Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9EBj2izts-lJfPLw1yk6z8XP8JI.roa
File: 9EBj2izts-lJfPLw1yk6z8XP8JI.roa (raw, json)
Hash identifier: wEE9uQrsCfg1vnepJzsgbkPosaK+8mE03qNGvD0DCX0=
Subject key identifier: F4:40:63:DA:2C:ED:B3:E9:49:7C:F2:F0:D7:29:3A:CF:C5:CF:F0:92
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0187322C9370DF6A741ED34A3EA1C997FBFE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9EBj2izts-lJfPLw1yk6z8XP8JI.roa
Signing time: Thu 30 Mar 2023 10:59:54 +0000
ROA not before: Thu 30 Mar 2023 10:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:2c:93:70:df:6a:74:1e:d3:4a:3e:a1:c9:97:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 30 10:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f44063da2cedb3e9497cf2f0d7293acfc5cff092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:3c:9e:95:1c:48:37:14:61:2d:a6:0f:df:
be:45:55:b4:38:89:64:98:a6:3d:81:cc:f7:80:b0:
9d:3b:1f:75:82:3f:f3:c1:da:92:01:25:cb:e4:7b:
d0:fd:aa:68:e6:95:0a:d5:7f:e5:cc:41:3c:73:a3:
24:80:b7:8f:c9:fd:44:62:29:32:31:39:1f:b9:7e:
6e:6e:b6:fb:66:c9:7a:eb:38:8d:4f:38:d8:a2:f9:
58:a0:ce:00:e3:14:ea:0f:64:ee:f0:2d:bb:87:01:
94:f8:23:21:39:92:fd:40:3e:71:c2:23:35:b9:62:
64:70:96:2d:4c:cc:92:36:04:59:71:bf:94:23:b9:
96:a6:a3:61:ec:21:4e:8f:b9:fd:29:8b:bf:d4:b1:
e4:25:8c:f0:c3:2d:0c:55:69:ce:c7:bf:d3:ab:fd:
7c:80:fc:42:d8:7d:98:d1:02:68:27:cf:cc:fb:18:
c7:0b:9c:6e:ac:be:b6:76:1d:43:c2:20:36:11:f8:
99:65:fa:82:ae:16:27:c1:06:6e:fb:6f:3f:99:c6:
dd:ff:a3:bf:04:59:f8:b7:eb:e0:20:1f:97:4d:8d:
f1:e0:b4:d2:41:84:b8:c5:fa:9c:2b:8e:4e:e8:38:
7a:48:33:02:6f:50:48:66:d4:27:11:27:96:ae:27:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:63:DA:2C:ED:B3:E9:49:7C:F2:F0:D7:29:3A:CF:C5:CF:F0:92
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9EBj2izts-lJfPLw1yk6z8XP8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
68:0b:02:57:22:08:77:6e:38:3c:a9:02:e5:28:8c:c2:58:e1:
b1:b7:b6:bc:60:98:b4:99:93:33:d4:1d:cd:22:47:68:4d:b3:
29:21:f8:60:18:94:98:b2:2c:2b:a6:90:cc:cc:57:48:da:0e:
1f:ae:d7:8c:15:79:a9:40:32:4f:f4:c3:8e:fa:00:a5:be:5b:
26:fe:b2:40:02:86:7f:47:8c:43:29:2d:3b:0a:e7:9b:99:eb:
69:a3:29:79:57:d4:18:de:c5:04:d6:b9:e8:cc:6f:bb:7c:41:
7b:6f:00:01:85:fe:7a:56:6b:41:e5:5e:6b:e2:6e:05:e6:e7:
9f:ba:af:2f:57:16:16:dd:22:97:5a:a9:6c:fd:43:0d:14:0b:
eb:7f:80:18:39:4e:3a:9a:80:84:80:a8:33:5a:ca:92:62:93:
7d:29:d7:6b:b3:ba:64:85:f7:19:52:12:ab:38:a4:61:c2:41:
80:00:d7:ce:03:14:c8:96:57:9e:f6:a6:8c:8a:e7:39:5d:b0:
89:8a:a4:49:41:c9:b9:fa:ea:2c:ee:36:43:05:02:ca:7f:e2:
0f:4c:c2:bc:08:38:e3:10:97:6e:82:0f:6e:4c:30:c4:64:35:
ed:c8:66:ce:67:a5:35:e0:f1:eb:49:14:3a:8b:07:e1:64:db:
0e:2f:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org