Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8a1lmEOMVJ9V17MDpa4X8SnoUk.roa
File: h8a1lmEOMVJ9V17MDpa4X8SnoUk.roa (raw, json)
Hash identifier: TDSbOb8cma2AP9oN7vwagVP9tY1WxOVVXkl7MX810Oc=
Subject key identifier: 87:C6:B5:96:61:0E:31:52:7D:57:5E:CC:0E:96:B8:5F:C4:A7:A1:49
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B5E29C055F4B6F0CF80B3355F436195B4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8a1lmEOMVJ9V17MDpa4X8SnoUk.roa
Signing time: Mon 23 Oct 2023 20:11:16 +0000
ROA not before: Mon 23 Oct 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.82.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:29:c0:55:f4:b6:f0:cf:80:b3:35:5f:43:61:95:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 23 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c6b596610e31527d575ecc0e96b85fc4a7a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:34:16:67:bd:f3:8d:b4:ee:16:66:9e:c0:
b5:e9:9f:38:4a:21:f4:38:db:c8:39:fe:f7:d1:d8:
16:05:1d:60:d4:52:97:16:77:da:63:6b:d2:51:a4:
36:fb:e3:1f:d3:22:ea:15:66:e1:59:56:c9:b0:9a:
b5:3c:f4:68:3a:fd:66:51:4e:83:4d:ee:b7:89:90:
bc:8c:14:d8:08:9d:e2:54:d3:ce:94:b3:20:23:47:
bb:47:57:1b:41:21:61:2f:a3:6d:b7:69:93:65:e8:
0e:62:2d:ed:41:d2:49:9f:f9:8f:b0:6e:c6:bf:e5:
34:67:28:41:f3:1f:d3:9d:2f:65:81:60:67:7b:88:
9a:89:28:55:a2:f2:70:4c:e6:5f:c2:9a:a9:86:7e:
27:97:61:57:70:a7:19:79:3b:2a:a8:0f:53:75:b7:
b2:53:c9:e7:c7:33:bd:cb:e6:be:7f:c6:10:e1:44:
8a:67:2b:69:cd:db:eb:b1:78:20:da:ea:b8:1c:6b:
9e:9e:25:2a:ac:96:db:92:7d:c1:ea:30:0a:f3:79:
4e:d4:98:e9:7b:7c:1c:f4:7e:7e:81:6a:f9:6e:40:
8c:dd:ca:f8:c0:29:5c:95:b6:71:9b:b1:4a:3e:f0:
19:d2:86:c9:46:16:03:0c:b7:34:b1:bb:87:25:a6:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:B5:96:61:0E:31:52:7D:57:5E:CC:0E:96:B8:5F:C4:A7:A1:49
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8a1lmEOMVJ9V17MDpa4X8SnoUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
15:4e:ea:e5:ca:04:13:17:0b:bd:19:01:f1:96:db:20:dd:cb:
24:e3:01:dc:fe:a1:ad:f0:cd:25:7d:fa:e9:ac:42:e4:ff:0f:
79:95:af:42:5e:6b:c5:73:80:d7:b0:fb:bd:4d:89:f4:80:df:
4d:8b:18:c5:a1:2f:95:c9:8e:8b:5f:40:d8:0e:b0:90:ae:17:
36:e3:13:6f:5f:95:1f:9d:e2:f2:04:94:18:ef:29:78:69:56:
c6:b7:de:f6:07:49:78:49:2e:33:38:dc:16:9b:83:79:08:81:
47:d4:31:96:ed:6c:ba:a6:c5:b7:57:30:5c:88:aa:05:55:3b:
86:76:56:57:c8:63:b4:ad:ef:cc:c2:4f:78:04:d0:ca:4d:6d:
71:2b:e0:54:e8:01:6b:83:d1:1b:82:b1:a0:ac:00:d5:90:06:
56:f1:24:bf:23:ad:af:43:6f:a2:0e:5f:3c:a9:7d:04:4c:4b:
0a:98:36:c4:5c:83:95:58:a3:45:18:a0:30:20:7e:27:07:fd:
6e:2e:25:ed:4a:2a:03:90:e6:18:b0:e3:35:cd:a9:6a:98:02:
43:46:c6:6b:d6:62:2b:f3:bf:33:77:cc:c4:f1:03:02:4c:85:
c1:1c:09:08:9b:e7:15:c9:6f:41:9c:87:9a:b9:d9:07:a5:e0:
54:8f:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 08:31:45 2023 by rpki-client on console-ams.rpki-client.org