Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2oWk9k40euN0lGhZalat10heAPA.roa
File: 2oWk9k40euN0lGhZalat10heAPA.roa (raw, json)
Hash identifier: VHfkNP5Oh0rxKJ5eFkVjhO0Mq0/M1Cv4QRVha4eOI+A=
Subject key identifier: DA:85:A4:F6:4E:34:7A:E3:74:94:68:59:6A:56:AD:D7:48:5E:00:F0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CECB9FC0C4F6655FFCE36CA102B7450D7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2oWk9k40euN0lGhZalat10heAPA.roa
Signing time: Tue 09 Jan 2024 05:37:40 +0000
ROA not before: Tue 09 Jan 2024 05:37:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.82.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.112.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
81.181.251.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 11:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:b9:fc:0c:4f:66:55:ff:ce:36:ca:10:2b:74:50:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 9 05:37:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da85a4f64e347ae3749468596a56add7485e00f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:16:1b:a8:72:08:2e:b2:f9:2e:a4:82:de:
eb:4d:98:e7:d7:9f:fd:4f:2c:3c:5e:33:89:da:fa:
6a:cd:f1:88:0a:5c:8e:9b:e1:9e:56:49:4f:e4:c9:
96:16:b0:1a:88:a9:79:4e:e2:a6:58:06:6e:54:7c:
95:41:de:93:16:c7:5e:27:c4:7c:71:ff:57:0a:58:
c9:30:2e:97:31:ac:bc:15:24:b0:60:08:c0:cd:ba:
c6:a3:df:f0:54:73:9c:ca:d9:3f:6e:f4:dc:04:40:
64:7f:73:11:1b:b8:89:47:ba:cc:58:0e:51:0d:d5:
b9:ba:4b:65:6e:09:99:54:61:ff:ba:d6:12:9b:05:
53:31:ab:31:24:4d:d9:68:79:d9:71:bd:aa:c5:8a:
f3:65:70:88:c0:87:4e:dd:76:4a:e2:49:af:14:9b:
ad:9b:ca:53:15:0c:11:47:8d:a8:dc:29:7f:1f:a3:
d1:b6:cd:98:cc:a6:8c:32:d6:50:bc:ef:15:62:46:
30:d6:d3:90:51:c3:7b:63:17:7a:07:d0:46:da:84:
fa:50:5f:6b:11:43:1b:c4:d2:af:1b:05:df:8e:8a:
ac:cd:9e:a2:85:03:56:36:f1:89:fb:8d:63:59:24:
9d:d9:de:65:8e:7b:c6:17:a2:db:07:eb:36:fb:21:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:A4:F6:4E:34:7A:E3:74:94:68:59:6A:56:AD:D7:48:5E:00:F0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2oWk9k40euN0lGhZalat10heAPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
81.181.251.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
8b:45:50:fa:af:b4:19:85:d3:c7:97:62:dc:bc:bd:d9:03:24:
dd:dc:cb:dd:50:c0:2c:ec:2a:f8:69:28:62:8b:20:5e:c8:19:
ab:2b:8a:25:3c:1a:9c:d7:1c:d9:ca:d0:29:75:fd:48:5b:b1:
9d:bb:9b:2f:de:f3:e3:2c:d3:6e:4a:3c:48:e3:20:d8:4f:b1:
e4:8d:71:f3:f0:1c:9f:e5:fd:df:42:e7:e9:c4:d7:fe:a9:44:
51:0f:bf:b0:69:23:bf:02:69:9c:1c:7e:12:6d:5f:c6:3a:51:
ec:bb:a8:5d:2a:85:a9:fe:0e:af:4b:55:4b:c1:8b:8b:59:3d:
bf:8a:17:68:0a:81:b2:0a:83:86:6e:4b:8b:d0:75:13:c8:1d:
90:6e:94:71:e4:63:14:8e:8f:b7:90:8f:47:9d:29:64:ce:52:
71:77:27:c6:68:05:02:aa:68:9e:40:d8:03:6b:2f:2b:6c:28:
fc:b3:14:ec:66:d5:0a:af:18:db:0d:2b:99:35:da:31:92:bc:
82:bd:c8:d5:40:3c:64:76:e3:3a:97:91:ce:d4:42:b6:93:dc:
c6:25:21:d9:c3:63:d2:37:d8:ec:6e:72:dc:d2:de:63:97:59:
98:45:46:28:d0:6f:40:02:3f:91:61:7e:51:e5:be:bf:c3:91:
8b:c5:55:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 15:08:16 2024 by rpki-client on console-fra.rpki-client.org