Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Xv4LUZlTNleHVPx3PzIhD3gJlas.roa
File: Xv4LUZlTNleHVPx3PzIhD3gJlas.roa (raw, json)
Hash identifier: pN2RTAnVkWA11DY6LCY9/wf6+jrEA6WpQDLwMbFrtf8=
Subject key identifier: 5E:FE:0B:51:99:53:36:57:87:54:FC:77:3F:32:21:0F:78:09:95:AB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018A7410CBE2DBBCD4A4484E7A87DBB77813
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Xv4LUZlTNleHVPx3PzIhD3gJlas.roa
Signing time: Fri 08 Sep 2023 09:12:52 +0000
ROA not before: Fri 08 Sep 2023 09:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Sep 2023 12:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:10:cb:e2:db:bc:d4:a4:48:4e:7a:87:db:b7:78:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 8 09:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efe0b51995336578754fc773f32210f780995ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:a0:02:cc:e6:3b:13:4e:f5:e9:e9:b2:09:
8b:90:8e:91:d2:5e:65:fa:8f:c2:ab:f2:d7:4b:1b:
b6:b9:79:88:47:6c:fd:46:94:8d:ee:d3:0e:19:21:
25:ce:a9:5e:b8:12:a9:35:03:1f:53:91:09:86:c5:
bb:1a:5b:9d:71:28:a0:9d:55:e7:63:6b:39:f2:cc:
09:31:bb:24:b6:6a:f8:86:36:da:6a:d5:f6:f2:c2:
2d:96:0a:3e:77:3e:99:7d:fb:fa:02:50:5c:8c:c4:
12:28:06:cd:bc:4b:c2:87:4c:fa:72:ed:f7:ef:40:
b8:a9:6b:76:22:1c:84:a9:58:16:9b:7e:54:e5:59:
99:da:a4:61:18:63:98:b9:f0:72:bb:e4:82:9f:c5:
e8:0c:c3:71:c2:1b:2b:ad:48:68:bc:c3:c7:28:a2:
38:c2:ca:2f:75:cd:a0:65:f7:68:84:38:e2:3e:e0:
94:0a:51:b8:81:c8:4c:93:7f:4e:50:26:08:2e:a5:
6a:51:7a:e7:d8:7f:44:5d:8d:b5:24:6a:4b:5c:d9:
44:00:0a:35:d1:f8:75:3c:60:f0:f6:5f:da:05:a4:
f9:f1:43:5c:39:f6:7f:a2:3f:0b:d4:e8:09:7a:3b:
b9:e5:f5:44:d4:2d:df:bd:ad:75:f5:5f:87:25:ba:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:0B:51:99:53:36:57:87:54:FC:77:3F:32:21:0F:78:09:95:AB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Xv4LUZlTNleHVPx3PzIhD3gJlas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
15:b7:6b:d6:ce:e1:90:be:35:40:54:5c:42:a1:01:b3:22:d1:
27:72:88:a5:38:ca:ca:ea:6e:e2:e7:67:0b:73:8a:a7:e5:8c:
bc:39:91:63:b7:80:c8:41:50:49:65:da:80:51:1a:f5:b4:07:
b9:33:31:94:5b:f8:13:6d:f0:4a:5a:18:2c:e5:8f:4f:0d:c5:
57:e3:73:9e:65:46:36:7a:8c:03:8d:38:ef:bf:b2:ff:51:c8:
1d:c5:b9:69:53:0e:23:f2:88:e2:28:c1:02:b4:96:1a:7f:97:
f3:2b:2e:d2:fb:a4:e6:b8:90:da:5c:0e:61:9c:90:fc:c6:e8:
bf:31:1c:6d:e5:84:0c:8b:2d:cd:02:5c:e1:5f:c4:75:f6:11:
58:4b:e9:f6:c5:be:2a:94:92:7d:84:2c:67:e6:29:21:c0:4f:
1d:8b:54:f1:f3:7e:f7:0a:20:0f:4a:7a:c3:7a:a3:96:b9:a9:
78:29:d0:48:23:18:1b:5f:ad:96:91:55:16:ee:8d:e0:9b:d0:
89:0e:ab:19:2f:29:5d:92:e8:00:41:8f:89:2f:ed:cf:28:a0:
9f:71:3f:ff:d8:d5:e3:94:7e:89:67:ef:be:69:cf:ab:b3:be:
7f:be:bd:93:53:15:d3:28:3a:c7:8f:4a:eb:9e:18:1d:92:7b:
91:66:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org