Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/I5_voqLlmHd2l6ObmZVGITwVHS8.roa
File: I5_voqLlmHd2l6ObmZVGITwVHS8.roa (raw, json)
Hash identifier: JRxxMvJvjI7hKSZiX+WMttAeZMNbDBstviWE4BY5d7E=
Subject key identifier: 23:9F:EF:A2:A2:E5:98:77:76:97:A3:9B:99:95:46:21:3C:15:1D:2F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0ADB433345A3EEA1852A3632E261
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/I5_voqLlmHd2l6ObmZVGITwVHS8.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Jan 2025 12:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0a:db:43:33:45:a3:ee:a1:85:2a:36:32:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239fefa2a2e598777697a39b999546213c151d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:98:31:c9:fd:98:a4:18:33:69:8e:b3:a9:
e2:d5:62:ce:f5:14:42:34:bd:7e:f7:fa:2a:64:9b:
9e:8c:c2:2e:bb:6d:1a:4c:e6:c8:98:c6:d7:9c:32:
16:38:e4:ce:29:34:d0:77:9f:6e:19:fa:c5:e7:e7:
26:aa:8d:59:97:ce:19:e3:0f:df:18:71:4e:2f:dc:
5b:af:a8:cc:2a:77:d2:71:aa:c9:10:7e:f3:bf:4f:
7c:a0:22:31:41:a5:31:f6:c3:64:8e:0b:11:dd:4c:
a6:c7:d3:08:9e:e5:0e:96:10:73:1c:fd:fa:9b:5b:
ec:34:3c:98:c2:0c:ab:4f:2c:46:ee:2b:07:fb:60:
b4:a5:d8:4c:f2:12:b8:89:65:2b:3a:00:d5:3c:6e:
5c:4c:fd:0d:c8:22:7a:53:27:65:30:9f:40:ac:2b:
13:4c:a4:4e:3f:33:6c:34:6e:93:29:9f:11:85:f0:
bb:ac:c7:7b:e8:16:51:89:5c:f5:c9:fb:da:46:b4:
b0:b6:23:8e:96:35:ab:f5:a6:b9:bd:90:70:85:4a:
36:ca:ce:ca:ac:f0:ec:d3:bd:c2:7c:54:c9:e9:69:
f3:c7:04:5e:fe:14:14:8f:59:aa:21:c6:a8:21:80:
a7:db:e3:f8:5f:2b:4a:55:29:15:6c:c5:a6:61:96:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:EF:A2:A2:E5:98:77:76:97:A3:9B:99:95:46:21:3C:15:1D:2F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/I5_voqLlmHd2l6ObmZVGITwVHS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
b2:dd:31:16:97:7b:8a:38:35:fd:dc:0a:32:a2:aa:d9:e3:b0:
df:60:a7:55:93:a5:53:ed:b2:72:2a:95:80:ae:87:38:62:83:
be:e8:51:62:06:70:35:74:70:f2:95:78:ae:08:36:ba:69:17:
02:df:80:4f:9f:ea:ff:04:87:e8:08:cc:09:ae:ba:97:8b:d6:
6d:f7:97:15:69:60:f3:b1:10:43:9c:0f:c0:0e:3f:7d:ff:32:
b1:6e:a4:9c:45:9b:2e:ad:cb:c3:7f:32:0f:e9:c2:49:62:86:
e2:67:e5:13:a2:30:04:1b:88:47:30:b8:5d:ae:db:4a:19:f7:
65:93:fb:87:75:1d:93:a8:7e:94:1f:80:26:4b:43:6e:03:46:
bf:3a:79:e2:54:f2:fa:08:9f:f1:ef:11:f9:7b:04:bd:55:4b:
6c:5e:0e:fc:54:cd:39:ea:df:13:bc:8d:2c:2a:18:07:5d:2f:
ed:95:61:9f:b7:77:7e:e8:81:06:39:f0:3f:14:38:ac:58:5e:
3f:13:33:49:52:e3:c7:f0:5a:df:01:80:6b:49:4b:35:eb:76:
97:87:d4:2b:5b:39:0b:66:5b:28:8a:88:c2:4a:fb:ca:a4:2e:
6d:34:8f:78:09:35:00:5f:ee:35:33:82:89:a6:52:9e:f0:16:
da:66:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:29 2025 by rpki-client