Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h7YFdGTrt5JGGRZOVxUAaYAwkOs.roa
File: h7YFdGTrt5JGGRZOVxUAaYAwkOs.roa (raw, json)
Hash identifier: K7U26SkW5AFyqUMVFZi6BC3pE91FzXaxRUGwIgWRd/I=
Subject key identifier: 87:B6:05:74:64:EB:B7:92:46:19:16:4E:57:15:00:69:80:30:90:EB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0191E4AB7B01C7C250C44AF9FE47711FE3F7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h7YFdGTrt5JGGRZOVxUAaYAwkOs.roa
Signing time: Thu 12 Sep 2024 05:18:49 +0000
ROA not before: Thu 12 Sep 2024 05:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 80.96.1.0/24 maxlen: 24
80.96.22.0/24 maxlen: 24
80.96.96.0/23 maxlen: 24
80.96.104.0/24 maxlen: 24
80.96.129.0/24 maxlen: 24
80.96.134.0/23 maxlen: 23
80.96.150.0/24 maxlen: 24
80.96.151.0/24 maxlen: 24
80.96.164.0/23 maxlen: 24
80.96.177.0/24 maxlen: 24
80.96.184.0/24 maxlen: 24
80.96.206.0/24 maxlen: 24
80.97.64.0/21 maxlen: 24
80.97.72.0/21 maxlen: 24
80.97.80.0/21 maxlen: 24
80.97.88.0/21 maxlen: 24
81.181.16.0/22 maxlen: 24
81.181.32.0/21 maxlen: 21
81.181.40.0/22 maxlen: 22
81.181.45.0/24 maxlen: 24
81.181.46.0/23 maxlen: 23
81.181.74.0/23 maxlen: 23
85.120.158.0/24 maxlen: 24
193.226.3.0/24 maxlen: 24
193.226.30.0/24 maxlen: 24
193.226.42.0/23 maxlen: 23
193.226.47.0/24 maxlen: 24
193.226.58.0/24 maxlen: 24
193.226.83.0/24 maxlen: 24
193.226.100.0/24 maxlen: 24
193.226.105.0/24 maxlen: 24
193.230.129.0/24 maxlen: 24
193.230.160.0/24 maxlen: 24
193.230.161.0/24 maxlen: 24
193.230.162.0/24 maxlen: 24
193.230.163.0/24 maxlen: 24
193.230.166.0/24 maxlen: 24
193.230.167.0/24 maxlen: 24
193.230.168.0/24 maxlen: 24
193.230.169.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.174.0/24 maxlen: 24
193.230.177.0/24 maxlen: 24
193.230.193.0/24 maxlen: 24
193.230.202.0/24 maxlen: 24
193.230.203.0/24 maxlen: 24
193.230.240.0/24 maxlen: 24
193.230.247.0/24 maxlen: 24
193.231.82.0/24 maxlen: 24
193.231.96.0/24 maxlen: 24
193.231.120.0/24 maxlen: 24
193.231.121.0/24 maxlen: 24
193.231.126.0/24 maxlen: 24
193.231.180.0/22 maxlen: 24
193.231.208.0/20 maxlen: 24
193.231.255.0/24 maxlen: 24
194.102.87.0/24 maxlen: 24
194.102.90.0/24 maxlen: 24
217.156.10.0/24 maxlen: 24
217.156.34.0/24 maxlen: 24
217.156.43.0/24 maxlen: 24
217.156.63.0/24 maxlen: 24
217.156.73.0/24 maxlen: 24
217.156.98.0/24 maxlen: 24
217.156.110.0/24 maxlen: 24
217.156.116.0/24 maxlen: 24
217.156.117.0/24 maxlen: 24
217.156.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 10:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:ab:7b:01:c7:c2:50:c4:4a:f9:fe:47:71:1f:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 12 05:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b6057464ebb7924619164e57150069803090eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:10:b3:d5:44:64:7f:7a:57:c6:3e:b7:df:
