Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/H9wSp-V1mbzq_GGj_TmL7_Ynaco.roa
File: H9wSp-V1mbzq_GGj_TmL7_Ynaco.roa (raw, json)
Hash identifier: I6W2/QsjrrhEKNC6VDA6nnGonD6LcbjEpeO1liQNvL4=
Subject key identifier: 1F:DC:12:A7:E5:75:99:BC:EA:FC:61:A3:FD:39:8B:EF:F6:27:69:CA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018DE48E51A0436ED11F4BFBCA36E0E683C1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/H9wSp-V1mbzq_GGj_TmL7_Ynaco.roa
Signing time: Mon 26 Feb 2024 08:35:48 +0000
ROA not before: Mon 26 Feb 2024 08:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.64.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.106.0/23 maxlen: 23
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 11:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:8e:51:a0:43:6e:d1:1f:4b:fb:ca:36:e0:e6:83:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 26 08:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fdc12a7e57599bceafc61a3fd398beff62769ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:68:db:37:87:25:70:ae:a0:2e:85:a4:ab:
3b:36:6b:4d:4e:3e:f6:81:53:d9:34:2f:9a:cb:dd:
ad:4e:5c:9c:bc:f7:28:33:51:b9:3c:42:84:b9:0c:
4a:70:f4:3f:ba:53:f2:eb:e6:0e:bd:71:8d:8f:75:
48:91:d5:67:68:58:99:e1:3c:ab:e0:2c:62:cf:a9:
ad:b1:cd:d3:16:56:a6:e8:cb:36:61:5c:28:22:e3:
83:98:9f:f1:a0:dd:8f:ef:b8:83:2f:ff:d9:69:fe:
41:97:ca:2e:2b:9f:72:68:df:91:56:30:ff:57:cd:
4e:bf:9c:e9:96:43:79:1a:6f:2a:52:59:35:ae:2a:
95:46:93:4a:05:cf:06:21:21:26:cf:96:29:ba:fc:
75:51:2c:90:91:b7:42:29:79:32:8a:48:6b:e2:8d:
5c:53:3d:36:7f:b4:c4:e9:46:d9:58:6b:4e:8e:54:
74:c1:ea:d8:59:24:03:7b:1e:07:53:ad:a3:88:57:
dc:8f:e8:64:d7:2c:d0:f9:f3:0d:0f:0e:12:d9:fa:
82:e6:d5:76:18:d1:23:fd:7b:58:1a:84:83:f4:6f:
3b:27:b5:07:18:b9:77:2f:41:06:00:59:cd:12:07:
b8:25:ab:b9:32:0a:e5:70:bb:55:13:7e:8a:9e:73:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:12:A7:E5:75:99:BC:EA:FC:61:A3:FD:39:8B:EF:F6:27:69:CA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/H9wSp-V1mbzq_GGj_TmL7_Ynaco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.64.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.106.0/23
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
67:66:f6:65:8e:e4:ac:e3:64:45:4b:55:eb:19:48:4a:bf:5e:
99:f8:f7:58:22:2b:5d:1b:3a:b3:32:04:04:58:2d:6f:be:a3:
d7:ce:3c:85:45:93:69:c7:a2:45:68:bd:8c:7d:2c:5a:29:85:
e3:0c:4a:0b:d3:32:26:d4:6c:26:b2:61:05:c8:2f:09:e1:62:
9b:37:2e:6c:37:07:1d:ad:b2:e0:f4:82:c5:f0:96:7f:f7:1a:
d6:9c:3a:b9:b9:f9:75:60:aa:24:d2:fc:2c:6f:1a:83:5a:a1:
ed:3f:09:aa:b6:b7:38:4d:4b:c4:13:82:83:ee:f8:1e:24:c1:
f7:fe:3e:66:6d:af:65:bb:74:b8:1c:7f:c7:88:2d:86:00:5c:
1d:c7:a4:19:92:05:23:ce:9e:d9:47:cd:61:7b:a4:01:61:d8:
86:24:60:a7:98:75:5b:e2:38:54:59:7a:e4:6e:d6:e1:4b:8b:
01:d7:0c:6b:0f:f3:4c:f5:be:07:2d:54:d4:f8:25:71:bf:f2:
ea:25:89:86:45:a0:68:b4:e5:14:75:47:c9:98:4b:64:c4:e3:
da:27:7c:5f:78:1c:9d:d4:ae:ff:df:ff:e6:3c:74:cc:86:7d:
fc:e5:16:79:e7:05:2c:7d:b1:83:6c:2f:f2:f1:ac:c9:12:d9:
0f:29:3e:f7
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISAY3kjlGgQ27RH0v7yjbg5oPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMjI2MDgzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmRjMTJhN2U1NzU5OWJjZWFmYzYxYTNmZDM5OGJlZmY2Mjc2OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodJo2zeHJXCuoC6FpKs7NmtNTj72
gVPZNC+ay92tTlycvPcoM1G5PEKEuQxKcPQ/ulPy6+YOvXGNj3VIkdVnaFiZ4Tyr
4Cxiz6mtsc3TFlam6Ms2YVwoIuODmJ/xoN2P77iDL//Zaf5Bl8ouK59yaN+RVjD/
V81Ov5zplkN5Gm8qUlk1riqVRpNKBc8GISEmz5Ypuvx1USyQkbdCKXkyikhr4o1c
Uz02f7TE6UbZWGtOjlR0werYWSQDex4HU62jiFfcj+hk1yzQ+fMNDw4S2fqC5tV2
GNEj/XtYGoSD9G87J7UHGLl3L0EGAFnNEge4Jau5MgrlcLtVE36KnnMZsQIDAQAB
o4IDFzCCAxMwHQYDVR0OBBYEFB/cEqfldZm86vxho/05i+/2J2nKMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSDl3U3AtVjFtYnpxX0dHal9UbUw3X1luYWNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjCCARIEAgABMIIB
CgMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgQwMEAFBgRQMEAFBgSAMEAFBg
TwMEAFBgUgMEAFBg2zAMAwQAUGGTAwQBUGGUAwQAUbQbAwQAUbUeAwQAUbVAAwQA
UbVwAwQAUbWAAwQAUbWnAwQAUbX2AwQAVXgUAwQAVXgXAwQAweJ0AwQAweJ9AwQA
weJ/AwQAweaeAwQAwebZAwQAweblAwQAwedLAwQAwedsAwQAwee4AwQAwefCAwQA
wefiAwQAwefpAwQAwefsAwQAwefuAwQAwef8AwQAwmZiAwQBwmZqAwQAwmaGAwQA
wmblAwQAwpngAwQA2ZwOAwQA2ZwpAwQA2ZxcMA0GCSqGSIb3DQEBCwUAA4IBAQBn
ZvZljuSs42RFS1XrGUhKv16Z+PdYIitdGzqzMgQEWC1vvqPXzjyFRZNpx6JFaL2M
fSxaKYXjDEoL0zIm1GwmsmEFyC8J4WKbNy5sNwcdrbLg9ILF8JZ/9xrWnDq5ufl1
YKok0vwsbxqDWqHtPwmqtrc4TUvEE4KD7vgeJMH3/j5mba9lu3S4HH/HiC2GAFwd
x6QZkgUjzp7ZR81he6QBYdiGJGCnmHVb4jhUWXrkbtbhS4sB1wxrD/NM9b4HLVTU
+CVxv/LqJYmGRaBotOUUdUfJmEtkxOPaJ3xfeByd1K7/3//mPHTMhn385RZ55wUs
fbGDbC/y8azJEtkPKT73
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org