Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-Mff_r2jmmYBAxLCgRCgKHWluyc.roa
File: 1-Mff_r2jmmYBAxLCgRCgKHWluyc.roa (raw, json)
Hash identifier: tKh7P1YDp5A9EzTEc//35Fo/WpgHMhSZ3maRE44T3c0=
Subject key identifier: F8:C7:DF:FE:BD:A3:9A:66:01:03:12:C2:81:10:A0:28:75:A5:BB:27
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D1B7CFA2E4B7E0B41DA2DD41CC191304C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-Mff_r2jmmYBAxLCgRCgKHWluyc.roa
Signing time: Thu 18 Jan 2024 07:33:11 +0000
ROA not before: Thu 18 Jan 2024 07:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
81.181.251.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:7c:fa:2e:4b:7e:0b:41:da:2d:d4:1c:c1:91:30:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 18 07:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c7dffebda39a66010312c28110a02875a5bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:d0:e7:94:3e:3f:d1:06:a5:42:d2:0f:55:
87:a4:3f:4a:4f:84:a5:b3:fc:5b:12:a8:10:78:b0:
ad:ef:9c:5e:06:9f:07:5b:e8:c3:0c:8e:a8:1b:e8:
7d:7b:38:1b:dc:db:9b:f3:33:95:97:36:eb:52:63:
a5:d8:82:94:31:81:4b:94:6e:4f:e1:c8:8a:87:4d:
c9:c9:c2:e4:a4:fe:ea:b7:93:1c:db:dd:5e:f0:92:
16:a6:d2:4a:f3:7b:e4:5b:67:d2:fa:ce:a6:f4:47:
d6:80:e5:b5:a0:67:aa:35:fa:e9:0c:35:04:8a:72:
2f:51:bd:54:47:0a:88:10:0b:37:f6:74:37:d1:3d:
cf:84:99:96:f3:ab:19:7d:0f:77:72:c9:74:89:18:
0a:38:44:1c:d4:34:30:fe:2d:78:f5:25:f4:8c:ec:
2a:71:a4:f3:39:2b:b5:dc:bf:ff:a5:91:a4:07:80:
2a:80:f3:77:00:4a:de:56:db:be:91:ab:57:2c:50:
31:2b:09:b7:ec:5c:48:f5:16:04:d6:a6:e3:4c:7f:
25:75:13:9a:a2:fc:ad:9b:d1:b5:e4:a3:91:c3:ab:
52:54:95:4e:9a:0e:8c:88:15:2c:e2:c9:24:6c:00:
90:b6:09:96:03:a6:60:a8:cb:ac:8a:4c:15:7c:59:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:DF:FE:BD:A3:9A:66:01:03:12:C2:81:10:A0:28:75:A5:BB:27
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-Mff_r2jmmYBAxLCgRCgKHWluyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
81.181.251.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
b8:2f:fb:55:0d:32:e7:d6:7c:b8:ba:a0:c3:11:4f:2d:00:07:
19:52:23:36:4d:ef:c1:08:22:f3:44:01:b3:77:21:2d:3d:86:
6e:b0:1b:0d:89:5e:67:6e:7f:d7:14:9e:69:d2:0b:ec:dd:60:
b0:84:0f:80:ea:90:54:dc:94:79:40:32:57:ba:7a:f0:3e:b3:
a3:53:e4:8b:a9:31:7d:77:22:67:8d:e9:ba:7a:68:32:f0:b4:
50:79:70:fa:66:61:92:63:5b:9b:dc:c7:91:17:10:86:0d:ae:
c8:a4:d2:ed:ac:6d:26:c7:06:9a:2e:64:da:90:4b:e5:a5:b3:
b1:35:e8:d6:8c:0f:84:75:98:f6:d8:86:cf:95:7a:87:bd:9f:
dc:61:e2:0d:73:5d:8c:6e:6d:a9:80:85:e0:55:8a:30:0a:44:
56:79:4c:aa:34:b2:ec:db:34:15:ad:de:5a:18:1f:8e:4b:66:
85:72:c6:03:17:f5:79:56:b6:7e:d8:ed:cf:c7:7b:17:57:1c:
71:b4:be:9f:fd:94:3d:47:f7:76:cd:87:3f:af:15:f8:4a:6f:
29:15:6a:a6:ac:d8:55:e8:fe:01:a3:94:db:85:10:ba:31:22:
ad:ed:92:a6:75:f0:43:ed:5f:df:ad:24:ec:06:7b:cd:99:c3:
31:7a:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:39 2024 by rpki-client on console-fra.rpki-client.org