Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A1DPVbxtDoORE2ZgParzVf17jcA.roa
File: A1DPVbxtDoORE2ZgParzVf17jcA.roa (raw, json)
Hash identifier: UV/ZPCMtbEyq/ju5+gdXizYl3i984Zuol1FbIenHuO8=
Subject key identifier: 03:50:CF:55:BC:6D:0E:83:91:13:66:60:3D:AA:F3:55:FD:7B:8D:C0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0190BF130BB91BB73AE78871F8D72193FBCF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A1DPVbxtDoORE2ZgParzVf17jcA.roa
Signing time: Wed 17 Jul 2024 05:03:34 +0000
ROA not before: Wed 17 Jul 2024 05:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:13:0b:b9:1b:b7:3a:e7:88:71:f8:d7:21:93:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 17 05:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0350cf55bc6d0e83911366603daaf355fd7b8dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:a7:25:1e:c3:19:de:08:2b:8b:c5:ec:73:
d4:80:12:b0:ac:df:5c:f8:e9:f8:21:93:ad:4b:44:
14:d6:b0:be:b4:51:3b:a9:e6:b6:f7:43:73:76:63:
18:0c:f3:11:4d:98:4d:16:1a:65:b4:c7:d3:89:af:
a6:12:11:e8:14:d4:b9:c8:70:e5:21:97:fb:4e:04:
6e:57:92:de:0b:f7:54:06:e0:ca:39:eb:3f:8d:10:
9e:8d:a6:a9:b5:cc:ec:21:a7:d5:df:a4:30:06:66:
04:94:8c:48:a4:77:cc:b5:be:58:6e:fd:2c:ba:c0:
6b:a7:b9:1e:70:f1:33:e2:53:06:10:3f:90:e0:cc:
19:4e:33:5b:de:45:79:0b:d0:b0:cc:ae:ad:b3:4d:
14:70:21:93:7d:01:d2:6a:d2:9d:a4:05:d6:a6:46:
1a:32:fa:2a:fd:48:0c:64:e2:53:14:f5:f0:0d:70:
b1:33:d9:3d:b8:25:a4:06:31:2d:08:0e:f8:a3:2c:
39:ae:d5:36:2e:71:0b:06:25:93:1f:ee:4f:04:d0:
a0:d9:9d:78:7e:3c:ea:f3:5a:4c:16:57:1f:bd:eb:
a9:6b:bc:c3:87:e0:71:d9:c1:89:07:d3:78:1d:c3:
f8:86:f2:26:01:ab:4a:47:c1:9e:93:98:90:a9:a0:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:CF:55:BC:6D:0E:83:91:13:66:60:3D:AA:F3:55:FD:7B:8D:C0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A1DPVbxtDoORE2ZgParzVf17jcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fe:33:d2:ac:06:42:85:cb:bd:0a:cb:bd:dc:72:24:e9:2f:
e8:ec:54:92:d0:a2:93:78:09:28:9d:b4:c0:f0:d5:88:83:22:
e4:cf:69:21:96:9f:ff:8d:76:83:9d:40:77:23:28:33:e5:f8:
22:3a:71:2e:3d:6e:82:40:f5:3a:7b:95:62:55:fb:de:54:b1:
ae:96:e0:d9:e6:d7:e2:da:46:ab:3e:11:a9:fb:5f:ad:ce:fd:
56:60:89:d8:2f:b3:e7:c9:58:89:56:16:e5:76:71:0b:f4:d1:
65:63:0b:4f:a7:65:6f:5f:a7:17:e0:da:65:9b:72:7b:ae:f8:
c6:40:48:af:81:a9:95:af:ff:20:c3:78:6b:af:b0:ac:ad:be:
ca:86:d7:2d:30:62:7b:9c:16:92:94:4d:5d:ab:7d:48:0f:0a:
1d:de:fb:0b:dd:94:91:30:8a:f9:42:d3:a8:d5:61:fc:63:b6:
29:5e:27:15:1a:bc:d4:cc:5f:a7:3a:aa:a2:2b:46:c5:72:05:
55:e0:c0:19:4e:f7:2d:b3:1b:95:1e:34:13:60:53:ae:cf:83:
aa:43:58:0b:fc:af:3e:b9:ab:3f:92:26:97:97:97:f6:19:b6:
49:4a:2c:78:93:0b:75:2c:1f:93:37:69:48:0d:70:2c:6c:31:
90:51:cd:d9
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAZC/Ewu5G7c654hx+Nchk/vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwNzE3MDUwMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzUwY2Y1NWJjNmQwZTgzOTExMzY2NjAzZGFhZjM1NWZkN2I4ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWenJR7DGd4IK4vF7HPUgBKwrN9c
+On4IZOtS0QU1rC+tFE7qea290NzdmMYDPMRTZhNFhpltMfTia+mEhHoFNS5yHDl
IZf7TgRuV5LeC/dUBuDKOes/jRCejaaptczsIafV36QwBmYElIxIpHfMtb5Ybv0s
usBrp7kecPEz4lMGED+Q4MwZTjNb3kV5C9CwzK6ts00UcCGTfQHSatKdpAXWpkYa
Mvoq/UgMZOJTFPXwDXCxM9k9uCWkBjEtCA74oyw5rtU2LnELBiWTH+5PBNCg2Z14
fjzq81pMFlcfveupa7zDh+Bx2cGJB9N4HcP4hvImAatKR8Gek5iQqaD2+wIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFANQz1W8bQ6DkRNmYD2q81X9e43AMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvQTFEUFZieHREb09SRTJaZ1BhcnpWZjE3amNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCCAQwEAgABMIIB
BAMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgQwMEAFBgRQMEAFBgSAMEAFBg
TwMEAFBgUgMEAFBg2zAMAwQAUGGTAwQBUGGUAwQAUbQbAwQAUbUeAwQAUbVwAwQA
UbWAAwQAUbWnAwQAUbX2AwQAVXgUAwQAVXgXAwQAweJ0AwQAweJ9AwQAweJ/AwQA
weaeAwQAwebZAwQAweblAwQAwedLAwQAwedsAwQAwee4AwQAwefCAwQAwefiAwQA
wefpAwQAwefsAwQAwefuAwQAwef8AwQAwmZiAwQAwmaGAwQAwmblAwQAwpngAwQA
2ZwOAwQB2ZwUAwQA2ZwpAwQA2ZxcMA0GCSqGSIb3DQEBCwUAA4IBAQAP/jPSrAZC
hcu9Csu93HIk6S/o7FSS0KKTeAkonbTA8NWIgyLkz2khlp//jXaDnUB3Iygz5fgi
OnEuPW6CQPU6e5ViVfveVLGuluDZ5tfi2karPhGp+1+tzv1WYInYL7PnyViJVhbl
dnEL9NFlYwtPp2VvX6cX4Nplm3J7rvjGQEivgamVr/8gw3hrr7Csrb7KhtctMGJ7
nBaSlE1dq31IDwod3vsL3ZSRMIr5QtOo1WH8Y7YpXicVGrzUzF+nOqqiK0bFcgVV
4MAZTvctsxuVHjQTYFOuz4OqQ1gL/K8+uas/kiaXl5f2GbZJSix4kwt1LB+TN2lI
DXAsbDGQUc3Z
-----END CERTIFICATE-----
Generated at Wed Sep 4 10:11:23 2024 by rpki-client on console-fra.rpki-client.org