3c:d4:24:ad:a3:ff:17:8d:7c:c7:42:90:aa:be:6c:
86:8b:ab:ef:22:5e:53:e5:43:eb:1e:de:7a:1c:b4:
56:76:50:28:40:2e:a9:52:cb:a4:d5:bb:5d:a6:d7:
ba:35:92:5c:55:b4:3a:f3:ff:9b:e3:49:77:b1:9f:
f0:04:ca:6b:c4:19:fa:d3:3e:75:c7:e4:6f:a7:d0:
c4:71:2c:8a:f7:a6:31:8d:ad:79:31:eb:cd:b9:e1:
48:41:0e:38:ec:65:ff:86:6d:2a:6d:36:cd:f7:83:
8b:0e:7f:16:4d:d5:50:23:19:3c:6d:53:82:ca:7b:
6a:54:fb:ba:5d:bd:a5:d6:7e:7d:19:06:1c:00:74:
77:57:f4:b5:4d:6e:e6:72:b8:29:0e:1f:a0:b8:f5:
e5:4f:0c:28:d0:8d:f2:39:d6:59:2e:92:96:b4:e1:
cb:2f:bc:cb:ad:70:d4:fb:4e:34:d7:52:0c:b0:29:
b5:9f:d7:35:f2:6b:6c:cb:7c:54:20:e8:34:6a:a1:
49:32:67:bf:dc:61:0d:9a:52:19:46:2e:2e:9e:42:
c1:7d:4d:83:d3:af:1f:58:3a:0b:fc:9c:9c:3e:8f:
69:7b:a2:94:30:a7:0f:3a:39:e8:ff:d1:25:4f:a2:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:05:74:64:EB:B7:92:46:19:16:4E:57:15:00:69:80:30:90:EB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h7YFdGTrt5JGGRZOVxUAaYAwkOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.1.0/24
80.96.22.0/24
80.96.96.0/23
80.96.104.0/24
80.96.129.0/24
80.96.134.0/23
80.96.150.0/23
80.96.164.0/23
80.96.177.0/24
80.96.184.0/24
80.96.206.0/24
80.97.64.0/19
81.181.16.0/22
81.181.32.0-81.181.43.255
81.181.45.0-81.181.47.255
81.181.74.0/23
85.120.158.0/24
193.226.3.0/24
193.226.30.0/24
193.226.42.0/23
193.226.47.0/24
193.226.58.0/24
193.226.83.0/24
193.226.100.0/24
193.226.105.0/24
193.230.129.0/24
193.230.160.0/22
193.230.166.0-193.230.169.255
193.230.171.0/24
193.230.174.0/24
193.230.177.0/24
193.230.193.0/24
193.230.202.0/23
193.230.240.0/24
193.230.247.0/24
193.231.82.0/24
193.231.96.0/24
193.231.120.0/23
193.231.126.0/24
193.231.180.0/22
193.231.208.0/20
193.231.255.0/24
194.102.87.0/24
194.102.90.0/24
217.156.10.0/24
217.156.34.0/24
217.156.43.0/24
217.156.63.0/24
217.156.73.0/24
217.156.98.0/24
217.156.110.0/24
217.156.116.0/23
217.156.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:11:4b:d4:75:d1:58:a9:27:47:4e:1c:bd:ca:f9:be:29:f4:
a8:26:3e:cb:de:05:b1:f4:31:61:f9:d4:c0:a6:54:55:a8:13:
5c:44:0b:b0:fb:f4:c2:7c:5b:13:42:52:8b:9f:cf:22:a8:9b:
10:50:f7:d5:37:f5:35:ca:86:5e:1a:31:1d:c1:c1:7f:99:f3:
3e:89:85:e8:d9:e7:89:a0:4f:0b:61:02:86:2e:e6:ee:34:8f:
bc:de:a1:43:3d:68:95:94:af:7a:d0:e0:fa:d9:20:dd:65:9a:
93:45:66:f8:52:2c:bb:6a:f4:b9:e8:03:b5:9c:5b:0b:c5:18:
05:88:82:62:7e:d6:7b:bf:09:24:28:c8:36:de:0f:e9:82:aa:
68:07:00:c6:f8:fb:29:a5:d0:47:9f:4f:30:30:4d:1c:a0:0e:
3b:90:8e:98:b7:82:63:24:4e:c1:82:60:fe:cb:70:cd:ef:9b:
0b:71:04:23:fb:8b:61:a8:b7:72:2b:5c:89:17:00:3c:2b:c2:
d0:cc:90:ab:f6:75:76:c4:38:0c:95:64:b2:93:b6:e6:01:2a:
72:2e:ec:13:af:42:be:45:60:37:78:c9:82:4a:33:72:8b:d9:
f9:78:e0:5d:49:34:00:b5:35:c4:38:33:9c:d5:b7:35:5a:6d:
b4:e2:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:52:52 2024 by rpki-client on console-ams.rpki-client.org