35:a4:1b:fd:f9:e2:ae:3a:31:90:a4:dc:8a:b5:4b:0d:
63:bb:14:cb:c8:4d:86:f1:d9:a9:01:76:0e:97:29:2a:9c:4b:
50:fa:81:33:87:46:c7:5f:fe:13:c1:3f:73:a9:83:93:09:7f:
41:bf:4a:62:27:5f:3a:37:98:e1:8b:42:d4:3f:5f:ab:cf:39:
aa:e9:5d:16:55:88:7e:79:3e:c6:e1:fe:3e:84:13:41:04:34:
01:52:66:56:c1:65:24:42:96:d0:90:8c:1d:ad:27:aa:0f:05:
75:f3:91:f9:57:99:b1:9b:49:29:fb:8d:82:31:7d:82:29:47:
2c:53:6f:35:53:05:ab:fc:5e:0f:0f:9f:2d:18:74:7d:a2:3f:
f3:57:b0:06:44:1d:08:a2:6e:72:1b:8c:15:3d:35:2f:a3:87:
b9:43:82:7e:b1:cc:c1:08:41:85:f3:3b:98:7f:1e:e9:15:e1:
1b:be:1f:8e:40:38:c8:71:93:71:85:a5:a2:20:8d:07:1d:fa:
3f:ac:52:bf:8e:dd:03:47:31:87:3b:c2:77:70:24:e9:67:cc:
6f:15:45:29
-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgISAY56dmztMokoj4c6vJLJnbBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzI2MTExMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmQ2YzJhNDY4MDBkZjhmMjgxMDEyM2I0NDdmYzkyYmFjY2ViM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6gh7Gg7U+PnaB5oxDrvvlduG1/g
hdowfffoDgPkopQw6gmSB2FR+Okbo5xls+ZIg9LCObdUM/4fLoPAAO/JF2njbyg2
1Rduvk0IblRsCb/VE9Sf/nyX2Hi5j5wobRpZHTxa3nAJJKVWJUpkStJ/+ekdFpeV
J4hZiWe6PpZkFI2fTRvyUEUjIBf5SBU/JhOFBsixoN6Ea7tU2DO83t7ZS8wsAswD
jfzZrjSnLKoQPsRp6HErgu5uvSLynAG5UgV9mX6Ol/ZXbqrSaPnWK8a3egpQ+FXk
VszmIA+jD7SDlMw+1SH+KKDQ6g647VP35JaomIu7wd+F05CM0sPvz4bqrwIDAQAB
o4ID5TCCA+EwHQYDVR0OBBYEFCbWwqRoAN+PKBASO0R/ySuszrPTMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvSnRiQ3BHZ0EzNDhvRUJJN1JIX0pLNnpPczlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB+QYIKwYBBQUHAQcBAf8EggHoMIIB5DCCAeAEAgABMIIB
2AMEAlQ1nAMEAlQ1pAMEAlQ1vDAMAwQCWN0EAwQCWN0IAwQCWN0QAwQEWN0gMAwD
BAFY3ToDBAZY3QADBAJY3UQDBAJY3UwDBAJY3WADBAJY3XwDBAFY3YIDBANY3Ygw
DAMEAljdlAMEBVjdgDAMAwQCWN2kAwQCWN2oAwQDWN2wAwQDWN3gMAwDBAJY3ewD
BAJY3fgwDAMEA1x6CAMEAlx6GAMEA1x6IAMEAlx6LDAMAwQCXHo8AwQCXHpAMAwD
BANcekgDBAJcelADBAJcelgDBAJcemADBANcemgDBANcepADBAJceqADBAJcesQD
BAJce/ADBARfZBAwDAMEAV9kLgMEAl9kUAMEBF9kcAMEA19kiAMEAl9koAMEAl9k
sDAMAwQBX2S2AwQGX2SAAwQCX2TQAwQCX2TYAwQEX2TgAwQCX2T0AwQBX2T6AwQD
X2UAMAwDBAFfZQ4DBAJfZRAwDAMEA19lKAMEAl9lMAMEAl9lOAMEA19lQDAMAwQE
X2VQAwQCX2VoAwQCX2V8MAwDBARfZZADBAJfZZgDBANfZaAwDAMEAl9lrAMEAl9l
sDAMAwQDX2W4AwQCX2XIMAwDBARfZdADBAJfZeADBARfZfADBALDX8AwDQYJKoZI
hvcNAQELBQADggEBAEu6M9HHC5AzWlplyEFkG5Y7sfkUmzxwBBZBK96dQ+9Jw4eg
GyzgNaQb/fnirjoxkKTcirVLDWO7FMvITYbx2akBdg6XKSqcS1D6gTOHRsdf/hPB
P3Opg5MJf0G/SmInXzo3mOGLQtQ/X6vPOarpXRZViH55Psbh/j6EE0EENAFSZlbB
ZSRCltCQjB2tJ6oPBXXzkflXmbGbSSn7jYIxfYIpRyxTbzVTBav8Xg8Pny0YdH2i
P/NXsAZEHQiibnIbjBU9NS+jh7lDgn6xzMEIQYXzO5h/HukV4Ru+H45AOMhxk3GF
paIgjQcd+j+sUr+O3QNHMYc7wndwJOlnzG8VRSk=
-----END CERTIFICATE-----
Generated at Tue Mar 26 17:48:04 2024 by rpki-client on console.sobornost.net