Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gmbmqy8pWnM6iUDN8PLW8m7yxrc.roa
File: gmbmqy8pWnM6iUDN8PLW8m7yxrc.roa (raw, json)
Hash identifier: TSR7hWLoVuVPFt4ua0u+x1Xivhkbd1BOU79cIPbsDoo=
Subject key identifier: 82:66:E6:AB:2F:29:5A:73:3A:89:40:CD:F0:F2:D6:F2:6E:F2:C6:B7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CF85B477508DC7E885F2A6F832523B53A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gmbmqy8pWnM6iUDN8PLW8m7yxrc.roa
Signing time: Thu 11 Jan 2024 11:49:40 +0000
ROA not before: Thu 11 Jan 2024 11:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.82.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.112.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.240.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
81.181.251.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:5b:47:75:08:dc:7e:88:5f:2a:6f:83:25:23:b5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 11 11:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8266e6ab2f295a733a8940cdf0f2d6f26ef2c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:c2:0b:94:9b:44:ae:be:c6:27:c1:bb:48:
5d:a8:78:c3:7d:1e:0b:91:41:ea:44:ea:df:bc:a5:
4e:57:27:4a:3e:3f:e4:29:ef:8b:ef:a9:c9:f5:94:
fa:c9:c9:64:c9:b4:99:95:dd:9d:db:b1:e7:20:09:
99:03:bc:c9:7c:92:a9:8d:2d:67:4d:98:68:f0:2e:
82:df:e6:20:09:56:90:19:55:a8:7e:b0:8d:5a:65:
c4:16:32:6b:a8:26:a9:17:c7:58:a4:49:b8:bd:30:
48:7e:b3:da:05:8d:49:43:ea:93:31:d6:2a:4b:71:
23:31:c3:e4:3e:97:9e:0e:3c:c4:42:0e:52:a7:12:
10:98:75:b4:18:03:45:09:ad:ba:25:2f:7f:16:9c:
1c:ef:80:09:cf:c6:df:f2:00:6b:ca:b8:90:8a:1b:
f2:51:36:5a:97:0d:2d:8c:e6:47:73:6a:04:fd:e4:
19:9c:d6:83:8f:3b:17:da:d9:7f:dd:8a:b0:bf:91:
21:d9:96:16:f8:26:17:ac:0c:80:b9:86:bb:ab:e4:
49:81:d5:06:35:de:f4:c1:d1:97:91:9d:81:6d:bc:
ba:96:07:38:ed:a6:3d:28:a7:79:32:b7:2a:b2:54:
3d:8a:a2:fe:c8:08:45:e4:90:23:f7:0b:9e:23:ba:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:E6:AB:2F:29:5A:73:3A:89:40:CD:F0:F2:D6:F2:6E:F2:C6:B7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gmbmqy8pWnM6iUDN8PLW8m7yxrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.240.0/24
81.181.244.0/24
81.181.251.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
03:7b:af:35:ad:cf:81:c8:48:cf:69:a1:53:03:8e:64:46:e8:
3e:ef:0d:c6:f8:65:f6:21:12:02:67:b0:8e:e1:14:84:c8:7b:
f8:4d:1e:91:21:9a:35:4d:81:1a:e5:cf:86:71:1e:3e:e4:45:
4b:1b:64:92:54:57:86:60:9e:cd:bf:22:12:01:be:61:4e:18:
ef:dd:f7:36:53:a6:a9:ed:b3:eb:fb:9d:fd:01:bc:3d:80:70:
33:39:23:00:fa:4b:c0:50:74:6a:bf:85:5d:02:49:2d:ea:59:
ae:f4:f8:cf:01:f4:4c:8f:b6:a5:ad:58:1a:80:e5:c1:14:38:
90:d5:74:18:72:e6:33:fa:f6:dd:8f:77:db:a9:ac:1a:19:34:
0d:bd:b5:00:03:5a:24:a5:00:53:b9:57:cd:b5:0d:80:df:78:
ee:f5:2d:55:8f:f2:33:53:59:a0:cb:6b:91:99:f1:f1:fa:9a:
e1:98:f3:92:40:f1:1c:46:df:e8:07:b8:0a:99:27:3c:70:54:
4c:23:22:bc:f6:93:95:2b:fd:94:e0:04:37:66:0d:e4:d5:08:
88:d5:f2:99:1c:aa:82:ff:17:eb:30:62:3b:67:74:45:16:c5:
fe:49:a9:f4:dc:ff:9c:39:fb:48:5c:1b:21:a2:f1:a9:55:e5:
e2:4d:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 09:53:19 2024 by rpki-client on console-ams.rpki-client.org